last executing test programs: 18m10.146732717s ago: executing program 32 (id=61): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b61}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16m42.040194179s ago: executing program 33 (id=304): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3804000}, 0xc, &(0x7f0000000040)={&(0x7f0000001680)={0x38, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x7}, [@nested={0x4, 0x8}, @nested={0x1c, 0x6c, 0x0, 0x1, [@nested={0x4, 0xa4}, @typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x4, 0x116}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x1050) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004600)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) pipe2$watch_queue(&(0x7f0000000340), 0x80) pipe(&(0x7f0000000340)) 16m29.889792424s ago: executing program 34 (id=334): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x3, 0x45c, &(0x7f0000000580)="$eJzs282PU1UbAPDndlq+eWdegh98qKNoJH7MMAMiCzcaTVxoYqILdDfODAQpjGHGRAjR0RhcGhIX7ojuTPwLXOnGKCsTt7o3JMSwAVnV3PbeoS1tKbW0YH+/pPSc3nNznod7T++590wDGFmT6T9JxJaI+D0ixmvVxgaTtbdrV87O/33l7HwSlcqbfyXVdlevnJ3Pm+b7bc4rxYjCZ0nsatHv8ukzx+fK5cVTWX165cT708unzzx77MTc0cWjiydnDx06sH/m+YOzz/UlzzSvqzs/Wtq949W3z78+f/j8u798l+T5N+XRJ5OdNj5RqfS5u+HaWldOivHNV0OMhe6N1YZplKrjfzzGqrWa8Xjl06EGB9xRlUqlcn/7zasV4D8siWFHAAxHfqFP73/z14CmHneFyy/WboDSvK9lr9qWYhSyNqWm+9t+moyIw6vXL6SvuDPPIQAAGvyQzn+eaTX/K0T9c6H/ZWsoExHx/4jYFhEHI2J7RNwXUW37QEQ8eJv9Ny+S3Dz/KVzqKbEupfO/F7K1rcb5Xz77i4mxrLa1mn8pOXKsvLgv+z/ZG6X1aX2mQx8/vvzbF+22Ved/payyev1C2n8+F8ziuFRc37jPwtzKXK/5Nrv8ScTOYqv8k7WVgCQidkTEzh77OPbUt7vbbauf/x5umX8HxR4DqlP5OuLJ2vFfjab8c0nn9cnpDVFe3DednxU3u/jruTfa9f+v8u+D9Phvann+r5lI6tdrl2+/j3N/fN72nubW+bc+/9clb1XL+VH6cG5l5dRMxLrktVrQ9Z/P3tg3r+ft0/z37mk9/rdl+6R97IqI9CR+KCIejohHstgfjYjHImJPh/x/funx93rPv8GGDt30JM1/oeXxXzv/m47/jcK6aP6kdWHs+E/fN3Q6cTv5p8f/QLW0N/ukm++/buLq7WwGAACAe08hIrZEUphaKxcKU1O1v+HfHpsK5aXllaePLH1wcqH2G4GJKBXyJ13jdc9DZ7Lb+rw+21Tfnz03/nJsY7U+Nb9UXhh28jDiNrcZ/6k/x4YdHXDH9WEdDbhHGf8wuox/GF3GP4yuFuN/Y/Z+cdCxAIPV6vr/8RDiAAavafxb9oMR4v4fRlc34/+dAcQBDJ7rP4yk5Y1x6x/JKyjcVIhCN42T7Npyd8Ss0H1h2N9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fFPAAAA//8eWuDl") r0 = bpf$MAP_CREATE(0x1800000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000040000000400000003"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100), 0x0}, 0x20) 16m17.339179404s ago: executing program 35 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019c80)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, r2) 14m47.310360881s ago: executing program 36 (id=432): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x32, 0x0, 0xee01}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x0, 0x32}, 0x2, @in=@private=0xa010100, 0x4, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 13m37.144658976s ago: executing program 37 (id=598): syz_read_part_table(0x1046, &(0x7f0000000000)="$eJzsz7sNAjEQBNDx8dEREdEPJZDQzyUIaqFEEiOjA9MAQie9F3lHO5Y2/FW55jZ8pl0yJZtMOeXYgnUtaUFKr7T11XYeHvVdHb4+7a9Xf0zdZ5yjy6Evne8/OwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuQZAAD//wnKCYQ=") 13m9.21319063s ago: executing program 38 (id=646): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0xfffffffffffffff8) 12m57.680919796s ago: executing program 39 (id=664): memfd_create(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0x8, 0x1000, 0xb, 0xffffffff, 0x2, 0x9, 0x4, 0x80]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x48044}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 9m26.577259821s ago: executing program 40 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000000000000000000000000ffff7fc5f603ff65"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 8m36.525391845s ago: executing program 41 (id=1135): bind$inet6(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x7c, r3, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @random="4d8e505a6882"}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac13, 0xfac14, 0xfac0c]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0) 7m39.654278532s ago: executing program 42 (id=1259): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000020000000b00000001000006040000000500000001ffffff070000000000000e0300000003000000000000000400000d0000000001000000000000000b000000040000000c0000000100000006000000020000000400000013070000000a000000800000000008000009000000005700000500000001000000c4"], 0x0, 0x9a, 0x0, 0x0, 0x5}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000100)="b9ff03", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 3m57.883695096s ago: executing program 3 (id=1961): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x400005, 0x0, 0x0, 0x41000, 0x88}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 3m57.14384246s ago: executing program 3 (id=1966): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 3m54.283937899s ago: executing program 3 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) 3m52.963148812s ago: executing program 3 (id=1980): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980), 0x0, 0x20002040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m50.023109581s ago: executing program 3 (id=1985): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 3m34.833251875s ago: executing program 43 (id=1985): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 3m19.736039012s ago: executing program 8 (id=2037): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x8, 0x80000006, 0x2, 0x40, 0x3, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x141800, 0xd, 0x2, 0x80000107, 0x6, 0x5, 0x0, 0x3, 0x3}) 3m18.615485745s ago: executing program 8 (id=2039): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) 3m3.755186752s ago: executing program 8 (id=2067): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980), 0x0, 0x20002040) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) 2m58.989792041s ago: executing program 8 (id=2075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_pidfd_open(0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)="000006020200", 0x6, 0xfffffffffffffffb) 2m57.358999738s ago: executing program 8 (id=2077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@data_ordered}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r8, &(0x7f0000001940)=""/4120, 0x1018) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2m57.358691748s ago: executing program 0 (id=2078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000000340)=""/19, 0x13, 0x0) 2m53.105169781s ago: executing program 8 (id=2084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x401) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pause() r4 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000080)={0x1008, r5}, 0x0) 2m52.679852841s ago: executing program 0 (id=2085): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000240)) 2m50.41131976s ago: executing program 0 (id=2088): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3c1rHGUYAPBnNps0bapJoRT1IIUerNRuvvyoILQeRYsFvdcl2YaQTbdkN6WJBduDvXgrgogF8Sp491j8B/wrClooUoIeRIjMZjZN0t3NR5Numv39YJL33ZnZd56ded59Z2aXDaBrnUz/5CJejehPi4Nr5uUjm3lyZbmlxzcn0imJ5eXP/koiyR5rLJ9k/weyyisR8dvXEWdyT7dbXVicKZbLpbmsPlybvTZcXVg8Oz1bnCpNla6OjY+fe2d87P333t21WN+89M/3n97/6Nw3p5a+++XhsbtJXIij2by1cTyDW2srJ4v/ZaXeuLBhwdFdaGw/STq9AexIT5bnvZH2AYPRk2U9cPB9FRHLQJdK5D90qcY4oHFuv0vnwS+MRx+unADVY+9bG39+5dpI9NfPjY4sJevOjNLz3aFdaD9t49c/791Np2h/HeLwJnWAbbl1OyJG8vmn+/8k6/92bqR+8bi9jW102/sPdNL9dPzzVrPxX251/BNNxj8DTXJ3JzbP/9zDXWimpXT890HT8e9q1zXUk9Veqo/5epMrA+XSSES8HBGnI+LKdLk02r9yDb2Zc0sPllu1v3b8l05p+42xYLYdD/OH1q8zWawVI6LvWWNPPbod8Vq+WfzJ6v5Pmuz/9PW4tMU2TpTuvd5q3ubx763lnyLeaLr/n9zRStrfnxxO9//Iyt+mbfx958TvrdrvdPzp/j/SPv6hZO392ur22/ix/99Sq3kt41892Jof/33J5/VyIwluFGu1udGIvuSTpx8fe7Juo95YPo3/9Kn2/V+z4z89+fpii/HfOX6n5aL7Yf9Pbmv/byykr0SLWVnhwcdf/tCq/a31f2/XS6ezR7L+r7nsWGmzOesKz/r6AQAAAAAAwH6Si4ijkeQKq+VcrlBY+XzH8TiSK1eqtTNXKvNXJ6P+Xdmh6M017nQPNj4PMV0ujWafh23UxzbUxyPiWER823O4Xi9MVMqTnQ4eAAAAAAAAAAAAAAAAAAAA9omBFt//T/3R0+mtA/Zc/YcNDnV6K4BO2PQn/3fjl56AfWnT/AcOrHX5n3RuO4Dnz/s/dC/5D91L/kP3kv/QveQ/dK+t5P+F57AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEBcungxnZaXHt+cSOuT1xfmZyrXz06WqjOF2fmJwkRl7lphqlKZKpcKE5XZiBhs93zlSuXa6FjM3xiulaq14erC4uXZyvzV2uXp2eJU6XKp97lFBgAAAAAAAAAAAAAAAAAAAC+O6sLiTLFcLs0diMLP+b145vPR6bj2uHA+4lZ6MOxo9fx+iUKhReF2luvbW6uz/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPV/AAAA///HtTBf") chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) unlink(&(0x7f0000000040)='./file1\x00') 2m49.031812574s ago: executing program 0 (id=2091): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) 2m45.5271938s ago: executing program 0 (id=2095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@data_ordered}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r8, &(0x7f0000001940)=""/4120, 0x1018) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2m43.463991271s ago: executing program 0 (id=2098): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980), 0x0, 0x20002040) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) 2m37.587722795s ago: executing program 44 (id=2084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x401) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pause() r4 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000080)={0x1008, r5}, 0x0) 2m28.069554579s ago: executing program 45 (id=2098): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980), 0x0, 0x20002040) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) 58.13966554s ago: executing program 7 (id=2363): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan1\x00') 57.985232864s ago: executing program 7 (id=2366): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 57.817054394s ago: executing program 7 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r1, 0x11, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000820) 56.423021178s ago: executing program 7 (id=2373): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004840)={0x2020}, 0x2020) 55.927404698s ago: executing program 7 (id=2377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) personality(0x619641b6fb4b8591) 55.247348182s ago: executing program 7 (id=2383): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xffffeff7, 0x10100150, 0x8, 0x8, 0x2f, "fc2aff7f87680000810000001000007fcb3678", 0x0, 0xd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) 54.656672239s ago: executing program 46 (id=2383): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xffffeff7, 0x10100150, 0x8, 0x8, 0x2f, "fc2aff7f87680000810000001000007fcb3678", 0x0, 0xd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) 35.730617352s ago: executing program 6 (id=2443): syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x9}, 0x2}}}, 0x7) 35.286882355s ago: executing program 6 (id=2444): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x34, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0xd, 0x10, 0x7, 0x0, 0x3, {[@sack={0x5, 0x6, [0xffffffff]}, @generic={0x5, 0x7, "267f6fcc76"}, @md5sig={0x13, 0x12, "86e4b4924921a124842d7b8dcd076bd8"}, @nop]}}}}}}}}, 0x0) 34.656251274s ago: executing program 6 (id=2447): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000300), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 33.983137618s ago: executing program 6 (id=2450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 31.449071283s ago: executing program 6 (id=2456): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) getpgrp(0x0) 30.686891074s ago: executing program 6 (id=2464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r3, 0x10, 0x100, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000006c0)="00010000", &(0x7f0000000700)=""/8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, r4) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x4008004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x40) 29.752275167s ago: executing program 47 (id=2464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r3, 0x10, 0x100, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000006c0)="00010000", &(0x7f0000000700)=""/8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, r4) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x4008004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x40) 17.496788416s ago: executing program 2 (id=2512): timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 14.112129052s ago: executing program 2 (id=2521): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 12.785758497s ago: executing program 2 (id=2522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@data_ordered}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r8, &(0x7f0000001940)=""/4120, 0x1018) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 11.867753967s ago: executing program 5 (id=2527): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syslog(0x3, 0xfffffffffffffffe, 0x13) 11.57470532s ago: executing program 5 (id=2529): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0xc000400) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futimesat(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081"]) 9.943215407s ago: executing program 1 (id=2532): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 8.556899428s ago: executing program 1 (id=2533): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002700)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x68b, &(0x7f0000002040)="$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") 8.468317798s ago: executing program 4 (id=2534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x67, 0x4) 8.35482364s ago: executing program 5 (id=2536): unshare(0x24060400) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="97452a307eb403000b000000e0004a9b8f52ac8e5c7f00003326491f", 0x1c}], 0x18, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804) 7.70273988s ago: executing program 4 (id=2539): ioperm(0x1, 0x81, 0x100) shmget$private(0x0, 0x3be4d8b4000, 0x0, &(0x7f0000fff000/0x1000)=nil) 6.521612062s ago: executing program 2 (id=2540): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000100)={'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) 6.242582338s ago: executing program 4 (id=2541): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff000000009500740000400000205d7ff33fed1ea2cef2199a26a4dcf4ee765868dea1f71b6ef0631c9a3f0e85a5c8cd6f8d9b12f7dff133c2be3d62c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.947171514s ago: executing program 4 (id=2543): r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x924) ppoll(&(0x7f0000000280)=[{r0, 0x204a}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 5.587222121s ago: executing program 4 (id=2545): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 4.277928177s ago: executing program 4 (id=2546): syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030372c6e6f7374726963742c7569643d69676e6f72652c6769643d666f726765742c6c6f6e6761642c6e6f7672732c756e64656c6574652c6d6f64653d30303030303030303030303030303030303033353031362c646d6f64653d30303030303030303030303030303030303030303031312c00e3cc6abaa52ef118fcbe734b47a6bf66bdd357c81c22ed4c07659e40ba6f24e50fafda55f8d6b01f7fa9505996c5c8e5fac082523b41c69e892f8f3372228da85b089c449c8243489693fc724dc3a34a1c85226b306f86ba0484aad17849d21905b8e3dbc20bf4c98777720c05637db44ef1224790223b183be4cbccef28b6dc7701cf3b6d45babe7a0177b34116f8033c0614d351a01526a5e4626159b2d7a3176575b87ce23efc23d6fc182ecb01ea4d182720d93ab9a99e432ce3c68dcdeec61f9cc21345ccd818e18d6d9c4bb97e0f79e4cfb80641"], 0x1, 0xc57, &(0x7f0000001a00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) 3.201383267s ago: executing program 5 (id=2548): creat(&(0x7f0000000000)='./file0\x00', 0x6a) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c081, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.131276584s ago: executing program 9 (id=2549): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x4e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 2.978273403s ago: executing program 1 (id=2550): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@usefree}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@shortname_mixed}, {@fat=@tz_utc}, {@utf8no}, {@utf8}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) 2.878239923s ago: executing program 5 (id=2551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@data_ordered}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r8, &(0x7f0000001940)=""/4120, 0x1018) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2.767158611s ago: executing program 9 (id=2552): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0xfa2, 0xdc, 0x6cf}) 2.584470927s ago: executing program 1 (id=2553): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x800, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 1.428314542s ago: executing program 9 (id=2554): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x1}, 0x1, 0x1, 0x10000}) 1.286482635s ago: executing program 5 (id=2555): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0x6}, {0x0, 0x2}, {}, @queue={0x0, {0x4, 0x4}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 1.143265817s ago: executing program 2 (id=2556): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x120040a, &(0x7f0000000240), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x26) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 1.136145526s ago: executing program 9 (id=2557): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 744.700736ms ago: executing program 1 (id=2558): socket(0x10, 0x803, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6000200e}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) 531.129479ms ago: executing program 2 (id=2559): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7, 0x10, 0x5}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 497.613654ms ago: executing program 9 (id=2560): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 141.79686ms ago: executing program 9 (id=2561): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\r5\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsG\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4o\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x01\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\x97q\xa0\xd3\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x8000, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x11, r2, 0xf1a2000) 131.430822ms ago: executing program 1 (id=2562): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x80200) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000dea000/0x2000)=nil, &(0x7f000069c000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000bdf000/0x3000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x37f, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x40007, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 3 (id=2465): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x2, 0x0, 0x5a6c103, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x4}) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): 2] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.475412][T14772] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 960.759481][T14772] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.1900: lblock 23 mapped to illegal pblock 18 (length 1) [ 962.277411][T12236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.899859][ T4941] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 964.229858][T14813] loop6: detected capacity change from 0 to 1024 [ 964.287924][T14813] hfsplus: failed to load extents file [ 964.336006][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 964.336026][ T30] audit: type=1326 audit(1777905631.381:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.1875" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 964.414289][T14818] loop7: detected capacity change from 0 to 128 [ 964.460547][T14818] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 964.495331][ T30] audit: type=1326 audit(1777905631.391:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.1875" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 964.642940][ T30] audit: type=1326 audit(1777905631.391:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.1875" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 964.801292][ T30] audit: type=1326 audit(1777905631.401:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.1875" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 964.877685][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'. [ 964.916857][ T30] audit: type=1326 audit(1777905631.441:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.1875" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 964.965095][ T30] audit: type=1326 audit(1777905631.451:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.1875" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 965.046221][ T5788] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 965.196161][ T5788] usb 9-1: Using ep0 maxpacket: 32 [ 965.210801][ T5788] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.230374][ T5788] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.293172][ T5788] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 965.312406][ T13] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 965.313468][ T5788] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 965.356709][ T5788] usb 9-1: Product: syz [ 965.371541][ T5788] usb 9-1: Manufacturer: syz [ 965.402055][ T5788] hub 9-1:4.0: USB hub found [ 967.486256][ T990] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 967.728376][ T5788] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 968.002532][ T990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 968.075080][ T990] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 968.119461][ T990] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 968.174246][ T990] usb 4-1: config 63 has no interface number 0 [ 968.203826][ T990] usb 4-1: config 63 interface 66 has no altsetting 0 [ 968.240293][ T990] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 968.273113][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.287302][ T802] usb 9-1: USB disconnect, device number 3 [ 968.296851][ T990] usb 4-1: Product: syz [ 968.311991][ T990] usb 4-1: Manufacturer: syz [ 968.324283][ T990] usb 4-1: SerialNumber: syz [ 968.330098][T14870] loop6: detected capacity change from 0 to 128 [ 968.408281][T14870] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 968.588412][T14870] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 968.643271][ T990] usb 4-1: can't set config #63, error -71 [ 968.683095][ T990] usb 4-1: USB disconnect, device number 4 [ 968.752578][T14870] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes [ 969.017313][T12552] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 969.265729][T14884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.351582][T14884] team0: Port device bond0 added [ 971.011588][T14907] binder: 14906:14907 ioctl c018620c 200000000080 returned -1 [ 972.764302][T14921] loop8: detected capacity change from 0 to 1024 [ 972.861936][T14921] hfsplus: failed to load attributes file [ 973.778653][T14940] netlink: 'syz.5.1947': attribute type 21 has an invalid length. [ 973.831950][T14940] IPv6: NLM_F_CREATE should be specified when creating new route [ 973.872151][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1947'. [ 975.217267][T14955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.368607][T14962] loop6: detected capacity change from 0 to 16 [ 975.415465][T14962] erofs (device loop6): invalid ishare xattr prefix id 0 [ 975.600980][T14966] loop5: detected capacity change from 0 to 128 [ 975.721443][T14972] lo: Caught tx_queue_len zero misconfig [ 975.923002][T14969] loop8: detected capacity change from 0 to 2048 [ 976.404872][T14987] loop5: detected capacity change from 0 to 1024 [ 976.465693][T14987] hfsplus: failed to load extents file [ 982.109163][T15063] loop8: detected capacity change from 0 to 512 [ 983.912445][T15063] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.1983: Directory hole found for htree index block 0 [ 983.946616][T15063] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 983.954013][T15063] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 983.963263][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 983.963290][ C0] EXT4-fs (loop8): initial error at time 1777905651: dx_probe:791: inode 2 [ 983.963331][ C0] EXT4-fs (loop8): last error at time 1777905651: dx_probe:791: inode 2 [ 984.177816][T15063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.479358][T12199] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.353485][T15112] loop8: detected capacity change from 0 to 512 [ 989.367349][T15112] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 989.940632][T15113] binder: BINDER_SET_CONTEXT_MGR already set [ 989.946877][T15113] binder: 15111:15113 ioctl 4018620d 2000000002c0 returned -16 [ 992.061816][T15135] loop7: detected capacity change from 0 to 512 [ 992.096928][T10787] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 992.121694][T15135] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 992.192222][T15135] EXT4-fs (loop7): 1 truncate cleaned up [ 992.201350][T15135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.286700][T10787] usb 7-1: Using ep0 maxpacket: 16 [ 992.320133][T10787] usb 7-1: config 0 has an invalid interface number: 40 but max is 0 [ 992.360080][T10787] usb 7-1: config 0 has no interface number 0 [ 993.197828][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.203942][T10787] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 1.d8 [ 993.212428][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.214272][T10787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.265499][T10787] usb 7-1: Product: syz [ 993.285605][T10787] usb 7-1: Manufacturer: syz [ 993.289469][T12149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.341561][T10787] usb 7-1: SerialNumber: syz [ 993.440461][T10787] usb 7-1: config 0 descriptor?? [ 993.490530][T10787] usb-storage 7-1:0.40: USB Mass Storage device detected [ 995.451125][T10787] usb-storage 7-1:0.40: Quirks match for vid 054c pid 002e: 1 [ 995.543942][T15152] loop6: detected capacity change from 0 to 512 [ 995.619726][T15152] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 996.210627][T15153] binder: BINDER_SET_CONTEXT_MGR already set [ 996.216885][T15153] binder: 15151:15153 ioctl 4018620d 2000000002c0 returned -16 [ 997.338911][T10787] usb 7-1: USB disconnect, device number 4 [ 997.419399][T14323] udevd[14323]: setting owner of /dev/bus/usb/007/004 to uid=0, gid=0 failed: No such file or directory [ 1000.251176][ T5654] Bluetooth: hci5: command 0x0406 tx timeout [ 1000.288448][T15191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1000.301125][T15191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1000.312191][T15191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1000.320269][T15191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1000.328004][T15191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1003.680308][T15191] Bluetooth: hci6: command tx timeout [ 1005.735160][T15226] loop2: detected capacity change from 0 to 7 [ 1005.746329][T15191] Bluetooth: hci6: command tx timeout [ 1005.828041][T15226] Dev loop2: unable to read RDB block 7 [ 1005.845275][T15226] loop2: unable to read partition table [ 1005.891525][T15226] loop2: partition table beyond EOD, truncated [ 1005.913124][T15226] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1005.996201][T10784] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1006.212944][T10784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.264012][T10784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.321829][T10784] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1006.385210][T10784] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1006.420795][T10784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.468514][T10784] usb 7-1: config 0 descriptor?? [ 1006.902306][T14478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.011400][T10784] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1007.856197][T15191] Bluetooth: hci6: command tx timeout [ 1007.980777][T14478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.458692][T14478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.814435][T14478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.519543][T15191] Bluetooth: hci6: command tx timeout [ 1010.777793][ T5634] usb 7-1: USB disconnect, device number 5 [ 1015.432480][T15290] loop6: detected capacity change from 0 to 512 [ 1015.498353][T15290] FAT-fs (loop6): Directory bread(block 199916) failed [ 1015.570323][T15290] FAT-fs (loop6): Directory bread(block 199917) failed [ 1015.627652][T15290] FAT-fs (loop6): Directory bread(block 199918) failed [ 1015.675522][T15290] FAT-fs (loop6): Directory bread(block 199919) failed [ 1015.713058][T15290] FAT-fs (loop6): Directory bread(block 199920) failed [ 1015.743583][T15290] FAT-fs (loop6): Directory bread(block 199921) failed [ 1016.270920][T15290] FAT-fs (loop6): Directory bread(block 199922) failed [ 1016.371649][T15290] FAT-fs (loop6): Directory bread(block 199923) failed [ 1016.614911][T15290] FAT-fs (loop6): Directory bread(block 199916) failed [ 1016.642265][T15290] FAT-fs (loop6): Directory bread(block 199917) failed [ 1017.302818][T14478] bridge_slave_1: left allmulticast mode [ 1017.339040][T14478] bridge_slave_1: left promiscuous mode [ 1017.382410][T14478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.454661][T14478] bridge_slave_0: left allmulticast mode [ 1017.498740][T14478] bridge_slave_0: left promiscuous mode [ 1017.530541][T14478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.708089][T15311] loop7: detected capacity change from 0 to 1 [ 1017.734552][T15295] netlink: 'syz.8.2039': attribute type 6 has an invalid length. [ 1017.786157][T15311] syz.7.2042: attempt to access beyond end of device [ 1017.786157][T15311] loop7: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1017.904428][T15311] SQUASHFS error: Failed to read block 0x0: -5 [ 1017.978102][T15311] unable to read squashfs_super_block [ 1018.136825][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2042'. [ 1018.884018][T15336] binder: 15335:15336 ioctl c0306201 0 returned -14 [ 1018.932196][T15336] loop5: detected capacity change from 0 to 512 [ 1018.971981][T15336] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1019.574222][T15340] binder: 15335:15340 ioctl c0306201 200000000680 returned -14 [ 1022.807642][T14478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.883838][T15350] loop7: detected capacity change from 0 to 1764 [ 1022.887843][T14478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.895060][T15350] iso9660: Bad value for 'sbsector' [ 1022.965140][T14478] bond0 (unregistering): Released all slaves [ 1023.357351][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.409106][T15188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.439291][T15188] bridge_slave_0: entered allmulticast mode [ 1023.471371][T15188] bridge_slave_0: entered promiscuous mode [ 1025.146309][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.173898][T15188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.207416][T15188] bridge_slave_1: entered allmulticast mode [ 1025.234786][T15188] bridge_slave_1: entered promiscuous mode [ 1025.634602][T15188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.692822][T15188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.964562][T14478] hsr_slave_0: left promiscuous mode [ 1026.028777][T14478] hsr_slave_1: left promiscuous mode [ 1026.057150][T14478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.071851][T14478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.090255][T14478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.118364][T14478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.170445][T14478] veth1_macvtap: left promiscuous mode [ 1026.185177][T14478] veth0_macvtap: left promiscuous mode [ 1026.202671][T14478] veth1_vlan: left promiscuous mode [ 1026.219989][T14478] veth0_vlan: left promiscuous mode [ 1026.662165][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'. [ 1027.088161][T14478] team0 (unregistering): Port device team_slave_1 removed [ 1027.140240][T14478] team0 (unregistering): Port device team_slave_0 removed [ 1027.248896][T15365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.712510][T15188] team0: Port device team_slave_0 added [ 1027.737828][T15188] team0: Port device team_slave_1 added [ 1027.960072][T15188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.005031][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.029870][T15381] binder: 15379:15381 ioctl c0306201 0 returned -14 [ 1028.127752][T15381] loop5: detected capacity change from 0 to 512 [ 1028.144239][T15188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.207633][T15188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.235572][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.266336][T15381] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1028.830116][T15385] binder: 15379:15385 ioctl c0306201 200000000680 returned -14 [ 1029.964434][T15188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.496422][T15188] hsr_slave_0: entered promiscuous mode [ 1030.503160][T15188] hsr_slave_1: entered promiscuous mode [ 1031.649730][T15188] debugfs: 'hsr0' already exists in 'hsr' [ 1032.236168][T15188] Cannot create hsr debugfs directory [ 1035.010588][T15411] loop6: detected capacity change from 0 to 1024 [ 1035.328375][T15411] hfsplus: failed to load extents file [ 1035.795846][T15420] dns_resolver: Unsupported server list version (6) [ 1037.434894][T15431] loop7: detected capacity change from 0 to 256 [ 1038.689987][T15424] loop8: detected capacity change from 0 to 512 [ 1038.922665][T15424] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 1039.634592][T15436] binder: 15423:15436 ioctl c0306201 200000000680 returned -14 [ 1042.895382][T15188] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1042.963093][T15188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.005999][T15188] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1043.070964][T15188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1043.108724][T15188] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1043.179672][T15188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1043.229749][T15188] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1043.287739][T15188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1043.885567][T15188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.019591][T15188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.098357][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.105559][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.206065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.213336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.072090][T15494] loop5: detected capacity change from 0 to 4096 [ 1048.080554][T15494] EXT4-fs: inline encryption not supported [ 1048.113596][T15494] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1048.127813][T15494] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1048.136023][T15494] System zones: 0-5 [ 1048.146182][T15494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.184757][T15493] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2087: bg 0: block 32: padding at end of block bitmap is not set [ 1048.208425][T15493] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -28 [ 1048.298292][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.989575][T15188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.243755][T15534] loop6: detected capacity change from 0 to 512 [ 1053.294262][T15188] veth0_vlan: entered promiscuous mode [ 1053.385980][T15188] veth1_vlan: entered promiscuous mode [ 1053.421378][T15534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.500149][T15542] capability: warning: `syz.7.2082' uses 32-bit capabilities (legacy support in use) [ 1053.549606][T15534] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.584124][T15188] veth0_macvtap: entered promiscuous mode [ 1053.668677][T15188] veth1_macvtap: entered promiscuous mode [ 1053.795496][T15188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.104397][T15188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.170185][T12552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.190340][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.248550][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.333436][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.347627][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.389023][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.478519][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.882075][T15556] loop7: detected capacity change from 0 to 512 [ 1054.929403][T15556] ext4: Unknown parameter 'fowner<00000000000000000000' [ 1056.211088][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.264671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.690749][ T3304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.749064][ T3304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.176963][ T4941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1057.195299][ T4941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1057.215015][ T4941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1057.223246][ T4941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1057.232192][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1057.795780][T15580] loop7: detected capacity change from 0 to 2048 [ 1057.835553][T15580] EXT4-fs: Ignoring removed nobh option [ 1057.999417][T15583] loop6: detected capacity change from 0 to 512 [ 1058.034268][T15580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.137560][T15583] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 1058.160503][T15580] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.831020][T15597] binder: 15581:15597 ioctl c0306201 200000000680 returned -14 [ 1059.952987][T15191] Bluetooth: hci1: command tx timeout [ 1060.050894][ T30] audit: type=1800 audit(1777905727.091:282): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2110" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1060.194778][T15603] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz.7.2110: invalid fast symlink length 39 [ 1061.869403][ T30] audit: type=1800 audit(1777905727.091:283): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2110" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1061.986659][T15191] Bluetooth: hci1: command tx timeout [ 1062.376305][T12149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.346243][ T802] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1063.566365][ T802] usb 10-1: Using ep0 maxpacket: 8 [ 1063.641579][ T802] usb 10-1: config 3 has an invalid interface number: 45 but max is 0 [ 1063.675871][ T802] usb 10-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1063.711439][ T802] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.730881][T11536] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1063.761764][ T802] usb 10-1: config 3 has no interface number 0 [ 1063.796462][ T802] usb 10-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1063.839931][ T802] usb 10-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1063.892328][ T802] usb 10-1: config 3 interface 45 has no altsetting 0 [ 1063.928640][ T802] usb 10-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1063.940537][T11536] usb 8-1: Using ep0 maxpacket: 32 [ 1063.954624][ T802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.976736][T11536] usb 8-1: config 2 has an invalid interface number: 194 but max is 0 [ 1064.015994][T11536] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.028938][ T802] usb 10-1: Product: syz [ 1064.057359][ T802] usb 10-1: Manufacturer: syz [ 1064.066495][T15191] Bluetooth: hci1: command tx timeout [ 1064.083796][ T802] usb 10-1: SerialNumber: syz [ 1064.100784][T11536] usb 8-1: config 2 has no interface number 0 [ 1064.124202][T11536] usb 8-1: config 2 interface 194 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.144932][T11536] usb 8-1: config 2 interface 194 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1064.171738][T11536] usb 8-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1064.190390][T11536] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.459944][T11536] usb 8-1: string descriptor 0 read error: -71 [ 1064.772476][T11536] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1064.813829][ T802] usb 10-1: USB disconnect, device number 3 [ 1065.085282][T14288] udevd[14288]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.172788][T14479] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.451366][T11536] usb 8-1: USB disconnect, device number 3 [ 1066.059583][T11536] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1066.146473][T15191] Bluetooth: hci1: command tx timeout [ 1066.216170][T11536] usb 8-1: Using ep0 maxpacket: 8 [ 1066.298127][T11536] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.364126][T11536] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1066.432758][T11536] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.457083][T14479] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.528761][T11536] usb 8-1: config 0 descriptor?? [ 1066.547833][T15658] loop5: detected capacity change from 0 to 512 [ 1066.611236][T11536] rndis_host 8-1:0.0: rndis: master #0/ffff888052b4d000 slave #1/0000000000000000 [ 1066.648021][T15658] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1067.303727][T15661] binder: 15657:15661 ioctl c0306201 200000000680 returned -14 [ 1068.497324][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1068.502497][T11536] usb 8-1: USB disconnect, device number 4 [ 1068.518036][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1068.533935][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1068.555334][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1068.570636][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1070.635835][T15191] Bluetooth: hci0: command tx timeout [ 1071.101252][T14479] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.332639][T15676] IPv6: addrconf: prefix option has invalid lifetime [ 1071.780727][T14479] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.907814][T15684] loop7: detected capacity change from 0 to 1024 [ 1072.030425][T15684] hfsplus: failed to load attributes file [ 1072.707157][T15191] Bluetooth: hci0: command tx timeout [ 1072.878583][T15571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.909516][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.949540][T15571] bridge_slave_0: entered allmulticast mode [ 1072.989524][T15571] bridge_slave_0: entered promiscuous mode [ 1073.038350][T15571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.078095][T15705] loop7: detected capacity change from 0 to 16 [ 1073.095307][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.140899][T15571] bridge_slave_1: entered allmulticast mode [ 1073.153736][T15705] erofs (device loop7): mounted with root inode @ nid 36. [ 1073.217552][T15571] bridge_slave_1: entered promiscuous mode [ 1073.285734][T15705] syz.7.2132: attempt to access beyond end of device [ 1073.285734][T15705] loop7: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1073.381296][T15705] syz.7.2132: attempt to access beyond end of device [ 1073.381296][T15705] loop7: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1073.487901][ T30] audit: type=1800 audit(1777905740.541:284): pid=15705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2132" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1073.847494][T15571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.144284][T14479] bridge_slave_1: left allmulticast mode [ 1074.166728][T14479] bridge_slave_1: left promiscuous mode [ 1074.186161][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.233445][T14479] bridge_slave_0: left allmulticast mode [ 1074.249579][T14479] bridge_slave_0: left promiscuous mode [ 1074.278324][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.437779][T15734] loop6: detected capacity change from 0 to 512 [ 1074.469530][T15734] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 1075.024812][T15736] binder: 15733:15736 ioctl c0306201 200000000680 returned -14 [ 1076.148143][T15191] Bluetooth: hci0: command tx timeout [ 1076.154405][ T4941] Bluetooth: hci5: command 0x0406 tx timeout [ 1076.814150][T14479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.858867][T14479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.894699][T14479] bond0 (unregistering): Released all slaves [ 1076.926934][T15571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.324983][T15757] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1077.600438][T15768] loop9: detected capacity change from 0 to 512 [ 1077.691253][T15571] team0: Port device team_slave_0 added [ 1077.830888][T15773] loop5: detected capacity change from 0 to 512 [ 1077.848730][T15773] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1077.862451][T15773] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1077.882657][T15773] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 1077.911598][T15773] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1077.927345][T15773] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2144: Failed to acquire dquot type 1 [ 1077.939148][T15773] loop5: lost filesystem error report for type 5 error -5 [ 1077.946111][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1077.959742][ C1] EXT4-fs (loop5): initial error at time 1777905744: ext4_acquire_dquot:7034 [ 1077.968627][ C1] EXT4-fs (loop5): last error at time 1777905744: ext4_acquire_dquot:7034 [ 1077.989550][T15773] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2144: bg 0: block 40: padding at end of block bitmap is not set [ 1077.998330][T15571] team0: Port device team_slave_1 added [ 1078.004462][T15773] loop5: lost filesystem error report for type 5 error -117 [ 1078.012987][T15773] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1078.030680][T15773] loop5: lost filesystem error report for type 5 error -117 [ 1078.031314][T15773] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.2144: data will be lost [ 1078.053467][T15773] EXT4-fs (loop5): 1 truncate cleaned up [ 1078.068965][T15773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1078.151079][T15768] EXT4-fs (loop9): failed to open journal device unknown-block(2048,0) -6 [ 1079.860252][T15191] Bluetooth: hci0: command tx timeout [ 1079.915105][T15773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.034400][T15571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.055312][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.099546][T15800] loop5: detected capacity change from 0 to 1024 [ 1081.128459][T15571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.184151][T15800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.265152][T15800] EXT4-fs (loop5): shut down requested (1) [ 1081.379144][T15571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.421571][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.524732][T15571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.569852][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.652652][T14479] hsr_slave_0: left promiscuous mode [ 1081.694162][T14479] hsr_slave_1: left promiscuous mode [ 1081.721275][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.762832][T14479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.814976][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.854248][T14479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.990369][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2153'. [ 1082.013207][T14479] veth1_macvtap: left promiscuous mode [ 1082.032720][T14479] veth0_macvtap: left promiscuous mode [ 1082.045522][T14479] veth1_vlan: left promiscuous mode [ 1082.057989][T14479] veth0_vlan: left promiscuous mode [ 1083.938767][T15825] loop5: detected capacity change from 0 to 128 [ 1085.693971][T15825] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1085.858359][T15825] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.419951][T14479] team0 (unregistering): Port device team_slave_1 removed [ 1086.485149][T14479] team0 (unregistering): Port device team_slave_0 removed [ 1087.004441][T10060] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1087.279491][T15843] loop5: detected capacity change from 0 to 1024 [ 1087.401222][T15843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.498228][T15843] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.597427][ T30] audit: type=1800 audit(1777905754.641:285): pid=15843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2161" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1087.799547][T15571] hsr_slave_0: entered promiscuous mode [ 1087.819508][T15571] hsr_slave_1: entered promiscuous mode [ 1087.877342][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1087.900435][T15571] debugfs: 'hsr0' already exists in 'hsr' [ 1087.919577][T15571] Cannot create hsr debugfs directory [ 1088.366700][T15859] loop5: detected capacity change from 0 to 128 [ 1088.631128][T15864] syz.5.2164: attempt to access beyond end of device [ 1088.631128][T15864] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1088.776582][T15864] syz.5.2164: attempt to access beyond end of device [ 1088.776582][T15864] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1088.844129][T15864] syz.5.2164: attempt to access beyond end of device [ 1088.844129][T15864] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1088.858173][T15867] loop7: detected capacity change from 0 to 512 [ 1088.882329][T15867] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1088.902994][T15867] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1088.913581][T15864] syz.5.2164: attempt to access beyond end of device [ 1088.913581][T15864] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1088.948646][T15867] EXT4-fs (loop7): SIPHASH is not a valid default hash value [ 1089.019322][T15864] syz.5.2164: attempt to access beyond end of device [ 1089.019322][T15864] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1089.122246][T15864] syz.5.2164: attempt to access beyond end of device [ 1089.122246][T15864] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1089.268074][T15864] syz.5.2164: attempt to access beyond end of device [ 1089.268074][T15864] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1091.158695][T15660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.166026][T15660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.175399][T15660] bridge_slave_0: entered allmulticast mode [ 1091.190735][T15660] bridge_slave_0: entered promiscuous mode [ 1091.201534][ T3291] kworker/u8:9: attempt to access beyond end of device [ 1091.201534][ T3291] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1091.238082][ T3291] kworker/u8:9: attempt to access beyond end of device [ 1091.238082][ T3291] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1091.252271][T15660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.267744][ T3291] kworker/u8:9: attempt to access beyond end of device [ 1091.267744][ T3291] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1091.281383][T15660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.306562][T15660] bridge_slave_1: entered allmulticast mode [ 1091.334235][T15660] bridge_slave_1: entered promiscuous mode [ 1091.679689][T15660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.796916][T15890] loop5: detected capacity change from 0 to 512 [ 1091.859056][T15890] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1091.949541][T15890] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1091.995112][T15890] System zones: 0-1, 15-15, 18-18, 34-34 [ 1092.027423][T15890] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1092.048821][T15890] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1092.105567][T15890] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1092.148241][T15890] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1092.198736][T15890] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2172: bg 0: block 40: padding at end of block bitmap is not set [ 1093.717314][T14479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.819765][T15890] loop5: lost filesystem error report for type 5 error -117 [ 1093.821686][T15890] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1093.829114][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1093.829138][ C1] EXT4-fs (loop5): initial error at time 1777905760: ext4_validate_block_bitmap:441 [ 1093.829170][ C1] EXT4-fs (loop5): last error at time 1777905760: ext4_validate_block_bitmap:441 [ 1093.917268][T15890] loop5: lost filesystem error report for type 5 error -117 [ 1093.936706][T15890] EXT4-fs (loop5): 1 truncate cleaned up [ 1094.032339][T15890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1094.119224][T15890] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.2172: bad symlink. [ 1094.185079][T15911] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.2172: bad symlink. [ 1094.392517][T15660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.408788][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.826721][T14479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.565499][T14479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.661936][T15660] team0: Port device team_slave_0 added [ 1095.703307][T15660] team0: Port device team_slave_1 added [ 1095.980474][T14479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.144209][T15948] loop7: detected capacity change from 0 to 512 [ 1097.169628][T15948] EXT4-fs: Ignoring removed orlov option [ 1097.208353][T15948] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 1097.254384][T15948] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2184: attempt to clear invalid blocks 2 len 1 [ 1097.300014][T15660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.312613][T15948] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1097.313845][T15948] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, [ 1097.323148][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1097.323174][ C1] EXT4-fs (loop7): initial error at time 1777905764: ext4_clear_blocks:876: inode 13 [ 1097.323204][ C1] EXT4-fs (loop7): last error at time 1777905764: ext4_clear_blocks:876: inode 13 [ 1097.360623][T15948] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1097.382474][T15660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.430868][T15948] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2184: invalid indirect mapped block 1819239214 (level 0) [ 1097.450302][T15660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.473730][T15660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.479008][T15948] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1097.489323][T15948] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2184: invalid indirect mapped block 1819239214 (level 1) [ 1097.493244][T15660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.566144][T15660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.589119][T15948] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1097.714461][T15948] EXT4-fs (loop7): 1 truncate cleaned up [ 1097.856775][T15948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.870557][T15660] hsr_slave_0: entered promiscuous mode [ 1097.906579][T15660] hsr_slave_1: entered promiscuous mode [ 1097.934792][T15660] debugfs: 'hsr0' already exists in 'hsr' [ 1097.961569][T15660] Cannot create hsr debugfs directory [ 1098.139432][T12149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.809615][T15966] loop5: detected capacity change from 0 to 1024 [ 1098.862474][T15966] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1098.968397][T15966] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1099.027724][T15966] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1099.152364][T15966] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #5: comm syz.5.2190: unexpected bad inode w/o EXT4_IGET_BAD [ 1099.236303][T15966] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 1099.240232][T15966] EXT4-fs (loop5): no journal found [ 1099.249436][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1099.249461][ C1] EXT4-fs (loop5): initial error at time 1777905766: ext4_get_journal_inode:5896: inode 5 [ 1099.249492][ C1] EXT4-fs (loop5): last error at time 1777905766: ext4_get_journal_inode:5896: inode 5 [ 1099.376553][T15966] EXT4-fs (loop5): can't get journal size [ 1099.431770][T15966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1099.452876][T15571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1099.499082][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.698598][T15571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1099.743940][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.974777][T15989] loop9: detected capacity change from 0 to 1024 [ 1100.019201][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.127022][T15989] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1100.148175][T11279] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1100.177459][T15571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1100.270698][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1100.317148][T15571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1100.368476][T15989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.408437][T11279] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1100.453275][T11279] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1100.469178][T15571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1100.511624][T11279] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1100.529670][T15995] loop5: detected capacity change from 0 to 512 [ 1100.563551][T15995] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1100.566982][T11279] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1100.584362][T15995] EXT4-fs (loop5): blocks per group (255) and clusters per group (8192) inconsistent [ 1100.633647][T14479] bridge_slave_1: left allmulticast mode [ 1100.640471][T14479] bridge_slave_1: left promiscuous mode [ 1100.662306][T11279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.662543][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.800166][T14479] bridge_slave_0: left allmulticast mode [ 1100.802823][T11279] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1100.841706][T14479] bridge_slave_0: left promiscuous mode [ 1100.871963][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.126863][T15188] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.266219][ T802] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1101.457353][ T802] usb 6-1: too many configurations: 53, using maximum allowed: 8 [ 1101.479390][ T802] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1101.526670][ T802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.568087][ T802] usb 6-1: Product: syz [ 1101.589704][ T802] usb 6-1: Manufacturer: syz [ 1101.610116][ T802] usb 6-1: SerialNumber: syz [ 1101.704543][T11279] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1101.848489][T11279] usb 7-1: USB disconnect, device number 6 [ 1102.299165][T14479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.354633][T14479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.400506][T14479] bond0 (unregistering): Released all slaves [ 1103.642812][T16022] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1103.672243][T16022] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1104.318570][T10784] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1104.486457][T10784] usb 10-1: Using ep0 maxpacket: 32 [ 1104.516890][T10784] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.530700][T10784] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1104.558781][T10784] usb 10-1: New USB device found, idVendor=0c24, idProduct=8601, bcdDevice=c2.57 [ 1104.569030][T10784] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.577292][T10784] usb 10-1: Product: syz [ 1104.584150][T10784] usb 10-1: Manufacturer: syz [ 1104.589978][T10784] usb 10-1: SerialNumber: syz [ 1104.597088][T14479] hsr_slave_0: left promiscuous mode [ 1104.610826][T14479] hsr_slave_1: left promiscuous mode [ 1104.644177][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.653612][T14479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.665073][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.675278][T14479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.723295][T14479] veth1_macvtap: left promiscuous mode [ 1104.734255][T14479] veth0_macvtap: left promiscuous mode [ 1104.744665][T14479] veth1_vlan: left promiscuous mode [ 1104.751029][T14479] veth0_vlan: left promiscuous mode [ 1105.071231][T10784] usb 10-1: USB disconnect, device number 4 [ 1105.632711][T14479] team0 (unregistering): Port device team_slave_1 removed [ 1105.670906][T14479] team0 (unregistering): Port device team_slave_0 removed [ 1105.975268][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2209'. [ 1106.012162][ T5286] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1106.065251][T16059] loop9: detected capacity change from 0 to 128 [ 1106.460466][T16066] loop6: detected capacity change from 0 to 512 [ 1106.523541][T16066] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1106.585755][ T802] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1106.639594][T16066] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2215: inode has both inline data and extents flags [ 1106.729961][ T802] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1106.759739][T16066] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1106.763572][T16066] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2215: couldn't read orphan inode 15 (err -117) [ 1106.772853][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1106.772876][ C0] EXT4-fs (loop6): initial error at time 1777905773: ext4_orphan_get:1397: inode 15 [ 1106.772914][ C0] EXT4-fs (loop6): last error at time 1777905773: ext4_orphan_get:1397: inode 15 [ 1106.818134][T16066] loop6: lost filesystem error report for type 5 error -117 [ 1106.826529][ T802] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1106.876193][T16066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.937728][ T802] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1106.995360][T15571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.025085][T16066] syz.6.2215 (pid 16066) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1107.032473][ T802] usb 6-1: USB disconnect, device number 9 [ 1107.064061][T16083] loop9: detected capacity change from 0 to 1024 [ 1107.137999][T16083] hfsplus: Bad value for 'session' [ 1107.332016][T12552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.516832][T11279] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1107.706254][T11279] usb 10-1: Using ep0 maxpacket: 32 [ 1107.708119][T15571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.734149][T11279] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.759962][ T5286] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1107.766440][T11279] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.780585][T14478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.787809][T14478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.819527][T11279] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1108.870229][T11279] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1108.885903][T11279] usb 10-1: Product: syz [ 1108.897322][T11279] usb 10-1: Manufacturer: syz [ 1108.953675][T16100] loop5: detected capacity change from 0 to 256 [ 1109.262139][T11279] hub 10-1:4.0: USB hub found [ 1109.357564][T11279] hub 10-1:4.0: 2 ports detected [ 1109.400225][T16100] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 1109.414062][ T206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.421272][ T206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.441295][T16100] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 1109.512445][T15660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1109.555406][T11279] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 1109.561628][T15660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1109.602884][T15660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1109.609522][T11279] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 1109.651139][T15660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1109.668090][T11279] usb 10-1: USB disconnect, device number 5 [ 1109.691911][T15660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1109.752064][T15660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1109.795461][T15660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1109.840721][T15660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.260203][T16122] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2228'. [ 1111.274833][T16122] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1111.624836][T15660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.707838][T16139] loop7: detected capacity change from 0 to 4096 [ 1111.760932][T15660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.794315][T16139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.826691][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.833961][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.904412][T16139] EXT4-fs (loop7): shut down requested (1) [ 1111.980909][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.988183][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.063483][T12149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.071611][T16157] loop5: detected capacity change from 0 to 2048 [ 1114.134666][T16157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1114.176263][ T802] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1115.946540][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.953031][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.983944][ T5286] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1116.024461][ T802] usb 10-1: device descriptor read/all, error -71 [ 1119.048255][ T4941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1119.063919][ T4941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1119.072237][ T4941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1119.084733][ T4941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1119.098384][ T4941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1119.436478][T16217] loop5: detected capacity change from 0 to 128 [ 1119.482382][T16217] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1119.505373][T16220] loop7: detected capacity change from 0 to 16 [ 1119.565385][T16217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1119.575370][T16220] erofs (device loop7): mounted with root inode @ nid 36. [ 1119.773111][T15660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.809904][ T4941] Bluetooth: hci4: command tx timeout [ 1121.912157][T16233] loop5: detected capacity change from 0 to 2048 [ 1121.957970][T16233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.267597][ T5286] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1123.270676][T16245] loop5: detected capacity change from 0 to 128 [ 1123.304470][T16245] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1123.342235][T16245] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.519445][T15660] veth0_vlan: entered promiscuous mode [ 1123.610841][T15660] veth1_vlan: entered promiscuous mode [ 1123.667519][T10060] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1123.881113][ T5286] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1123.926233][ T4941] Bluetooth: hci4: command tx timeout [ 1125.237263][T16259] loop5: detected capacity change from 0 to 8192 [ 1125.365900][T16259] loop5: p2 < > p3 p4 < > [ 1125.383544][T16269] loop7: detected capacity change from 0 to 256 [ 1125.396608][T16259] loop5: partition table partially beyond EOD, truncated [ 1125.422857][T16269] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1125.424347][T16259] loop5: p2 start 328960 is beyond EOD, truncated [ 1125.472307][T16269] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 1125.517704][T16259] loop5: p3 start 33572980 is beyond EOD, truncated [ 1125.734108][T16274] loop6: detected capacity change from 0 to 2048 [ 1125.848881][T16274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.861166][T16274] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.880593][T16274] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2257: bg 0: block 345: padding at end of block bitmap is not set [ 1125.985695][T12552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.999205][ T4941] Bluetooth: hci4: command tx timeout [ 1126.225965][T15191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1126.238695][T15191] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.249844][T15191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1126.259811][T15191] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1126.277298][T15191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1126.629706][T15649] udevd[15649]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1127.007123][T11536] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1127.636647][T11536] usb 7-1: Using ep0 maxpacket: 32 [ 1127.683865][T11536] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1127.709537][ T206] bridge_slave_1: left allmulticast mode [ 1127.716010][T11536] usb 7-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.735829][ T206] bridge_slave_1: left promiscuous mode [ 1127.749748][T11536] usb 7-1: config 64 has 0 interfaces, different from the descriptor's value: 2 [ 1127.764494][ T206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.788627][T11536] usb 7-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=cf.97 [ 1127.806245][T11536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.834756][ T206] bridge_slave_0: left allmulticast mode [ 1127.845178][T11536] usb 7-1: Product: syz [ 1127.866224][ T206] bridge_slave_0: left promiscuous mode [ 1127.866906][T11536] usb 7-1: Manufacturer: syz [ 1127.903051][ T206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.929870][T11536] usb 7-1: SerialNumber: syz [ 1128.066186][T15191] Bluetooth: hci4: command tx timeout [ 1128.138685][T16306] loop5: detected capacity change from 0 to 2048 [ 1128.204986][T16306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.511979][T15191] Bluetooth: hci1: command tx timeout [ 1128.613907][T11536] usb 7-1: USB disconnect, device number 7 [ 1129.462546][ T206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.514624][ T206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.555406][ T206] bond0 (unregistering): Released all slaves [ 1129.784359][T16327] loop6: detected capacity change from 0 to 128 [ 1131.277314][T15191] Bluetooth: hci1: command tx timeout [ 1132.026421][T16327] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1132.132981][T16327] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.528707][ T206] hsr_slave_0: left promiscuous mode [ 1132.566210][ T206] hsr_slave_1: left promiscuous mode [ 1132.600000][ T206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.630774][T12552] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1132.672591][ T206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.346482][T15191] Bluetooth: hci1: command tx timeout [ 1133.390165][T16367] loop7: detected capacity change from 0 to 512 [ 1133.424731][T16367] EXT4-fs (loop7): 1 truncate cleaned up [ 1133.443959][T16365] loop6: detected capacity change from 0 to 2048 [ 1133.472168][T16365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1133.805426][T16367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.966344][ T30] audit: type=1800 audit(1777905801.021:286): pid=16367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2272" name="file0" dev="loop7" ino=13 res=0 errno=0 [ 1134.023594][T16367] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz.7.2272: invalid fast symlink length 39 [ 1134.110411][T16367] EXT4-fs (loop7): Remounting filesystem read-only [ 1134.159842][T16336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19 [ 1134.668656][ T206] team0 (unregistering): Port device team_slave_1 removed [ 1135.632784][T15191] Bluetooth: hci1: command tx timeout [ 1135.777633][ T206] team0 (unregistering): Port device team_slave_0 removed [ 1135.933784][T12149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.616191][T11279] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1137.806678][T11279] usb 6-1: Using ep0 maxpacket: 16 [ 1137.817819][T11279] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1137.827202][T11279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.907344][T11279] usb 6-1: config 0 descriptor?? [ 1138.030787][T11279] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1138.216355][T11279] usb 6-1: Detected FT232B [ 1138.310872][T16425] veth5: entered promiscuous mode [ 1138.422058][T11279] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1138.435231][T16208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.464129][T11279] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1138.475589][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.499329][T16208] bridge_slave_0: entered allmulticast mode [ 1138.529910][T16208] bridge_slave_0: entered promiscuous mode [ 1138.571417][T16208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.589024][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.607161][T16208] bridge_slave_1: entered allmulticast mode [ 1138.625752][T16208] bridge_slave_1: entered promiscuous mode [ 1138.717980][T11536] usb 6-1: USB disconnect, device number 10 [ 1138.855953][T11536] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1138.904500][T16208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.918545][T11536] ftdi_sio 6-1:0.0: device disconnected [ 1139.024954][T16208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.606732][ T30] audit: type=1326 audit(1777905806.661:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16450 comm="syz.6.2290" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4592f9cdd9 code=0x7ffc0000 [ 1139.729771][T16208] team0: Port device team_slave_0 added [ 1139.801160][ T30] audit: type=1326 audit(1777905806.661:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16450 comm="syz.6.2290" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4592f9cdd9 code=0x7ffc0000 [ 1139.827884][T16208] team0: Port device team_slave_1 added [ 1141.503446][ T30] audit: type=1326 audit(1777905806.721:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16450 comm="syz.6.2290" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4592f9cdd9 code=0x7ffc0000 [ 1141.646314][ T30] audit: type=1326 audit(1777905806.721:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16450 comm="syz.6.2290" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4592f9cdd9 code=0x7ffc0000 [ 1141.711094][ T30] audit: type=1326 audit(1777905806.721:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16450 comm="syz.6.2290" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4592f9cdd9 code=0x7ffc0000 [ 1142.543521][T16284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.574715][T16284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.607220][T16284] bridge_slave_0: entered allmulticast mode [ 1142.630493][T16474] loop7: detected capacity change from 0 to 512 [ 1142.631995][T16284] bridge_slave_0: entered promiscuous mode [ 1142.679702][T16284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.698833][T16284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.726484][T16284] bridge_slave_1: entered allmulticast mode [ 1142.777493][T16284] bridge_slave_1: entered promiscuous mode [ 1142.889260][T16474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.956240][T16474] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.190277][T16208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.215986][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.292806][T16208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.329530][T12149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.388283][T16208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.418818][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.529611][T16208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.801229][ T30] audit: type=1326 audit(1777905810.851:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.6.2299" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4592f9cdd9 code=0x0 [ 1143.962374][T16284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.073907][T16208] hsr_slave_0: entered promiscuous mode [ 1144.099803][T16208] hsr_slave_1: entered promiscuous mode [ 1144.173631][T16284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.664539][T16284] team0: Port device team_slave_0 added [ 1144.726855][T16284] team0: Port device team_slave_1 added [ 1144.764271][T16508] loop9: detected capacity change from 0 to 2048 [ 1144.833993][T16508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1145.146388][T11536] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1145.362659][T11536] usb 7-1: config 2 has an invalid interface number: 248 but max is 1 [ 1145.413155][T11536] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.441616][T16520] loop9: detected capacity change from 0 to 128 [ 1145.457357][T11536] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1145.489187][T11536] usb 7-1: config 2 has no interface number 0 [ 1145.519931][T11536] usb 7-1: config 2 interface 248 has no altsetting 0 [ 1145.552024][T11536] usb 7-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=5c.09 [ 1145.585226][T11536] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1145.621944][T11536] usb 7-1: Manufacturer: syz [ 1145.833944][T16284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.866425][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.975243][T16284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.003083][ T802] usb 7-1: USB disconnect, device number 8 [ 1146.087063][T16284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.100999][T16534] loop7: detected capacity change from 0 to 128 [ 1146.118405][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.156373][T16534] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1146.211808][T16284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.334829][T16534] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1146.420029][ T206] bridge_slave_1: left allmulticast mode [ 1146.438667][ T206] bridge_slave_1: left promiscuous mode [ 1146.463472][ T206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.468479][T16534] ext2 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.503310][ T206] bridge_slave_0: left allmulticast mode [ 1146.503340][ T206] bridge_slave_0: left promiscuous mode [ 1146.506579][ T206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.053987][T12149] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1147.254605][T16543] loop6: detected capacity change from 0 to 1024 [ 1147.333434][T16543] EXT4-fs: Ignoring removed orlov option [ 1147.493166][T16543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.560771][ T206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.629299][T16556] loop5: detected capacity change from 0 to 2048 [ 1147.671923][ T206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.715978][T16556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1147.780019][ T206] bond0 (unregistering): Released all slaves [ 1148.189902][T12552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.505986][T16574] loop7: detected capacity change from 0 to 16 [ 1148.563548][T16284] hsr_slave_0: entered promiscuous mode [ 1148.628926][T16284] hsr_slave_1: entered promiscuous mode [ 1148.655137][T16284] debugfs: 'hsr0' already exists in 'hsr' [ 1148.691272][T16284] Cannot create hsr debugfs directory [ 1148.807096][T16574] erofs (device loop7): mounted with root inode @ nid 36. [ 1148.860963][ T206] hsr_slave_0: left promiscuous mode [ 1148.916229][ T206] hsr_slave_1: left promiscuous mode [ 1148.955371][ T206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.956512][T16574] bio_check_eod: 9 callbacks suppressed [ 1148.956531][T16574] syz.7.2320: attempt to access beyond end of device [ 1148.956531][T16574] loop7: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 1148.999670][ T206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.098781][ T206] veth1_vlan: left promiscuous mode [ 1149.110735][ T206] veth0_vlan: left promiscuous mode [ 1149.252236][T16574] syz.7.2320: attempt to access beyond end of device [ 1149.252236][T16574] loop7: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 1149.276218][T10601] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1149.450966][T10601] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 1149.461759][T16574] syz.7.2320: attempt to access beyond end of device [ 1149.461759][T16574] loop7: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 1149.487725][T10601] usb 6-1: config 0 has no interface number 0 [ 1149.508196][T10601] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1149.531400][T10601] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 129, changing to 4 [ 1149.533205][T16574] syz.7.2320: attempt to access beyond end of device [ 1149.533205][T16574] loop7: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 1149.546178][T10601] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 39133, setting to 1023 [ 1149.587989][T10601] usb 6-1: config 0 interface 11 has no altsetting 0 [ 1149.598263][T10601] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1149.625942][T10601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.671202][T10601] usb 6-1: config 0 descriptor?? [ 1149.680149][T16581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1149.710265][T10601] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 1149.736814][T10601] keyspan 6-1:0.11: unsupported endpoint type 1 [ 1149.764542][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 1149.775612][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 1149.809743][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 1149.849806][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 1149.866699][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 1149.882326][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 1149.912987][T10601] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1149.939621][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 1149.959837][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 1149.968691][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 1149.976787][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 1149.984607][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 1149.993088][T10601] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 1150.004548][T10601] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1150.040485][T10601] usb 6-1: USB disconnect, device number 11 [ 1150.085742][T10601] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1150.119320][T10601] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1150.159853][T10601] keyspan 6-1:0.11: device disconnected [ 1150.528682][ T206] team0 (unregistering): Port device team_slave_1 removed [ 1150.608063][ T206] team0 (unregistering): Port device team_slave_0 removed [ 1150.876529][T16599] loop5: detected capacity change from 0 to 2048 [ 1150.894895][T16599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1151.219657][T16605] loop7: detected capacity change from 0 to 8 [ 1151.234081][T16605] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1151.268403][T16605] SQUASHFS error: Failed to read block 0x0: -5 [ 1151.274856][T16605] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1151.283090][T16605] SQUASHFS error: Failed to read block 0x0: -5 [ 1151.319870][ T30] audit: type=1800 audit(1777905818.371:293): pid=16605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2332" name="file2" dev="loop7" ino=3 res=0 errno=0 [ 1151.375314][T16610] loop9: detected capacity change from 0 to 1024 [ 1151.394023][T16610] hfsplus: failed to load extents file [ 1151.765791][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2337'. [ 1151.795229][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2337'. [ 1152.216233][T10601] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1152.398367][T10601] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1152.419898][T10601] usb 8-1: config 0 has no interface number 0 [ 1153.409134][T10601] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1153.418912][T10601] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.426979][T10601] usb 8-1: Product: syz [ 1153.431142][T10601] usb 8-1: Manufacturer: syz [ 1153.435852][T10601] usb 8-1: SerialNumber: syz [ 1154.345284][T10601] usb 8-1: config 0 descriptor?? [ 1154.421438][T11279] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1154.543562][T16208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1154.588833][T10601] uvcvideo 8-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1154.592192][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1154.609291][T10601] uvcvideo 8-1:0.64: No valid video chain found. [ 1154.650473][T16208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1154.657738][T11279] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1154.682009][T11279] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.687022][T10601] usb 8-1: USB disconnect, device number 5 [ 1154.708236][T11279] usb 6-1: config 220 has no interface number 2 [ 1154.730203][T11279] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1154.748868][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1154.765545][T16208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1154.782637][T11279] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1154.810512][T11279] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1154.821567][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1154.837325][T11279] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1154.865120][T11279] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1154.899473][T11279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.930045][T11279] usb 6-1: Product: syz [ 1154.937781][T16208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1154.954743][T11279] usb 6-1: Manufacturer: syz [ 1154.961890][T11279] usb 6-1: SerialNumber: syz [ 1154.975134][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1155.240212][T11279] usb 6-1: selecting invalid altsetting 0 [ 1155.264836][T11279] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1155.303858][T11279] uvcvideo 6-1:220.0: No valid video chain found. [ 1155.359821][T11279] usb 6-1: selecting invalid altsetting 0 [ 1155.378178][T11279] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1155.416395][T11279] usb 6-1: USB disconnect, device number 12 [ 1155.648998][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1155.684251][T16697] binder: 16696:16697 ioctl c0306201 0 returned -14 [ 1155.953542][T16705] binder: 16702:16705 ioctl c018620c 200000000000 returned -22 [ 1157.388399][T16208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.578680][T16727] loop7: detected capacity change from 0 to 2048 [ 1157.680484][T16727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1157.791392][T16208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.935782][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.943103][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.990068][T16284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1158.033551][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.088848][T16284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1158.160064][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.200247][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.207524][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.365656][T16284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1158.415131][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1158.439306][T16284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1158.473713][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.536250][ T990] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1158.565157][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2381'. [ 1158.716179][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 1158.731791][ T990] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1158.754749][ T990] usb 7-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00 [ 1158.783310][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.807100][ T3341] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.821160][ T990] usb 7-1: Product: syz [ 1158.831058][ T990] usb 7-1: Manufacturer: syz [ 1158.841427][ T990] usb 7-1: SerialNumber: syz [ 1158.955752][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1159.060296][ T3341] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.090425][ T990] ftdi_sio 7-1:6.0: FTDI USB Serial Device converter detected [ 1159.128765][ T990] usb 7-1: Detected FT2232HP [ 1159.148233][ T990] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1159.175895][ T990] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1159.218170][ T990] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1159.265407][ T3341] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.275825][ T990] usb 7-1: USB disconnect, device number 9 [ 1159.315178][ T990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1159.363851][ T990] ftdi_sio 7-1:6.0: device disconnected [ 1159.569892][T16780] loop9: detected capacity change from 0 to 2048 [ 1159.587570][T11279] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1159.612280][T16780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1159.631875][ T3341] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.689206][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.709827][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.719695][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1159.737783][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1159.759229][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.779025][T11279] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.799148][T11279] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.811258][T11279] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1159.826861][T11279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1159.849832][T11279] usb 6-1: SerialNumber: syz [ 1160.004826][T16284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.117753][T11279] usb 6-1: cannot find UAC_HEADER [ 1160.218170][T16284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.370741][T11279] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1160.433546][T11279] usb 6-1: USB disconnect, device number 13 [ 1160.461331][ T206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.468600][ T206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.586318][T15649] udevd[15649]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.644683][T14281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.651937][T14281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.760130][T16809] loop9: detected capacity change from 0 to 1024 [ 1160.790302][ T3341] bridge_slave_1: left allmulticast mode [ 1160.795993][ T3341] bridge_slave_1: left promiscuous mode [ 1160.813981][T16809] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1160.840093][ T3341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.863261][T16809] hfsplus: failed to load attributes file [ 1160.875505][T16814] netlink: 'syz.5.2395': attribute type 153 has an invalid length. [ 1160.900000][ T3341] bridge_slave_0: left allmulticast mode [ 1160.915397][ T3341] bridge_slave_0: left promiscuous mode [ 1160.945693][ T3341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.051581][T15191] Bluetooth: hci0: command tx timeout [ 1163.468262][ T3341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.488874][ T3341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.509475][ T3341] bond0 (unregistering): Released all slaves [ 1163.531870][ T5286] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1163.547570][T16837] loop9: detected capacity change from 0 to 1024 [ 1163.583892][T16837] EXT4-fs: Ignoring removed orlov option [ 1163.693779][T16837] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 1163.763893][T16837] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1163.823425][T16837] EXT4-fs (loop9): invalid journal inode [ 1163.860832][T16837] EXT4-fs (loop9): can't get journal size [ 1163.940190][T16837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1164.089417][T16208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.264699][T15188] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.311317][T16859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2406'. [ 1164.447811][T16862] loop9: detected capacity change from 0 to 256 [ 1164.483148][T16862] exfat: Deprecated parameter 'utf8' [ 1164.495166][T16208] veth0_vlan: entered promiscuous mode [ 1164.533410][T16862] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1164.604116][ T3341] hsr_slave_0: left promiscuous mode [ 1164.648813][ T3341] hsr_slave_1: left promiscuous mode [ 1164.653130][T16866] loop5: detected capacity change from 0 to 1024 [ 1164.667984][ T3341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.700176][T16866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1164.700453][ T3341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.727625][ T3341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.735090][ T3341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.787059][ T3341] veth1_macvtap: left promiscuous mode [ 1164.801241][ T3341] veth0_macvtap: left promiscuous mode [ 1164.817698][ T3341] veth1_vlan: left promiscuous mode [ 1164.849059][ T3341] veth0_vlan: left promiscuous mode [ 1164.934623][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.094963][T16875] loop6: detected capacity change from 0 to 512 [ 1165.107301][T15191] Bluetooth: hci0: command tx timeout [ 1165.117395][T16875] EXT4-fs: Ignoring removed orlov option [ 1165.162172][T16879] loop5: detected capacity change from 0 to 512 [ 1165.174085][T16879] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1165.202042][T16875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.241198][T16879] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2410: corrupted in-inode xattr: e_value out of bounds [ 1165.259257][T16879] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1165.259757][T16879] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2410: couldn't read orphan inode 15 (err -117) [ 1165.269073][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1165.269096][ C0] EXT4-fs (loop5): initial error at time 1777905832: ext4_iget_extra_inode:5128: inode 15 [ 1165.269136][ C0] EXT4-fs (loop5): last error at time 1777905832: ext4_iget_extra_inode:5128: inode 15 [ 1165.308171][T16879] loop5: lost filesystem error report for type 5 error -117 [ 1165.339894][T16879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.387377][T12552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.455287][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.560337][T16886] loop5: detected capacity change from 0 to 1024 [ 1165.577992][T16886] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1165.617172][T16886] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.2413: lblock 2 mapped to illegal pblock 2 (length 1) [ 1165.632303][T16886] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1165.637240][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1165.652749][ C0] EXT4-fs (loop5): initial error at time 1777905832: ext4_map_blocks:791: inode 3: block 2 [ 1165.662808][ C0] EXT4-fs (loop5): last error at time 1777905832: ext4_map_blocks:791: inode 3: block 2 [ 1165.679383][T16886] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1165.689124][T16886] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.2413: lblock 0 mapped to illegal pblock 48 (length 1) [ 1165.716235][T16886] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1165.718378][T16886] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1165.755210][ T3341] team0 (unregistering): Port device team_slave_1 removed [ 1165.755493][T16886] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2413: Failed to acquire dquot type 0 [ 1165.774482][T16886] loop5: lost filesystem error report for type 5 error -117 [ 1165.776925][T16886] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1165.787155][ T3341] team0 (unregistering): Port device team_slave_0 removed [ 1165.797098][T16886] loop5: lost filesystem error report for type 5 error -117 [ 1165.803689][T16886] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.2413: mark_inode_dirty error [ 1165.825219][T16886] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1165.825486][T16886] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1165.846868][T16886] EXT4-fs (loop5): 1 orphan inode deleted [ 1165.860392][T16886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.881180][T14479] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 1165.922259][T14479] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1165.932778][T14479] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 0 [ 1165.982092][T16886] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.2413: Invalid inode table block 1 in block_group 0 [ 1166.015874][T16886] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1166.141715][ T3398] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 1166.141848][T16208] veth1_vlan: entered promiscuous mode [ 1166.180981][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.188630][ T3398] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1166.193168][ T3398] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1166.274671][ T3398] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:13: Failed to release dquot type 0 [ 1166.308622][T16891] loop6: detected capacity change from 0 to 512 [ 1166.310658][ T3398] loop5: lost filesystem error report for type 5 error -117 [ 1166.358975][ T5286] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1166.383243][T16891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1166.391768][T10060] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1166.409014][T16891] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent [ 1166.434198][T10060] loop5: lost filesystem error report for type 5 error -117 [ 1166.437045][T10060] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1166.510127][T10060] loop5: lost filesystem error report for type 5 error -117 [ 1166.524066][T10060] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1166.631250][T16208] veth0_macvtap: entered promiscuous mode [ 1166.648027][T10060] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1166.707069][T16208] veth1_macvtap: entered promiscuous mode [ 1167.032154][T16208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.186792][T15191] Bluetooth: hci0: command tx timeout [ 1167.223621][T16284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.228533][T16208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.266437][T15191] Bluetooth: hci0: command tx timeout [ 1169.333454][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.377615][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.409092][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.435265][T16928] loop5: detected capacity change from 0 to 1024 [ 1169.445377][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.482026][T16928] hfsplus: failed to load extents file [ 1170.466753][T15191] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1170.475906][T15191] Bluetooth: hci6: Injecting HCI hardware error event [ 1170.485080][T15191] Bluetooth: hci6: hardware error 0x00 [ 1170.521183][T16284] veth0_vlan: entered promiscuous mode [ 1170.613279][ T3398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.629616][T16284] veth1_vlan: entered promiscuous mode [ 1170.667749][ T802] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1170.682129][ T3398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.896638][ T802] usb 10-1: Using ep0 maxpacket: 16 [ 1170.919005][ T802] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.961282][ T802] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1171.029206][ T802] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1171.079081][T14281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.120544][ T802] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.138897][T14281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.169043][ T802] usb 10-1: config 0 descriptor?? [ 1172.736320][T15191] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1173.467391][T16966] loop6: detected capacity change from 0 to 512 [ 1173.535008][T16966] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1173.558103][T16784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.592307][T16966] EXT4-fs (loop6): invalid journal inode [ 1173.598873][T16784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.614991][T16966] EXT4-fs (loop6): can't get journal size [ 1173.728859][ T802] usbhid 10-1:0.0: can't add hid device: -71 [ 1173.800123][ T802] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1173.833254][T16784] bridge_slave_0: entered allmulticast mode [ 1173.843355][T16971] loop1: detected capacity change from 0 to 4096 [ 1173.844581][T16966] EXT4-fs (loop6): 1 truncate cleaned up [ 1173.856359][T16971] EXT4-fs: inline encryption not supported [ 1173.872050][ T802] usb 10-1: USB disconnect, device number 8 [ 1173.878639][T16971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1173.883957][T16966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1173.947755][T16784] bridge_slave_0: entered promiscuous mode [ 1173.959174][T16971] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1173.968487][T16971] System zones: 0-5 [ 1173.971089][T16784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.976023][T16971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.063973][T16784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.099395][T16971] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2106: bg 0: block 32: padding at end of block bitmap is not set [ 1174.147358][T16978] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2106: bg 0: block 32: padding at end of block bitmap is not set [ 1174.149769][T16971] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -28 [ 1174.179060][T16784] bridge_slave_1: entered allmulticast mode [ 1174.212859][T16784] bridge_slave_1: entered promiscuous mode [ 1174.236715][T16972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.294667][T16208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.409406][T16284] veth0_macvtap: entered promiscuous mode [ 1174.425992][T12552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.550001][T16784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.632633][T16784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.653391][T10784] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1174.836294][T10784] usb 10-1: Using ep0 maxpacket: 16 [ 1174.866950][T10784] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.890262][T16284] veth1_macvtap: entered promiscuous mode [ 1174.913127][T10784] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.956790][T16784] team0: Port device team_slave_0 added [ 1174.964573][T10784] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1174.998332][ T803] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1175.023646][T16784] team0: Port device team_slave_1 added [ 1175.037533][T10784] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1175.075649][T10784] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.138758][T10784] usb 10-1: config 0 descriptor?? [ 1175.234677][T16784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.238932][ T803] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1175.496952][ T803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.507898][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.282014][ T803] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1176.282031][T16784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.295397][T16284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.381568][ T803] usb 7-1: config 1 has no interface number 1 [ 1176.390934][T16784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.420431][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.448542][ T803] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1176.492353][ T803] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1176.531142][ T803] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1176.544291][T16784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.574061][T10784] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1176.614833][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.616327][T10784] microsoft 0003:045E:07DA.0004: no inputs found [ 1176.682561][ T803] usb 7-1: Product: syz [ 1176.684240][T10784] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 1176.724885][ T803] usb 7-1: Manufacturer: syz [ 1176.750704][ T803] usb 7-1: SerialNumber: syz [ 1176.753985][T16284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.782753][T10784] usb 10-1: USB disconnect, device number 9 [ 1176.996386][T16784] hsr_slave_0: entered promiscuous mode [ 1177.016051][T16784] hsr_slave_1: entered promiscuous mode [ 1177.040381][T16784] debugfs: 'hsr0' already exists in 'hsr' [ 1177.059668][T16784] Cannot create hsr debugfs directory [ 1177.084738][T14478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.105391][T17004] fido_id[17004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1177.119095][T14478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.124695][ T803] usb 7-1: Failed to set altset [ 1177.161661][ T803] usb 7-1: 0:2: cannot create sequencer device [ 1177.199975][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.209317][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.247022][T14478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.255288][ T803] usb 7-1: Failed to set altset [ 1177.315858][T14478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.493556][ T803] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1177.543636][ T803] usb 7-1: USB disconnect, device number 10 [ 1177.703921][T15649] udevd[15649]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1178.227300][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.261806][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.362490][T15191] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 1178.592864][ T3398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.647201][ T3398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.122921][T17030] loop1: detected capacity change from 0 to 764 [ 1179.383629][T17030] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1179.483616][T17035] loop9: detected capacity change from 0 to 4096 [ 1179.497721][T17035] EXT4-fs: inline encryption not supported [ 1179.513992][T17035] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1179.538225][T17035] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1179.547024][T17035] System zones: 0-5 [ 1179.575288][T17035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.716365][T17034] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2446: bg 0: block 32: padding at end of block bitmap is not set [ 1179.918963][T15188] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.104539][T17044] loop6: detected capacity change from 0 to 128 [ 1182.079862][T17044] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1182.142531][T17044] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1182.263728][T16784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1182.337028][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1182.358716][T16784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1182.410393][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1182.454729][T16784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1182.468714][T12552] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1182.478609][T17057] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2455' resets device [ 1182.496199][T12552] FAT-fs (loop6): Filesystem has been set read-only [ 1182.509695][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1182.522367][T12552] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1182.535286][T16784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1182.575649][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1182.677423][ T30] audit: type=1326 audit(1777906105.729:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1182.789920][ T30] audit: type=1326 audit(1777906105.729:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1182.890666][ T30] audit: type=1326 audit(1777906105.769:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.022660][ T30] audit: type=1326 audit(1777906105.769:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.110248][ T30] audit: type=1326 audit(1777906105.769:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.228015][ T30] audit: type=1326 audit(1777906105.789:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.295819][T17076] loop2: detected capacity change from 0 to 512 [ 1183.328832][T17076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1183.330897][T17078] binder: 17077:17078 ioctl c018620c 200000000040 returned -22 [ 1183.359469][ T30] audit: type=1326 audit(1777906105.789:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.412193][ T3398] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.444990][T17076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.450879][ T30] audit: type=1326 audit(1777906105.789:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.484921][ T30] audit: type=1326 audit(1777906105.789:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.512136][ T30] audit: type=1326 audit(1777906105.789:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17061 comm="syz.2.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72779cdd9 code=0x7ffc0000 [ 1183.549598][T17076] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.678402][T17076] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2462: Failed to acquire dquot type 1 [ 1183.731400][ T3398] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.871820][T16284] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.888128][ T3398] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.033768][T16784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.231914][ T3398] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.357851][T17090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2453'. [ 1184.395037][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2453'. [ 1184.440444][T16784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.490297][ T206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.497540][ T206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.569220][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.576459][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.616066][ T4941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1184.630852][ T4941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1184.643732][ T4941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1184.655942][ T4941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1184.672388][ T4941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1185.129538][T17111] loop2: detected capacity change from 0 to 512 [ 1185.185209][T17111] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 1185.237481][T17117] loop5: detected capacity change from 0 to 128 [ 1185.324827][T17117] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1185.558938][T17117] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.706586][ T4941] Bluetooth: hci3: command tx timeout [ 1186.727108][T17111] binder: 17110:17111 ioctl c0306201 200000000680 returned -14 [ 1186.829049][T17126] loop9: detected capacity change from 0 to 256 [ 1186.899522][T10060] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1186.919613][T17126] exfat: Invalid uid '0x00000000ffffffff' [ 1187.067116][ T3398] bridge_slave_1: left allmulticast mode [ 1187.098569][ T3398] bridge_slave_1: left promiscuous mode [ 1187.126439][ T3398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.171092][ T3398] bridge_slave_0: left allmulticast mode [ 1187.201451][ T3398] bridge_slave_0: left promiscuous mode [ 1187.226888][ T3398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.932006][ T3398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.992739][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1187.992761][ T30] audit: type=1326 audit(1777906111.039:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.5.2487" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 1188.025525][ T3398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.052333][ T3398] bond0 (unregistering): Released all slaves [ 1188.130750][ T30] audit: type=1326 audit(1777906111.039:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.5.2487" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 1188.285491][ T30] audit: type=1326 audit(1777906111.089:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.5.2487" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 1188.376257][ T30] audit: type=1326 audit(1777906111.089:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.5.2487" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 1188.447791][ T30] audit: type=1326 audit(1777906111.089:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.5.2487" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e99cdd9 code=0x7ffc0000 [ 1188.509505][T10784] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1188.708197][T10784] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.752307][T17165] loop9: detected capacity change from 0 to 512 [ 1188.788189][ T4941] Bluetooth: hci3: command tx timeout [ 1188.788367][T10784] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 1188.804623][T17165] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 1188.835672][T10784] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=70.8a [ 1189.052938][T10784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.079145][T17165] binder: 17164:17165 ioctl c0306201 200000000680 returned -14 [ 1190.088167][T10784] usb 2-1: Product: syz [ 1190.113052][T10784] usb 2-1: Manufacturer: syz [ 1190.125585][T10784] usb 2-1: SerialNumber: syz [ 1190.437013][T10784] usb 2-1: USB disconnect, device number 10 [ 1190.518671][ T3398] hsr_slave_0: left promiscuous mode [ 1190.545733][ T3398] hsr_slave_1: left promiscuous mode [ 1190.573905][ T3398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.613719][ T3398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.671849][ T3398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.707521][ T3398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.715001][T17180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2482'. [ 1190.739899][ T3398] veth1_macvtap: left promiscuous mode [ 1190.745870][ T3398] veth0_macvtap: left promiscuous mode [ 1190.758258][ T3398] veth1_vlan: left promiscuous mode [ 1190.767522][ T3398] veth0_vlan: left promiscuous mode [ 1190.867063][ T4941] Bluetooth: hci3: command tx timeout [ 1191.432214][ T3398] team0 (unregistering): Port device team_slave_1 removed [ 1191.485956][ T3398] team0 (unregistering): Port device team_slave_0 removed [ 1191.881217][T16784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.955687][T17210] loop2: detected capacity change from 0 to 2364 [ 1191.979633][T17210] iso9660: Bad value for 'sbsector' [ 1192.464028][T17226] loop5: detected capacity change from 0 to 512 [ 1192.521712][T17226] EXT4-fs: Ignoring removed bh option [ 1192.569071][T17226] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1192.751121][T17226] EXT4-fs (loop5): 1 truncate cleaned up [ 1192.835317][T17226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.946950][ T4941] Bluetooth: hci3: command tx timeout [ 1193.149674][T10060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.158997][T17243] loop2: detected capacity change from 0 to 512 [ 1193.233758][T17243] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 1194.527504][T17243] binder: 17241:17243 ioctl c0306201 200000000680 returned -14 [ 1194.742451][T17097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.974587][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.050386][T17097] bridge_slave_0: entered allmulticast mode [ 1196.105950][T17255] loop9: detected capacity change from 0 to 4096 [ 1196.117926][T17097] bridge_slave_0: entered promiscuous mode [ 1196.140680][T17263] netlink: 'syz.1.2510': attribute type 11 has an invalid length. [ 1196.149728][T17263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2510'. [ 1196.156840][T17097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.181197][T17255] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1196.208987][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.211732][T17264] netlink: 'syz.1.2510': attribute type 11 has an invalid length. [ 1196.241665][T17255] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 1196.259023][T17097] bridge_slave_1: entered allmulticast mode [ 1196.285880][T17097] bridge_slave_1: entered promiscuous mode [ 1196.291548][T17264] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2510'. [ 1196.307059][T17255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.549180][T15188] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.593931][T17264] netlink: 'syz.1.2510': attribute type 11 has an invalid length. [ 1196.608679][T17097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.666073][T17264] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2510'. [ 1196.675980][T17097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.835946][T17097] team0: Port device team_slave_0 added [ 1196.879976][T17097] team0: Port device team_slave_1 added [ 1197.079760][T17097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.097484][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.190737][T17097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.240678][T17097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.256606][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.370119][T17097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.762096][T16784] veth0_vlan: entered promiscuous mode [ 1198.807376][T17097] hsr_slave_0: entered promiscuous mode [ 1198.829013][T17097] hsr_slave_1: entered promiscuous mode [ 1198.842095][T17097] debugfs: 'hsr0' already exists in 'hsr' [ 1198.858593][T17097] Cannot create hsr debugfs directory [ 1199.040172][T16784] veth1_vlan: entered promiscuous mode [ 1199.399261][T16784] veth0_macvtap: entered promiscuous mode [ 1199.445886][T16784] veth1_macvtap: entered promiscuous mode [ 1199.716818][T16784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.116870][T16784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.192297][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.221877][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.367136][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.393534][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.849102][T14478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.896216][T14478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.912818][T17324] loop1: detected capacity change from 0 to 8192 [ 1202.397670][ T3398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.435872][ T3398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.812520][T17097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1203.894814][T17097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1203.952282][T17097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1204.018647][T17097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1204.052165][T17097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1205.332715][T17097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1205.353999][T17097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1205.429351][T17097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1205.888733][T17097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.977922][T17097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.982557][T17376] loop2: detected capacity change from 0 to 512 [ 1206.027743][T17376] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 1206.052191][T14478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.059407][T14478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.166372][T17376] binder: 17375:17376 ioctl c0306201 200000000680 returned -14 [ 1207.415157][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.422379][T14479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.511535][T17381] loop9: detected capacity change from 0 to 1024 [ 1207.581698][T17381] hfsplus: failed to load extents file [ 1210.542120][T17429] loop1: detected capacity change from 0 to 1024 [ 1210.605909][T17097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.622136][T17429] hfsplus: invalid btree extent records (0 size) [ 1210.668901][T17429] hfsplus: failed to load attributes file [ 1210.851587][T17097] veth0_vlan: entered promiscuous mode [ 1210.946032][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1210.984147][T17097] veth1_vlan: entered promiscuous mode [ 1211.005047][T17439] loop1: detected capacity change from 0 to 128 [ 1211.133178][T17097] veth0_macvtap: entered promiscuous mode [ 1211.182308][T17441] loop5: detected capacity change from 0 to 512 [ 1211.204770][T17097] veth1_macvtap: entered promiscuous mode [ 1211.228259][T17441] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1212.356355][T17441] binder: 17440:17441 ioctl c0306201 200000000680 returned -14 [ 1212.536651][T17097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.645910][T17097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.733736][T14479] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.783544][T14479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.829034][T17455] loop2: detected capacity change from 0 to 128 [ 1212.847874][T14479] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.867893][T14281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.902073][T17455] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1212.971681][T17462] netlink: 'syz.9.2557': attribute type 4 has an invalid length. [ 1213.058426][T17455] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.303424][T16284] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1213.323857][ T3341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.354677][ T3341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.425320][T17469] loop1: detected capacity change from 0 to 1024 [ 1213.463860][T17469] EXT4-fs: Ignoring removed orlov option [ 1213.495055][T17469] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1213.545230][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.582169][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.598086][T17469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.730623][T17476] loop4: detected capacity change from 0 to 2048 [ 1213.775078][T16208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.800109][T17476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1213.920785][T17482] ------------[ cut here ]------------ [ 1213.926870][T17482] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 1213.926891][T17482] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.9.2561/17482 [ 1213.948182][T17482] Modules linked in: [ 1213.952433][T17482] CPU: 0 UID: 0 PID: 17482 Comm: syz.9.2561 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.963665][T17482] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1213.968049][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1213.978457][T17482] RIP: 0010:path_noexec+0x1af/0x200 [ 1213.984601][T17482] Code: 02 31 ff 48 89 de e8 e0 58 81 ff d1 eb eb 07 e8 f7 53 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 b3 d8 cb fe cc e8 e2 53 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1214.004793][T17482] RSP: 0018:ffffc90003d47bd8 EFLAGS: 00010287 [ 1214.011394][T17482] RAX: ffffffff8244685e RBX: ffff888075820080 RCX: 0000000000080000 [ 1214.020402][T17482] RDX: ffffc90015e63000 RSI: 0000000000000068 RDI: 0000000000000069 [ 1214.028696][T17482] RBP: 0000000000080000 R08: ffff8880343b5c40 R09: 0000000000000003 [ 1214.037063][T11407] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1214.045512][T17482] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 1214.054342][T17482] R13: 1ffff920007a8f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1214.062368][T17482] FS: 00007f947ff026c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 1214.071792][T17482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1214.078657][T17482] CR2: 000000110c32e67f CR3: 000000007c7b8000 CR4: 0000000000350ef0 [ 1214.086705][T17482] Call Trace: [ 1214.089989][T17482] [ 1214.092923][T17482] do_mmap+0xa32/0x10c0 [ 1214.097702][T17482] ? __pfx_do_mmap+0x10/0x10 [ 1214.102340][T17482] ? down_write_killable+0x180/0x240 [ 1214.107699][T17482] ? __pfx_down_write_killable+0x10/0x10 [ 1214.113358][T17482] ? apparmor_mmap_file+0x2da/0x3e0 [ 1214.118638][T17482] vm_mmap_pgoff+0x2c9/0x4f0 [ 1214.123256][T17482] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1214.128441][T17482] ? __fget_files+0x2a/0x420 [ 1214.133053][T17482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.140339][T17482] ? __fget_files+0x3a0/0x420 [ 1214.145042][T17482] ? __fget_files+0x2a/0x420 [ 1214.150563][T17482] ksys_mmap_pgoff+0x51e/0x760 [ 1214.155357][T17482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.161545][T17482] do_syscall_64+0x15f/0xf80 [ 1214.166192][T17482] ? trace_irq_disable+0x3b/0x140 [ 1214.171246][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.177185][T17482] RIP: 0033:0x7f947ef9cdd9 [ 1214.181613][T17482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.193455][T11407] usb 3-1: Using ep0 maxpacket: 16 [ 1214.201347][T17482] RSP: 002b:00007f947ff02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1214.214962][T17482] RAX: ffffffffffffffda RBX: 00007f947f215fa0 RCX: 00007f947ef9cdd9 [ 1214.222987][T17482] RDX: 0000000003000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 1214.231232][T17482] RBP: 00007f947f032d69 R08: 0000000000000005 R09: 000000000f1a2000 [ 1214.242333][T17482] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1214.252237][T17482] R13: 00007f947f216038 R14: 00007f947f215fa0 R15: 00007ffccfd242f8 [ 1214.260410][T17482] [ 1214.263491][T17482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1214.270867][T17482] CPU: 0 UID: 0 PID: 17482 Comm: syz.9.2561 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.281800][T17482] Tainted: [L]=SOFTLOCKUP [ 1214.286113][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1214.296162][T17482] Call Trace: [ 1214.299434][T17482] [ 1214.302353][T17482] vpanic+0x56c/0xa60 [ 1214.306338][T17482] ? __pfx__printk+0x10/0x10 [ 1214.310941][T17482] ? __pfx_vpanic+0x10/0x10 [ 1214.315441][T17482] ? is_bpf_text_address+0x292/0x2b0 [ 1214.320731][T17482] ? is_bpf_text_address+0x26/0x2b0 [ 1214.325930][T17482] panic+0xc5/0xd0 [ 1214.329646][T17482] ? __pfx_panic+0x10/0x10 [ 1214.334076][T17482] __warn+0x315/0x4c0 [ 1214.338072][T17482] ? path_noexec+0x1af/0x200 [ 1214.342665][T17482] ? path_noexec+0x1af/0x200 [ 1214.347262][T17482] __report_bug+0x29a/0x540 [ 1214.351772][T17482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.357409][T17482] ? path_noexec+0x1af/0x200 [ 1214.361996][T17482] ? __pfx___report_bug+0x10/0x10 [ 1214.367017][T17482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.372646][T17482] ? futex_unqueue+0x211/0x240 [ 1214.377412][T17482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.383042][T17482] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 1214.389288][T17482] ? path_noexec+0x1af/0x200 [ 1214.393882][T17482] report_bug+0x16a/0x220 [ 1214.398217][T17482] ? path_noexec+0x1af/0x200 [ 1214.402803][T17482] ? path_noexec+0x1b1/0x200 [ 1214.407391][T17482] handle_bug+0x9c/0x200 [ 1214.411640][T17482] exc_invalid_op+0x1a/0x50 [ 1214.416233][T17482] asm_exc_invalid_op+0x1a/0x20 [ 1214.421077][T17482] RIP: 0010:path_noexec+0x1af/0x200 [ 1214.426274][T17482] Code: 02 31 ff 48 89 de e8 e0 58 81 ff d1 eb eb 07 e8 f7 53 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 b3 d8 cb fe cc e8 e2 53 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1214.445960][T17482] RSP: 0018:ffffc90003d47bd8 EFLAGS: 00010287 [ 1214.452056][T17482] RAX: ffffffff8244685e RBX: ffff888075820080 RCX: 0000000000080000 [ 1214.460039][T17482] RDX: ffffc90015e63000 RSI: 0000000000000068 RDI: 0000000000000069 [ 1214.468002][T17482] RBP: 0000000000080000 R08: ffff8880343b5c40 R09: 0000000000000003 [ 1214.475963][T17482] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 1214.483923][T17482] R13: 1ffff920007a8f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1214.491894][T17482] ? path_noexec+0x1ae/0x200 [ 1214.496491][T17482] ? path_noexec+0x1ae/0x200 [ 1214.501080][T17482] do_mmap+0xa32/0x10c0 [ 1214.505243][T17482] ? __pfx_do_mmap+0x10/0x10 [ 1214.509825][T17482] ? down_write_killable+0x180/0x240 [ 1214.515117][T17482] ? __pfx_down_write_killable+0x10/0x10 [ 1214.520755][T17482] ? apparmor_mmap_file+0x2da/0x3e0 [ 1214.525955][T17482] vm_mmap_pgoff+0x2c9/0x4f0 [ 1214.530547][T17482] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1214.535655][T17482] ? __fget_files+0x2a/0x420 [ 1214.540244][T17482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.545875][T17482] ? __fget_files+0x3a0/0x420 [ 1214.550554][T17482] ? __fget_files+0x2a/0x420 [ 1214.555146][T17482] ksys_mmap_pgoff+0x51e/0x760 [ 1214.559908][T17482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.565968][T17482] do_syscall_64+0x15f/0xf80 [ 1214.570598][T17482] ? trace_irq_disable+0x3b/0x140 [ 1214.575631][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.581514][T17482] RIP: 0033:0x7f947ef9cdd9 [ 1214.585919][T17482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.605519][T17482] RSP: 002b:00007f947ff02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1214.613934][T17482] RAX: ffffffffffffffda RBX: 00007f947f215fa0 RCX: 00007f947ef9cdd9 [ 1214.621903][T17482] RDX: 0000000003000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 1214.629874][T17482] RBP: 00007f947f032d69 R08: 0000000000000005 R09: 000000000f1a2000 [ 1214.637838][T17482] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1214.645803][T17482] R13: 00007f947f216038 R14: 00007f947f215fa0 R15: 00007ffccfd242f8 [ 1214.653795][T17482] [ 1214.657132][T17482] Kernel Offset: disabled [ 1214.661445][T17482] Rebooting in 86400 seconds..