last executing test programs: 2m24.692405923s ago: executing program 0 (id=557): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x4, 0xfb, 0x0, 0x10001, 0x2, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0x65, 0x5, 0x9, 0xc, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m23.443898551s ago: executing program 0 (id=559): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@restrict, @datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x7fff}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50, 0x0, 0x1}, 0x28) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0xe8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) exit(0xd4) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0x5, 0x1100) stat(&(0x7f0000002100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m21.880512799s ago: executing program 0 (id=563): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) 2m20.733977527s ago: executing program 0 (id=570): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x255, &(0x7f00000017c0)="$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") syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f0000000640), 0x1, 0x46b, &(0x7f0000001680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m20.154312824s ago: executing program 0 (id=576): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xe9) close(r0) write$cgroup_subtree(r0, 0x0, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x8}}, 0x0, 0x0, 0x27, 0x0, "bb353738626e3fc7c9f1cf53b6a7b4e24740bd4c0b42a25d7214bf92594925208a0e2f964e654dc534a6b24d4993fcf19b2d07ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x3, 0x1000, @empty}, 0x1c) unshare(0x22020400) 2m16.480480653s ago: executing program 0 (id=582): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x8, 0x5598, &(0x7f00000013c0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r2, r2, 0x0, 0x800000009) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2m14.473311884s ago: executing program 32 (id=582): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x8, 0x5598, &(0x7f00000013c0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r2, r2, 0x0, 0x800000009) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 32.200744006s ago: executing program 3 (id=905): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@utf8}, {@gid}, {}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2014050, 0x0) 31.389840129s ago: executing program 3 (id=907): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x40, 0x802) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x2, 0x0, 0x98, &(0x7f0000000180)={0x3991, 0x4, 0xa}}) 17.727023023s ago: executing program 5 (id=935): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}}, 0x24}}, 0x0) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818850, &(0x7f0000001080)=ANY=[@ANYBLOB="73686f72746e656d003d6d697865642c73686f721dc326facd8a423de6ee746e616d653d6c6f77655f6986b466323d302c00"], 0x1, 0x374, &(0x7f0000000600)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzrw+WzbBO1pvOpxvNzUrxldItmukFndwtZ55vnMnGVsL0hMV/Z8HExXbk/eX6lUs//LLb85S+SdioAwAAAAAAAAAAAAAAAAAA7orSe8ULxZt9p3dq9dhTRTC3t6MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLtj+P//S8HWWGY3wZ/tGC+aXd1oRhy+19MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/7u8AAAD//ydhaOA=") mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x106000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x54}}, 0x40000000) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0xff, 0x0, 'wlan0\x00', 'ip6tnl0\x00', {}, {}, 0x21, 0x1, 0x1}, 0x0, 0x70, 0x90}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x1070, 0x2, [0xb, 0x40, 0x4, 0x3e, 0x27, 0x35, 0x2f, 0x3, 0x36, 0x25, 0x6, 0x24, 0x4, 0x2c, 0x7, 0x37], 0x0, 0xfff, 0x80000001}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "44f6f70f0c76234ab055ef077ebacfcc3fc5ef1372371f4b27a7c531de0a"}}, {{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'wlan1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz8GpwkAUBdCbkPnJB8G9RaQOF4IrO7EVV3ZgOxYjLkTRTCxBXZyzuTBzZx4vfFVXs50P/q5Jsxoyps2xJCnbMbm/pOvnWnuess8t5VDq2/d35T/JIkmz6Ydkv34OmC6Xl6GWmuxOH1kSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7cIwAA///bXw5I") 15.880559685s ago: executing program 2 (id=936): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3f, 0x0, &(0x7f0000000180)="665c824c2b590f7d101d3fa7ee9141699d80c765de3fb2717d2756e2485e652cf7574691c2ec9b719919dbd0cf1e109051ce4327c9ad5b2c8752241bf19c2b"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000100)=[@request_death], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.110935926s ago: executing program 5 (id=938): syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x2, {{}, 0x1, {0x531}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x20, 0x104, 0x1}) mount(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='sysfs\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100419, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 15.02809695s ago: executing program 2 (id=939): unshare(0x60000600) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1, 0x0, @multicast1, @multicast1=0x7f000001}, "00186371ae9b1c03"}}}}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) 14.930590191s ago: executing program 1 (id=940): syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x840, &(0x7f0000000240)={[{@errors_remount}]}, 0x1, 0x53b, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) 12.640830188s ago: executing program 3 (id=910): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2804007, &(0x7f0000000080), 0x3, 0x44e, &(0x7f0000000b40)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x800084, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r3, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) 12.639680588s ago: executing program 5 (id=952): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/180, 0xb4) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r9 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 11.199010798s ago: executing program 3 (id=942): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000840)={0x14, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0003eb000000eb03e6acfcf93620d84b7b1b26fd8d939c39c8947c6f8210841ae1d7797623f646a9700cc668ca155328e07c3f12cc24d48e0a3ed21503d13aba0f65992b2692a9470a8611d6b07a5e140fa215b09c66c07ed3819b9e8da01be8ed20b60ae8f3e603e39d606b316c92ed09276bbc811e8cff1e1a29f6c43e71e00420e427312417a1eee97bca6644d0db43922277433e4894159e72645bd0ff3c2dca60c600d7f6cde67a425abe16f02906f6bf18d690524167d6a72bf74a6ec785fdb7db775fa272"]}, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x20, 0x8}, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x82, 0x1, 'M'}, 0x0, 0x0, 0x0}) 11.198738578s ago: executing program 4 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = fanotify_init(0x10, 0x101000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x455, 0x8000008, r4, 0x0) 11.195575667s ago: executing program 1 (id=955): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2804007, &(0x7f0000000080), 0x3, 0x44e, &(0x7f0000000b40)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x800084, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$eJzs3c9vG1kdAPCv3fxw03SThT0sCNiyLBRU1U7c3Wi1B1guSGi1WqRlTwh1o8SNothxFDulCZFIJW5ckajECf4EDkgckHrizg1uXIoEUoGKqkFCyGjscZo4dhM1cdzGn4808ps3k/l+n6V5L37+8QIYWlciYicixiLi04iYSusz6Rbvt7bkvCePthd2H20vZKLR+PifI+mZ2wvt89supdfMRXyU7I93iVvb3FqZL5dL6+l+oV5ZK9Q2t64vV+aXSkul1WJxbnZu5t0b7xRPra1vVH7z8DvLH3zy+9998cEfd77x4yTnb7UOjSVtO7VA+7Sel9GY3FeXPHMf9CPYAFxI2zM26ER4LtmI+ExEvJmW9+QGlxMA0F+NxlQ0pvbv95Y5xjkAwIsvec0/GZlsPn39PxnZbD7fnMPLvRYT2XK1Vr92q7qxuhjNOazpGM3eWi6XZtK5wukYzST7s83y0/1ix/6NiHg1In4+frG5n1+olhcH9U8PAAy5Sx3j/+Px1vh/DN4hAICXmZEcAIbP4fF/dCB5AABnx+t/ABg++8b/bt/VBQDOoVzHd/8BgPPvyPn/1+MnPzybVACAM+L9fwAYKt/78MNka+ymv3+9eHtzY6V6+/piqbaSr2ws5Beq62v5pWp1qfmbPZWjrleuVtdm346NO4V6qVYv1Da3blaqG6v1m83f9b5Z8sUCABi8V9+4/+dMROy8d7G5RXstBx8IgHPPbQ7D68KgEwAGZmTQCQADYz4eyBxxvOdHhO71/puLJ8gH6L+rn+sx/9/tf4O7e6X/Nc4uRaBPzP/D8DrZ/L/ZA3iZmf+H4dVoZKznDwBD5hiv4H1EEM65537/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYZHPLZPPpWuCTkc3m8xGXI2I6RjO3lsulmYh4JSL+ND46nuzPDjppAOCEsn/PpOt/XZ16a7Lz6FjmP+PNx4j40S8//sWd+Xp9fTap/9deff1eWl/sGmC8/20AAPYZ6axoj9Ptcby9vu+TR9sL7e0sE3z47dbioknc3XRrp95KPhejETHx78yBxmROaWHinbsR8Xpn+7N7x6fTlU874yexL/ctfjRbOHkgfvZA/GzzWOsxeS4+ewq5wLC5n/Q/73e7/7JxpfmY3n+Zg51pLn52uHN9Du3+b7fR2f+17vePLueafU23/u/KcWO8/Yfv9jx290Lj8yMRu4f63/aK0LlmqVv8t7pd8KfffLzRUfWXL3zpzV7xG7+KuBrPit8qFeqVtUJtc+v6cmV+qbRUWi0W52bnZt698U6x0JyjLrRnqg/7x3vXXund/oiJHvFzR7T/q70u2uHX//30B19+Rvyvf6Vb/Gy89oz4yZj4tWPGn5/4bc/lu5P4iz3aP3Ig/tiBv0vqrh0z/oO/bi0e81QA4AzUNrdW5svl0rrCSQu5fl350gvSQIUehb99cuCeGng+p1IYWJcEnJGnN/2gMwEAAAAAAAAAAAAAAHqpfT/9yb8+fhlu0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA///RQMtW") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r3, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) 9.791278496s ago: executing program 5 (id=944): r0 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a44000000001010902440001010010000904005d1202060000052406000005240000000d240f010000000002000000000905810308000aff040905820208000006000905030210"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0xfffffffffffffe3b, &(0x7f0000000200)="3c7c28eec1f3ff6d") syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 9.789650535s ago: executing program 1 (id=945): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0xffffffffffffffff) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="000ead000000f5c3ff7c82e17fc5ad95ab9dd07d2d44655769da8c75cc02ecbce294817fa18cee1ed9375c86a36eac0be6bd60ed08922ae034e60e807673977f58fab081fd33cff1d76acaf95227d918fcdeca61ddce0339373a1fe45b2fa8e7c3dfc7c71bffbd71f8fa7affc0130dfad0032a535f71c1ac459f8e373defeca893ce035b4ddeb9bac427b224f23a7ff683bebfd33cf1cfeec173d847baead9c411eb306dcf708653f7599252cea92d1a0e5884"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000440)={[{@nouid32}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x441, 0x124) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x5, 0x8, 0x80000007, 0x8, 0x3, 0x8}) 9.156110752s ago: executing program 4 (id=947): r0 = socket$inet6(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 8.104360789s ago: executing program 4 (id=948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="bad33075218151db00316f3a277f", 0xe, 0x6008093, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 6.906828647s ago: executing program 3 (id=949): setresgid(0xffffffffffffffff, 0x0, 0xee00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) tgkill(0x0, 0x0, 0x1b) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) memfd_create(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0x818c14, &(0x7f00000003c0)={[{@uni_xlate}, {@shortname_win95}, {@rodir}, {@fat=@nocase}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_mixed}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8no}, {@numtail}, {@utf8no}]}, 0x81, 0x29b, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x38b000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x64000600) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}]}}, 0x1, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/25) 6.906466867s ago: executing program 4 (id=950): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3f, 0x0, &(0x7f0000000180)="665c824c2b590f7d101d3fa7ee9141699d80c765de3fb2717d2756e2485e652cf7574691c2ec9b719919dbd0cf1e109051ce4327c9ad5b2c8752241bf19c2b"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000100)=[@request_death], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.901225816s ago: executing program 1 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x689, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x5, 0xfffffffffffffffd}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9c, 0x4f2, &(0x7f0000000f40)="$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") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400), 0x0, 0xc002a0, 0x0) 6.846208615s ago: executing program 2 (id=951): syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x1010009, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x820424, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.510021639s ago: executing program 1 (id=954): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 1.875668883s ago: executing program 2 (id=956): syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x2, {{}, 0x1, {0x531}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x20, 0x104, 0x1}) mount(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='sysfs\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100419, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.875547773s ago: executing program 5 (id=957): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002"], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 1.119587856s ago: executing program 2 (id=958): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2804007, &(0x7f0000000080), 0x3, 0x44e, &(0x7f0000000b40)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x800084, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r3, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) 1.116426686s ago: executing program 3 (id=959): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/180, 0xb4) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r9 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 1.116271086s ago: executing program 4 (id=960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = fanotify_init(0x10, 0x101000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x455, 0x8000008, r4, 0x0) 1.116037756s ago: executing program 5 (id=969): syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x1010009, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x820424, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 837.519961ms ago: executing program 1 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000000c0), 0x0, 0x7ffffe, 0x0, 0x0) fallocate(r3, 0x3, 0x7, 0x8000c62) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080)=0x60, 0x4) ptrace$cont(0x1f, 0x0, 0x7fffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) 2.23129ms ago: executing program 2 (id=963): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000002c0)={[{@noload}, {@noblock_validity}, {@nombcache}, {@acl}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@nodelalloc}, {@resgid, 0x32}]}, 0xdb, 0x4df, &(0x7f0000001700)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002f40)='./bus\x00', 0x3108009, 0x0, 0x10, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0xee00, 0x100) 0s ago: executing program 4 (id=964): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') openat$cgroup_int(r0, &(0x7f00000004c0)='io.max\x00', 0x2, 0x0) getdents64(r0, &(0x7f0000000100), 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x28042, 0x19) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x11, 0x0, 0x8000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080)=0x1, 0x7, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000005c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): dge_slave_1: link becomes ready [ 253.688072][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.695237][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.713650][ T6189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.723416][ T6235] EXT4-fs (loop4): 1 orphan inode deleted [ 253.730350][ T6241] FAT-fs (loop2): Directory bread(block 1286) failed [ 253.741150][ T6235] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,prjquota,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 253.774532][ T6189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.809942][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.855329][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.867190][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.897130][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.915079][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.923888][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.933293][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.006353][ T6253] EXT4-fs error (device loop4): __ext4_iget:4912: inode #14: block 1886221359: comm syz.4.601: invalid block [ 254.024357][ T6179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.037268][ T6253] EXT4-fs error (device loop4): __ext4_iget:4912: inode #14: block 1886221359: comm syz.4.601: invalid block [ 254.054838][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.186888][ T6255] loop2: detected capacity change from 0 to 4096 [ 254.208326][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.226817][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.315246][ T6255] EXT4-fs (loop2): inline encryption not supported [ 254.338110][ T6255] EXT4-fs (loop2): Test dummy encryption mode enabled [ 254.399199][ T6255] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 254.415590][ T6255] System zones: 0-5 [ 254.433417][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 254.539704][ T156] device hsr_slave_0 left promiscuous mode [ 254.604306][ T156] device hsr_slave_1 left promiscuous mode [ 254.623337][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.661835][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.693238][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.722660][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.744234][ T156] device bond0 left promiscuous mode [ 254.786188][ T156] device bond_slave_0 left promiscuous mode [ 254.799637][ T156] device bond_slave_1 left promiscuous mode [ 254.816934][ T156] bridge0: port 3(bond0) entered disabled state [ 255.135137][ T156] device bridge_slave_1 left promiscuous mode [ 255.214984][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.230568][ T4259] Bluetooth: hci5: command 0x1001 tx timeout [ 255.271302][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 255.309483][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 255.397492][ T156] device bridge_slave_0 left promiscuous mode [ 255.454283][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.633485][ T6272] loop2: detected capacity change from 0 to 1024 [ 255.666323][ T156] device veth1_macvtap left promiscuous mode [ 255.673111][ T156] device veth0_macvtap left promiscuous mode [ 255.679783][ T156] device veth1_vlan left promiscuous mode [ 255.686207][ T156] device veth0_vlan left promiscuous mode [ 255.700648][ T6272] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 255.700648][ T6272] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 255.700648][ T6272] [ 255.747926][ T6272] EXT4-fs (loop2): Ignoring removed orlov option [ 255.856018][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.860946][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.876214][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010360][ T6272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a8158018, mo2=0002] [ 256.092192][ T6272] System zones: 0-1, 3-12 [ 256.134936][ T6272] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,nouser_xattr,orlov,debug,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 256.216415][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 256.539339][ T156] team0 (unregistering): Port device team_slave_1 removed [ 256.587060][ T156] team0 (unregistering): Port device team_slave_0 removed [ 256.626189][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.645387][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.764431][ T156] bond0 (unregistering): Released all slaves [ 256.857827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.865544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.910619][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.306539][ T4226] Bluetooth: hci5: command 0x1009 tx timeout [ 257.523936][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.540739][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.606555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.629598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.666694][ T6179] device veth0_vlan entered promiscuous mode [ 257.674376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.694165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.740016][ T6179] device veth1_vlan entered promiscuous mode [ 257.808549][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.828187][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.853995][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.875706][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.904441][ T6179] device veth0_macvtap entered promiscuous mode [ 257.930285][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.953296][ T6179] device veth1_macvtap entered promiscuous mode [ 258.019713][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.057839][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.076075][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.095962][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.115971][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.145892][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.167966][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.185963][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.208311][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.226080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.246446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.289249][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.328143][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.355954][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.386286][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.416550][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.448013][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.485869][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.515967][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.538446][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.552654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.587198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.618946][ T6179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.635893][ T6179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.644636][ T6179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.684268][ T6179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.831393][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.854481][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.875706][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.891595][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.903671][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.919322][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.122812][ T6330] loop3: detected capacity change from 0 to 1024 [ 259.276225][ T6330] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 259.276225][ T6330] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 259.276225][ T6330] [ 259.316770][ T6337] loop5: detected capacity change from 0 to 512 [ 259.362134][ T6330] EXT4-fs (loop3): Ignoring removed orlov option [ 259.446600][ T6337] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.469809][ T6330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a8158018, mo2=0002] [ 259.518217][ T6330] System zones: 0-1, 3-12 [ 259.534530][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.608: iget: bad extra_isize 90 (inode size 256) [ 259.577284][ T6330] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,nouser_xattr,orlov,debug,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 259.631098][ T6348] overlayfs: missing 'workdir' [ 259.665087][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.608: error while reading EA inode 11 err=-117 [ 259.735926][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 259.762461][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.608: iget: bad extra_isize 90 (inode size 256) [ 259.860934][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.608: error while reading EA inode 11 err=-117 [ 259.887590][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.608: iget: bad extra_isize 90 (inode size 256) [ 259.963407][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.608: error while reading EA inode 18 err=-117 [ 260.034105][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.608: iget: bad extra_isize 90 (inode size 256) [ 260.073883][ T6359] binder: 6358:6359 ioctl c0306201 0 returned -14 [ 260.101224][ T6337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.608: error while reading EA inode 18 err=-117 [ 260.138233][ T6359] binder: 6358:6359 ioctl c0306201 0 returned -14 [ 260.145596][ T6337] EXT4-fs (loop5): 1 orphan inode deleted [ 260.156702][ T6337] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,prjquota,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 262.187257][ T6369] loop1: detected capacity change from 0 to 256 [ 262.250722][ T6369] FAT-fs (loop1): Directory bread(block 1285) failed [ 262.345981][ T6369] FAT-fs (loop1): Directory bread(block 1286) failed [ 262.381749][ T6369] FAT-fs (loop1): Directory bread(block 1287) failed [ 262.426586][ T6369] FAT-fs (loop1): Directory bread(block 1288) failed [ 262.505764][ T6369] FAT-fs (loop1): Directory bread(block 1285) failed [ 262.571890][ T6369] FAT-fs (loop1): Directory bread(block 1286) failed [ 262.628065][ T6374] loop3: detected capacity change from 0 to 4096 [ 262.639703][ T6369] FAT-fs (loop1): Directory bread(block 1287) failed [ 262.735321][ T6374] EXT4-fs (loop3): inline encryption not supported [ 262.742232][ T6369] FAT-fs (loop1): Directory bread(block 1288) failed [ 262.788425][ T6374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 262.856051][ T6369] FAT-fs (loop1): Directory bread(block 1285) failed [ 262.879922][ T6374] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 262.906281][ T6369] FAT-fs (loop1): Directory bread(block 1286) failed [ 262.961609][ T6374] System zones: 0-5 [ 262.980831][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 265.578220][ T6418] binder: 6417:6418 ioctl c0306201 0 returned -14 [ 265.586809][ T4455] Bluetooth: hci5: Frame reassembly failed (-84) [ 265.597708][ T6420] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 265.620765][ T6418] binder: 6417:6418 ioctl c0306201 0 returned -14 [ 265.722583][ T6424] loop4: detected capacity change from 0 to 1024 [ 265.822129][ T6424] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 265.822129][ T6424] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 265.822129][ T6424] [ 265.920516][ T6424] EXT4-fs (loop4): Ignoring removed orlov option [ 265.971660][ T6424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a8158018, mo2=0002] [ 265.992426][ T6424] System zones: 0-1, 3-12 [ 266.023722][ T6424] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,nouser_xattr,orlov,debug,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 266.170018][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 267.616156][ T5291] Bluetooth: hci5: command 0x1003 tx timeout [ 267.622454][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 268.096415][ T6477] loop4: detected capacity change from 0 to 256 [ 268.159974][ T6477] FAT-fs (loop4): Directory bread(block 1285) failed [ 268.211059][ T6477] FAT-fs (loop4): Directory bread(block 1286) failed [ 268.344327][ T6477] FAT-fs (loop4): Directory bread(block 1287) failed [ 268.461571][ T6477] FAT-fs (loop4): Directory bread(block 1288) failed [ 268.908240][ T6477] FAT-fs (loop4): Directory bread(block 1285) failed [ 268.969942][ T6477] FAT-fs (loop4): Directory bread(block 1286) failed [ 269.051909][ T6485] loop5: detected capacity change from 0 to 4096 [ 269.059874][ T6477] FAT-fs (loop4): Directory bread(block 1287) failed [ 269.117875][ T6491] loop3: detected capacity change from 0 to 256 [ 269.126397][ T6477] FAT-fs (loop4): Directory bread(block 1288) failed [ 269.139293][ T6477] FAT-fs (loop4): Directory bread(block 1285) failed [ 269.147281][ T6477] FAT-fs (loop4): Directory bread(block 1286) failed [ 269.167912][ T6491] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 269.194834][ T6485] EXT4-fs (loop5): inline encryption not supported [ 269.216502][ T6485] EXT4-fs (loop5): Test dummy encryption mode enabled [ 269.312114][ T6485] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 269.381606][ T6485] System zones: 0-5 [ 269.437061][ T6485] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 269.705948][ T4226] Bluetooth: hci5: command 0x1001 tx timeout [ 269.732507][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 270.450329][ T6513] cgroup: fork rejected by pids controller in /syz5 [ 270.495046][ T6518] loop3: detected capacity change from 0 to 256 [ 270.616053][ T6518] FAT-fs (loop3): Directory bread(block 64) failed [ 270.622649][ T6518] FAT-fs (loop3): Directory bread(block 65) failed [ 270.708076][ T6518] FAT-fs (loop3): Directory bread(block 66) failed [ 270.714849][ T6518] FAT-fs (loop3): Directory bread(block 67) failed [ 270.719333][ T6595] binder: 6576:6595 ioctl c0306201 0 returned -14 [ 270.755988][ T6518] FAT-fs (loop3): Directory bread(block 68) failed [ 270.756017][ T6595] binder: 6576:6595 ioctl c0306201 0 returned -14 [ 270.762569][ T6518] FAT-fs (loop3): Directory bread(block 69) failed [ 270.762676][ T6518] FAT-fs (loop3): Directory bread(block 70) failed [ 270.835173][ T6518] FAT-fs (loop3): Directory bread(block 71) failed [ 270.873148][ T6518] FAT-fs (loop3): Directory bread(block 72) failed [ 270.909393][ T6518] FAT-fs (loop3): Directory bread(block 73) failed [ 271.460258][ T4293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.615471][ T4293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.780365][ T5291] Bluetooth: hci5: command 0x1009 tx timeout [ 271.829983][ T4293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.041304][ T4293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.212506][ T6644] loop1: detected capacity change from 0 to 1024 [ 272.566820][ T6644] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.788567][ T26] audit: type=1800 audit(1772836570.215:23): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.647" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 273.128997][ T6641] chnl_net:caif_netlink_parms(): no params data found [ 273.136272][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.390960][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.404109][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.420807][ T6641] device bridge_slave_0 entered promiscuous mode [ 273.433917][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.445338][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.461941][ T6641] device bridge_slave_1 entered promiscuous mode [ 273.563090][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.604689][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.729645][ T6641] team0: Port device team_slave_0 added [ 273.754703][ T6641] team0: Port device team_slave_1 added [ 273.838342][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.883915][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.974840][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.021210][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.052304][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.107574][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 274.114377][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.185088][ T6641] device hsr_slave_0 entered promiscuous mode [ 274.192328][ T6641] device hsr_slave_1 entered promiscuous mode [ 274.690145][ T6685] loop3: detected capacity change from 0 to 256 [ 275.028075][ T6685] FAT-fs (loop3): Directory bread(block 1285) failed [ 275.102089][ T6685] FAT-fs (loop3): Directory bread(block 1286) failed [ 275.219448][ T6685] FAT-fs (loop3): Directory bread(block 1287) failed [ 275.436175][ T6685] FAT-fs (loop3): Directory bread(block 1288) failed [ 275.582217][ T6685] FAT-fs (loop3): Directory bread(block 1285) failed [ 275.641749][ T6685] FAT-fs (loop3): Directory bread(block 1286) failed [ 275.693668][ T6685] FAT-fs (loop3): Directory bread(block 1287) failed [ 275.726149][ T6685] FAT-fs (loop3): Directory bread(block 1288) failed [ 275.733002][ T6685] FAT-fs (loop3): Directory bread(block 1285) failed [ 275.785002][ T6685] FAT-fs (loop3): Directory bread(block 1286) failed [ 276.331500][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 276.811084][ T6641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.862639][ T6641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.895447][ T6641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.970960][ T6641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.108984][ T6717] binder: 6715:6717 ioctl c0306201 0 returned -14 [ 277.289929][ T4293] device hsr_slave_0 left promiscuous mode [ 277.329478][ T4293] device hsr_slave_1 left promiscuous mode [ 277.386286][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.430497][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.486230][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.536968][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.571495][ T4293] device bridge_slave_1 left promiscuous mode [ 277.634352][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.692981][ T4293] device bridge_slave_0 left promiscuous mode [ 277.731863][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.795235][ T4293] device veth1_macvtap left promiscuous mode [ 277.837127][ T4293] device veth0_macvtap left promiscuous mode [ 277.865196][ T4293] device veth1_vlan left promiscuous mode [ 277.897841][ T4293] device veth0_vlan left promiscuous mode [ 278.616376][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 278.691547][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 278.701866][ T6744] binder: 6743:6744 ioctl c0306201 0 returned -14 [ 278.843990][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 280.899817][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.900663][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 280.924540][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.173700][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 281.262540][ T6762] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 281.967239][ T4293] bond0 (unregistering): Released all slaves [ 282.104584][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.166649][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.179255][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.214699][ T6641] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.256008][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.284485][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.314068][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.321237][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.324683][ T6771] loop2: detected capacity change from 0 to 4096 [ 282.343505][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.376965][ T6771] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.389665][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.414758][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.433559][ T6771] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.668: corrupted inode contents [ 282.468716][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.475883][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.494526][ T6783] EXT4-fs (loop2): shut down requested (2) [ 282.506363][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.519477][ T6771] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #15: comm syz.2.668: mark_inode_dirty error [ 282.540034][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.584885][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.628908][ T4294] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 282.648663][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.660435][ T4294] Quota error (device loop2): write_blk: dquota write failed [ 282.677622][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.690781][ T4294] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 282.693235][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.737927][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.761483][ T6641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.775367][ T6641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.789471][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.807021][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.842638][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.882364][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.903061][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.216547][ T4226] Bluetooth: hci5: command 0x1003 tx timeout [ 283.251856][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 283.387759][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.395320][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.456183][ T6641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.522137][ T6816] binder: 6813:6816 ioctl c0306201 0 returned -14 [ 285.296208][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 285.302479][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 285.346542][ T6840] loop3: detected capacity change from 0 to 256 [ 285.509599][ T6840] FAT-fs (loop3): Directory bread(block 64) failed [ 285.516263][ T6840] FAT-fs (loop3): Directory bread(block 65) failed [ 285.522884][ T6840] FAT-fs (loop3): Directory bread(block 66) failed [ 285.529546][ T6840] FAT-fs (loop3): Directory bread(block 67) failed [ 285.536225][ T6840] FAT-fs (loop3): Directory bread(block 68) failed [ 285.542872][ T6840] FAT-fs (loop3): Directory bread(block 69) failed [ 285.549585][ T6840] FAT-fs (loop3): Directory bread(block 70) failed [ 285.556176][ T6840] FAT-fs (loop3): Directory bread(block 71) failed [ 285.562795][ T6840] FAT-fs (loop3): Directory bread(block 72) failed [ 285.569444][ T6840] FAT-fs (loop3): Directory bread(block 73) failed [ 285.661640][ T6848] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 285.794888][ T6848] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.875645][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.890753][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.943525][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.956199][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.976353][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.996767][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.022752][ T6641] device veth0_vlan entered promiscuous mode [ 286.044348][ T6641] device veth1_vlan entered promiscuous mode [ 286.099569][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.120981][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.165296][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.190568][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.242612][ T6641] device veth0_macvtap entered promiscuous mode [ 286.287031][ T6641] device veth1_macvtap entered promiscuous mode [ 286.346606][ T6866] loop3: detected capacity change from 0 to 4096 [ 286.385541][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.435926][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.476399][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.489688][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.519976][ T6866] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.683: corrupted inode contents [ 286.557048][ T6878] EXT4-fs (loop3): shut down requested (2) [ 286.568422][ T6866] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #15: comm syz.3.683: mark_inode_dirty error [ 286.593401][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.607068][ T6866] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.683: corrupted inode contents [ 286.635891][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.656161][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.695913][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.730995][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.780888][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.799503][ T4232] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 286.817494][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.827131][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.846241][ T4232] Quota error (device loop3): write_blk: dquota write failed [ 286.853770][ T4232] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 286.863435][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.886766][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.932347][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.957902][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.990753][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.035912][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.045776][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.081913][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.123144][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.144063][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.173330][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.196118][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.204922][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.237351][ T6641] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.272767][ T6641] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.293034][ T6641] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.326719][ T6641] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.376816][ T4226] Bluetooth: hci5: command 0x1009 tx timeout [ 287.566672][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.574530][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.609274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.667701][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.675582][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.699698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.981835][ T6913] binder: 6907:6913 ioctl c0306201 0 returned -14 [ 288.155967][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 288.985961][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 290.346136][ T7] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 290.374806][ T7] usb 2-1: config 0 has no interface number 0 [ 290.419992][ T7] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 290.636365][ T7] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 290.645740][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.683257][ T7] usb 2-1: Product: syz [ 290.693556][ T7] usb 2-1: Manufacturer: syz [ 290.699268][ T7] usb 2-1: SerialNumber: syz [ 290.719066][ T6934] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 290.726820][ T7] usb 2-1: config 0 descriptor?? [ 290.767046][ T6909] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 290.767198][ T6938] loop5: detected capacity change from 0 to 256 [ 290.797277][ T6934] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.866212][ T6938] FAT-fs (loop5): Directory bread(block 64) failed [ 290.872814][ T6938] FAT-fs (loop5): Directory bread(block 65) failed [ 290.881507][ T6938] FAT-fs (loop5): Directory bread(block 66) failed [ 290.888146][ T6938] FAT-fs (loop5): Directory bread(block 67) failed [ 290.894767][ T6938] FAT-fs (loop5): Directory bread(block 68) failed [ 290.901374][ T6938] FAT-fs (loop5): Directory bread(block 69) failed [ 290.908026][ T6938] FAT-fs (loop5): Directory bread(block 70) failed [ 290.914597][ T6938] FAT-fs (loop5): Directory bread(block 71) failed [ 290.921258][ T6938] FAT-fs (loop5): Directory bread(block 72) failed [ 290.927866][ T6938] FAT-fs (loop5): Directory bread(block 73) failed [ 290.968913][ T7] asix: probe of 2-1:0.188 failed with error -71 [ 291.021332][ T7] usb 2-1: USB disconnect, device number 4 [ 291.754717][ T6961] loop2: detected capacity change from 0 to 128 [ 292.382879][ T6960] loop5: detected capacity change from 0 to 4096 [ 292.758536][ T6960] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.843467][ T6973] loop4: detected capacity change from 0 to 128 [ 292.868422][ T6971] EXT4-fs (loop5): shut down requested (2) [ 292.906884][ T6960] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #15: comm syz.5.700: corrupted inode contents [ 292.936465][ T6975] binder: 6972:6975 ioctl c0306201 0 returned -14 [ 293.723315][ T4323] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 293.836384][ T4323] Quota error (device loop5): write_blk: dquota write failed [ 293.843824][ T4323] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 293.989733][ T7004] loop1: detected capacity change from 0 to 256 [ 294.115768][ T7004] FAT-fs (loop1): Directory bread(block 64) failed [ 294.122543][ T7004] FAT-fs (loop1): Directory bread(block 65) failed [ 294.129369][ T7004] FAT-fs (loop1): Directory bread(block 66) failed [ 294.135988][ T7004] FAT-fs (loop1): Directory bread(block 67) failed [ 294.142606][ T7004] FAT-fs (loop1): Directory bread(block 68) failed [ 294.149259][ T7004] FAT-fs (loop1): Directory bread(block 69) failed [ 294.155941][ T7004] FAT-fs (loop1): Directory bread(block 70) failed [ 294.162510][ T7004] FAT-fs (loop1): Directory bread(block 71) failed [ 294.169230][ T7004] FAT-fs (loop1): Directory bread(block 72) failed [ 294.175854][ T7004] FAT-fs (loop1): Directory bread(block 73) failed [ 295.176194][ T7022] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 295.327070][ T7022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 295.446596][ T7027] loop3: detected capacity change from 0 to 512 [ 295.520134][ T7027] EXT4-fs (loop3): Ignoring removed bh option [ 295.535363][ T7027] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 295.590859][ T7027] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 295.726078][ T7027] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.031954][ T7055] loop1: detected capacity change from 0 to 512 [ 297.038348][ T7053] binder: 7051:7053 ioctl c0306201 0 returned -14 [ 297.261946][ T7055] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 297.332522][ T7055] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.511332][ T26] audit: type=1804 audit(1772836594.935:24): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.722" name="/newroot/152/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 297.922923][ T7069] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 298.199652][ T7072] binder: 7071:7072 ioctl c0306201 0 returned -14 [ 299.340170][ T7092] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 299.426546][ T4351] Bluetooth: hci5: Frame reassembly failed (-84) [ 299.684615][ T7101] loop2: detected capacity change from 0 to 256 [ 299.782272][ T7101] FAT-fs (loop2): Directory bread(block 64) failed [ 299.789189][ T7101] FAT-fs (loop2): Directory bread(block 65) failed [ 299.796456][ T7101] FAT-fs (loop2): Directory bread(block 66) failed [ 299.803386][ T7101] FAT-fs (loop2): Directory bread(block 67) failed [ 299.810477][ T7101] FAT-fs (loop2): Directory bread(block 68) failed [ 299.818405][ T7101] FAT-fs (loop2): Directory bread(block 69) failed [ 299.825857][ T7101] FAT-fs (loop2): Directory bread(block 70) failed [ 299.832764][ T7101] FAT-fs (loop2): Directory bread(block 71) failed [ 299.839846][ T7101] FAT-fs (loop2): Directory bread(block 72) failed [ 299.845902][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 299.846479][ T7101] FAT-fs (loop2): Directory bread(block 73) failed [ 300.330733][ T7104] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 300.437018][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 300.439590][ T4185] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 300.475655][ T4185] FAT-fs (loop2): Filesystem has been set read-only [ 300.577038][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.588299][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.598954][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.612039][ T1108] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.621459][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.631062][ T1108] usb 2-1: config 0 descriptor?? [ 301.135487][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 301.165064][ T1108] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 301.377941][ T4230] usb 2-1: USB disconnect, device number 5 [ 301.390341][ T5282] Bluetooth: hci5: command 0x1003 tx timeout [ 301.400327][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 301.428655][ T7116] netlink: 'syz.5.738': attribute type 1 has an invalid length. [ 301.447320][ T7112] fido_id[7112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 301.467582][ T7115] loop4: detected capacity change from 0 to 512 [ 301.600227][ T7115] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 301.614258][ T7115] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.665862][ T26] audit: type=1804 audit(1772836599.085:25): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.737" name="/newroot/146/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 301.828063][ T7117] chnl_net:caif_netlink_parms(): no params data found [ 301.841199][ T7126] binder: 7125:7126 ioctl c0306201 0 returned -14 [ 302.173855][ T7132] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 302.193280][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.205094][ T7132] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 302.215598][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.233047][ T7117] device bridge_slave_0 entered promiscuous mode [ 302.288793][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.321608][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.356234][ T7117] device bridge_slave_1 entered promiscuous mode [ 302.706788][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.748891][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.944537][ T7117] team0: Port device team_slave_0 added [ 302.978495][ T7117] team0: Port device team_slave_1 added [ 303.084897][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.119861][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.188449][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.217346][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.233821][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.313083][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.459372][ T5291] Bluetooth: hci5: command 0x1001 tx timeout [ 303.471026][ T7117] device hsr_slave_0 entered promiscuous mode [ 303.486816][ T7117] device hsr_slave_1 entered promiscuous mode [ 303.496286][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 303.533413][ T7117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.560987][ T7117] Cannot create hsr debugfs directory [ 303.616011][ T5291] Bluetooth: hci2: command 0x0409 tx timeout [ 303.632625][ T7151] loop4: detected capacity change from 0 to 256 [ 303.719155][ T7151] FAT-fs (loop4): Directory bread(block 64) failed [ 303.725741][ T7151] FAT-fs (loop4): Directory bread(block 65) failed [ 303.732503][ T7151] FAT-fs (loop4): Directory bread(block 66) failed [ 303.739109][ T7151] FAT-fs (loop4): Directory bread(block 67) failed [ 303.745726][ T7151] FAT-fs (loop4): Directory bread(block 68) failed [ 303.752704][ T7151] FAT-fs (loop4): Directory bread(block 69) failed [ 303.759372][ T7151] FAT-fs (loop4): Directory bread(block 70) failed [ 303.766061][ T7151] FAT-fs (loop4): Directory bread(block 71) failed [ 303.772665][ T7151] FAT-fs (loop4): Directory bread(block 72) failed [ 303.779660][ T7151] FAT-fs (loop4): Directory bread(block 73) failed [ 304.099229][ T7117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.242132][ T7117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.377126][ T7117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.518604][ T7117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.835578][ T7117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.871414][ T7117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.946288][ T7117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.982300][ T7117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.210940][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.263827][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.285185][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.320769][ T7117] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.419490][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.454296][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.482979][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.490184][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.536171][ T5282] Bluetooth: hci5: command 0x1009 tx timeout [ 305.547104][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.570026][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.587105][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.607943][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.615086][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.648347][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.668633][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.695988][ T5291] Bluetooth: hci2: command 0x041b tx timeout [ 305.699298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.727724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.755105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.777631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.797166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.816414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.836195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.860139][ T7117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.884961][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.916012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.948004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.965030][ T7165] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 306.054445][ T7168] loop5: detected capacity change from 0 to 512 [ 306.227662][ T7168] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 306.304195][ T7168] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.336872][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.363971][ T26] audit: type=1804 audit(1772836603.785:26): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.751" name="/newroot/15/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 306.376194][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.447515][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.508708][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.528594][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.574557][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.601122][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.613605][ T7181] binder: 7180:7181 ioctl c0306201 0 returned -14 [ 306.621466][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.631195][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.778104][ T7117] device veth0_vlan entered promiscuous mode [ 306.824389][ T7117] device veth1_vlan entered promiscuous mode [ 307.123106][ T7117] device veth0_macvtap entered promiscuous mode [ 307.129875][ T4226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 307.166169][ T7117] device veth1_macvtap entered promiscuous mode [ 307.210646][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.229266][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.243382][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.262361][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.275406][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.296118][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.315406][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.334051][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.363437][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.374332][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.377454][ T4226] usb 5-1: Using ep0 maxpacket: 8 [ 307.386755][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.411985][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.423104][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.433652][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.444651][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.454803][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.465537][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.478564][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.489726][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.500376][ T7117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.511246][ T7117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.530074][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.538424][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.548082][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.557263][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.566830][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.576473][ T7191] netlink: 36 bytes leftover after parsing attributes in process `syz.5.757'. [ 307.578028][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.595048][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.605509][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.606246][ T4226] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 307.615319][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.632630][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.634711][ T4226] usb 5-1: config 179 has no interface number 0 [ 307.644203][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.693668][ T4226] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 307.699945][ T7117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.721999][ T4226] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 307.733639][ T4226] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.745278][ T7117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.754676][ T4226] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 307.766861][ T7117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.775718][ T4226] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 307.789762][ T7117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.816883][ T4226] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 307.866112][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.907573][ T5280] Bluetooth: hci2: command 0x040f tx timeout [ 307.936427][ T7186] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 307.982738][ T7197] loop5: detected capacity change from 0 to 256 [ 308.026619][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.061818][ T7197] FAT-fs (loop5): Directory bread(block 64) failed [ 308.068572][ T7197] FAT-fs (loop5): Directory bread(block 65) failed [ 308.069243][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.075316][ T7197] FAT-fs (loop5): Directory bread(block 66) failed [ 308.089370][ T7197] FAT-fs (loop5): Directory bread(block 67) failed [ 308.096435][ T7197] FAT-fs (loop5): Directory bread(block 68) failed [ 308.103106][ T7197] FAT-fs (loop5): Directory bread(block 69) failed [ 308.110541][ T7197] FAT-fs (loop5): Directory bread(block 70) failed [ 308.117263][ T7197] FAT-fs (loop5): Directory bread(block 71) failed [ 308.123880][ T7197] FAT-fs (loop5): Directory bread(block 72) failed [ 308.129898][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.130713][ T7197] FAT-fs (loop5): Directory bread(block 73) failed [ 308.208870][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.215385][ T4226] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 308.245979][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.289568][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.336106][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.391299][ T4226] usb 5-1: USB disconnect, device number 3 [ 308.397270][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.397405][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 308.455412][ T4226] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 309.412713][ T7214] loop2: detected capacity change from 0 to 512 [ 309.930113][ T7214] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 310.243760][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 310.286065][ T7214] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.394550][ T7219] binder: 7218:7219 ioctl c0306201 0 returned -14 [ 310.421106][ T26] audit: type=1804 audit(1772836607.845:27): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.765" name="/newroot/1/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 311.661466][ T7233] loop1: detected capacity change from 0 to 512 [ 311.771810][ T7237] loop2: detected capacity change from 0 to 256 [ 311.865233][ T7233] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.773: invalid indirect mapped block 4294967295 (level 0) [ 311.911635][ T7233] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.773: invalid indirect mapped block 4294967295 (level 1) [ 311.931524][ T7233] EXT4-fs (loop1): 1 orphan inode deleted [ 311.951013][ T7237] FAT-fs (loop2): Directory bread(block 64) failed [ 311.957724][ T7237] FAT-fs (loop2): Directory bread(block 65) failed [ 311.964382][ T7237] FAT-fs (loop2): Directory bread(block 66) failed [ 311.971012][ T7237] FAT-fs (loop2): Directory bread(block 67) failed [ 311.977683][ T7237] FAT-fs (loop2): Directory bread(block 68) failed [ 311.984248][ T7237] FAT-fs (loop2): Directory bread(block 69) failed [ 311.991010][ T7237] FAT-fs (loop2): Directory bread(block 70) failed [ 311.997723][ T7237] FAT-fs (loop2): Directory bread(block 71) failed [ 312.005161][ T7237] FAT-fs (loop2): Directory bread(block 72) failed [ 312.011812][ T7237] FAT-fs (loop2): Directory bread(block 73) failed [ 312.038589][ T7233] EXT4-fs (loop1): 1 truncate cleaned up [ 312.044525][ T7233] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,lazytime,block_validity,block_validity,nojournal_checksum,quota,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 312.276399][ T7248] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.318345][ T7246] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 312.342394][ T7246] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 312.416235][ T5280] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 312.516900][ T7223] loop3: detected capacity change from 0 to 40427 [ 312.615953][ T7223] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 312.623527][ T7223] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 312.660400][ T5280] usb 6-1: Using ep0 maxpacket: 16 [ 312.686775][ T7223] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 312.746367][ T7223] F2FS-fs (loop3): invalid crc value [ 312.776653][ T5280] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.796066][ T5280] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.820082][ T7223] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 312.856002][ T5282] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 313.098290][ T7223] F2FS-fs (loop3): Start checkpoint disabled! [ 313.117145][ T5280] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.136807][ T5280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.180223][ T7257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.246218][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 313.265526][ T7223] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 313.372158][ T7223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 313.400042][ T5280] usb 6-1: Product: syz [ 313.478988][ T5280] usb 6-1: Manufacturer: syz [ 313.486941][ T5282] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.530430][ T5282] usb 5-1: config 0 has no interface number 0 [ 313.579464][ T5280] usb 6-1: SerialNumber: syz [ 313.974451][ T7257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.007954][ T5282] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 314.047845][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.099164][ T5282] usb 5-1: Product: syz [ 314.103378][ T5282] usb 5-1: Manufacturer: syz [ 314.125998][ T5282] usb 5-1: SerialNumber: syz [ 314.143479][ T5282] usb 5-1: config 0 descriptor?? [ 314.207040][ T5282] smsc95xx v2.0.0 [ 314.236143][ T5280] usb 6-1: 0:2 : does not exist [ 314.303829][ T5280] usb 6-1: USB disconnect, device number 2 [ 314.608254][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.626083][ T5282] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 314.685975][ T5282] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 315.127129][ T7264] loop5: detected capacity change from 0 to 256 [ 315.199712][ T7264] FAT-fs (loop5): Directory bread(block 1285) failed [ 315.278586][ T7264] FAT-fs (loop5): Directory bread(block 1286) failed [ 315.285352][ T7264] FAT-fs (loop5): Directory bread(block 1287) failed [ 315.354667][ T7264] FAT-fs (loop5): Directory bread(block 1288) failed [ 316.587639][ T5282] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 316.609663][ T5282] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 316.629686][ T5282] usb 5-1: USB disconnect, device number 4 [ 316.657128][ T7274] binder: 7273:7274 ioctl c0306201 0 returned -14 [ 317.027742][ T7276] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 317.102120][ T7276] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 317.301719][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.308637][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.345423][ T7291] loop4: detected capacity change from 0 to 256 [ 317.430742][ T7291] FAT-fs (loop4): Directory bread(block 64) failed [ 317.437563][ T7291] FAT-fs (loop4): Directory bread(block 65) failed [ 317.444183][ T7291] FAT-fs (loop4): Directory bread(block 66) failed [ 317.450817][ T7291] FAT-fs (loop4): Directory bread(block 67) failed [ 317.457561][ T7291] FAT-fs (loop4): Directory bread(block 68) failed [ 317.464158][ T7291] FAT-fs (loop4): Directory bread(block 69) failed [ 317.470879][ T7291] FAT-fs (loop4): Directory bread(block 70) failed [ 317.477507][ T7291] FAT-fs (loop4): Directory bread(block 71) failed [ 317.484273][ T7291] FAT-fs (loop4): Directory bread(block 72) failed [ 317.490955][ T7291] FAT-fs (loop4): Directory bread(block 73) failed [ 317.745908][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 317.945933][ T4226] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 317.985999][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 318.126559][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.156402][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.185913][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 318.346207][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.406202][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.417975][ T1108] usb 2-1: Product: syz [ 318.422183][ T1108] usb 2-1: Manufacturer: syz [ 318.432374][ T1108] usb 2-1: SerialNumber: syz [ 318.604436][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.627637][ T4226] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.717964][ T4226] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.186576][ T4226] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.290022][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.437915][ T4226] usb 4-1: Product: syz [ 319.552599][ T4226] usb 4-1: Manufacturer: syz [ 319.646948][ T4226] usb 4-1: SerialNumber: syz [ 319.707711][ T7309] loop4: detected capacity change from 0 to 128 [ 320.120861][ T7309] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.131983][ T7307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.173398][ T7309] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.195466][ T4226] usb 4-1: 0:2 : does not exist [ 320.253600][ T4226] usb 4-1: USB disconnect, device number 4 [ 320.557018][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.927071][ T7317] binder: 7316:7317 ioctl c0306201 0 returned -14 [ 321.266262][ T1108] usb 2-1: cannot find UAC_HEADER [ 321.372059][ T1108] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 322.299396][ T1108] usb 2-1: USB disconnect, device number 6 [ 322.736054][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 322.755975][ T4227] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 322.986121][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 323.016085][ T4227] usb 6-1: Using ep0 maxpacket: 16 [ 323.136983][ T1108] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 323.149185][ T1108] usb 2-1: config 0 has no interface number 0 [ 323.156184][ T4227] usb 6-1: unable to get BOS descriptor set [ 323.246313][ T4227] usb 6-1: config 0 has no interfaces? [ 323.336990][ T1108] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 323.359032][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.375975][ T7335] binder: 7332:7335 ioctl c0306201 0 returned -14 [ 323.402881][ T1108] usb 2-1: Product: syz [ 323.412508][ T1108] usb 2-1: Manufacturer: syz [ 323.434499][ T1108] usb 2-1: SerialNumber: syz [ 323.443667][ T1108] usb 2-1: config 0 descriptor?? [ 323.696220][ T4227] usb 6-1: string descriptor 0 read error: -22 [ 323.746846][ T1108] smsc95xx v2.0.0 [ 323.855932][ T4227] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=eb.52 [ 323.886277][ T1108] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 323.905906][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.934667][ T1108] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 323.987610][ T7345] loop1: detected capacity change from 0 to 128 [ 324.012091][ T7350] loop3: detected capacity change from 0 to 256 [ 324.014042][ T4227] usb 6-1: config 0 descriptor?? [ 324.027472][ T1108] usb 2-1: USB disconnect, device number 7 [ 324.058698][ T7345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.072655][ T7345] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.152773][ T7353] loop4: detected capacity change from 0 to 256 [ 324.159822][ T7350] FAT-fs (loop3): Directory bread(block 64) failed [ 324.169457][ T7350] FAT-fs (loop3): Directory bread(block 65) failed [ 324.176478][ T7350] FAT-fs (loop3): Directory bread(block 66) failed [ 324.183052][ T7350] FAT-fs (loop3): Directory bread(block 67) failed [ 324.191351][ T7350] FAT-fs (loop3): Directory bread(block 68) failed [ 324.197974][ T7350] FAT-fs (loop3): Directory bread(block 69) failed [ 324.204676][ T7350] FAT-fs (loop3): Directory bread(block 70) failed [ 324.211438][ T7350] FAT-fs (loop3): Directory bread(block 71) failed [ 324.218451][ T7350] FAT-fs (loop3): Directory bread(block 72) failed [ 324.225035][ T7350] FAT-fs (loop3): Directory bread(block 73) failed [ 324.272445][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.304297][ T1108] usb 6-1: USB disconnect, device number 3 [ 324.316869][ T7353] loop4: detected capacity change from 0 to 128 [ 324.336585][ T7353] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777+E54K@}MM/[NkAuЯQmK+ Ԝڣ" or missing value [ 324.556008][ T7108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 324.659122][ T7360] loop1: detected capacity change from 0 to 1024 [ 324.680641][ T7360] EXT4-fs (loop1): Ignoring removed bh option [ 324.765408][ T7362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.791249][ T7362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.193709][ T7360] EXT4-fs (loop1): Unrecognized mount option "ro" or missing value [ 327.122099][ T7108] usb 3-1: Using ep0 maxpacket: 16 [ 327.468425][ T7108] usb 3-1: device descriptor read/all, error -71 [ 328.276078][ T5282] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 328.293417][ T7392] binder: 7391:7392 ioctl c0306201 0 returned -14 [ 328.326139][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 328.552972][ T7397] loop2: detected capacity change from 0 to 128 [ 328.556043][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 328.602336][ T7397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.616934][ T7397] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.676096][ T5282] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 328.684454][ T5282] usb 4-1: config 0 has no interface number 0 [ 328.684712][ T7397] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 328.717679][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.751043][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.771547][ T7] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 328.788234][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.820772][ T7] usb 6-1: config 0 descriptor?? [ 328.843798][ T7397] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 328.866884][ T5282] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 328.887650][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.890897][ T7411] loop1: detected capacity change from 0 to 256 [ 328.902251][ T5282] usb 4-1: Product: syz [ 328.911944][ T5282] usb 4-1: Manufacturer: syz [ 328.917004][ T5282] usb 4-1: SerialNumber: syz [ 328.924190][ T5282] usb 4-1: config 0 descriptor?? [ 328.966993][ T5282] smsc95xx v2.0.0 [ 329.027783][ T7414] loop2: detected capacity change from 0 to 128 [ 329.126904][ T7414] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 329.138218][ T7414] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.321793][ T7] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 329.330475][ T7] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 329.338450][ T7] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 329.346226][ T7108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 329.353924][ T7] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 329.361816][ T7] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 329.373059][ T7] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 329.406144][ T5282] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 329.417758][ T5282] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 329.616012][ T7108] usb 2-1: Using ep0 maxpacket: 8 [ 329.758921][ T7108] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 329.767858][ T7108] usb 2-1: config 0 has an invalid interface number: 150 but max is 64 [ 329.776204][ T7108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.786360][ T7108] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 329.795539][ T7108] usb 2-1: config 0 has no interface number 0 [ 329.801785][ T7108] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.814880][ T7108] usb 2-1: config 0 interface 150 has no altsetting 0 [ 329.822912][ T7108] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 329.832160][ T7108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.842444][ T7108] usb 2-1: config 0 descriptor?? [ 329.956163][ T7] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 329.965854][ T7] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 329.976553][ T7] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 329.985883][ T7] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 329.996100][ T7] playstation: probe of 0003:054C:0DF2.0002 failed with error -71 [ 330.008081][ T7] usb 6-1: USB disconnect, device number 4 [ 330.051196][ T7420] fido_id[7420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 330.337251][ T7] usb 2-1: USB disconnect, device number 8 [ 330.572538][ T5282] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 330.583827][ T5282] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 330.598878][ T5282] usb 4-1: USB disconnect, device number 5 [ 330.681162][ T7430] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.809290][ T7430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.703180][ T7432] loop5: detected capacity change from 0 to 128 [ 333.520454][ T7432] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.532943][ T7444] binder: 7443:7444 ioctl c0306201 0 returned -14 [ 333.584603][ T7432] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.824527][ T4259] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 334.145297][ T7456] loop2: detected capacity change from 0 to 256 [ 334.231453][ T4259] usb 2-1: Using ep0 maxpacket: 16 [ 334.277535][ T7456] loop2: detected capacity change from 0 to 128 [ 334.329150][ T7456] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777+E54K@}MM/[NkAuЯQmK+ Ԝڣ" or missing value [ 334.356132][ T4259] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.374856][ T4259] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.567118][ T7476] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 334.626287][ T4259] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.638039][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.654341][ T4259] usb 2-1: Product: syz [ 334.659083][ T4259] usb 2-1: Manufacturer: syz [ 334.663840][ T4259] usb 2-1: SerialNumber: syz [ 334.842026][ T7479] loop3: detected capacity change from 0 to 256 [ 334.891416][ T4226] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 334.946276][ T7479] FAT-fs (loop3): Directory bread(block 64) failed [ 334.953224][ T7479] FAT-fs (loop3): Directory bread(block 65) failed [ 334.961623][ T4259] usb 2-1: 0:2 : does not exist [ 334.970287][ T7479] FAT-fs (loop3): Directory bread(block 66) failed [ 334.978941][ T7479] FAT-fs (loop3): Directory bread(block 67) failed [ 334.987723][ T7479] FAT-fs (loop3): Directory bread(block 68) failed [ 334.994690][ T7479] FAT-fs (loop3): Directory bread(block 69) failed [ 335.078757][ T7479] FAT-fs (loop3): Directory bread(block 70) failed [ 335.145953][ T4226] usb 6-1: Using ep0 maxpacket: 32 [ 335.223845][ T4259] usb 2-1: USB disconnect, device number 9 [ 335.240552][ T7479] FAT-fs (loop3): Directory bread(block 71) failed [ 335.296869][ T4226] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 335.367829][ T4226] usb 6-1: config 0 has no interface number 0 [ 335.412880][ T7479] FAT-fs (loop3): Directory bread(block 72) failed [ 335.640513][ T7479] FAT-fs (loop3): Directory bread(block 73) failed [ 335.847045][ T4226] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 335.873796][ T7488] binder: 7486:7488 ioctl c0306201 0 returned -14 [ 335.883029][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.908276][ T4226] usb 6-1: Product: syz [ 335.922243][ T4226] usb 6-1: Manufacturer: syz [ 335.929651][ T4226] usb 6-1: SerialNumber: syz [ 335.941482][ T4226] usb 6-1: config 0 descriptor?? [ 335.987841][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.560312][ T4226] smsc95xx v2.0.0 [ 336.560972][ T7497] loop3: detected capacity change from 0 to 128 [ 336.677953][ T7497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.691362][ T7497] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.835064][ T4226] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 336.872242][ T4226] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 337.051898][ T7511] loop3: detected capacity change from 0 to 256 [ 337.255924][ T5285] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 337.329924][ T7501] loop2: detected capacity change from 0 to 40427 [ 337.346210][ T4259] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 337.366502][ T7501] F2FS-fs (loop2): invalid crc value [ 337.374276][ T7501] F2FS-fs (loop2): Found nat_bits in checkpoint [ 337.431684][ T7501] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 337.496038][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 337.585890][ T4259] usb 5-1: Using ep0 maxpacket: 16 [ 337.616279][ T5285] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 337.633918][ T5285] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.644418][ T5285] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.706023][ T4259] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.729439][ T7521] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.735456][ T4259] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.826137][ T5285] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.835617][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.844052][ T5285] usb 2-1: Product: syz [ 337.848697][ T5285] usb 2-1: Manufacturer: syz [ 337.853403][ T5285] usb 2-1: SerialNumber: syz [ 337.996408][ T4259] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.996468][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.996536][ T4259] usb 5-1: Product: syz [ 337.996601][ T4259] usb 5-1: Manufacturer: syz [ 337.996662][ T4259] usb 5-1: SerialNumber: syz [ 338.096418][ T4226] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 338.097074][ T4226] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 338.142613][ T4226] usb 6-1: USB disconnect, device number 5 [ 338.546785][ T4259] usb 5-1: 0:2 : does not exist [ 338.689050][ T4259] usb 5-1: USB disconnect, device number 5 [ 338.765716][ T5285] usb 2-1: 0:2 : does not exist [ 339.540264][ T5285] usb 2-1: USB disconnect, device number 10 [ 339.771132][ T7539] loop5: detected capacity change from 0 to 128 [ 339.776878][ T7537] binder: 7536:7537 ioctl c0306201 0 returned -14 [ 340.040548][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.152164][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 341.228855][ T7553] loop1: detected capacity change from 0 to 40427 [ 341.255937][ T4259] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 341.326115][ T7553] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x1ffff [ 341.496581][ T7108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 341.616301][ T4259] usb 4-1: config 0 has no interfaces? [ 341.621820][ T4259] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.631987][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.642256][ T4259] usb 4-1: config 0 descriptor?? [ 341.766025][ T7108] usb 5-1: Using ep0 maxpacket: 16 [ 341.894141][ T4227] usb 4-1: USB disconnect, device number 6 [ 341.925988][ T7108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.937430][ T7108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.126529][ T7108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.135995][ T7108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.144015][ T7108] usb 5-1: Product: syz [ 342.148558][ T7108] usb 5-1: Manufacturer: syz [ 342.153262][ T7108] usb 5-1: SerialNumber: syz [ 342.266112][ T4227] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 342.319347][ T4259] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 342.365932][ T5285] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 342.487296][ T7589] loop1: detected capacity change from 0 to 256 [ 342.496204][ T7108] usb 5-1: 0:2 : does not exist [ 342.526176][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 342.537582][ T7589] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 342.576135][ T4259] usb 3-1: Using ep0 maxpacket: 32 [ 342.584703][ T7108] usb 5-1: USB disconnect, device number 6 [ 342.612935][ T5285] usb 6-1: Using ep0 maxpacket: 16 [ 342.640580][ T7591] binder: 7590:7591 ioctl c0306201 0 returned -14 [ 342.675999][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.696194][ T4259] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 342.696640][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.746021][ T5285] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.848528][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.901921][ T4259] usb 3-1: config 0 has no interface number 0 [ 342.908260][ T5285] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.918843][ T5285] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.926330][ T4227] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.954444][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.001823][ T4227] usb 4-1: Product: syz [ 343.028346][ T4227] usb 4-1: Manufacturer: syz [ 343.038477][ T4227] usb 4-1: SerialNumber: syz [ 343.309902][ T4259] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 343.331166][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.340021][ T4259] usb 3-1: Product: syz [ 343.344208][ T4259] usb 3-1: Manufacturer: syz [ 343.348874][ T4259] usb 3-1: SerialNumber: syz [ 343.356026][ T5285] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.365217][ T5285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.377668][ T4259] usb 3-1: config 0 descriptor?? [ 343.383597][ T5285] usb 6-1: Product: syz [ 343.387994][ T5285] usb 6-1: Manufacturer: syz [ 343.392695][ T5285] usb 6-1: SerialNumber: syz [ 343.448883][ T7601] loop1: detected capacity change from 0 to 256 [ 343.469195][ T4259] smsc95xx v2.0.0 [ 343.876212][ T4227] usb 4-1: 0:2 : does not exist [ 344.175217][ T7605] loop4: detected capacity change from 0 to 1024 [ 344.225386][ T7605] EXT4-fs (loop4): Test dummy encryption mode enabled [ 344.335599][ T4227] usb 4-1: USB disconnect, device number 7 [ 344.348185][ T7605] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,nobarrier,block_validity,,errors=continue. Quota mode: writeback. [ 345.093162][ T4259] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 345.104699][ T5285] usb 6-1: can't set config #1, error -71 [ 345.111054][ T4259] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 345.123792][ T7615] loop2: detected capacity change from 0 to 512 [ 345.156021][ T5285] usb 6-1: USB disconnect, device number 6 [ 345.186021][ T4259] usb 3-1: USB disconnect, device number 5 [ 345.225723][ T7620] loop5: detected capacity change from 0 to 256 [ 345.307621][ T7620] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 345.362843][ T7615] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.893: bg 0: block 473: padding at end of block bitmap is not set [ 345.430421][ T7615] EXT4-fs (loop2): Remounting filesystem read-only [ 345.447911][ T7615] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 345.463077][ T7615] EXT4-fs (loop2): Remounting filesystem read-only [ 345.498820][ T7615] EXT4-fs (loop2): 1 orphan inode deleted [ 345.510312][ T7615] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 345.549796][ T7615] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.646122][ T7615] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.893: deleted inode referenced: 16 [ 345.658440][ T5282] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 345.668431][ T26] audit: type=1326 audit(1772836643.095:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52259f6799 code=0x7ffc0000 [ 345.769589][ T7615] EXT4-fs (loop2): Remounting filesystem read-only [ 345.770938][ T26] audit: type=1326 audit(1772836643.095:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52259f6799 code=0x7ffc0000 [ 345.799305][ T7633] loop5: detected capacity change from 0 to 512 [ 345.800139][ T26] audit: type=1326 audit(1772836643.125:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f52259f6799 code=0x7ffc0000 [ 345.832080][ T26] audit: type=1326 audit(1772836643.125:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52259f6799 code=0x7ffc0000 [ 345.856334][ T26] audit: type=1326 audit(1772836643.125:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f52259f6799 code=0x7ffc0000 [ 345.886231][ T26] audit: type=1326 audit(1772836643.125:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52259f6799 code=0x7ffc0000 [ 345.914084][ T7633] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 345.937454][ T7633] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 345.961241][ T26] audit: type=1326 audit(1772836643.125:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f52259f6799 code=0x7ffc0000 [ 345.984838][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 346.018388][ T26] audit: type=1326 audit(1772836643.125:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f52259f0517 code=0x7ffc0000 [ 346.048094][ T26] audit: type=1326 audit(1772836643.125:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5225997b19 code=0x7ffc0000 [ 346.082836][ T26] audit: type=1326 audit(1772836643.125:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f52259f0517 code=0x7ffc0000 [ 346.266143][ T5282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.283366][ T5282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.319287][ T7638] binder: 7636:7638 ioctl c0306201 0 returned -14 [ 346.476235][ T5282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.536009][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.620181][ T5282] usb 5-1: Product: syz [ 346.661521][ T5282] usb 5-1: Manufacturer: syz [ 346.685836][ T5282] usb 5-1: SerialNumber: syz [ 347.387705][ T5282] usb 5-1: 0:2 : does not exist [ 347.446974][ T7651] loop2: detected capacity change from 0 to 256 [ 348.591564][ T5282] usb 5-1: USB disconnect, device number 7 [ 348.830997][ T7657] loop3: detected capacity change from 0 to 256 [ 349.027598][ T5280] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 349.187170][ T5282] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 349.220578][ T7657] exfat: Deprecated parameter 'utf8' [ 349.235944][ T7657] exfat: Deprecated parameter 'namecase' [ 349.326155][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 349.346920][ T7657] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 349.466164][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 349.471799][ T5280] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 349.512970][ T5280] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 349.556056][ T4259] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 349.616461][ T5282] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 349.627047][ T5280] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 349.652162][ T5282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.726289][ T5282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.735338][ T5280] usb 2-1: config 1 interface 0 has no altsetting 0 [ 349.867559][ T5280] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.899016][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.936165][ T5280] usb 2-1: SerialNumber: syz [ 349.946949][ T5282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.976138][ T4259] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.986899][ T7654] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 349.995429][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.999840][ T7662] loop2: detected capacity change from 0 to 1024 [ 350.004308][ T7654] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.018099][ T4259] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.032782][ T5282] usb 5-1: Product: syz [ 350.043517][ T7662] EXT4-fs (loop2): Ignoring removed bh option [ 350.051922][ T5282] usb 5-1: Manufacturer: syz [ 350.062462][ T5282] usb 5-1: SerialNumber: syz [ 350.096682][ T7662] EXT4-fs (loop2): Ignoring removed oldalloc option [ 350.104366][ T7662] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.153995][ T7662] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none. [ 350.263517][ T7654] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.306163][ T7654] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.390735][ T4259] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 350.403227][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 350.411863][ T4259] usb 6-1: Product: syz [ 350.416168][ T4259] usb 6-1: Manufacturer: syz [ 350.420794][ T4259] usb 6-1: SerialNumber: syz [ 350.427453][ T4259] usb 6-1: config 0 descriptor?? [ 350.738131][ T5282] usb 5-1: 0:2 : does not exist [ 351.272060][ T5280] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 351.564705][ T5280] usb 5-1: USB disconnect, device number 8 [ 351.676683][ T7108] usb 6-1: USB disconnect, device number 7 [ 351.836922][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.169912][ T7686] binder: 7685:7686 ioctl c0306201 0 returned -14 [ 352.233286][ T7689] loop4: detected capacity change from 0 to 512 [ 352.460068][ T7689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.911: bg 0: block 473: padding at end of block bitmap is not set [ 352.924035][ T5282] usb 2-1: USB disconnect, device number 11 [ 352.954152][ T7689] EXT4-fs (loop4): Remounting filesystem read-only [ 352.964361][ T7689] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 352.976884][ T7689] EXT4-fs (loop4): Remounting filesystem read-only [ 352.988866][ T5282] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 352.999294][ T7689] EXT4-fs (loop4): 1 orphan inode deleted [ 353.010021][ T7680] chnl_net:caif_netlink_parms(): no params data found [ 353.029504][ T7689] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 353.082363][ T7689] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.108963][ T7689] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.911: deleted inode referenced: 16 [ 353.129291][ T26] kauditd_printk_skb: 680 callbacks suppressed [ 353.129311][ T26] audit: type=1326 audit(1772836650.555:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 353.211793][ T7689] EXT4-fs (loop4): Remounting filesystem read-only [ 353.212889][ T26] audit: type=1326 audit(1772836650.555:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 353.301804][ T26] audit: type=1326 audit(1772836650.725:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 353.456976][ T26] audit: type=1326 audit(1772836650.725:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 353.480605][ T26] audit: type=1326 audit(1772836650.725:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 353.608233][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.633066][ T26] audit: type=1326 audit(1772836650.725:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 353.707827][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.740806][ T7680] device bridge_slave_0 entered promiscuous mode [ 353.798363][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.811839][ T26] audit: type=1326 audit(1772836650.725:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 353.859398][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.867699][ T7680] device bridge_slave_1 entered promiscuous mode [ 353.894945][ T7680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.954439][ T7680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.955918][ T26] audit: type=1326 audit(1772836650.725:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 354.037947][ T7733] loop5: detected capacity change from 0 to 256 [ 354.618648][ T7680] team0: Port device team_slave_0 added [ 354.851661][ T7680] team0: Port device team_slave_1 added [ 355.179883][ T4227] Bluetooth: hci0: command 0x0409 tx timeout [ 355.205577][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.696576][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.816995][ T26] audit: type=1326 audit(1772836650.725:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 355.871730][ T7680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.983469][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.001742][ T26] audit: type=1326 audit(1772836650.725:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012db83799 code=0x7ffc0000 [ 356.053704][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.194593][ T7680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.444499][ T7743] loop1: detected capacity change from 0 to 1024 [ 356.510437][ T7743] EXT4-fs (loop1): Ignoring removed bh option [ 356.538304][ T7680] device hsr_slave_0 entered promiscuous mode [ 356.576039][ T7743] EXT4-fs (loop1): Ignoring removed oldalloc option [ 356.587287][ T7680] device hsr_slave_1 entered promiscuous mode [ 356.614028][ T7743] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.637538][ T7680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.646993][ T7680] Cannot create hsr debugfs directory [ 356.727106][ T7743] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none. [ 356.807991][ T7750] binder: 7749:7750 ioctl c0306201 0 returned -14 [ 357.214761][ T5285] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 357.214813][ T5280] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 358.043057][ T7108] Bluetooth: hci0: command 0x041b tx timeout [ 358.169679][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 358.281689][ T7680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.433937][ T5285] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 358.449248][ T5285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.459591][ T5285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.486251][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 358.706504][ T5280] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 358.737105][ T5285] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.775024][ T5280] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 358.815500][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.863402][ T5280] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 358.883899][ T5285] usb 3-1: Product: syz [ 358.923009][ T5285] usb 3-1: Manufacturer: syz [ 358.954996][ T5285] usb 3-1: SerialNumber: syz [ 358.979158][ T5280] usb 5-1: config 1 interface 0 has no altsetting 0 [ 359.246237][ T5280] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.259224][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.276591][ T5280] usb 5-1: SerialNumber: syz [ 359.318183][ T7680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.342910][ T7752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 359.356409][ T7752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 359.522847][ T7680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.536319][ T5285] usb 3-1: 0:2 : does not exist [ 359.557847][ T7771] loop5: detected capacity change from 0 to 512 [ 359.610522][ T7752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 359.624881][ T7752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 359.627670][ T7771] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.928: bg 0: block 473: padding at end of block bitmap is not set [ 359.649697][ T7771] EXT4-fs (loop5): Remounting filesystem read-only [ 359.656399][ T7771] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 359.665561][ T7771] EXT4-fs (loop5): Remounting filesystem read-only [ 359.673030][ T7771] EXT4-fs (loop5): 1 orphan inode deleted [ 359.678884][ T7771] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 359.690270][ T7771] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.705712][ T7680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.726133][ T7771] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.928: deleted inode referenced: 16 [ 359.740397][ T7771] EXT4-fs (loop5): Remounting filesystem read-only [ 359.991650][ T7680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.033282][ T7680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.052013][ T7680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.070246][ T7680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.095998][ T7108] Bluetooth: hci0: command 0x040f tx timeout [ 360.126022][ T5280] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 360.245906][ T7108] usb 3-1: USB disconnect, device number 6 [ 360.463806][ T7680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.491852][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.517801][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.549588][ T7680] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.588715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.598816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.608306][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.615476][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.663461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.687950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.717602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.738544][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.745719][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.816562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 360.877318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.903045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.932883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.955487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.979421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.024807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.050591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.067539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.083261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.106257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.116798][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.386081][ C0] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 7c! [ 361.522662][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.535051][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.569429][ T7680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.633874][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.657546][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.733266][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.764889][ T5285] usb 5-1: USB disconnect, device number 9 [ 361.795002][ T5285] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 361.806107][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.817549][ T7680] device veth0_vlan entered promiscuous mode [ 361.857633][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.074706][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.110127][ T7680] device veth1_vlan entered promiscuous mode [ 362.177279][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 362.389731][ T7815] loop4: detected capacity change from 0 to 256 [ 363.045934][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 363.045952][ T26] audit: type=1326 audit(1772836660.455:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 363.266358][ T26] audit: type=1326 audit(1772836660.455:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 363.439222][ T26] audit: type=1326 audit(1772836660.455:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 363.486563][ T7827] loop5: detected capacity change from 0 to 256 [ 363.599656][ T26] audit: type=1326 audit(1772836660.455:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 363.623767][ T26] audit: type=1326 audit(1772836660.465:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 363.646836][ T26] audit: type=1326 audit(1772836660.465:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 363.669121][ T26] audit: type=1326 audit(1772836660.465:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 363.903648][ T26] audit: type=1326 audit(1772836660.515:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 364.209184][ T26] audit: type=1326 audit(1772836660.515:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 364.246666][ T26] audit: type=1326 audit(1772836660.515:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdc5e345799 code=0x7ffc0000 [ 364.650435][ T7833] binder: 7832:7833 ioctl c0306201 0 returned -14 [ 365.202234][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 365.428851][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 365.881467][ T7844] overlayfs: upper fs does not support tmpfile. [ 365.905253][ T7680] device veth0_macvtap entered promiscuous mode [ 365.989216][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.998663][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.009521][ T7680] device veth1_macvtap entered promiscuous mode [ 366.097324][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.098171][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.148250][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.148276][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.148288][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.148302][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.148314][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.148328][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.148340][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.148355][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.148368][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.148382][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.148395][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.148409][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.160925][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.161029][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.166626][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.172434][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.172458][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.172470][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.172485][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.172497][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.172512][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.172523][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.172537][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.172551][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.172566][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.172578][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.172593][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.173888][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.174453][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.175187][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.218373][ T7680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.218414][ T7680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.218444][ T7680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.218474][ T7680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.257298][ T7853] loop4: detected capacity change from 0 to 1024 [ 366.283450][ T7858] loop1: detected capacity change from 0 to 512 [ 366.355909][ T7853] EXT4-fs (loop4): Ignoring removed bh option [ 366.355939][ T7853] EXT4-fs (loop4): Ignoring removed oldalloc option [ 366.355979][ T7853] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 366.470368][ T7853] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none. [ 366.487690][ T7858] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.940: bg 0: block 473: padding at end of block bitmap is not set [ 366.488172][ T7858] EXT4-fs (loop1): Remounting filesystem read-only [ 366.488198][ T7858] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 366.498721][ T7858] EXT4-fs (loop1): Remounting filesystem read-only [ 367.846136][ T7858] EXT4-fs (loop1): 1 orphan inode deleted [ 367.857346][ T7858] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 367.924248][ T7858] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.225935][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.233795][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.287177][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.327242][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.335108][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.364139][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.366595][ T7858] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.940: deleted inode referenced: 16 [ 368.447100][ T7858] EXT4-fs (loop1): Remounting filesystem read-only [ 368.491828][ T7878] loop5: detected capacity change from 0 to 1024 [ 368.649769][ T7878] EXT4-fs (loop5): Ignoring removed bh option [ 368.734208][ T7878] EXT4-fs (loop5): Ignoring removed oldalloc option [ 368.747062][ T7878] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.163240][ T7878] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none. [ 370.847991][ T4226] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 371.823961][ T7108] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 371.903682][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 371.935557][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 371.935574][ T26] audit: type=1326 audit(1772836669.365:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 371.998743][ T26] audit: type=1326 audit(1772836669.405:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 372.023686][ T26] audit: type=1326 audit(1772836669.405:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 372.046089][ T26] audit: type=1326 audit(1772836669.405:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 372.069535][ T4226] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 372.076074][ T7108] usb 2-1: Using ep0 maxpacket: 32 [ 372.078323][ T4226] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.093710][ T26] audit: type=1326 audit(1772836669.405:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 372.118792][ T4226] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.154823][ T26] audit: type=1326 audit(1772836669.405:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 372.191214][ T26] audit: type=1326 audit(1772836669.405:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 372.196085][ T7108] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 372.215112][ T26] audit: type=1326 audit(1772836669.415:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f05d96d5799 code=0x7ffc0000 [ 372.231931][ T7108] usb 2-1: config 0 has no interface number 0 [ 372.264662][ T7108] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 372.276198][ T26] audit: type=1326 audit(1772836669.415:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05d96cf517 code=0x7ffc0000 [ 372.299202][ T26] audit: type=1326 audit(1772836669.415:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05d9676b19 code=0x7ffc0000 [ 372.358435][ T4226] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.377661][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.404890][ T4226] usb 4-1: Product: syz [ 372.420317][ T4226] usb 4-1: Manufacturer: syz [ 372.424962][ T4226] usb 4-1: SerialNumber: syz [ 372.436109][ T7108] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 372.445411][ T4229] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 372.459020][ T7108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.476077][ T7108] usb 2-1: Product: syz [ 372.484874][ T7108] usb 2-1: Manufacturer: syz [ 372.495405][ T7108] usb 2-1: SerialNumber: syz [ 372.524574][ T7108] usb 2-1: config 0 descriptor?? [ 372.556281][ T7907] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 372.699034][ T4229] usb 6-1: Using ep0 maxpacket: 8 [ 372.780172][ T7907] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 372.818081][ T4229] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 372.839209][ T4229] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 372.865885][ T4229] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 372.889518][ T4229] usb 6-1: config 1 interface 0 has no altsetting 0 [ 372.936255][ T4226] usb 4-1: 0:2 : does not exist [ 372.986208][ T4229] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.010952][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 373.026305][ T7907] loop1: detected capacity change from 0 to 128 [ 373.030308][ T4229] usb 6-1: SerialNumber: syz [ 373.037839][ T7108] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 373.055678][ T7108] asix: probe of 2-1:0.188 failed with error -32 [ 373.086259][ T7916] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 373.093386][ T7916] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 373.104839][ T7918] device syzkaller0 entered promiscuous mode [ 373.112237][ T7907] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,auto_da_alloc,inode_readahead_blks=0x0000000000100000,,errors=continue. Quota mode: none. [ 373.129967][ T7907] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.316200][ T7907] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 5 (only 1 groups) [ 373.333862][ T7916] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 373.353641][ T7916] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 373.387286][ T4226] usb 2-1: USB disconnect, device number 12 [ 373.610930][ T4226] usb 4-1: USB disconnect, device number 8 [ 373.861520][ T4229] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 374.212658][ T7925] binder: 7923:7925 ioctl c0306201 0 returned -14 [ 374.552096][ T7931] loop1: detected capacity change from 0 to 512 [ 376.112758][ T7935] loop3: detected capacity change from 0 to 256 [ 377.550135][ T5290] usb 6-1: USB disconnect, device number 8 [ 377.569029][ T7937] overlayfs: upper fs does not support tmpfile. [ 377.600329][ T5290] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 379.162028][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.168961][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.191850][ T7966] loop3: detected capacity change from 0 to 1024 [ 380.260171][ T7961] overlayfs: upper fs does not support tmpfile. [ 381.043212][ T7972] loop2: detected capacity change from 0 to 512 [ 381.086294][ T7966] EXT4-fs (loop3): Ignoring removed bh option [ 381.092425][ T7966] EXT4-fs (loop3): Ignoring removed oldalloc option [ 381.186015][ T7966] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 381.259061][ T7972] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 381.259061][ T7972] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 381.259061][ T7972] [ 381.316036][ T7972] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 381.381278][ T7966] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,errors=remount-ro,user_xattr,nouid32,dioread_nolock,. Quota mode: none. [ 381.684211][ T7975] loop4: detected capacity change from 0 to 2048 [ 381.702892][ T7972] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026119, mo2=0000] [ 382.081225][ T7972] EXT4-fs (loop2): 1 truncate cleaned up [ 382.314287][ T4422] __quota_error: 1216 callbacks suppressed [ 382.314309][ T4422] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 382.350570][ T7972] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000003,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 382.361018][ T4422] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:12: Failed to release dquot type 1 [ 383.428337][ T7975] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.718342][ T7976] [ 383.720730][ T7976] ====================================================== [ 383.727854][ T7976] WARNING: possible circular locking dependency detected [ 383.734881][ T7976] syzkaller #0 Not tainted [ 383.739397][ T7976] ------------------------------------------------------ [ 383.746429][ T7976] syz.4.964/7976 is trying to acquire lock: [ 383.752509][ T7976] ffff88805b9480c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 383.762284][ T7976] [ 383.762284][ T7976] but task is already holding lock: [ 383.769923][ T7976] ffff888077a1abd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 383.780435][ T7976] [ 383.780435][ T7976] which lock already depends on the new lock. [ 383.780435][ T7976] [ 383.790963][ T7976] [ 383.790963][ T7976] the existing dependency chain (in reverse order) is: [ 383.800083][ T7976] [ 383.800083][ T7976] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 383.808888][ T7976] percpu_down_read+0x46/0x1b0 [ 383.814304][ T7976] ext4_writepages+0x20f/0x2df0 [ 383.819798][ T7976] do_writepages+0x476/0x6e0 [ 383.824935][ T7976] __writeback_single_inode+0x153/0xda0 [ 383.831016][ T7976] writeback_single_inode+0x3cb/0x8e0 [ 383.836972][ T7976] write_inode_now+0x23b/0x2c0 [ 383.842402][ T7976] iput+0x5ab/0x8a0 [ 383.846770][ T7976] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 383.852847][ T7976] ext4_xattr_block_set+0x4fd/0x2d20 [ 383.855941][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 383.858698][ T7976] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 383.872757][ T7976] __ext4_expand_extra_isize+0x301/0x3e0 [ 383.878943][ T7976] __ext4_mark_inode_dirty+0x469/0x700 [ 383.884954][ T7976] ext4_evict_inode+0xa8d/0x1090 [ 383.890449][ T7976] evict+0x4c9/0x8d0 [ 383.894897][ T7976] ext4_orphan_cleanup+0xad2/0x1320 [ 383.900641][ T7976] ext4_fill_super+0x8e25/0x95a0 [ 383.906123][ T7976] mount_bdev+0x287/0x3c0 [ 383.910989][ T7976] legacy_get_tree+0xe6/0x180 [ 383.916209][ T7976] vfs_get_tree+0x88/0x270 [ 383.921162][ T7976] do_new_mount+0x24a/0xa40 [ 383.926198][ T7976] __se_sys_mount+0x2e3/0x3d0 [ 383.931414][ T7976] do_syscall_64+0x4c/0xa0 [ 383.936369][ T7976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.942800][ T7976] [ 383.942800][ T7976] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 383.950641][ T7976] __lock_acquire+0x2c42/0x7d10 [ 383.956031][ T7976] lock_acquire+0x19e/0x400 [ 383.961076][ T7976] down_write+0x38/0x60 [ 383.965922][ T7976] ext4_destroy_inline_data+0x24/0xe0 [ 383.971832][ T7976] ext4_writepages+0x670/0x2df0 [ 383.977230][ T7976] do_writepages+0x476/0x6e0 [ 383.982362][ T7976] filemap_fdatawrite_wbc+0x1eb/0x240 [ 383.988272][ T7976] filemap_flush+0xd4/0x130 [ 383.993310][ T7976] ext4_convert_inline_data+0x18b/0x5f0 [ 383.999395][ T7976] ext4_fallocate+0xf4/0x1ed0 [ 384.004618][ T7976] vfs_fallocate+0x587/0x6f0 [ 384.009759][ T7976] __x64_sys_fallocate+0xbd/0x100 [ 384.015327][ T7976] do_syscall_64+0x4c/0xa0 [ 384.020277][ T7976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.026716][ T7976] [ 384.026716][ T7976] other info that might help us debug this: [ 384.026716][ T7976] [ 384.037219][ T7976] Possible unsafe locking scenario: [ 384.037219][ T7976] [ 384.044687][ T7976] CPU0 CPU1 [ 384.050268][ T7976] ---- ---- [ 384.055729][ T7976] lock(&sbi->s_writepages_rwsem); [ 384.060932][ T7976] lock(&ei->xattr_sem); [ 384.067781][ T7976] lock(&sbi->s_writepages_rwsem); [ 384.075500][ T7976] lock(&ei->xattr_sem); [ 384.079829][ T7976] [ 384.079829][ T7976] *** DEADLOCK *** [ 384.079829][ T7976] [ 384.087994][ T7976] 3 locks held by syz.4.964/7976: [ 384.093020][ T7976] #0: ffff888077a18460 (sb_writers#5){.+.+}-{0:0}, at: vfs_fallocate+0x4f4/0x6f0 [ 384.102267][ T7976] #1: ffff88805b9483f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_fallocate+0xec/0x1ed0 [ 384.112811][ T7976] #2: ffff888077a1abd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 384.123343][ T7976] [ 384.123343][ T7976] stack backtrace: [ 384.129230][ T7976] CPU: 1 PID: 7976 Comm: syz.4.964 Not tainted syzkaller #0 [ 384.136511][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.146566][ T7976] Call Trace: [ 384.149858][ T7976] [ 384.152805][ T7976] dump_stack_lvl+0x188/0x250 [ 384.157499][ T7976] ? load_image+0x400/0x400 [ 384.162081][ T7976] ? show_regs_print_info+0x20/0x20 [ 384.167317][ T7976] ? print_circular_bug+0x12b/0x1a0 [ 384.172549][ T7976] check_noncircular+0x296/0x330 [ 384.177526][ T7976] ? add_chain_block+0x940/0x940 [ 384.182509][ T7976] ? lockdep_lock+0xf1/0x1f0 [ 384.187134][ T7976] ? mark_lock+0x94/0x320 [ 384.191597][ T7976] __lock_acquire+0x2c42/0x7d10 [ 384.196498][ T7976] ? verify_lock_unused+0x140/0x140 [ 384.201732][ T7976] ? verify_lock_unused+0x140/0x140 [ 384.206967][ T7976] lock_acquire+0x19e/0x400 [ 384.211501][ T7976] ? ext4_destroy_inline_data+0x24/0xe0 [ 384.217078][ T7976] ? read_lock_is_recursive+0x10/0x10 [ 384.222489][ T7976] ? rcu_read_lock_any_held+0xb0/0x130 [ 384.228000][ T7976] ? ext4_journal_check_start+0x180/0x250 [ 384.233865][ T7976] down_write+0x38/0x60 [ 384.238054][ T7976] ? ext4_destroy_inline_data+0x24/0xe0 [ 384.243804][ T7976] ext4_destroy_inline_data+0x24/0xe0 [ 384.249317][ T7976] ext4_writepages+0x670/0x2df0 [ 384.254203][ T7976] ? finish_lock_switch+0x12f/0x280 [ 384.259437][ T7976] ? verify_lock_unused+0x140/0x140 [ 384.264841][ T7976] ? mark_lock+0x94/0x320 [ 384.269295][ T7976] ? ext4_readpage+0x2e0/0x2e0 [ 384.274189][ T7976] ? cgroup_rstat_updated+0xd7/0x350 [ 384.279522][ T7976] ? __lock_acquire+0x7d10/0x7d10 [ 384.284589][ T7976] ? do_raw_spin_lock+0x128/0x2f0 [ 384.289666][ T7976] ? do_raw_spin_unlock+0x11d/0x230 [ 384.294903][ T7976] ? ext4_readpage+0x2e0/0x2e0 [ 384.299707][ T7976] do_writepages+0x476/0x6e0 [ 384.304333][ T7976] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 384.310097][ T7976] ? __writepage+0x130/0x130 [ 384.314726][ T7976] ? __lock_acquire+0x7d10/0x7d10 [ 384.319870][ T7976] ? __rwlock_init+0x140/0x140 [ 384.324673][ T7976] ? do_raw_spin_unlock+0x11d/0x230 [ 384.329903][ T7976] filemap_fdatawrite_wbc+0x1eb/0x240 [ 384.335307][ T7976] filemap_flush+0xd4/0x130 [ 384.340049][ T7976] ? filemap_fdatawrite_range+0x140/0x140 [ 384.345806][ T7976] ext4_convert_inline_data+0x18b/0x5f0 [ 384.351381][ T7976] ? ext4_inline_data_truncate+0xbf0/0xbf0 [ 384.357219][ T7976] ? rwsem_write_trylock+0x135/0x1c0 [ 384.362535][ T7976] ? clear_nonspinnable+0x60/0x60 [ 384.367594][ T7976] ext4_fallocate+0xf4/0x1ed0 [ 384.372319][ T7976] ? common_file_perm+0x171/0x1c0 [ 384.377377][ T7976] vfs_fallocate+0x587/0x6f0 [ 384.382118][ T7976] __x64_sys_fallocate+0xbd/0x100 [ 384.387177][ T7976] do_syscall_64+0x4c/0xa0 [ 384.391631][ T7976] ? clear_bhb_loop+0x30/0x80 [ 384.396350][ T7976] ? clear_bhb_loop+0x30/0x80 [ 384.401155][ T7976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.407168][ T7976] RIP: 0033:0x7f05d96d5799 [ 384.411624][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.431455][ T7976] RSP: 002b:00007f05d790e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 384.439899][ T7976] RAX: ffffffffffffffda RBX: 00007f05d994f090 RCX: 00007f05d96d5799 [ 384.448073][ T7976] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000006 [ 384.456170][ T7976] RBP: 00007f05d976bbd9 R08: 0000000000000000 R09: 0000000000000000 [ 384.464166][ T7976] R10: 0000000008000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.472166][ T7976] R13: 00007f05d994f128 R14: 00007f05d994f090 R15: 00007ffdb6e1ff28 [ 384.480173][ T7976] [ 384.572162][ T4422] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 384.602892][ T7976] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 384.621343][ T4422] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:12: Failed to release dquot type 1 [ 384.788103][ T7976] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 384.800742][ T7976] EXT4-fs (loop4): This should not happen!! Data will be lost [ 384.800742][ T7976] [ 384.811139][ T7976] EXT4-fs (loop4): Total free blocks count 0 [ 384.817282][ T7976] EXT4-fs (loop4): Free/Dirty block details [ 384.823281][ T7976] EXT4-fs (loop4): free_blocks=2415919104 [ 384.829415][ T7976] EXT4-fs (loop4): dirty_blocks=224 [ 384.834647][ T7976] EXT4-fs (loop4): Block reservation details [ 384.840856][ T7976] EXT4-fs (loop4): i_reserved_data_blocks=14 [ 384.894490][ T6189] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 1056 with error 28 [ 384.908144][ T6189] EXT4-fs (loop4): This should not happen!! Data will be lost [ 384.908144][ T6189]