last executing test programs: 14m22.711524694s ago: executing program 3 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 14m22.22023818s ago: executing program 3 (id=124): r0 = socket(0x10, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000002d40), &(0x7f0000000180)=0xc) 14m21.707931975s ago: executing program 3 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r0}, 0xc) 14m21.267681209s ago: executing program 3 (id=129): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000080)='./bus\x00', 0x3800040, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 14m20.767920295s ago: executing program 3 (id=133): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r0 = socket(0x10, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 14m20.679572888s ago: executing program 0 (id=134): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) sync() close(0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x145000, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'syztnl2\x00', 0x0}) 14m20.399584107s ago: executing program 3 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r0}, 0xc) 14m20.030439369s ago: executing program 32 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r0}, 0xc) 14m20.011860629s ago: executing program 0 (id=140): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0xb, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 14m19.842111144s ago: executing program 0 (id=142): semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000100)=""/134) 14m19.725413938s ago: executing program 0 (id=144): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18458, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) 14m19.260258703s ago: executing program 0 (id=147): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000870000001801"], 0x0}, 0x94) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 14m18.437100479s ago: executing program 0 (id=155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 14m17.929901355s ago: executing program 33 (id=155): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 13m45.951903615s ago: executing program 1 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 13m44.963863726s ago: executing program 1 (id=299): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0xfffffe01, 0x0, 0xeffffe01, 0x7fff, 0xb2, "fe6fa820010000040000000000000000ab1400", 0x7f, 0x10}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000200)="2c5d8c", 0x3}], 0x1) 13m44.007683917s ago: executing program 1 (id=310): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)=')@}&\\^!{/*-[+.+@]#$-{\'\x00', 0x41, &(0x7f0000000080)={@align=0xff, {0xfff7, 0x92a3, 0x4, 0x5}}, 0x10, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x68da}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x5f8, 0x0, 0x360, 0xffffffff, 0x0, 0x450, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, &(0x7f00000001c0), {[{{@ipv6={@loopback, @mcast1, [0xff000000, 0xff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_virt_wifi\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x3c, 0x7, 0x4, 0x4a}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0x20, 0x3], 0x401, 0x20, 0x79717b21c019f9da, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @private1, @local], 0xc}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xf, @ipv4=@private=0xa010101, @ipv4=@private=0xa010102, @gre_key=0x96, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@mcast1, @ipv6=@local, @icmp_id=0x66, @port=0x4e24}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xd0884d477acd5ced, 0xffffffff], 'pim6reg\x00', 'wlan1\x00', {}, {}, 0x6, 0xec, 0x2, 0x20}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@remote, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0x3, 0x2, 0x2, 0x81, 0x40, 0x47fb2f6eb734ba96}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}, @ipv4=@multicast2, @icmp_id=0x66, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@empty, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 13m42.347363819s ago: executing program 1 (id=315): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x510, &(0x7f0000001a00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 13m41.087435509s ago: executing program 1 (id=323): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4f8eac2f96394669) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 13m37.731873765s ago: executing program 1 (id=331): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 13m37.284271879s ago: executing program 34 (id=331): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 13m28.187850606s ago: executing program 2 (id=368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4af) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) 13m27.531098447s ago: executing program 5 (id=373): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 13m27.465621779s ago: executing program 5 (id=374): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0xc090) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x7a09e6b8b8bd5aa0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0xff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) 13m27.219884807s ago: executing program 2 (id=375): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) 13m27.170889568s ago: executing program 2 (id=376): chdir(&(0x7f0000000240)='./file0\x00') llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffe81) 13m26.16190409s ago: executing program 5 (id=379): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @empty, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 13m26.134373161s ago: executing program 2 (id=380): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18458, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(0x0, 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) 13m25.923823308s ago: executing program 5 (id=381): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x86022, &(0x7f0000000080)=ANY=[@ANYRES32=0x0]) 13m25.798681942s ago: executing program 2 (id=382): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 13m25.562819879s ago: executing program 5 (id=383): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x1, 0x100) write$rfkill(r0, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x1, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x1, 0xff}, 0x8) 13m25.101471484s ago: executing program 2 (id=386): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000003d00)={0x2020}, 0x2020) 13m24.507312373s ago: executing program 35 (id=386): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000003d00)={0x2020}, 0x2020) 13m24.459737554s ago: executing program 5 (id=388): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x18a, &(0x7f0000000200)="$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") chdir(0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffe81) 13m24.459446814s ago: executing program 36 (id=388): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x18a, &(0x7f0000000200)="$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") chdir(0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffe81) 13m1.959475785s ago: executing program 4 (id=454): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0x7, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x2, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffc, 0x93, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20004000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100000000000001, 0x1000000, 0x16a0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffffffffffe, 0x80]}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xfb827ab984038ea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r7, 0x5453, 0x0) 13m1.027442984s ago: executing program 4 (id=457): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x408b, &(0x7f00000040c0)="$eJzszz9Kw3AYBuC3TTSxSEFXB3Fzkrp5BC/QC3QTHBw8QNXbFA/g5AE8iCB4ApdKYmyV4KYo8jxDePP9+cEXft3TKo3Wxaskm8njFzt3s9udlE26GU+SOkl5MW5by1aG+0kmx9kY1cNsJ7nsvzJdfPctAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX3VSdOF5Xaubz0PStopP40UySOZJZnvLKsn9ede5Ll7OunhwlOR0t/ubNxsr73m6+IlrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/q/yQBzlM9RbrZKs/XL2yO4c2AAJRDED7BeQrRiAh7MFybMOUBIG/5Ox7pqKizVJfnrmvvaqTY/u7TrKObT6zpwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICXHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHcFAAD//7xFGSI=") r2 = syz_open_procfs(r1, &(0x7f0000000100)='smaps\x00') read(r2, &(0x7f0000000140)=""/70, 0x46) 12m59.295005179s ago: executing program 4 (id=466): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0x7, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x2, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0xffffffffc, 0x93, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20004000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100000000000001, 0x1000000, 0x16a0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffffffffffe, 0x80]}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xfb827ab984038ea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r7, 0x5453, 0x0) 12m58.271750231s ago: executing program 4 (id=470): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x232f453, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 12m58.099752487s ago: executing program 4 (id=471): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12m57.836583885s ago: executing program 4 (id=472): r0 = semget(0x0, 0x4, 0x39c) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f00000000c0)=""/114) 12m57.35341056s ago: executing program 37 (id=472): r0 = semget(0x0, 0x4, 0x39c) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f00000000c0)=""/114) 18.435829959s ago: executing program 7 (id=4922): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = open(0x0, 0x400141042, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x388) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r1], 0x24, 0x0) mount$bind(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x2341411, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400c0c1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r5, &(0x7f0000002380)=""/249, 0x146, 0x7ff) 16.307180535s ago: executing program 7 (id=4924): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6113}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x3, 0x2, 0x4, 0x4, 0xe, 0xd, 0x8, 0x10, 0x1, 0x1, 0xd, 0xf, 0x6, 0x6, 0x7, 0x2], 0x1, [0x0, 0x4, 0x7f, 0x800, 0xa6f5, 0x4, 0x8, 0xff, 0xe6, 0x3, 0x2, 0x6, 0x0, 0xd79b, 0x8, 0x3], [0x3, 0x5, 0x5, 0xfff8, 0xb2, 0x8, 0x2, 0x5, 0xfff5, 0x3, 0x1000, 0x4, 0x0, 0x2, 0x7, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) 15.507781371s ago: executing program 7 (id=4925): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xb4230610aeb3ae, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x1, 0x23a, &(0x7f0000000600)="$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") sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r4, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/158, 0x9e}], 0x1, 0x4, 0xfffffffe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 13.888366792s ago: executing program 7 (id=4930): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ec0000000000000000a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYRESOCT=0x0], 0x1, 0x5570, &(0x7f000000b500)="$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") syz_clone(0x8000400, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2ca, &(0x7f0000001440)="$eJzs3U9rI2UYAPBn8mcS9ZAcPInggB48Lbt79ZIiuyD25BJBPWhxd2FpgrCFwqo47smrFw9+BkHwg3jxG/gBBG9WKIzMZNJJ2pg2panY/f0O7dt3nmfeZ94M7bTQJ5+9Pt1/mMXj51//Hv1+Eq1RjOIoiWG0Yu7bWDL6PgCA/7Ojoog/i5lN8pKI6G+vLABgiy7287/TDH+5lrIAgC168NHH7+/s7t77IMv6cX/63eG4/M2+/Dw7vvNhPIlJPIrbMYjjiOpBoRvV00I5vF8URd7JSsN4a5ofjsvM6ae/1uff+aP+Y0FpWH08edqo8t/bvXcnm1nIz8s6Xi7zH8eTUbn+3RjEqyfJS/l3V+THOI2335zlV/XfikH89nl8EZN4WBXR5H9zJ8veLX7466tPyvLK/CQ/HPequEbRvsaXBQAAAAAAAAAAAAAAAAAAAACAG+5W3TunF1X/nnKq7r/TPi6/6EY2N1zuzzPLn7f2WeoPVBRFXrXLmfXXuZ1lWVEHNvmdeK2z2FgQAAAAAAAAAAAAAAAAAAAAXlwHz77c35tMHj29ksG8G0AnIv5+EHHZ84wWZt6I9cG9es29yaRVD5djOosz0Z7HJBFryygv4oq25bzBS2dqrgc//bzpCfvNTJKsjumuXuvgWfuyr1d+emZ+d+3vJav3sBfzmX696I9pRBOTxgVXT//tUBGb3H7pykODjXcjfaUa5GtiIllX2Dv1ztUzyemrSKtdXZnerQcL6afujQvdz9GfpZ/9XpHo1gEAAAAAAAAAAAAAAAAAAFvV/PfvioPP16a2it7WygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa9W8//8GgzwiuvUJzglO4+lBFZf8p5cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfdPAAAA//+cAVSV") sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x841) truncate(0x0, 0x2fffffd) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000) 11.810788078s ago: executing program 7 (id=4936): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000007e40)='net/if_inet6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$loop(0x0, 0x9, 0x109080) ioctl$BLKSECTGET(r3, 0x1267, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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") pidfd_send_signal(r2, 0x28, 0x0, 0x0) read(r0, &(0x7f0000001180)=""/4096, 0x1000) 10.007874894s ago: executing program 7 (id=4943): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000100)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.719835078s ago: executing program 9 (id=4952): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 6.495619615s ago: executing program 6 (id=4954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.396562809s ago: executing program 9 (id=4956): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xb4230610aeb3ae, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x1, 0x23a, &(0x7f0000000600)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzmMAKZxyVejt0v0g9V6hlZsYGNVT+BfN2TDBaSYv2FjGyChkc5gPyMziABnEwMAw+U/EvQcskgwiILO811wKypxyVZTjn9ipluWrzDrvM8zomJbGwGgwi4OBgUHviO5MOwPebiaomawMDAyJOTmpRcU8KO5kYJjMuJ9JkRGk7szfq8EPGO0YumMZGBnkNvirLf72R6py46b6yOlVETVTu5tuLl0fx7BN/+8VE6n3EzPC/j84JKhlkZf/YZ6M0vfNDXM+1NQ9MXHsbFSey996+e+79zG1xQlqTI/FuwrZ+BPctGo+OTu5WT6em17dvqVYcUFWvsvEY1Mv/k04vpaBYfKFJ7b6NWcOxSvGcEq5Vc6NuesWL8i1TP183RsGhoNRnycyMC5n3M/EwDAzbOceiL/YIIHOAI0MBmY+BgYVBgYGJgYWhrTMnFQDDwZGBmYGVjDHkAVNNRMDB1hCLzk/J6WdgRGcBMDaljOwwM0wfMzACuX8SDGCcrhBMsYWDVCTGNqhtAqYrGfwgPKXQ+nHDBC3gpMXEyLZsIBN6GdighnEwMZQkVhSUmQIUg5hwcWM4GJGAnCbmaC2zmVC9dxxhJGjYBSMglEwCkbBKBgFo2AUjIJRMBIBIAAA//8AArMU") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r2, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/158, 0x9e}], 0x1, 0x4, 0xfffffffe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 5.339692702s ago: executing program 6 (id=4957): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xb4230610aeb3ae, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x1, 0x23a, &(0x7f0000000600)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r1, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/158, 0x9e}], 0x1, 0x4, 0xfffffffe) 4.499049337s ago: executing program 6 (id=4958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80800c, &(0x7f0000000440)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8, @ANYRESOCT, @ANYRESHEX], 0x0, 0x248, &(0x7f0000000880)="$eJzs2k9rXFUYB+D3pqmpielE/EcL4kEX6ubSZO2iQVoQA4o2QhWkt+ZGh1xnwtwhMCJ2Vrr1I7gWl+4E6dJNNn4CF+6yybIL8cp0Uu2UiVKiTrXPs5kXzv3NOYc5czhczsErX368s13n20U/5rIs5i7GMG5lsRJzcccwXn7x6g/Pvn313dfXNzYuvZXS5fUrq2sppbPPff/ep988f7O/9M63Z79biP2V9w8O137ef3r/3MGvVz5q16ldp063n4p0vdvtF9erMm216508pTersqjL1O7UZW+ifbvq7u4OUtHZWl7c7ZV1nYrOIO2Ug9Tvpn5vkIoPi3Yn5XmelheDk9j8+lbTxGFz+lo0TfPoV7F0M5Z/ilZkj6fsiYvZU9eyZ4bZucOmac16qPwj/P4Pt7s29TMR1Rd7m3ub489x+/p2tKOKMi5EK36J0TI5Mq4vv7Zx6UK6bSU+r24c5W/sbZ6azK9GK1am51fH+TSZX4jFiNMRR/m1aMWT0/NrU/Nn4qUX7uo/j1b8+EF0o4qtGGX/yH+2mtKrb2zckz9/+zkAgP+bPP1u6vktz49rH+fv43x4z/lqPs7Pz3buRNSDT3aKqip7MynuvGM69pnHTt7X6PtnMcH5P5uX4mTFQtxXKosYjtbBAzH4Rx6Iv95fFUsz25L4F03ukwAAAAAAAAAAAPxX/O2XB09Nv4ELAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwnN8CAAD//1uOxe4=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 4.041527522s ago: executing program 8 (id=4960): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) 3.46541231s ago: executing program 8 (id=4961): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x2}, 0x48) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 3.347302614s ago: executing program 9 (id=4962): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0xb2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107742, 0xc0) ftruncate(r2, 0x6000000) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x4, 0x8, 0x8, 0x1, 0x7, 0x46, 0x9, 0x8}}}, 0x60) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 3.211855338s ago: executing program 8 (id=4963): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000007e40)='net/if_inet6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$loop(0x0, 0x9, 0x109080) ioctl$BLKSECTGET(r3, 0x1267, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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") pidfd_send_signal(r2, 0x28, 0x0, 0x0) read(r0, &(0x7f0000001180)=""/4096, 0x1000) 2.759172903s ago: executing program 9 (id=4964): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 2.21396254s ago: executing program 8 (id=4965): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xb4230610aeb3ae, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x1, 0x23a, &(0x7f0000000600)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r2, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/158, 0x9e}], 0x1, 0x4, 0xfffffffe) 1.57664342s ago: executing program 9 (id=4966): r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 1.520384931s ago: executing program 6 (id=4967): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x405, 0x20000, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x389}]}}}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000900)={[{@init_itable_val={'init_itable', 0x3d, 0x94eb}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x45f, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delneigh={0x44, 0x1a, 0x1, 0x400000, 0xffffffff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x5, 0x0, 0xffffda6f}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x44}}, 0x4800) openat$kvm(0xffffffffffffff9c, 0x0, 0xc8082, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) chroot(&(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000080)='./file0/../file0\x00', 0x5) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000100)={[{@nodelalloc}, {@noblock_validity}, {@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}, 0x32}]}, 0x9d, 0x4ed, &(0x7f0000000a40)="$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") creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 1.106732044s ago: executing program 8 (id=4968): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) 878.246311ms ago: executing program 6 (id=4969): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xb4230610aeb3ae, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x1, 0x23a, &(0x7f0000000600)="$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") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r4, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/158, 0x9e}], 0x1, 0x4, 0xfffffffe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 501.584604ms ago: executing program 8 (id=4970): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1204480, &(0x7f00000004c0)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000180)='./bus\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x51500430, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x4, 0x8}}, 0x50) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x40000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 235.861172ms ago: executing program 9 (id=4971): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) r2 = openat(0xffffffffffffff9c, 0x0, 0x107742, 0xc0) ftruncate(r2, 0x6000000) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0x0, 0x0, {{0x4, 0x8, 0x8, 0x1, 0x7, 0x46, 0x9, 0x8}}}, 0x60) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 0s ago: executing program 6 (id=4972): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000007e40)='net/if_inet6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$loop(0x0, 0x9, 0x109080) ioctl$BLKSECTGET(r3, 0x1267, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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") pidfd_send_signal(r2, 0x28, 0x0, 0x0) read(r0, &(0x7f0000001180)=""/4096, 0x1000) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 721.591035][T19313] lo speed is unknown, defaulting to 1000 [ 721.706957][T19316] loop7: detected capacity change from 0 to 128 [ 721.719900][T15122] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 722.999161][T19333] loop9: detected capacity change from 0 to 4096 [ 723.037619][T19333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.141717][ T786] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 723.259244][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.391834][ T786] usb 9-1: Using ep0 maxpacket: 16 [ 723.431201][ T786] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 723.454100][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.469916][T19344] fuse: Bad value for 'rootmode' [ 723.511412][ T786] usb 9-1: Product: syz [ 723.522687][ T786] usb 9-1: Manufacturer: syz [ 723.531363][ T786] usb 9-1: SerialNumber: syz [ 723.554933][ T786] usb 9-1: config 0 descriptor?? [ 723.620341][ T786] usb-storage 9-1:0.0: USB Mass Storage device detected [ 723.671251][ T786] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 723.710647][ T786] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 723.710647][ T786] Please send a copy of this message to and [ 723.818643][T19331] IPv6: Can't replace route, no match found [ 724.993552][ T786] usb 9-1: USB disconnect, device number 42 [ 725.107353][T19365] loop7: detected capacity change from 0 to 512 [ 725.138814][T19365] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 725.192292][T19365] EXT4-fs (loop7): 1 truncate cleaned up [ 725.212537][T19365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.248552][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4024'. [ 725.414575][T19375] loop6: detected capacity change from 0 to 16 [ 725.424916][T19375] erofs: (device loop6): mounted with root inode @ nid 36. [ 725.468822][T19374] lo speed is unknown, defaulting to 1000 [ 725.487198][T19376] loop9: detected capacity change from 0 to 128 [ 725.672251][T19378] loop8: detected capacity change from 0 to 1024 [ 725.692600][T19382] fuse: Bad value for 'rootmode' [ 725.806901][T19378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 728.395532][T19408] loop6: detected capacity change from 0 to 1024 [ 728.416675][T19408] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 728.481626][T19408] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 728.491278][T19408] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 728.519010][T19408] EXT4-fs error (device loop6): ext4_ext_check_inode:530: inode #3: comm syz.6.4036: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 728.541130][T19408] EXT4-fs (loop6): no journal found [ 728.547271][T19408] EXT4-fs (loop6): can't get journal size [ 728.555577][T19408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 728.564922][T19410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4037'. [ 728.571491][T18201] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 728.741518][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4037'. [ 728.800403][T19413] macvlan2: entered promiscuous mode [ 728.832656][T19413] macvlan2: entered allmulticast mode [ 728.911565][T15703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.383276][T18201] usb 9-1: Using ep0 maxpacket: 16 [ 729.404623][T18201] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 729.421391][T18201] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.429968][T18201] usb 9-1: Product: syz [ 729.434203][T18201] usb 9-1: Manufacturer: syz [ 729.438803][T18201] usb 9-1: SerialNumber: syz [ 729.483037][T18201] usb 9-1: config 0 descriptor?? [ 729.513148][T18201] usb-storage 9-1:0.0: USB Mass Storage device detected [ 729.516874][T19418] loop9: detected capacity change from 0 to 8 [ 729.527502][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.558765][T18201] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 729.579242][ T5758] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 729.599268][T18201] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 729.599268][T18201] Please send a copy of this message to and [ 729.792349][T19405] IPv6: Can't replace route, no match found [ 729.905763][T18201] usb 9-1: USB disconnect, device number 43 [ 731.217293][T19447] loop9: detected capacity change from 0 to 1024 [ 731.228048][T19449] loop8: detected capacity change from 0 to 512 [ 731.246562][T19449] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 731.269206][T19447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.299435][T19449] EXT4-fs (loop8): 1 truncate cleaned up [ 731.312637][T19449] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.673522][T19458] loop6: detected capacity change from 0 to 8 [ 731.713337][ T6189] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 733.696050][T19473] bridge_slave_0: left allmulticast mode [ 733.725860][T19473] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.815372][T19473] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 733.880341][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.910747][T19479] loop6: detected capacity change from 0 to 764 [ 733.932710][T19478] loop7: detected capacity change from 0 to 1024 [ 733.964409][T19478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 734.171587][ T5833] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 734.371687][ T5833] usb 10-1: Using ep0 maxpacket: 16 [ 734.386142][ T5833] usb 10-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 734.397469][T19492] loop7: detected capacity change from 0 to 8 [ 734.415050][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.427371][ T5833] usb 10-1: Product: syz [ 734.431977][ T5833] usb 10-1: Manufacturer: syz [ 734.436818][ T5833] usb 10-1: SerialNumber: syz [ 734.478070][ T5833] usb 10-1: config 0 descriptor?? [ 734.549437][T19495] loop8: detected capacity change from 0 to 512 [ 734.555482][ T5833] usb-storage 10-1:0.0: USB Mass Storage device detected [ 734.563459][T19495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 734.578997][ T6189] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 734.585062][T19495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.077414][T19495] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 735.382023][ T5833] usb-storage 10-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 735.391059][ T5833] usb-storage 10-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 735.391059][ T5833] Please send a copy of this message to and [ 735.425626][T19476] IPv6: Can't replace route, no match found [ 736.008880][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.242735][ T5833] usb 10-1: USB disconnect, device number 29 [ 736.700208][T19513] loop6: detected capacity change from 0 to 1024 [ 736.946387][T19513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 737.206518][T19520] loop8: detected capacity change from 0 to 1024 [ 737.277385][T19520] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 737.328616][T19520] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 737.386762][T19520] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 737.427854][T19520] EXT4-fs error (device loop8): ext4_ext_check_inode:530: inode #3: comm syz.8.4065: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 737.499144][T19520] EXT4-fs (loop8): no journal found [ 737.505133][T19527] loop9: detected capacity change from 0 to 8 [ 737.521183][T19520] EXT4-fs (loop8): can't get journal size [ 737.545126][ T5758] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 737.556225][T19520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 738.233008][ T5833] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 738.451482][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 738.458607][ T5833] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 738.472489][ T5833] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 738.483551][ T5833] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 738.484347][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.493933][ T5833] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 738.518950][ T5833] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.538740][ T5833] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 738.586590][ T786] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 738.607317][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.653746][ T5833] usbtmc: probe of 7-1:16.0 failed with error -22 [ 739.041577][ T28] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 739.330153][ T28] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.417745][ T28] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.424790][ T786] usb 8-1: unable to get BOS descriptor or descriptor too short [ 739.439594][ T28] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.442713][ T786] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 739.460521][ T28] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.467715][ T786] usb 8-1: string descriptor 0 read error: -22 [ 739.479247][ T28] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.479340][ T786] usb 8-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 739.498476][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.502126][ T28] usb 10-1: config 0 descriptor?? [ 739.557021][ T786] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 739.719350][ T786] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 739.779651][ T786] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 739.792675][ T27] audit: type=1326 audit(1778689580.019:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19550 comm="syz.8.4079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23db79ce59 code=0x0 [ 739.801661][ T786] usb 8-1: USB disconnect, device number 42 [ 739.937621][ T28] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 739.954725][ T28] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 740.267316][ C0] plantronics 0003:047F:FFFF.000E: hid_field_extract() called with n (132) > 32! (swapper/0) [ 740.340265][T19556] loop7: detected capacity change from 0 to 1024 [ 740.364531][T19556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.468707][ T5833] usb 10-1: USB disconnect, device number 30 [ 740.582602][ T28] usb 7-1: USB disconnect, device number 45 [ 740.694067][T19560] loop6: detected capacity change from 0 to 8 [ 740.780816][T19564] loop7: detected capacity change from 0 to 1024 [ 740.790250][T19564] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 740.817099][T19564] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 740.868027][T19564] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 740.901061][ T6189] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 740.902295][T19564] EXT4-fs error (device loop7): ext4_ext_check_inode:530: inode #3: comm syz.7.4083: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 741.063797][T19564] EXT4-fs (loop7): no journal found [ 741.076667][T19564] EXT4-fs (loop7): can't get journal size [ 741.118187][T19564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 742.302907][T15703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.621707][ T8881] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 742.951673][ T8881] usb 10-1: Using ep0 maxpacket: 32 [ 743.063818][ T8881] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 743.088874][ T8881] usb 10-1: config 0 has no interface number 0 [ 743.107021][ T8881] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 743.134779][T19585] loop6: detected capacity change from 0 to 1024 [ 743.162212][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4091'. [ 743.185387][ T8881] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 743.201271][ T8881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.204502][T19585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 743.209557][ T8881] usb 10-1: Product: syz [ 743.228418][ T8881] usb 10-1: Manufacturer: syz [ 743.233475][ T8881] usb 10-1: SerialNumber: syz [ 743.252816][ T8881] usb 10-1: config 0 descriptor?? [ 743.258627][T19578] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 743.317447][T19589] macvlan2: entered promiscuous mode [ 743.340828][T19589] macvlan2: entered allmulticast mode [ 743.604614][T19578] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 743.762574][T19600] loop6: detected capacity change from 0 to 8 [ 744.233414][ T8881] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 744.580039][ T8881] asix: probe of 10-1:0.188 failed with error -71 [ 744.638609][ T8881] usb 10-1: USB disconnect, device number 31 [ 744.790048][T19605] loop7: detected capacity change from 0 to 256 [ 744.797662][T19605] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 745.019124][T19610] loop8: detected capacity change from 0 to 256 [ 745.101587][T19610] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 745.764270][T19610] syz.8.4099: attempt to access beyond end of device [ 745.764270][T19610] loop8: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 745.798768][T19610] syz.8.4099: attempt to access beyond end of device [ 745.798768][T19610] loop8: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 745.815460][ T27] audit: type=1800 audit(1778689586.049:1461): pid=19610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4099" name="file1" dev="loop8" ino=1048665 res=0 errno=0 [ 746.586307][T19624] lo speed is unknown, defaulting to 1000 [ 746.648677][T19625] loop8: detected capacity change from 0 to 128 [ 746.678942][T19629] loop7: detected capacity change from 0 to 2048 [ 746.716234][T19629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 747.338319][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.353454][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.439797][T19644] loop7: detected capacity change from 0 to 128 [ 747.633531][T19644] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 747.705289][T19647] loop6: detected capacity change from 0 to 256 [ 747.715810][T19647] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 748.117837][ T5758] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 748.375046][T19654] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 749.099382][T19656] loop7: detected capacity change from 0 to 2048 [ 749.253958][T19656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 749.472581][T19668] fuse: Unknown parameter 'user_id00000000000000000000' [ 749.559403][T15703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 749.721025][T19673] loop9: detected capacity change from 0 to 1024 [ 750.052904][T19685] loop8: detected capacity change from 0 to 512 [ 750.305966][T19685] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.367490][T19685] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.654115][T19697] fuse: Unknown parameter 'user_id00000000000000000000' [ 750.669590][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.721035][T19699] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4126'. [ 750.823796][T19702] syz_tun: entered allmulticast mode [ 750.857025][T19704] binder: 19703:19704 ioctl c0306201 200000000480 returned -22 [ 751.252055][T19718] loop8: detected capacity change from 0 to 128 [ 751.356606][T19718] FAT-fs (loop8): Unrecognized mount option "ro”“1¸dir" or missing value [ 751.699968][T19725] fuse: Bad value for 'fd' [ 751.989024][T19731] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 752.110293][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4141'. [ 752.339170][T19749] fuse: Bad value for 'fd' [ 752.522665][T19753] lo speed is unknown, defaulting to 1000 [ 752.691636][T19754] loop6: detected capacity change from 0 to 128 [ 752.759191][T19762] loop8: detected capacity change from 0 to 512 [ 752.999354][T19762] EXT4-fs (loop8): 1 truncate cleaned up [ 753.152392][T19762] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.398766][T19762] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4150'. [ 753.423221][T19771] loop9: detected capacity change from 0 to 256 [ 753.431808][T19762] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 753.472829][T19771] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 753.861684][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.660533][T19788] fuse: Bad value for 'fd' [ 755.337418][T19800] loop6: detected capacity change from 0 to 256 [ 755.727571][T19808] loop6: detected capacity change from 0 to 256 [ 755.738858][T19810] fuse: Unknown parameter '0x0000000000000003' [ 755.741933][T19808] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 755.755657][ T23] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 755.878716][T19812] loop8: detected capacity change from 0 to 2048 [ 755.981548][ T23] usb 10-1: Using ep0 maxpacket: 32 [ 755.989827][T19812] loop8: p2 < > p4 [ 755.996685][ T23] usb 10-1: unable to get BOS descriptor or descriptor too short [ 756.004471][T19812] loop8: p4 size 262144 extends beyond EOD, truncated [ 756.453486][ T5833] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 756.742638][ T23] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 756.756356][ T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 756.767640][ T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9460, setting to 1024 [ 756.810911][ T23] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 756.831478][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.833737][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 756.839618][ T23] usb 10-1: Product: syz [ 756.853996][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.866215][ T23] usb 10-1: Manufacturer: syz [ 756.875878][ T23] usb 10-1: SerialNumber: syz [ 756.879198][ T5833] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 756.890308][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.896939][T19802] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 756.910406][T19816] syzkaller0: entered promiscuous mode [ 756.921401][T19816] syzkaller0: entered allmulticast mode [ 756.922467][ T5833] usb 9-1: config 0 descriptor?? [ 756.927176][T19802] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 756.944657][ T5833] hub 9-1:0.0: USB hub found [ 757.135380][ T5833] hub 9-1:0.0: 1 port detected [ 757.172292][ T23] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 757.179606][ T23] usb 10-1: MIDIStreaming interface descriptor not found [ 757.187539][ T23] usb 10-1: too many endpoints [ 757.300108][ T23] usb 10-1: USB disconnect, device number 32 [ 757.383682][ T6185] udevd[6185]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.519453][T19830] fuse: Unknown parameter '0x0000000000000003' [ 757.561834][ T5833] usb 9-1: USB disconnect, device number 44 [ 757.947450][T19839] loop9: detected capacity change from 0 to 256 [ 757.960001][T19839] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 759.177003][T19844] loop9: detected capacity change from 0 to 512 [ 759.194156][T19844] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 759.222924][T19844] EXT4-fs (loop9): 1 truncate cleaned up [ 759.238371][T19844] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.260478][T19848] syzkaller0: entered promiscuous mode [ 759.273625][T19848] syzkaller0: entered allmulticast mode [ 759.378066][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.505259][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4183'. [ 759.546930][T19856] fuse: Unknown parameter '0x0000000000000003' [ 759.608758][T19859] loop9: detected capacity change from 0 to 128 [ 759.677244][T19859] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 759.714300][T19859] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 761.505823][T18809] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.538884][T19879] syzkaller0: entered promiscuous mode [ 761.544643][T19879] syzkaller0: entered allmulticast mode [ 761.765847][T19887] fuse: Unknown parameter '0x0000000000000003' [ 761.776692][T19885] loop9: detected capacity change from 0 to 1024 [ 761.877561][ T27] audit: type=1800 audit(1778689602.109:1462): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4191" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 762.840649][T19901] loop7: detected capacity change from 0 to 256 [ 762.891946][T19901] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 762.906863][T19901] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 762.955212][T19901] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 763.324617][T19913] loop7: detected capacity change from 0 to 512 [ 763.335047][T19915] fuse: Unknown parameter '0x0000000000000003' [ 763.459999][T19913] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.4204: bg 0: block 473: padding at end of block bitmap is not set [ 763.561928][T19913] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 763.604089][T19913] EXT4-fs (loop7): 1 orphan inode deleted [ 763.610665][T19913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.639106][ T49] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 763.659752][ T49] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 763.661765][T19913] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.728172][T19924] syzkaller0: entered promiscuous mode [ 763.747933][T19924] syzkaller0: entered allmulticast mode [ 764.446193][T19935] syz_tun: entered allmulticast mode [ 764.502834][T19912] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.628547][T19939] fuse: Unknown parameter '0x0000000000000003' [ 764.803461][T19943] loop6: detected capacity change from 0 to 512 [ 764.821594][T19943] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 764.844843][T19945] syzkaller0: entered promiscuous mode [ 764.850452][T19945] syzkaller0: entered allmulticast mode [ 764.902056][T19943] EXT4-fs (loop6): 1 truncate cleaned up [ 764.908890][T19943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.305401][T19950] loop9: detected capacity change from 0 to 1024 [ 765.342695][T19950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 765.422709][T19950] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.105767][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.120327][T19963] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 766.402196][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.486337][T19981] loop8: detected capacity change from 0 to 2048 [ 767.514686][T19981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 767.560986][T19986] input: syz1 as /devices/virtual/input/input18 [ 767.672751][T19989] fuse: Unknown parameter 'fd0x0000000000000003' [ 768.665293][T20002] loop9: detected capacity change from 0 to 256 [ 768.715594][ T27] audit: type=1800 audit(1778689608.949:1463): pid=20002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4237" name="file2" dev="loop9" ino=1048667 res=0 errno=0 [ 769.469681][T20010] loop6: detected capacity change from 0 to 8 [ 769.659785][ T6189] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 770.329652][T20019] fuse: Unknown parameter 'fd0x0000000000000003' [ 772.053037][T20045] loop6: detected capacity change from 0 to 8 [ 772.846515][T20054] syzkaller0: entered promiscuous mode [ 773.548704][T20054] syzkaller0: entered allmulticast mode [ 773.799223][T20066] loop8: detected capacity change from 0 to 512 [ 773.834079][T20066] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 773.888883][T20071] loop6: detected capacity change from 0 to 8 [ 773.920356][T20066] EXT4-fs (loop8): 1 truncate cleaned up [ 773.973059][T20071] syz.6.4263: attempt to access beyond end of device [ 773.973059][T20071] loop6: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 773.992015][T20066] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.047454][T20071] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 774.078502][T20071] unable to read xattr id index table [ 774.235143][T20082] loop9: detected capacity change from 0 to 8 [ 774.259180][T20079] lo speed is unknown, defaulting to 1000 [ 774.862770][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.349051][T20093] loop8: detected capacity change from 0 to 2048 [ 776.408483][T20093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 776.413470][T20101] syzkaller0: entered promiscuous mode [ 776.511140][T20101] syzkaller0: entered allmulticast mode [ 776.540526][T20112] EXT4-fs error (device loop8): swap_inode_boot_loader:384: comm syz.8.4268: inode #5: comm syz.8.4268: iget: illegal inode # [ 776.629129][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 776.696344][T20117] loop6: detected capacity change from 0 to 512 [ 776.710297][T20117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 776.744545][T20117] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.4278: iget: bad i_size value: 38620345925642 [ 776.819329][T20117] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.4278: couldn't read orphan inode 15 (err -117) [ 776.894869][T20117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.932649][T20122] loop8: detected capacity change from 0 to 1024 [ 776.952761][T20122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 777.065920][T20122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.763678][T20117] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.4278: bg 0: block 5: invalid block bitmap [ 777.853263][T20117] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 176 with error 28 [ 777.870246][T20117] EXT4-fs (loop6): This should not happen!! Data will be lost [ 777.870246][T20117] [ 777.887003][T20117] EXT4-fs (loop6): Total free blocks count 0 [ 777.931452][T20133] lo speed is unknown, defaulting to 1000 [ 777.994707][T20117] EXT4-fs (loop6): Free/Dirty block details [ 778.003148][T20117] EXT4-fs (loop6): free_blocks=0 [ 778.008178][T20117] EXT4-fs (loop6): dirty_blocks=180 [ 778.013679][T20117] EXT4-fs (loop6): Block reservation details [ 778.019681][T20117] EXT4-fs (loop6): i_reserved_data_blocks=180 [ 778.032883][T20133] loop9: detected capacity change from 0 to 128 [ 778.195480][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.280253][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.988619][T20143] loop6: detected capacity change from 0 to 512 [ 779.347168][T20143] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 779.665479][T20143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.709121][T20152] loop9: detected capacity change from 0 to 2048 [ 779.755482][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.794971][T20152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 779.887295][T20157] EXT4-fs error (device loop9): swap_inode_boot_loader:384: comm syz.9.4286: inode #5: comm syz.9.4286: iget: illegal inode # [ 779.917739][T20158] syzkaller0: entered promiscuous mode [ 779.926558][T20158] syzkaller0: entered allmulticast mode [ 779.987947][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 780.196232][T20162] loop6: detected capacity change from 0 to 4096 [ 780.214056][T20162] EXT4-fs (loop6): Test dummy encryption mode enabled [ 780.232291][T20162] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8002c118, mo2=0002] [ 780.276728][T20162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.347435][ T27] audit: type=1800 audit(1778689620.579:1464): pid=20162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4289" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 780.465188][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.473526][T20180] lo speed is unknown, defaulting to 1000 [ 783.011051][T20209] loop8: detected capacity change from 0 to 2048 [ 783.066386][T20209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.941460][ T5839] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 786.956113][T20271] syzkaller0: entered promiscuous mode [ 786.956132][T20271] syzkaller0: entered allmulticast mode [ 787.133921][ T5839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 787.152843][ T5839] usb 7-1: string descriptor 0 read error: -22 [ 787.159149][ T5839] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 787.176616][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.412763][ T5839] usb 7-1: 1:1: cannot set freq 48000 to ep 0x1 [ 787.491678][ T5839] usb 7-1: USB disconnect, device number 46 [ 788.618573][T20292] loop6: detected capacity change from 0 to 512 [ 788.661479][T20292] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 788.733065][T20292] EXT4-fs (loop6): 1 truncate cleaned up [ 788.757282][T20292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.168141][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.299439][T20311] loop8: detected capacity change from 0 to 128 [ 789.329747][T20311] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 789.333257][T20313] syzkaller0: entered promiscuous mode [ 789.371723][T20311] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 789.418852][T20313] syzkaller0: entered allmulticast mode [ 790.299181][T15122] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 791.151412][ T28] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 791.285748][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4339'. [ 791.321545][ T28] usb 10-1: device descriptor read/64, error -71 [ 791.369281][T20342] syzkaller0: entered promiscuous mode [ 791.378858][T20342] syzkaller0: entered allmulticast mode [ 791.602846][ T28] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 791.781598][ T28] usb 10-1: device descriptor read/64, error -71 [ 791.892573][T20246] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 792.045473][ T28] usb usb10-port1: attempt power cycle [ 792.732770][T20246] usb 7-1: Using ep0 maxpacket: 32 [ 792.827770][T20246] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.845671][T20246] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 792.868692][T20246] usb 7-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 792.882383][T20246] usb 7-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 792.893299][T20246] usb 7-1: Product: syz [ 792.900773][T20246] usb 7-1: Manufacturer: syz [ 792.913230][T20246] usb 7-1: config 0 descriptor?? [ 792.991474][ T28] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 793.038642][ T28] usb 10-1: device descriptor read/8, error -71 [ 793.431589][ T28] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 793.482209][ T28] usb 10-1: device descriptor read/8, error -71 [ 793.627022][ T28] usb usb10-port1: unable to enumerate USB device [ 794.656289][T20397] loop8: detected capacity change from 0 to 4096 [ 794.666078][T20397] EXT4-fs: Ignoring removed oldalloc option [ 794.708591][T20397] EXT4-fs (loop8): Test dummy encryption mode enabled [ 794.733573][T20397] EXT4-fs (loop8): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 794.770760][T20397] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 795.429224][T20413] kvm: pic: non byte write [ 795.561500][ T5757] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 795.594470][ T28] usb 7-1: USB disconnect, device number 47 [ 795.741765][ T5757] usb 10-1: device descriptor read/64, error -71 [ 795.854785][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4371'. [ 796.158024][ T5757] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 797.065785][ T5757] usb 10-1: device descriptor read/64, error -71 [ 797.199365][T20452] loop8: detected capacity change from 0 to 16 [ 797.206240][ T5757] usb usb10-port1: attempt power cycle [ 797.236000][T20452] erofs: (device loop8): mounted with root inode @ nid 36. [ 797.443851][T20454] loop8: detected capacity change from 0 to 1024 [ 797.471239][T20454] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 797.492436][T20454] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 797.518353][T20454] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 797.539418][T20454] EXT4-fs error (device loop8): ext4_ext_check_inode:530: inode #3: comm syz.8.4378: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 797.572843][T20454] EXT4-fs (loop8): no journal found [ 797.578080][T20454] EXT4-fs (loop8): can't get journal size [ 797.589462][T20454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 797.798877][ T5757] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 797.832725][ T5757] usb 10-1: device descriptor read/8, error -71 [ 798.495648][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.851043][T20493] loop9: detected capacity change from 0 to 2048 [ 799.888124][T20493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.919431][T20495] batadv_slave_1: entered promiscuous mode [ 799.934541][T20494] batadv_slave_1: left promiscuous mode [ 800.381875][ T23] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 800.781478][ T23] usb 9-1: device descriptor read/64, error -71 [ 801.061430][ T23] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 801.211594][ T23] usb 9-1: device descriptor read/64, error -71 [ 801.342275][ T23] usb usb9-port1: attempt power cycle [ 802.111416][ T23] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 802.142584][ T23] usb 9-1: device descriptor read/8, error -71 [ 802.471559][ T23] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 802.508422][ T23] usb 9-1: device descriptor read/8, error -71 [ 802.631706][ T23] usb usb9-port1: unable to enumerate USB device [ 803.096588][T20537] loop9: detected capacity change from 0 to 512 [ 803.104135][T20537] EXT4-fs: Ignoring removed orlov option [ 803.166099][T20537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.199450][T20537] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 803.338854][ T27] audit: type=1800 audit(1778689643.569:1465): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4405" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 803.428802][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.898818][T20558] loop9: detected capacity change from 0 to 2048 [ 804.933809][T20558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 805.888259][T20566] loop8: detected capacity change from 0 to 512 [ 805.984801][ T6189] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 808.835059][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.841719][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.758230][T20635] loop8: detected capacity change from 0 to 2048 [ 811.917111][T20635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 812.898581][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 813.380543][T20670] veth1_to_bond: entered allmulticast mode [ 813.397299][T20669] veth1_to_bond: left allmulticast mode [ 814.957715][T20691] loop8: detected capacity change from 0 to 2048 [ 815.008793][T20691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 815.694078][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 816.307747][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4452'. [ 816.319599][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4452'. [ 816.328971][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4452'. [ 816.338825][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4452'. [ 816.352519][T20704] trusted_key: encrypted_key: insufficient parameters specified [ 819.717231][T18201] usb 9-1: new low-speed USB device number 49 using dummy_hcd [ 820.327453][T20743] lo speed is unknown, defaulting to 1000 [ 820.383423][T18201] usb 9-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 820.403289][T18201] usb 9-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.413619][T18201] usb 9-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 820.426977][T18201] usb 9-1: config 0 interface 0 has no altsetting 0 [ 820.427197][T20743] loop9: detected capacity change from 0 to 128 [ 820.433864][T18201] usb 9-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 820.452833][T18201] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.463966][T18201] usb 9-1: config 0 descriptor?? [ 821.379478][T18201] wacom 0003:056A:00B4.000F: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 821.421069][T18201] wacom 0003:056A:00B4.000F: hidraw0: USB HID v0.09 Device [HID 056a:00b4] on usb-dummy_hcd.8-1/input0 [ 821.440768][T18201] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:00B4.000F/input/input20 [ 822.328888][ T5833] usb 9-1: USB disconnect, device number 49 [ 822.990661][T20775] loop9: detected capacity change from 0 to 512 [ 823.053382][T20775] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 823.065691][T20778] loop6: detected capacity change from 0 to 256 [ 823.074204][T20778] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 823.081692][T20776] lo speed is unknown, defaulting to 1000 [ 823.311460][T20775] EXT4-fs (loop9): 1 truncate cleaned up [ 823.317916][T20775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.437231][T20787] loop8: detected capacity change from 0 to 256 [ 823.453031][T20787] exfat: Deprecated parameter 'namecase' [ 823.531224][T20787] exfat: Deprecated parameter 'namecase' [ 823.772780][T20787] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 824.156233][T20792] loop6: detected capacity change from 0 to 256 [ 824.174498][T20792] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 824.203324][T20792] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 824.276500][T20792] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 825.702731][T20807] loop6: detected capacity change from 0 to 8 [ 825.715041][T20807] squashfs: Unknown parameter './file0' [ 826.697724][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.331485][T20840] loop9: detected capacity change from 0 to 512 [ 829.358999][T20840] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 829.412480][T20840] EXT4-fs (loop9): 1 truncate cleaned up [ 829.437291][T20845] loop6: detected capacity change from 0 to 128 [ 829.446539][T20840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.470557][T20848] lo speed is unknown, defaulting to 1000 [ 829.534670][T20845] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 829.785025][T20845] ext4 filesystem being mounted at /404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 831.239887][T15368] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 831.331437][T20837] Bluetooth: hci0: command 0x0406 tx timeout [ 832.716850][T20884] lo speed is unknown, defaulting to 1000 [ 833.135132][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.148392][T20923] loop8: detected capacity change from 0 to 512 [ 835.169887][T20923] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 835.191166][T20923] EXT4-fs (loop8): 1 truncate cleaned up [ 835.198700][T20923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.401819][ T5757] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 835.525680][T20930] lo speed is unknown, defaulting to 1000 [ 835.601586][ T5757] usb 7-1: Using ep0 maxpacket: 32 [ 835.603572][T20930] loop9: detected capacity change from 0 to 128 [ 835.655470][ T5757] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.708237][ T5757] usb 7-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 835.757269][ T5757] usb 7-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 835.789402][ T5757] usb 7-1: Product: syz [ 835.821095][ T5757] usb 7-1: Manufacturer: syz [ 835.896532][ T5757] usb 7-1: config 0 descriptor?? [ 836.588458][ T5757] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 836.741670][T20941] Driver unsupported XDP return value 0 on prog (id 163) dev N/A, expect packet loss! [ 837.876913][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.978798][T20957] lo speed is unknown, defaulting to 1000 [ 838.054361][T20957] loop9: detected capacity change from 0 to 128 [ 838.218477][T20964] loop8: detected capacity change from 0 to 8 [ 838.942083][ T6189] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 838.967922][ T5757] usb 7-1: USB disconnect, device number 48 [ 839.612877][T20989] lo speed is unknown, defaulting to 1000 [ 839.656072][T20991] loop9: detected capacity change from 0 to 128 [ 839.994960][T20996] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4549'. [ 840.070616][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4549'. [ 840.271879][T21004] loop8: detected capacity change from 0 to 256 [ 840.279131][T21004] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 840.631734][ T5757] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 840.782939][T21016] loop6: detected capacity change from 0 to 8 [ 840.841447][ T5757] usb 10-1: Using ep0 maxpacket: 32 [ 840.862715][ T5757] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.862790][T21018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4558'. [ 840.874568][ T5757] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.893092][T19832] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 840.958367][ T5757] usb 10-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 840.968933][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4558'. [ 841.032365][ T5757] usb 10-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 841.084109][ T5757] usb 10-1: Product: syz [ 841.111617][ T5757] usb 10-1: Manufacturer: syz [ 841.152487][ T5757] usb 10-1: config 0 descriptor?? [ 841.656853][ T5757] hid-generic 0003:25DD:F3D2.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.9-1/input0 [ 842.370723][ T28] usb 10-1: USB disconnect, device number 41 [ 842.444689][T21030] fido_id[21030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 844.133227][T21058] loop6: detected capacity change from 0 to 512 [ 844.141232][T21058] ext4: Unknown parameter 'nouser_xattr' [ 845.286837][T19832] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 845.308696][T21061] loop8: detected capacity change from 0 to 256 [ 845.344293][T21061] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 845.391679][T21065] loop9: detected capacity change from 0 to 8 [ 845.734949][ T6189] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.025852][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4583'. [ 848.195595][T21107] loop8: detected capacity change from 0 to 8 [ 848.455982][T21094] loop6: detected capacity change from 0 to 40427 [ 848.502001][T21094] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 848.522110][T21094] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 848.615131][T21094] F2FS-fs (loop6): Found nat_bits in checkpoint [ 848.708528][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.753489][T21094] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 848.760806][T21094] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 849.195052][T15368] syz-executor: attempt to access beyond end of device [ 849.195052][T15368] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 849.250625][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4586'. [ 849.278410][T15368] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.664713][ T5757] usb 9-1: new low-speed USB device number 50 using dummy_hcd [ 849.821659][ T786] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 849.899812][ T5757] usb 9-1: unable to get BOS descriptor or descriptor too short [ 849.919592][ T5757] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 849.939658][ T5757] usb 9-1: can't read configurations, error -71 [ 850.041566][ T786] usb 10-1: Using ep0 maxpacket: 32 [ 850.055720][ T786] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 850.068393][ T786] usb 10-1: config 0 has no interface number 0 [ 850.080543][ T786] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.096084][ T786] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.108990][ T786] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 850.122278][ T786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.144998][ T786] usb 10-1: config 0 descriptor?? [ 850.299090][T21132] loop6: detected capacity change from 0 to 40427 [ 850.326324][T21132] F2FS-fs (loop6): Image doesn't support compression [ 850.340789][T21132] F2FS-fs (loop6): Unrecognized mount option "whint_mode=fs-based" or missing value [ 850.505041][T19832] I/O error, dev loop6, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 850.811031][ T786] input: HID 28bd:0094 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0094.0011/input/input23 [ 850.901530][ T5757] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 850.935889][ T786] uclogic 0003:28BD:0094.0011: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.9-1/input1 [ 851.117576][T21145] loop6: detected capacity change from 0 to 512 [ 851.135007][ T5757] usb 9-1: unable to get BOS descriptor or descriptor too short [ 851.158719][T21145] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 851.180472][ T786] usb 10-1: USB disconnect, device number 42 [ 851.193074][ T5757] usb 9-1: string descriptor 0 read error: -22 [ 851.199386][ T5757] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 851.215089][T21142] fido_id[21142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 851.234294][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.258085][T21145] EXT4-fs (loop6): 1 truncate cleaned up [ 851.274253][T21145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.713320][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.890834][ T5757] usb 9-1: 1:1: cannot get freq at ep 0x1 [ 851.943328][T21154] loop6: detected capacity change from 0 to 16 [ 851.992125][ T5757] usb 9-1: USB disconnect, device number 51 [ 852.059984][T21154] erofs: (device loop6): mounted with root inode @ nid 36. [ 852.452734][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4598'. [ 853.142018][T21171] lo speed is unknown, defaulting to 1000 [ 853.590262][T21172] loop6: detected capacity change from 0 to 512 [ 853.602442][T21172] EXT4-fs: Ignoring removed i_version option [ 855.249208][T21172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.262640][T21172] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.490033][T21179] loop8: detected capacity change from 0 to 128 [ 855.522760][T21182] loop9: detected capacity change from 0 to 512 [ 855.570853][T21182] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 855.633711][T21179] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 855.683313][T21182] EXT4-fs (loop9): 1 truncate cleaned up [ 855.690293][T21182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.711479][T21179] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.874106][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.185088][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.232709][T15122] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 856.368622][T21189] loop6: detected capacity change from 0 to 256 [ 856.379399][T21190] loop9: detected capacity change from 0 to 512 [ 856.400357][T21189] exfat: Unknown parameter ' „P¢p”‚!JC( ÊA"Üåáf¨' [ 856.482587][T21190] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.4605: iget: bad i_size value: 38620345925642 [ 856.706613][T21190] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.4605: couldn't read orphan inode 15 (err -117) [ 856.761199][T21190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.861375][ T5757] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 856.945258][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4608'. [ 857.083646][ T5757] usb 9-1: unable to get BOS descriptor or descriptor too short [ 857.105206][ T5757] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 857.151389][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.159444][ T5757] usb 9-1: Product: syz [ 857.191695][ T5757] usb 9-1: Manufacturer: syz [ 857.196332][ T5757] usb 9-1: SerialNumber: syz [ 857.247487][ T5757] usb 9-1: selecting invalid altsetting 1 [ 857.292078][ T5757] usb 9-1: unit 6 not found! [ 857.342634][T21190] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.4605: bg 0: block 5: invalid block bitmap [ 857.377960][T21190] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 857.398896][T21190] EXT4-fs (loop9): This should not happen!! Data will be lost [ 857.398896][T21190] [ 857.409370][T21190] EXT4-fs (loop9): Total free blocks count 0 [ 857.415768][T21190] EXT4-fs (loop9): Free/Dirty block details [ 857.422584][T21190] EXT4-fs (loop9): free_blocks=0 [ 857.427595][T21190] EXT4-fs (loop9): dirty_blocks=3052 [ 857.433482][T21190] EXT4-fs (loop9): Block reservation details [ 857.443558][T21190] EXT4-fs (loop9): i_reserved_data_blocks=3052 [ 858.058229][T21213] loop6: detected capacity change from 0 to 512 [ 858.079940][T21213] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.4612: inode has both inline data and extents flags [ 858.094384][ T5757] usb 9-1: 2:0: failed to get current value for ch 0 (-71) [ 858.105428][ T5757] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 858.113013][T21213] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.4612: couldn't read orphan inode 15 (err -117) [ 858.128725][ T5757] usb 9-1: selecting invalid altsetting 1 [ 858.138311][T21213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 858.151773][ T5757] usb 9-1: unit 6 not found! [ 858.157616][ T5757] usb 9-1: 2:0: cannot get min/max values for control 1 (id 2) [ 858.177069][ T5757] snd-usb-audio: probe of 9-1:1.1 failed with error -22 [ 858.192266][ T5757] usb 9-1: selecting invalid altsetting 1 [ 858.198755][ T5757] usb 9-1: unit 6 not found! [ 858.204091][ T5757] usb 9-1: 2:0: cannot get min/max values for control 1 (id 2) [ 858.217585][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 858.235539][ T5757] snd-usb-audio: probe of 9-1:1.2 failed with error -22 [ 858.246721][ T5757] usb 9-1: USB disconnect, device number 52 [ 858.294166][T19832] udevd[19832]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.319590][ T5911] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 996 with error 28 [ 858.612376][T21224] loop9: detected capacity change from 0 to 512 [ 858.729741][T21224] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 858.790526][T21224] EXT4-fs (loop9): 1 truncate cleaned up [ 858.901731][T21224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.069893][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4617'. [ 859.245676][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.460462][T21241] loop9: detected capacity change from 0 to 256 [ 859.484740][T21241] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 859.516358][T21241] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 859.544800][T21241] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 860.259077][T21254] loop9: detected capacity change from 0 to 8 [ 860.394588][ T6189] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 861.325464][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4629'. [ 862.346265][T21276] loop6: detected capacity change from 0 to 40427 [ 862.375182][T21276] F2FS-fs (loop6): invalid crc value [ 862.813421][T20246] kernel write not supported for file bpf-prog (pid: 20246 comm: kworker/1:3) [ 863.185208][T21291] loop9: detected capacity change from 0 to 8 [ 863.341400][ T6189] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 863.503755][T21276] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 863.625694][T15368] syz-executor: attempt to access beyond end of device [ 863.625694][T15368] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 863.660637][T15368] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 863.741610][T21281] loop8: detected capacity change from 0 to 40427 [ 863.759474][T21281] F2FS-fs (loop8): Invalid segment/section count (24 != 24 * 3) [ 863.769389][T21281] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 863.779314][T21281] F2FS-fs (loop8): invalid crc value [ 863.790147][T21281] F2FS-fs (loop8): Found nat_bits in checkpoint [ 863.847414][T21281] F2FS-fs (loop8): Start checkpoint disabled! [ 863.912845][T21281] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 863.935559][T21281] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 864.214211][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4639'. [ 864.321439][T21303] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4639'. [ 864.650850][T21318] loop8: detected capacity change from 0 to 128 [ 865.646611][T21327] loop8: detected capacity change from 0 to 512 [ 865.711782][T21327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 865.791123][T21327] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 865.898194][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 865.921772][T21329] loop6: detected capacity change from 0 to 512 [ 866.207342][T21329] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 867.072365][T21329] EXT4-fs (loop6): 1 truncate cleaned up [ 867.114950][T21329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.390652][T21335] loop9: detected capacity change from 0 to 512 [ 867.666574][T21335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.731991][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4652'. [ 867.743730][T21335] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.891141][T21347] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4652'. [ 867.915702][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.950693][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.357927][T21358] syzkaller0: entered allmulticast mode [ 868.515333][T21358] syzkaller0 (unregistering): left allmulticast mode [ 869.138509][T21364] netlink: 'syz.9.4657': attribute type 12 has an invalid length. [ 869.321768][T21370] loop9: detected capacity change from 0 to 8 [ 869.361933][T19832] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 869.886174][T21379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4663'. [ 869.950957][T21379] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4663'. [ 870.085654][T21383] loop8: detected capacity change from 0 to 256 [ 870.989942][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.001901][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.061319][T21386] lo speed is unknown, defaulting to 1000 [ 871.195010][ T5838] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 871.225681][T21383] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 871.306957][T21390] loop9: detected capacity change from 0 to 128 [ 871.442953][T21390] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 871.455267][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 871.542663][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.584294][T21390] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.629150][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 871.728735][ T5838] usb 7-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 871.792460][ T5838] usb 7-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 871.825821][ T5838] usb 7-1: Product: syz [ 871.830032][ T5838] usb 7-1: Manufacturer: syz [ 871.870701][T18809] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 871.894184][ T5838] usb 7-1: config 0 descriptor?? [ 871.899893][T21385] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 872.017411][T21397] loop9: detected capacity change from 0 to 2048 [ 872.106581][T21397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 872.368050][ T5838] usbhid 7-1:0.0: can't add hid device: -71 [ 872.388000][ T5838] usbhid: probe of 7-1:0.0 failed with error -71 [ 872.407057][ T5838] usb 7-1: USB disconnect, device number 49 [ 872.475024][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4674'. [ 872.519352][T21412] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4674'. [ 872.896288][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 873.102236][T21418] loop9: detected capacity change from 0 to 512 [ 873.135833][T21418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.142096][T21421] loop6: detected capacity change from 0 to 128 [ 873.148591][T21418] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 873.204108][T21418] EXT4-fs (loop9): resizing filesystem from 128 to 1 blocks [ 873.211812][T21418] EXT4-fs warning (device loop9): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 873.237297][T21421] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 873.265824][T21421] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.277438][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.453016][T15368] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 873.972165][T21430] loop6: detected capacity change from 0 to 512 [ 874.002324][T21430] EXT4-fs: Ignoring removed bh option [ 874.089876][T21430] EXT4-fs (loop6): Invalid default hash set in the superblock [ 874.176585][T21441] loop9: detected capacity change from 0 to 256 [ 875.591671][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4683'. [ 875.725018][T21449] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4683'. [ 876.000905][T21452] loop8: detected capacity change from 0 to 2048 [ 876.078149][T21452] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 876.348723][T21459] loop9: detected capacity change from 0 to 256 [ 876.373573][T21459] exfat: Deprecated parameter 'utf8' [ 876.399603][T21459] exfat: Deprecated parameter 'namecase' [ 876.425149][T21459] exfat: Deprecated parameter 'namecase' [ 876.458857][T21459] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 876.686274][T21465] loop6: detected capacity change from 0 to 128 [ 876.736084][T21465] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 876.789161][T21465] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.876168][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 876.959772][T15368] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 877.134173][T21473] loop8: detected capacity change from 0 to 8 [ 877.282267][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 877.493440][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4692'. [ 877.550348][T21478] loop6: detected capacity change from 0 to 4096 [ 877.582401][T21481] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4692'. [ 877.649007][T21478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.011768][T21494] loop9: detected capacity change from 0 to 256 [ 878.297943][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.325417][T21501] loop8: detected capacity change from 0 to 8 [ 878.426048][ T6189] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 879.606772][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4702'. [ 880.286836][T21520] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4702'. [ 880.481437][T21523] loop8: detected capacity change from 0 to 256 [ 880.539406][T21524] loop9: detected capacity change from 0 to 2048 [ 880.576026][T21524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 881.022241][ T5757] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 881.081728][T21533] loop8: detected capacity change from 0 to 256 [ 881.135799][T21533] FAT-fs (loop8): Directory bread(block 64) failed [ 881.159038][T21533] FAT-fs (loop8): Directory bread(block 65) failed [ 881.191061][T21533] FAT-fs (loop8): Directory bread(block 66) failed [ 881.216494][T21533] FAT-fs (loop8): Directory bread(block 67) failed [ 881.223686][T21533] FAT-fs (loop8): Directory bread(block 68) failed [ 881.230301][T21533] FAT-fs (loop8): Directory bread(block 69) failed [ 881.237584][T21533] FAT-fs (loop8): Directory bread(block 70) failed [ 881.245645][T21533] FAT-fs (loop8): Directory bread(block 71) failed [ 881.255099][T21533] FAT-fs (loop8): Directory bread(block 72) failed [ 881.255524][ T5757] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1023 [ 881.273963][T21533] FAT-fs (loop8): Directory bread(block 73) failed [ 881.286624][ T5757] usb 7-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 881.305493][ T5757] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.325987][ T5757] usb 7-1: Product: syz [ 881.342820][ T5757] usb 7-1: Manufacturer: syz [ 881.365259][ T5757] usb 7-1: SerialNumber: syz [ 881.652515][ T5757] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 881.659863][ T5757] usb 7-1: unit 4 not found! [ 881.667086][ T5757] usb 7-1: 6:0: failed to get current value for ch 0 (-71) [ 881.887938][ T5757] usb 7-1: USB disconnect, device number 50 [ 882.315598][T19832] udevd[19832]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.714040][T21540] loop8: detected capacity change from 0 to 40427 [ 882.728367][T21540] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 882.736335][T21540] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 882.754419][T21540] F2FS-fs (loop8): invalid crc value [ 882.766465][T21540] F2FS-fs (loop8): Found nat_bits in checkpoint [ 882.836248][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4712'. [ 882.864902][T21540] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 882.889569][T21540] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 882.909703][T21551] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4712'. [ 883.559821][T18201] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 883.761372][T18201] usb 9-1: Using ep0 maxpacket: 16 [ 883.786107][T18201] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 883.811333][T18201] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.819361][T18201] usb 9-1: Product: syz [ 883.837579][T18201] usb 9-1: Manufacturer: syz [ 883.851310][T18201] usb 9-1: SerialNumber: syz [ 883.858318][T18201] usb 9-1: config 0 descriptor?? [ 883.873522][T18201] usb-storage 9-1:0.0: USB Mass Storage device detected [ 884.015095][T18201] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 884.061449][T18201] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 884.061449][T18201] Please send a copy of this message to and [ 884.126992][T21555] IPv6: Can't replace route, no match found [ 884.223450][ T5839] usb 9-1: USB disconnect, device number 53 [ 885.188709][T21574] loop8: detected capacity change from 0 to 8 [ 885.240526][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 886.375385][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4721'. [ 886.555131][T21580] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4721'. [ 886.916430][T21589] xt_hashlimit: overflow, try lower: 0/0 [ 887.363050][T21593] IPv6: Can't replace route, no match found [ 887.769443][T21607] loop9: detected capacity change from 0 to 4096 [ 887.780130][T21607] EXT4-fs: inline encryption not supported [ 887.799205][T21607] EXT4-fs: Ignoring removed mblk_io_submit option [ 887.818985][T21607] EXT4-fs: Ignoring removed bh option [ 887.844780][T21607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 887.902120][T21607] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 887.921508][T21607] System zones: 0-5 [ 887.948309][T21607] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.001368][T21597] loop8: detected capacity change from 0 to 40427 [ 888.030976][T21597] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff [ 888.033874][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4733'. [ 888.124580][T21597] F2FS-fs (loop8): Image doesn't support compression [ 888.151495][T21597] F2FS-fs (loop8): Image doesn't support compression [ 888.170357][T21597] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x4 [ 888.230368][T21597] F2FS-fs (loop8): invalid crc value [ 888.271506][T21597] F2FS-fs (loop8): Found nat_bits in checkpoint [ 888.283943][T21617] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4733'. [ 888.968413][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.018627][T21597] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 889.235440][T15122] syz-executor: attempt to access beyond end of device [ 889.235440][T15122] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 889.291057][T21625] lo speed is unknown, defaulting to 1000 [ 889.363400][T21625] loop9: detected capacity change from 0 to 128 [ 889.374522][T15122] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 889.582639][ T27] audit: type=1326 audit(1778689729.819:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21630 comm="syz.9.4738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70979ce59 code=0x7ffc0000 [ 889.664387][ T27] audit: type=1326 audit(1778689729.819:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21630 comm="syz.9.4738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb70979ce59 code=0x7ffc0000 [ 889.756463][ T27] audit: type=1326 audit(1778689729.819:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21630 comm="syz.9.4738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70979ce59 code=0x7ffc0000 [ 889.824628][T21637] IPv6: Can't replace route, no match found [ 889.857823][T21641] loop6: detected capacity change from 0 to 512 [ 889.913285][T21641] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 889.967789][T21641] EXT4-fs (loop6): 1 truncate cleaned up [ 890.010556][T21641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.315052][T21647] loop8: detected capacity change from 0 to 8 [ 890.376505][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 890.377449][T21649] loop9: detected capacity change from 0 to 512 [ 890.580377][T21649] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.4744: iget: bad i_size value: 38620345925642 [ 890.597498][T21649] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.4744: couldn't read orphan inode 15 (err -117) [ 890.647784][T21649] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.799851][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.977581][T21655] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.4744: bg 0: block 5: invalid block bitmap [ 890.990838][T21655] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 891.004675][T21655] EXT4-fs (loop9): This should not happen!! Data will be lost [ 891.004675][T21655] [ 891.016863][T21655] EXT4-fs (loop9): Total free blocks count 0 [ 891.024614][T21655] EXT4-fs (loop9): Free/Dirty block details [ 891.030606][T21655] EXT4-fs (loop9): free_blocks=0 [ 891.037258][T21655] EXT4-fs (loop9): dirty_blocks=2096 [ 891.042775][T21655] EXT4-fs (loop9): Block reservation details [ 891.048763][T21655] EXT4-fs (loop9): i_reserved_data_blocks=2096 [ 891.271380][T18201] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 891.773842][T18201] usb 7-1: Using ep0 maxpacket: 8 [ 892.655584][T18201] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.871598][T18201] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 892.914390][ T4779] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 44 with error 28 [ 892.951406][T18201] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 892.992546][T18201] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.032767][T21672] loop8: detected capacity change from 0 to 8 [ 893.061341][T18201] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.085927][T18201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.341117][T18201] usb 7-1: GET_CAPABILITIES returned 0 [ 893.350801][T18201] usbtmc 7-1:16.0: can't read capabilities [ 893.555590][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 893.570803][T18201] usb 7-1: USB disconnect, device number 51 [ 893.809942][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 894.421150][T21677] loop9: detected capacity change from 0 to 2048 [ 894.504609][T21677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 894.759097][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 894.861365][T18201] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 894.958334][T21690] loop9: detected capacity change from 0 to 8 [ 895.088872][T19832] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 895.231339][T18201] usb 7-1: Using ep0 maxpacket: 16 [ 895.250336][T18201] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 895.262302][T18201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.270555][T18201] usb 7-1: Product: syz [ 895.279573][T18201] usb 7-1: Manufacturer: syz [ 895.299830][T18201] usb 7-1: SerialNumber: syz [ 895.315978][T18201] usb 7-1: config 0 descriptor?? [ 895.336256][T18201] usb-storage 7-1:0.0: USB Mass Storage device detected [ 895.370400][T18201] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 895.411756][T18201] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 895.411756][T18201] Please send a copy of this message to and [ 895.593175][T21683] IPv6: Can't replace route, no match found [ 895.625894][T18201] usb 7-1: USB disconnect, device number 52 [ 895.829974][T21687] loop8: detected capacity change from 0 to 40427 [ 895.863992][T21687] F2FS-fs (loop8): Image doesn't support compression [ 895.887381][T21687] F2FS-fs (loop8): Unrecognized mount option "whint_mode=fs-based" or missing value [ 896.562985][T21716] loop8: detected capacity change from 0 to 8 [ 896.597680][T21714] loop6: detected capacity change from 0 to 2048 [ 896.692648][T21714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 897.036049][ T5757] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 897.299513][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 897.355874][ T5757] usb 10-1: Using ep0 maxpacket: 8 [ 897.368612][ T5757] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 897.428086][T21726] loop6: detected capacity change from 0 to 2048 [ 897.459899][T21726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 897.481858][ T5757] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 897.493687][ T5757] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 897.504115][ T5757] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.517273][ T5757] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 897.527905][ T5757] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.771638][ T5757] usb 10-1: GET_CAPABILITIES returned 0 [ 897.777272][ T5757] usbtmc 10-1:16.0: can't read capabilities [ 897.980052][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 897.997978][ T5757] usb 10-1: USB disconnect, device number 43 [ 898.481527][ T5833] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 898.641923][T21753] loop9: detected capacity change from 0 to 8 [ 898.691402][ T5833] usb 9-1: Using ep0 maxpacket: 16 [ 898.759123][ T5833] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 898.793511][T19832] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 899.064918][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.079380][ T5833] usb 9-1: Product: syz [ 899.085144][ T5833] usb 9-1: Manufacturer: syz [ 899.089860][ T5833] usb 9-1: SerialNumber: syz [ 899.099985][ T5833] usb 9-1: config 0 descriptor?? [ 899.115966][ T5833] usb-storage 9-1:0.0: USB Mass Storage device detected [ 899.130799][ T5833] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 899.145840][ T5833] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 899.145840][ T5833] Please send a copy of this message to and [ 899.328710][T21739] IPv6: Can't replace route, no match found [ 899.349897][ T5833] usb 9-1: USB disconnect, device number 54 [ 899.612790][T21765] overlayfs: failed to resolve './cgroup': -2 [ 899.704835][T21769] loop9: detected capacity change from 0 to 128 [ 899.717234][T21769] FAT-fs (loop9): Unrecognized mount option "sho" or missing value [ 900.181641][T18201] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 900.501918][T18201] usb 10-1: Using ep0 maxpacket: 8 [ 900.611010][T18201] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.724169][T18201] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 900.750823][T18201] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 900.775167][T18201] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.796548][T18201] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 900.808148][T18201] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.014661][T21785] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.022085][T21785] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.031174][T21785] bridge0: entered allmulticast mode [ 901.093414][T21785] bridge_slave_1: left allmulticast mode [ 901.113909][T21785] bridge_slave_1: left promiscuous mode [ 901.123289][T21785] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.138546][T21785] bridge_slave_0: left allmulticast mode [ 901.144533][T21785] bridge_slave_0: left promiscuous mode [ 901.150372][T21785] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.287660][T18201] usb 10-1: GET_CAPABILITIES returned 0 [ 901.293724][T18201] usbtmc 10-1:16.0: can't read capabilities [ 901.344989][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 901.433776][T21795] loop6: detected capacity change from 0 to 256 [ 901.468921][T18201] usb 10-1: USB disconnect, device number 44 [ 903.171675][ T5833] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 904.178467][ T5833] usb 10-1: Using ep0 maxpacket: 16 [ 904.214268][ T5833] usb 10-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 904.231046][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.241195][ T5833] usb 10-1: Product: syz [ 904.247617][ T5833] usb 10-1: Manufacturer: syz [ 904.252440][ T5833] usb 10-1: SerialNumber: syz [ 904.268081][ T5833] usb 10-1: config 0 descriptor?? [ 904.279524][ T5833] usb-storage 10-1:0.0: USB Mass Storage device detected [ 904.293400][ T5833] usb-storage 10-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 904.301017][ T5833] usb-storage 10-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 904.301017][ T5833] Please send a copy of this message to and [ 904.345815][T21813] loop8: detected capacity change from 0 to 40427 [ 904.373667][T21813] F2FS-fs (loop8): heap/no_heap options were deprecated [ 904.386587][T21813] F2FS-fs (loop8): build fault injection attr: rate: 19, type: 0x7ffff [ 904.497910][T21830] loop8: detected capacity change from 0 to 2048 [ 904.508913][T21810] IPv6: Can't replace route, no match found [ 904.521383][ T786] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 904.538919][ T5833] usb 10-1: USB disconnect, device number 45 [ 904.547120][T21830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.921532][ T786] usb 7-1: Using ep0 maxpacket: 8 [ 904.938566][ T786] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.971055][ T786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.999877][ T786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 905.055186][ T786] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.072076][ T786] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 905.081139][ T786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.041220][ T786] usb 7-1: GET_CAPABILITIES returned 0 [ 906.046817][ T786] usbtmc 7-1:16.0: can't read capabilities [ 906.160837][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 906.179718][ T5838] usb 7-1: USB disconnect, device number 53 [ 906.321899][T21843] syzkaller0: entered promiscuous mode [ 906.347692][T21843] syzkaller0: entered allmulticast mode [ 909.454808][T21859] loop8: detected capacity change from 0 to 8 [ 909.729795][ T6189] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 910.861123][T21862] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4811'. [ 910.911455][T18201] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 911.111616][T18201] usb 9-1: Using ep0 maxpacket: 16 [ 911.142521][T18201] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 911.172155][T18201] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.180215][T18201] usb 9-1: Product: syz [ 911.205975][T18201] usb 9-1: Manufacturer: syz [ 911.221656][T18201] usb 9-1: SerialNumber: syz [ 911.247545][T18201] usb 9-1: config 0 descriptor?? [ 911.277896][T18201] usb-storage 9-1:0.0: USB Mass Storage device detected [ 911.332494][T18201] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 911.339916][T18201] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 911.339916][T18201] Please send a copy of this message to and [ 911.438199][ T27] audit: type=1326 audit(1778689751.669:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21882 comm="syz.6.4816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f683b99ce59 code=0x0 [ 911.550099][T21875] IPv6: Can't replace route, no match found [ 911.672425][T18201] usb 9-1: USB disconnect, device number 55 [ 912.791739][T21905] loop9: detected capacity change from 0 to 4096 [ 912.968175][T21905] EXT4-fs: inline encryption not supported [ 912.980645][T21905] EXT4-fs: Ignoring removed mblk_io_submit option [ 912.996723][T21905] EXT4-fs: Ignoring removed bh option [ 913.143722][T21905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 913.533444][T21905] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 913.580012][T21912] loop8: detected capacity change from 0 to 8 [ 913.585407][T21905] System zones: 0-5 [ 913.631070][T21905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.655920][T21917] lo speed is unknown, defaulting to 1000 [ 913.671552][ T6189] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 914.382098][T21914] loop6: detected capacity change from 0 to 256 [ 914.856086][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.078993][T21953] loop6: detected capacity change from 0 to 2048 [ 916.224079][T21953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.440516][T21958] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 916.537987][T21960] syzkaller0: entered promiscuous mode [ 916.547317][T21960] syzkaller0: entered allmulticast mode [ 916.676176][T21964] loop8: detected capacity change from 0 to 512 [ 916.743211][T21964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.824671][T21964] EXT4-fs error (device loop8): ext4_validate_block_bitmap:421: comm syz.8.4829: bg 0: bad block bitmap checksum [ 916.950744][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.811365][T18201] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 919.001427][T18201] usb 7-1: Using ep0 maxpacket: 16 [ 919.063371][T18201] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.125760][T18201] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.175393][T18201] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 919.233754][T18201] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 919.253351][T21988] syzkaller0: entered promiscuous mode [ 919.258877][T21988] syzkaller0: entered allmulticast mode [ 919.282529][T18201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.325882][T18201] usb 7-1: config 0 descriptor?? [ 919.750219][T18201] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 919.760150][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.767808][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.780538][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.799921][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.816978][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.827803][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.845111][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.856605][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.869297][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.879495][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.911932][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.930716][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.950888][T18201] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 919.981659][T18201] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 920.018435][T18201] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 920.052080][T18201] microsoft 0003:045E:07DA.0012: no inputs found [ 920.058459][T18201] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 920.214389][ T5757] usb 7-1: USB disconnect, device number 54 [ 920.281551][ T5839] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 920.513329][ T5839] usb 9-1: Using ep0 maxpacket: 16 [ 920.524926][ T5839] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 920.537161][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.546200][ T5839] usb 9-1: Product: syz [ 920.550492][ T5839] usb 9-1: Manufacturer: syz [ 920.555574][ T5839] usb 9-1: SerialNumber: syz [ 920.568483][ T5839] usb 9-1: config 0 descriptor?? [ 920.576997][ T5839] usb-storage 9-1:0.0: USB Mass Storage device detected [ 920.589080][ T5839] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 920.599214][ T5839] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 920.599214][ T5839] Please send a copy of this message to and [ 920.818154][T21999] IPv6: Can't replace route, no match found [ 920.845031][T18201] usb 9-1: USB disconnect, device number 56 [ 921.042714][T22017] lo speed is unknown, defaulting to 1000 [ 921.126192][T22019] loop9: detected capacity change from 0 to 128 [ 922.400530][T22029] loop8: detected capacity change from 0 to 512 [ 922.534688][T22029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.627709][T22029] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.894304][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.116968][T22034] loop9: detected capacity change from 0 to 512 [ 923.148858][T22034] EXT4-fs: Ignoring removed orlov option [ 923.183054][T22034] EXT4-fs (loop9): Test dummy encryption mode enabled [ 923.223777][T22034] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 923.322705][T22034] EXT4-fs (loop9): 1 truncate cleaned up [ 923.360305][T22034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.492177][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.702365][ T5757] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 923.893036][ T5757] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 923.911403][T20246] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 923.920300][ T5757] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.940561][ T5757] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.960320][ T5757] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26473, setting to 64 [ 923.984575][ T5757] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.998691][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.007891][ T5757] usb 9-1: Product: syz [ 924.019594][ T5757] usb 9-1: Manufacturer: syz [ 924.025477][ T5757] usb 9-1: SerialNumber: syz [ 924.046015][ T5757] cdc_ncm 9-1:1.0: skipping garbage [ 924.121320][T20246] usb 10-1: Using ep0 maxpacket: 32 [ 924.132724][T20246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.151334][T20246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 924.183765][T20246] usb 10-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 924.193265][T20246] usb 10-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 924.207306][T20246] usb 10-1: Product: syz [ 924.212878][T20246] usb 10-1: Manufacturer: syz [ 924.231400][T20246] usb 10-1: config 0 descriptor?? [ 924.237136][T22041] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 924.249078][T22037] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 924.774919][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.795982][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.814125][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.830746][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.838653][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.876946][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.889101][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.900077][T20246] hid-generic 0003:25DD:F3D2.0013: unknown main item tag 0x0 [ 924.920185][T20246] hid-generic 0003:25DD:F3D2.0013: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.9-1/input0 [ 924.976667][T22037] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 925.035061][T20246] usb 10-1: USB disconnect, device number 46 [ 925.101405][T22054] IPv6: Can't replace route, no match found [ 925.199793][T22056] lo speed is unknown, defaulting to 1000 [ 925.223905][ T5757] cdc_ncm 9-1:1.0: bind() failure [ 925.240329][ T5757] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 925.262039][ T5757] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 925.273634][ T5757] usbtest: probe of 9-1:1.1 failed with error -71 [ 925.280665][T22056] loop6: detected capacity change from 0 to 128 [ 925.284580][ T5757] usb 9-1: USB disconnect, device number 57 [ 927.418261][T22076] loop8: detected capacity change from 0 to 8 [ 927.785697][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 928.648210][T22086] syz.6.4866 (22086) used obsolete PPPIOCDETACH ioctl [ 928.870111][T22092] loop8: detected capacity change from 0 to 256 [ 928.899763][T22092] FAT-fs (loop8): Directory bread(block 64) failed [ 928.906783][T22092] FAT-fs (loop8): Directory bread(block 65) failed [ 928.913911][T22092] FAT-fs (loop8): Directory bread(block 66) failed [ 928.920539][T22092] FAT-fs (loop8): Directory bread(block 67) failed [ 928.929124][T22092] FAT-fs (loop8): Directory bread(block 68) failed [ 928.935808][T22092] FAT-fs (loop8): Directory bread(block 69) failed [ 928.943491][T18201] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 928.944774][T22092] FAT-fs (loop8): Directory bread(block 70) failed [ 928.959492][T22092] FAT-fs (loop8): Directory bread(block 71) failed [ 928.966507][T22092] FAT-fs (loop8): Directory bread(block 72) failed [ 928.973546][T22092] FAT-fs (loop8): Directory bread(block 73) failed [ 929.023857][ T5839] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 929.232504][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 929.266926][T22097] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 929.274527][T18201] usb 10-1: Using ep0 maxpacket: 32 [ 929.294940][ T5839] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 929.308560][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.310304][T22097] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 929.316806][ T5839] usb 7-1: Product: syz [ 929.328329][ T5839] usb 7-1: Manufacturer: syz [ 929.328537][T18201] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.335150][ T5839] usb 7-1: SerialNumber: syz [ 929.395830][T18201] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 929.437987][T22099] loop8: detected capacity change from 0 to 128 [ 929.923672][T18201] usb 10-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 930.350894][T18201] usb 10-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 930.409380][T18201] usb 10-1: Product: syz [ 930.431691][T18201] usb 10-1: Manufacturer: syz [ 930.472640][T18201] usb 10-1: config 0 descriptor?? [ 930.478563][T22088] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 930.788650][ T5839] usb 7-1: config 0 descriptor?? [ 930.800341][ T5839] usb-storage 7-1:0.0: USB Mass Storage device detected [ 930.811002][ T5839] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 930.939954][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 930.947781][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 930.962134][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 930.969561][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 930.998319][T22105] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.013725][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 931.031618][T22105] bridge0: entered allmulticast mode [ 931.042409][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 931.076564][T22090] IPv6: Can't replace route, no match found [ 931.082805][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 931.100056][T18201] hid-generic 0003:25DD:F3D2.0014: unknown main item tag 0x0 [ 931.159159][T18201] hid-generic 0003:25DD:F3D2.0014: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.9-1/input0 [ 931.200463][T18201] usb 10-1: USB disconnect, device number 47 [ 931.333357][ T5839] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 931.333357][ T5839] Please send a copy of this message to and [ 931.356109][T22108] fido_id[22108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 931.467322][T22110] lo speed is unknown, defaulting to 1000 [ 931.515774][T22111] loop8: detected capacity change from 0 to 128 [ 931.525103][ T5839] usb 7-1: USB disconnect, device number 55 [ 931.657287][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.665742][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.959390][T22120] loop6: detected capacity change from 0 to 8 [ 932.093150][T19832] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 933.702830][T22119] loop9: detected capacity change from 0 to 40427 [ 933.753733][T22119] F2FS-fs (loop9): invalid crc value [ 933.796934][T22119] F2FS-fs (loop9): Found nat_bits in checkpoint [ 934.000867][T22119] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 934.089960][T22139] loop8: detected capacity change from 0 to 4096 [ 934.104168][T22139] EXT4-fs: inline encryption not supported [ 934.112250][ T27] audit: type=1800 audit(1778689774.339:1470): pid=22119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4877" name="file2" dev="loop9" ino=10 res=0 errno=0 [ 934.128483][T22141] loop6: detected capacity change from 0 to 8 [ 934.139053][T22139] EXT4-fs: Ignoring removed mblk_io_submit option [ 934.152392][T22139] EXT4-fs: Ignoring removed bh option [ 934.177636][T18809] syz-executor: attempt to access beyond end of device [ 934.177636][T18809] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 934.204130][T22139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 934.216149][ T6189] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 934.253421][T18809] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 934.264058][T22139] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 934.273623][T22139] System zones: 0-5 [ 934.285620][T22139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.150310][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.803048][T22154] loop8: detected capacity change from 0 to 256 [ 937.753183][T22168] loop9: detected capacity change from 0 to 1024 [ 937.775266][T22168] EXT4-fs: Ignoring removed orlov option [ 937.800754][T22168] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 937.820633][T22168] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 937.828684][T22170] lo speed is unknown, defaulting to 1000 [ 937.874378][T22168] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 937.884394][T22168] EXT4-fs (loop9): Can't support bigalloc feature without extents feature [ 937.884394][T22168] [ 937.898235][T22168] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 937.909319][T22168] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 938.126027][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.372828][T22178] loop9: detected capacity change from 0 to 8 [ 939.802899][T22196] loop8: detected capacity change from 0 to 8 [ 939.903037][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.650640][T22204] loop9: detected capacity change from 0 to 256 [ 942.265817][T22219] loop9: detected capacity change from 0 to 1024 [ 942.283399][T22219] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 942.296863][T22219] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 942.316003][T22219] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 942.329020][T22219] EXT4-fs error (device loop9): ext4_ext_check_inode:530: inode #3: comm syz.9.4899: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 942.353587][T22219] EXT4-fs (loop9): no journal found [ 942.360164][T22219] EXT4-fs (loop9): can't get journal size [ 942.371101][T22219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 943.375491][T22233] netlink: 'syz.8.4902': attribute type 3 has an invalid length. [ 943.601214][T22239] loop6: detected capacity change from 0 to 8 [ 943.650670][T19832] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 944.355524][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.567658][T22243] lo speed is unknown, defaulting to 1000 [ 944.634981][T22244] loop9: detected capacity change from 0 to 128 [ 945.431427][ T5757] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 945.621605][ T5757] usb 7-1: Using ep0 maxpacket: 32 [ 945.655672][ T5757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.699543][ T5757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 945.839648][T22257] loop8: detected capacity change from 0 to 256 [ 946.790670][ T5757] usb 7-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 946.800097][ T5757] usb 7-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 946.808401][ T5757] usb 7-1: Product: syz [ 946.812694][ T5757] usb 7-1: Manufacturer: syz [ 947.491679][ T5757] usb 7-1: config 0 descriptor?? [ 947.513166][T22254] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 947.555988][T22263] loop8: detected capacity change from 0 to 8 [ 948.004254][ T5757] hid-generic 0003:25DD:F3D2.0015: unknown main item tag 0x0 [ 948.029573][ T5757] hid-generic 0003:25DD:F3D2.0015: unknown main item tag 0x0 [ 948.047649][ T5757] hid-generic 0003:25DD:F3D2.0015: unknown main item tag 0x0 [ 948.071520][ T5757] hid-generic 0003:25DD:F3D2.0015: unknown main item tag 0x0 [ 948.097676][ T5757] hid-generic 0003:25DD:F3D2.0015: unknown main item tag 0x0 [ 948.133005][ T5757] hid-generic 0003:25DD:F3D2.0015: unbalanced collection at end of report description [ 948.222129][ T5757] hid-generic: probe of 0003:25DD:F3D2.0015 failed with error -22 [ 948.877409][ T5757] usb 7-1: USB disconnect, device number 56 [ 949.159662][T22275] loop6: detected capacity change from 0 to 8 [ 949.212587][T19832] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 949.560487][T22280] loop9: detected capacity change from 0 to 4096 [ 949.596405][T22280] EXT4-fs: inline encryption not supported [ 949.616420][T22280] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.640774][T22280] EXT4-fs: Ignoring removed bh option [ 949.674696][T22280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 949.700417][T22280] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 949.709920][T22280] System zones: 0-5 [ 949.717709][T22280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.662547][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.704924][T22288] lo speed is unknown, defaulting to 1000 [ 951.037281][T22292] loop6: detected capacity change from 0 to 2048 [ 951.090417][T22292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 951.656126][T22300] loop9: detected capacity change from 0 to 256 [ 954.280843][ T5757] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 954.345418][T22313] loop9: detected capacity change from 0 to 256 [ 954.521602][ T5757] usb 9-1: Using ep0 maxpacket: 32 [ 954.562390][ T5757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.634840][ T5757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 954.759442][ T5757] usb 9-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 954.835550][ T5757] usb 9-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 954.881388][ T5757] usb 9-1: Product: syz [ 954.905525][ T5757] usb 9-1: Manufacturer: syz [ 954.954776][ T5757] usb 9-1: config 0 descriptor?? [ 954.961944][T22312] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 955.434624][T22326] loop9: detected capacity change from 0 to 512 [ 955.435467][ T5757] hid-generic 0003:25DD:F3D2.0016: unknown main item tag 0x0 [ 955.473786][T22326] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 955.486955][ T5757] hid-generic 0003:25DD:F3D2.0016: unknown main item tag 0x0 [ 955.511364][ T5757] hid-generic 0003:25DD:F3D2.0016: unknown main item tag 0x0 [ 955.541318][T22326] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5 [ 955.561774][ T5757] hid-generic 0003:25DD:F3D2.0016: unknown main item tag 0x0 [ 955.579656][ T5757] hid-generic 0003:25DD:F3D2.0016: unknown main item tag 0x0 [ 955.591080][T22326] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 955.613369][ T5757] hid-generic 0003:25DD:F3D2.0016: unbalanced collection at end of report description [ 955.624408][T22326] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.4926: Failed to acquire dquot type 1 [ 955.628739][ T5757] hid-generic: probe of 0003:25DD:F3D2.0016 failed with error -22 [ 955.698026][T22326] EXT4-fs (loop9): 1 truncate cleaned up [ 955.726772][T22326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 955.737445][ T5757] usb 9-1: USB disconnect, device number 58 [ 955.792993][T22326] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.4926: deleted inode referenced: 12 [ 955.843380][T22332] loop6: detected capacity change from 0 to 8 [ 955.941381][ T5758] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 956.005278][T18809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 956.715499][T22340] loop8: detected capacity change from 0 to 256 [ 957.035431][T22344] lo speed is unknown, defaulting to 1000 [ 957.301081][T22336] loop9: detected capacity change from 0 to 40427 [ 957.568543][T22336] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 957.620361][T22336] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 957.695803][T22336] F2FS-fs (loop9): invalid crc value [ 957.761485][T22350] loop8: detected capacity change from 0 to 128 [ 957.802428][T22336] F2FS-fs (loop9): Found nat_bits in checkpoint [ 957.820452][T22350] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 958.019656][T22350] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 958.042779][T22336] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 958.051883][T22350] ext2 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 958.062396][T22336] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 958.333632][T15122] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 958.373423][ T28] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 958.412000][T22359] F2FS-fs (loop9): Stopped filesystem due to reason: 0 [ 958.585464][ T28] usb 7-1: Using ep0 maxpacket: 8 [ 958.660945][ T28] usb 7-1: config 1 interface 0 altsetting 142 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 958.694710][ T28] usb 7-1: config 1 interface 0 has no altsetting 0 [ 958.713171][ T28] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 958.730952][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 958.748217][ T28] usb 7-1: SerialNumber: syz [ 959.383962][ T28] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 959.488416][T22375] loop9: detected capacity change from 0 to 8 [ 959.545274][T19832] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 959.639120][ T9] usb 7-1: USB disconnect, device number 57 [ 959.783091][T22377] loop8: detected capacity change from 0 to 8 [ 960.370523][T22381] loop9: detected capacity change from 0 to 256 [ 960.406192][T22386] lo speed is unknown, defaulting to 1000 [ 960.873066][ T27] audit: type=1400 audit(1778689801.099:1471): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=22394 comm="syz.6.4944" [ 961.014987][T22395] loop6: detected capacity change from 0 to 4096 [ 961.047747][T22395] EXT4-fs: inline encryption not supported [ 961.071407][T22395] EXT4-fs: Ignoring removed bh option [ 961.114259][T22395] EXT4-fs: Mount option(s) incompatible with ext2 [ 961.641496][ T28] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 961.740728][T22406] loop6: detected capacity change from 0 to 8 [ 961.871413][ T28] usb 10-1: Using ep0 maxpacket: 16 [ 961.904301][ T28] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.921375][T19832] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 961.961477][ T28] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.032492][ T28] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 962.116328][ T28] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 962.170222][ T28] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.226836][ T28] usb 10-1: config 0 descriptor?? [ 962.284685][T22409] loop6: detected capacity change from 0 to 8 [ 962.710495][T22364] syz_tun (unregistering): left allmulticast mode [ 962.748109][ T28] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 962.766701][T20837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 962.781130][T20837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 962.792159][T20837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 962.806886][ T28] microsoft 0003:045E:07DA.0017: item 0 4 0 9 parsing failed [ 962.815113][T20837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 962.832147][T20837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 962.839717][T20837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 962.847279][ T28] microsoft 0003:045E:07DA.0017: parse failed [ 962.854238][ T28] microsoft: probe of 0003:045E:07DA.0017 failed with error -22 [ 962.943758][T22412] loop6: detected capacity change from 0 to 4096 [ 962.955292][ T786] usb 10-1: USB disconnect, device number 48 [ 963.013769][T22412] EXT4-fs: inline encryption not supported [ 963.019638][T22412] EXT4-fs: Ignoring removed mblk_io_submit option [ 963.081340][T22412] EXT4-fs: Ignoring removed bh option [ 963.133636][T22412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 963.185132][T10212] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.196086][T22412] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 963.209837][T22417] loop8: detected capacity change from 0 to 512 [ 963.230639][T22412] System zones: 0-5 [ 963.267761][T22412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.415029][T22417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.449876][T10212] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.519461][T22413] lo speed is unknown, defaulting to 1000 [ 963.920999][T15122] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.156858][T10212] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.174701][T15368] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.963214][ T5782] Bluetooth: hci2: command tx timeout [ 965.123729][T10212] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.704199][T22439] loop6: detected capacity change from 0 to 8 [ 966.299148][T22443] loop6: detected capacity change from 0 to 128 [ 966.452951][T22413] chnl_net:caif_netlink_parms(): no params data found [ 966.932582][T22454] loop9: detected capacity change from 0 to 8 [ 967.171295][ T5782] Bluetooth: hci2: command tx timeout [ 967.403970][T22462] loop9: detected capacity change from 0 to 128 [ 967.494638][T22462] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 967.585830][T22462] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.735311][ T27] audit: type=1800 audit(1778689807.949:1472): pid=22462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4962" name="file1" dev="loop9" ino=13 res=0 errno=0 [ 967.815396][T22413] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.822727][T22413] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.829959][T22413] bridge_slave_0: entered allmulticast mode [ 967.838116][T22413] bridge_slave_0: entered promiscuous mode [ 967.874511][T22473] loop8: detected capacity change from 0 to 256 [ 967.906556][T18809] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 967.923345][T22413] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.930593][T22413] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.952127][T22413] bridge_slave_1: entered allmulticast mode [ 967.959375][T22413] bridge_slave_1: entered promiscuous mode [ 968.125701][T22413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.333804][T22413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.608895][T22486] loop8: detected capacity change from 0 to 8 [ 968.718927][T19832] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 968.896102][T22413] team0: Port device team_slave_0 added [ 969.120897][T22413] team0: Port device team_slave_1 added [ 969.258772][ T5782] Bluetooth: hci2: command tx timeout [ 969.315897][T22413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.326837][T22490] loop6: detected capacity change from 0 to 512 [ 969.333931][T22413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.366299][T22490] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 969.374129][T22413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.404822][T22490] EXT4-fs (loop6): 1 truncate cleaned up [ 969.413079][T22490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.549486][T22489] netlink: 'syz.6.4967': attribute type 3 has an invalid length. [ 969.620727][T22489] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 969.638058][T22413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.649697][T22413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.834749][T22413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.117851][T22413] hsr_slave_0: entered promiscuous mode [ 970.153864][T20223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.197363][T22413] hsr_slave_1: entered promiscuous mode [ 970.235639][T22504] loop8: detected capacity change from 0 to 512 [ 970.252125][T22413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.259711][T22413] Cannot create hsr debugfs directory [ 970.272436][T22504] EXT4-fs: Ignoring removed bh option [ 970.327611][T22504] EXT4-fs error (device loop8): ext4_iget_extra_inode:4739: inode #15: comm syz.8.4970: corrupted in-inode xattr: bad e_name length [ 970.439960][T22504] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.4970: couldn't read orphan inode 15 (err -117) [ 970.516616][T22504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.519144][T22514] loop9: detected capacity change from 0 to 128 [ 970.599412][T22514] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 970.680386][T22514] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.706136][T22504] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN [ 970.718012][T22504] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 970.726436][T22504] CPU: 0 PID: 22504 Comm: syz.8.4970 Not tainted syzkaller #0 [ 970.733912][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.743978][T22504] RIP: 0010:utf8nlookup+0x39/0xa50 [ 970.748014][T19832] udevd[19832]: incorrect ext4 checksum on /dev/loop8 [ 970.749091][T22504] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 c2 56 f4 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 d8 8d 4c ff 48 8b 1b 48 83 c3 30 [ 970.775458][T22504] RSP: 0018:ffffc9000bd17480 EFLAGS: 00010206 [ 970.781544][T22504] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000 [ 970.789528][T22504] RDX: ffffc90010bf1000 RSI: 00000000000024c0 RDI: 00000000000024c1 [ 970.797511][T22504] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 970.805494][T22504] R10: ffffc9000bd17618 R11: fffff520017a2ec6 R12: dffffc0000000000 [ 970.813477][T22504] R13: 0000000000000000 R14: ffff88807944c940 R15: dffffc0000000000 [ 970.821463][T22504] FS: 00007f23dc5f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 970.830410][T22504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 970.837012][T22504] CR2: 0000200000001b80 CR3: 000000006a90a000 CR4: 00000000003506f0 [ 970.845003][T22504] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 970.852989][T22504] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 970.860975][T22504] Call Trace: [ 970.864264][T22504] [ 970.867221][T22504] ? __kasan_kmalloc+0x8f/0xa0 [ 970.872007][T22504] ? ext4_fname_prepare_lookup+0x230/0x3d0 [ 970.877803][T22504] ? ext4_lookup+0x125/0x710 [ 970.882500][T22504] ? path_openat+0x10e4/0x3230 [ 970.887266][T22504] ? do_filp_open+0x1f5/0x430 [ 970.891940][T22504] utf8byte+0x34f/0x1370 [ 970.896197][T22504] ? utf8ncursor+0x170/0x210 [ 970.900775][T22504] utf8_casefold+0x146/0x260 [ 970.905360][T22504] ? utf8_strncasecmp_folded+0x280/0x280 [ 970.911007][T22504] ext4_fname_setup_ci_filename+0x1d5/0x430 [ 970.916927][T22504] ext4_fname_prepare_lookup+0x230/0x3d0 [ 970.922576][T22504] ? ext4_fname_free_filename+0xb0/0xb0 [ 970.928137][T22504] ? aa_get_newest_label+0xfd/0x5c0 [ 970.933361][T22504] ? from_kgid+0x16d/0x690 [ 970.937800][T22504] ext4_lookup+0x125/0x710 [ 970.942239][T22504] ? bpf_lsm_capable+0x9/0x10 [ 970.946935][T22504] ? security_capable+0x89/0xb0 [ 970.951804][T22504] ? ext4_add_entry+0xd90/0xd90 [ 970.956670][T22504] ? generic_permission+0x253/0x590 [ 970.961887][T22504] ? inode_permission+0xf3/0x480 [ 970.966843][T22504] ? bpf_lsm_inode_create+0x9/0x10 [ 970.971965][T22504] ? security_inode_create+0xb7/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 970.977352][T22504] ? ext4_add_entry+0xd90/0xd90 [ 970.982219][T22504] path_openat+0x10e4/0x3230 [ 970.986841][T22504] ? do_filp_open+0x430/0x430 [ 970.991530][T22504] ? __virt_addr_valid+0x18c/0x540 [ 970.996658][T22504] do_filp_open+0x1f5/0x430 [ 971.001206][T22504] ? vfs_tmpfile+0x490/0x490 [ 971.005829][T22504] ? _raw_spin_unlock+0x28/0x40 [ 971.010697][T22504] ? alloc_fd+0x58f/0x630 [ 971.015055][T22504] do_sys_openat2+0x134/0x1d0 [ 971.019761][T22504] ? do_sys_open+0xe0/0xe0 [ 971.024194][T22504] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 971.030192][T22504] ? lock_chain_count+0x20/0x20 [ 971.035060][T22504] __x64_sys_openat+0x139/0x160 [ 971.039926][T22504] do_syscall_64+0x55/0xa0 [ 971.044354][T22504] ? clear_bhb_loop+0x40/0x90 [ 971.049147][T22504] ? clear_bhb_loop+0x40/0x90 [ 971.053840][T22504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.059746][T22504] RIP: 0033:0x7f23db79ce59 [ 971.064175][T22504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.083793][T22504] RSP: 002b:00007f23dc5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 971.092228][T22504] RAX: ffffffffffffffda RBX: 00007f23dba15fa0 RCX: 00007f23db79ce59 [ 971.100221][T22504] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 971.108209][T22504] RBP: 00007f23db832d6f R08: 0000000000000000 R09: 0000000000000000 [ 971.116212][T22504] R10: 000000000000004d R11: 0000000000000246 R12: 0000000000000000 [ 971.124192][T22504] R13: 00007f23dba16038 R14: 00007f23dba15fa0 R15: 00007ffcec734e08 [ 971.132183][T22504] [ 971.135211][T22504] Modules linked in: [ 971.159899][T22504] ---[ end trace 0000000000000000 ]--- [ 971.162469][T18809] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 971.165471][T22504] RIP: 0010:utf8nlookup+0x39/0xa50 [ 971.203723][T22504] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 c2 56 f4 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 d8 8d 4c ff 48 8b 1b 48 83 c3 30 [ 971.271039][T22504] RSP: 0018:ffffc9000bd17480 EFLAGS: 00010206 [ 971.274829][T20837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 971.284590][T20837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 971.292710][T20837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 971.300429][T20837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 971.307972][T20837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 971.314958][T22504] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000 [ 971.315233][T20837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 971.331405][T20837] Bluetooth: hci2: command tx timeout [ 971.352567][T22504] RDX: ffffc90010bf1000 RSI: 00000000000024c0 RDI: 00000000000024c1 [ 971.360580][T22504] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 971.391317][T10212] hsr_slave_0: left promiscuous mode [ 971.421042][T22504] R10: ffffc9000bd17618 R11: fffff520017a2ec6 R12: dffffc0000000000 [ 971.435556][T10212] hsr_slave_1: left promiscuous mode [ 971.454368][T22504] R13: 0000000000000000 R14: ffff88807944c940 R15: dffffc0000000000 [ 971.471418][T22504] FS: 00007f23dc5f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 971.480729][T22504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 971.499290][T10212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.507677][T10212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.518734][T10212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.521306][T22504] CR2: 00007fe5adde7ae0 CR3: 000000006a90a000 CR4: 00000000003506f0 [ 971.527920][T10212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.551365][T22504] Kernel panic - not syncing: Fatal exception [ 971.559546][T22504] Kernel Offset: disabled [ 971.563864][T22504] Rebooting in 86400 seconds..