last executing test programs: 13m23.462635103s ago: executing program 32 (id=1630): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 13m22.142511434s ago: executing program 33 (id=1635): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 12m41.73742686s ago: executing program 34 (id=1688): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8m53.570809024s ago: executing program 35 (id=1884): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setns(0xc9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x844) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x500, 0xa8a00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/121, 0x79}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') exit(0x22) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r6, &(0x7f0000000000), 0x3f5aa546) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r6, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) 3m58.897918208s ago: executing program 36 (id=2864): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) 3m50.263194048s ago: executing program 9 (id=2922): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_sctp(0xa, 0x1, 0x84) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x3000000, 0x0) 3m49.666105034s ago: executing program 9 (id=2927): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, 0x0) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 3m48.994107943s ago: executing program 9 (id=2930): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) 3m48.624152598s ago: executing program 9 (id=2933): open(0x0, 0x20000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat(0xffffffffffffffff, 0x0, 0x450401, 0x1defbfff49dbc86c) set_mempolicy(0x2002, 0x0, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc042, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000240)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x39) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0xa2849291, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r1) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/platform/serial8250/uevent\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/10, 0xa) 3m48.01124244s ago: executing program 9 (id=2937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xc) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x2, 0x0) writev(r0, &(0x7f0000001980)=[{0x0}, {0x0}], 0x2) 3m47.311597076s ago: executing program 9 (id=2939): mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280), 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) 3m46.192576006s ago: executing program 37 (id=2939): mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280), 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) 3m43.483875598s ago: executing program 4 (id=2959): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='file ne*/sctp/* ', 0x10) 3m43.186184365s ago: executing program 4 (id=2962): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xc) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x2, 0x0) writev(r0, &(0x7f0000001980)=[{&(0x7f00000002c0)}, {0x0}], 0x2) 3m42.934982022s ago: executing program 4 (id=2963): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x2, 0x0, 0x18, r0}, 0x10) 3m42.294042978s ago: executing program 4 (id=2967): open(0x0, 0x20000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat(0xffffffffffffffff, 0x0, 0x450401, 0x1defbfff49dbc86c) set_mempolicy(0x2002, 0x0, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc042, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000240)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x39) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0xa2849291, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r1) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/10, 0xa) 3m41.655953666s ago: executing program 4 (id=2969): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x6c3c, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m41.131594705s ago: executing program 4 (id=2973): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x88081, 0x0) 3m40.220904835s ago: executing program 38 (id=2973): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x88081, 0x0) 3m40.167831982s ago: executing program 6 (id=2978): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='0', 0x1) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='dummy_udc.0', 0xb) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffff9c, 0x0, 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) dup(r2) 3m38.274266275s ago: executing program 6 (id=2980): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, 0x0, 0x0) 3m38.055657978s ago: executing program 6 (id=2982): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x10, 0x460e, 0x3) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001200)={&(0x7f0000000340)={0x50, 0x0, 0x1008001, {0x7, 0x2d, 0x4, 0xe002700, 0x5, 0x0, 0x6, 0x6, 0x0, 0x0, 0x4, 0x1002}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m34.784284774s ago: executing program 6 (id=2998): open(0x0, 0x20000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat(0xffffffffffffffff, 0x0, 0x450401, 0x1defbfff49dbc86c) set_mempolicy(0x2002, 0x0, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc042, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000240)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x39) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0xa2849291, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/platform/serial8250/uevent\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/10, 0xa) 3m34.071581972s ago: executing program 6 (id=3004): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4082, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 3m33.568143021s ago: executing program 6 (id=3006): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14b8c2, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./tracing/uprobe_events\x00', 0x1, 0x4) write(r0, &(0x7f0000000340)="703a732f5f202e2f66696c65303a30f598a24f5aa26e5fae28eb", 0x1a) 3m32.40539829s ago: executing program 39 (id=3006): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14b8c2, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./tracing/uprobe_events\x00', 0x1, 0x4) write(r0, &(0x7f0000000340)="703a732f5f202e2f66696c65303a30f598a24f5aa26e5fae28eb", 0x1a) 52.154185648s ago: executing program 5 (id=3923): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 51.773485799s ago: executing program 5 (id=3925): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x2b, 0x826, &(0x7f00000005c0)="$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") pselect6(0x40, &(0x7f00000003c0)={0xc, 0x800000000000e, 0x7, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffeffffffd, 0x200000000000c8ce}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(0x0, 0x22) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setresuid(0x0, 0xee00, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000e40)="580000001400add427323b470c45b4560a067fffffff81004e22032f00ff0028925a88002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffdbef283a2f258d2f00000000100000020000", 0x58}], 0x1) capset(&(0x7f0000000000)={0x20080522}, 0x0) 49.75361351s ago: executing program 5 (id=3931): rseq(&(0x7f0000000100), 0x20, 0x20000000, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x1000000b]}, 0x0, 0x0, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) close(0x3) 47.819537175s ago: executing program 5 (id=3944): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0xfc, 0xc4e, &(0x7f0000000f40)="$eJzs3UFsHNd9P/DfGy3FlfzPX0ycqHYbt5u2SGXFcmVJMRWrcFc1zTaALAuhmFsArsSVujBFEiTVyEbaML300EOAoughJwKtUSBFA6Mpgh7Z1gWSiw9FTj0RLWwERQ9sESBAgWCLmX0rLinJoiWRoqzPx6a+u7Pvzbz3hpqhBL15AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABE/M6rZ4+/kB52KwCA3XR+4ivHT7j/A8Bj5WL1538/AAAAAAAAAAAAAAAAwB6WoognI8X8+fU0Vb3vqZ/rzF6/MTk2fvtqB1JVc19Vvvyqv3Di5Kkvvjh6up8fXv9Bezpen7h4tvHK3LX5hfbiYnu6MTnbuTw33d72Hu63/lZHqwFoXHvj+vSVK4uNE8+f3PTxjZEPhp84PHJm9Nljz/TLTo6Nj08MlKkN3fPRb3GnCR77o4hjkeK57/0ktSKiiPsfi7t87+y0A1UnjladmBwbrzoy02nNLpUfXugPRBHRGKjU7I/RLpyL+9KMWC6bXzb4aNm9ifnWQuvSTLtxobWw1FnqzM1eSL3Wlv1pRBGnU8RKRKwN37q7oSiiFim+c2g9XYqIff1x+EI1MfjO7Sh2sI/bULazMRSxUjwC52wPG44iXosUP323iMvlmOWv+HzEa2X+IOLtMl+OqGaJnYp4/zbfRzyaalHEn5bn/8x6mo6I7qHe9vHGua82vjx7ZW6gbP+68sjfH3bTHr821aOIVnXFX0/3/sMOAAAAAAAAAAAAAAAAAA/agSji6Ujx6r/+QTWvOKp56YfOjP7uyCcG54w/dZf9lGWfj4jlYntzcvfnKcQX0oWUHvJc4sdZPYr4wzz/71sPuzEAAAAAAAAAAAAAAAAAAACPtSJ+HCleeu9IWonBNcU7s1cbF1uXZnqrwvbX/u2vmd7tdruN1MtmzqmcyzlXcq7mXMsZRa6fs5lzKudyzpWcqznXcsa+XD9nM+dUzuWcKzlXc67ljFqun7OZcyrncs6VnKs513LGHlm7FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg46SIIn4eKb799fUUKSKaEVPRy9XhfhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GEaTkV8P1I0fq95c1stIlL1f8+R8pdT0dxf5qeiOVrmy9E8m7NVZa35rbseLe1IH7h3Q6mIH0WK4fo7N89OPv9DvXcb5+ztb2y8+8VaL/f1Pxz5YPiJw4fOjI7/8lN3el3VHdrSgKPnOrPXbzQmx8bHJwY213K5Tw1sG8nHLfL7TzyYIXisLb751hutmZn2ghePx4ta70Ut9kh7dutFvl7FXmnP1hfNO35UtvohNOzhXpfYHeX9//1I8Zvv/dvNW3O+//+/3rubd/j42R9t3P9f2rqj7d7/t7rL/f/JgW0v5Z9GhmoR9aVr80OHI+qLb751rHOtdbV9tT176vjxL42Ofunk8aH9EfUrnZn2wKvBg/5v917HCwAAAAAAAAAAAAAAAGDXpCJ+O1K0frSeGhFxo5qvNXJm9Nljz+yLfdV8q03ztl6fuHi28crctfmF9uJie7oxOdu5PDfd3u7h6tV0r8mx8R3pzF0d2OH2H6i/Mjf/5kLn6u8v3fbzg/WzlxaXFlqXb/9xHIgiojm45WjV4Mmx8arRM53WbFX1wgN6lMJQKuLfI8XlU430ubwtz//bOsN/0/z/5a072v78v+FN9e4y/++TA9vKY6ZUxM8ixW/82VPxuaqdB+OWMcvl/ipSHD392Vwu9pfl+u3vPVegNzOwLPvfkeLvfr65bH8+5JMbZV/4SIP7CCjP/6FI8f0/+W78at62+fkPtz//B7fuaIfmf356YNvBTc8ruO+uk8//sUjx8pPvxK/lbR/2/I8iut3uNyOO5MI3n8+xQ+f/MwPbRqJ33F9/cN0HAAAAAAAAAAB4ZA2lIv46UjwzXksv5m3b+fd/01t3tEP//usXBrZN79J6Rfc9qAAAAACwRwylIn4cKa4uvXNzDvXm+d8D8z9/a2Pt9bG05dPq7/n+f/XcgAf593+DRvJxp+6/2wAAAAAAAAAAAAAAAAAAALCnpFTEi3k99am7rKe+Gile/c/ncrl0uCzXXwd+pPq1fn5u9tjZmZm5y62l1qWZdmNivnW5Xdb9dKRY/8vP5rpFtb56f7353hrv9W5/LfaFSDH+N/2yvbXY+2uT99YD763FXpb9ZKT4j7/dXLa/jvVnNsqeKMv+RaT42j/cvuzhjbIny7LfjRQ//FqjX/ZgWbb/fNTeM0nrtZhpP395buaWR6ECAAAAAAAAAAAAAAAAAADARzWUivjjSPFf11ZiOU/7z+v/91fgr/XLvv2NgfX+t7hRrfM/Uq3/f6fX97L+/8gD6ykAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6UhTxVqSYP7+eVofL9z31c53Z6zcmx8ZvX+1Aqmruq8qXX/UXTpw89cUXR0/388PrP2hPx+sTF882Xpm7Nr/QXlxsTzcmZzuX56bb297D/dbfGLqeo9UANK69cX36ypXFxonnT276+MbIB8NPHB45M/rssWf6ZSfHxscnBsrUhj7C0T9S4zbsjyL+PFI8972fpH8cjijibmPR7Xa7H36su3zv7LQDVSeOVp2YHBuvOjLTac0ulR9e6A9EEdEYqNTsj9EunIv70oxYLptfNvho2b2J+dZC69JMu3GhtbDUWerMzV5IvdaW/WlEEadTxEpErA3furuhKOKNSPGdQ+vpn4bL39F5HL5wfuIrx0/cuR3FDvZxG8p2NoYiVoqNc1bfq+dsDxuOIv4+Uvz03SPxz8MRteh9xecjXivzBxFvl/lyREoR3W9GvH+b7yMeTbUo4n/K839mPb07XF4P+teVc19tfHn2ytxA2f51ZVv3yl+58zEf+v1hN+3x+0k9ivhhdcVfT//i9zUAAAAAAAAAAAAAAADAHlLEL0WKl947kqr5wTfnFHdmrzYuti7N9Kb19ef+9edMd7vdbiP1splzKudyzpWcqznXckaR6+ds5pzKuZxzJedqzrWcsS/Xz9nMOZVzed/+Xv38fjXnWs6o5fo5mzmnci7nXMm5mnMtZ+yRuXsAAAAAAAAAAAAAAAAAAMDHS1H9l+LbX19P3eHe+tJT0ctV64F+7P1fAAAA//9EEwL2") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 47.347593192s ago: executing program 5 (id=3949): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x5, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2042, 0x19) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) fanotify_mark(r3, 0x105, 0x10000839, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 46.247413133s ago: executing program 5 (id=3955): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c000900090000060015"], 0x38}}, 0x2000a080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004014) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff, 0x0, 0xa9e7d3e3779f8165}, 0x10) 45.693629681s ago: executing program 40 (id=3955): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c000900090000060015"], 0x38}}, 0x2000a080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004014) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff, 0x0, 0xa9e7d3e3779f8165}, 0x10) 15.633793473s ago: executing program 7 (id=4084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x4000b, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15.259715373s ago: executing program 7 (id=4089): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) accept4(r0, &(0x7f00000001c0)=@ax25={{}, [@null, @remote, @rose, @remote, @bcast, @bcast, @remote, @null]}, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xd}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000040000000000000000000000000200dd000000000300000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0xfd00) io_submit(r6, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r7, &(0x7f0000000240)="00fb", 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x5, 0x5, r7, 0x0, 0x0, 0x0, 0x0, 0x3}]) prlimit64(r5, 0xb, &(0x7f0000000000)={0x3, 0x6272f331}, &(0x7f0000000180)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) 12.041608687s ago: executing program 7 (id=4095): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, 0x0, 0xc3000000) 11.766808286s ago: executing program 8 (id=4097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newpolicy={0xb8, 0x13, 0x403, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x123d, 0xffff, 0x0, 0x0, 0xa, 0x80, 0xa0, 0x87}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffefffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) 11.691481112s ago: executing program 7 (id=4098): syz_usb_connect$uac3(0x6, 0xac, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x4, 0xa0, 0x7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x23, 0x30, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x1e, 0x7fff}, [@input_terminal={0x14, 0x24, 0x2, 0x4, 0x201, 0x4, 0x5, 0x8, 0xfff5, 0x8f, 0x4, 0x101}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x9, 0x9, {0xa, 0x25, 0x25, 0x4c8, 0xff, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc, 0x3, 0xb, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x1, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181042, 0x0) pwrite64(r0, &(0x7f0000000140)='\f', 0x1, 0x8000c61) truncate(&(0x7f0000000940)='./file1\x00', 0x8da7) 10.730637449s ago: executing program 8 (id=4099): socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6f, 0x0, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 9.062407309s ago: executing program 8 (id=4105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 8.892134731s ago: executing program 7 (id=4107): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000", @ANYRES32=0x0, @ANYRES32], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/1, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x5}, {0xfff3, 0x6}}}, 0x24}}, 0x20000000) 8.7840611s ago: executing program 8 (id=4110): syz_emit_vhci(0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') 8.571289204s ago: executing program 7 (id=4111): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0xa1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) socket$netlink(0x10, 0x3, 0x6) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 6.889732901s ago: executing program 8 (id=4112): socket$packet(0x11, 0x2, 0x300) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 6.271340158s ago: executing program 1 (id=4115): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x301, 0x0) 5.787318778s ago: executing program 1 (id=4117): syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff0000000705010240000007050202400000070504024000000705060240000007058103400001070588"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) 5.571392914s ago: executing program 2 (id=4119): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[], &(0x7f0000000580)=""/216, 0x106, 0xd8, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500030000002c0004800800010000000001200002800c001400706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 5.360160206s ago: executing program 3 (id=4122): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x42942, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, 0x0) 5.269700814s ago: executing program 2 (id=4123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000", @ANYRES32=0x0, @ANYRES32], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/1, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x5}, {0xfff3, 0x6}}}, 0x24}}, 0x20000000) 5.019387767s ago: executing program 3 (id=4125): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3dd, &(0x7f0000000740)="$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") creat(&(0x7f0000000180)='./file0\x00', 0x70) 4.809459762s ago: executing program 2 (id=4126): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550d, 0x0) 4.496359479s ago: executing program 3 (id=4127): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 4.443995619s ago: executing program 2 (id=4128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r1, &(0x7f0000003440), 0x0, 0x162, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='00:', 0x3) write(r6, 0x0, 0x0) write(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r7, &(0x7f00000003c0)='di', 0x2) syz_mount_image$fuse(0x0, 0x0, 0x200a017, 0x0, 0x1, 0x0, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) 4.415887023s ago: executing program 1 (id=4129): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@user_xattr}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 4.395812234s ago: executing program 0 (id=4130): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f0000000640)="1405fe7aa8a111", 0x7}], 0x1, 0x4) 3.416117339s ago: executing program 2 (id=4131): socket$igmp6(0xa, 0x3, 0x2) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 3.415689182s ago: executing program 3 (id=4132): sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x88, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1c}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x820) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e05004b20"], 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 3.352128001s ago: executing program 0 (id=4133): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2010018, &(0x7f0000000000), 0x0, 0x4b4, &(0x7f0000000a00)="$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") chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x180) 3.177726407s ago: executing program 0 (id=4134): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc042, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x400) chdir(&(0x7f0000000240)='./bus\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/platform/serial8250/uevent\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2.962470437s ago: executing program 2 (id=4135): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@multicast, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@oldalloc}, {@dioread_nolock}, {@noinit_itable}]}, 0xff, 0x4c3, &(0x7f0000005b40)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) fanotify_mark(r2, 0x1, 0x40001039, r1, 0x0) getdents64(r1, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) syz_usb_connect$uac2(0x5, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000004082052500400001020301090278000301ff4005080b010001182004090400000001012000092401a0000718000b05240b0e0005240bcceb20240b0000090401000001022000090401010101022000090501090002070904082501023cff0700090402000001022000090402010101022000090582"], &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0}) 2.871704484s ago: executing program 1 (id=4136): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[]) 2.482218966s ago: executing program 0 (id=4137): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockname(r0, 0x0, &(0x7f0000000240)) 2.442142426s ago: executing program 1 (id=4138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000", @ANYRES32=0x0, @ANYRES32], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x5}, {0xfff3, 0x6}}}, 0x24}}, 0x20000000) 2.315422915s ago: executing program 3 (id=4139): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x145}) read(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 2.199569376s ago: executing program 1 (id=4140): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x1, 0x25a, &(0x7f0000000240)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) syz_open_dev$MSR(&(0x7f00000004c0), 0x7, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2000000000000004) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000100)=""/223) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac2(0x5, 0xb2, &(0x7f0000000580)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x8, 0x2b53, 0x24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0xe, 0x30, 0x8, {0x8, 0xb, 0x1, 0x0, 0x1, 0xa, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x2, 0x11, 0x9}, [@source_unit={0x8, 0x24, 0xa, 0x1, 0x4, 0x80, 0x56}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5d, 0x8, 0x2, {0x8, 0x25, 0x1, 0x0, 0x0, 0xda, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x180, 0x2, 0x7f, "142645b3"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa2, 0x1, 0x4, 0x5, 0x9}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x40, 0x6, 0x0, "259d"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0xd, 0xf, "ac4a0812b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x3, 0x16, {0x8, 0x25, 0x1, 0x3, 0xc, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x11, &(0x7f00000006c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x8, 0xf, 0x5}]}, 0x1, [{0x0, 0x0}]}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r4, 0x4, 0x2c00) connect$unix(r3, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.102630607s ago: executing program 8 (id=4141): close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.065936909s ago: executing program 0 (id=4142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x30000) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) sendmsg(0xffffffffffffffff, 0x0, 0x44004) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.065246734s ago: executing program 3 (id=4143): setns(0xc9, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r2, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 0s ago: executing program 0 (id=4144): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@minixdf}, {@bsdgroups}, {@acl}, {@errors_remount}, {@norecovery}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x15e) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) kernel console output (not intermixed with test programs): change from 0 to 128 [ 1431.253922][T18432] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1431.309155][T18432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1431.322073][T18438] loop1: detected capacity change from 0 to 512 [ 1431.459068][T18438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.575724][T18438] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3433: bg 0: block 67: padding at end of block bitmap is not set [ 1431.576388][T18438] EXT4-fs (loop1): Remounting filesystem read-only [ 1431.785080][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.855656][T18440] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1432.132035][T18462] loop5: detected capacity change from 0 to 128 [ 1432.464219][T18458] EXT4-fs: Ignoring removed i_version option [ 1432.611194][T18458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.735730][T18440] udc dummy_udc.0: failed to start g1: -19 [ 1432.754623][T18462] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1432.754658][T18462] FAT-fs (loop5): data area starts beyond volume (36 > 11) [ 1432.754688][T18462] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1432.887913][T18440] UDC core: g1: couldn't find an available UDC or it's busy [ 1433.026162][T18478] set_capacity_and_notify: 1 callbacks suppressed [ 1433.026195][T18478] loop1: detected capacity change from 0 to 8 [ 1433.063072][T18478] SQUASHFS error: Unable to read directory block [631:26] [ 1433.066337][T18478] Bluetooth: MGMT ver 1.23 [ 1433.083935][T14477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.271047][T17601] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1433.335500][T18485] loop1: detected capacity change from 0 to 512 [ 1433.392812][T18485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.392914][T18485] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1433.442323][T17601] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1433.443655][T17601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.443690][T17601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.443736][T17601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.460652][T18485] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1433.502740][T17601] usb 4-1: config 0 descriptor?? [ 1434.220921][T18495] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1434.453183][T17601] hid (null): unknown global tag 0xc [ 1434.489399][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.515327][T17601] hid-led 0003:27B8:01ED.0015: unknown global tag 0xc [ 1434.515353][T17601] hid-led 0003:27B8:01ED.0015: item 0 4 1 12 parsing failed [ 1434.516178][T17601] hid-led 0003:27B8:01ED.0015: probe with driver hid-led failed with error -22 [ 1434.559705][T18500] loop5: detected capacity change from 0 to 4096 [ 1434.629141][T18500] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1434.672169][T18500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.713207][T17601] usb 4-1: USB disconnect, device number 88 [ 1435.060331][T16407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.076051][T18520] loop8: detected capacity change from 0 to 512 [ 1435.129975][T18520] EXT4-fs (loop8): 1 truncate cleaned up [ 1435.157955][T18520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1435.365669][T18525] loop7: detected capacity change from 0 to 1024 [ 1435.518682][T18524] loop0: detected capacity change from 0 to 4096 [ 1435.595203][T18524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1436.039036][T18536] loop3: detected capacity change from 0 to 1024 [ 1436.356152][T18536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1436.356679][T18536] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1436.670467][T14477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.721391][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1436.834567][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.223911][T18555] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1437.354512][T18564] xt_hashlimit: size too large, truncated to 1048576 [ 1437.888412][T18580] loop7: detected capacity change from 0 to 128 [ 1438.660301][T18580] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1438.679852][T18580] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.914698][T12306] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1439.774312][T18601] loop7: detected capacity change from 0 to 512 [ 1439.795630][T18601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1439.870575][T18601] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1439.878983][T18601] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1439.879018][T18601] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1439.879039][T18601] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.3473: bad orphan inode 768 [ 1439.879066][T18601] loop7: lost filesystem error report for type 5 error -117 [ 1439.880983][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1439.881007][ C0] EXT4-fs (loop7): initial error at time 1790852603: ext4_orphan_get:1429 [ 1439.881035][ C0] EXT4-fs (loop7): last error at time 1790852603: ext4_orphan_get:1429 [ 1439.933042][T18601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1440.162389][T12306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.377995][T18621] loop7: detected capacity change from 0 to 256 [ 1440.391595][T18623] loop0: detected capacity change from 0 to 8 [ 1440.428086][T18621] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 1440.454943][T18627] loop3: detected capacity change from 0 to 512 [ 1440.455988][T18627] EXT4-fs: Ignoring removed orlov option [ 1440.463497][T18623] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1440.463529][T18623] SQUASHFS error: Failed to read block 0x91: -5 [ 1440.463546][T18623] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1440.463561][T18623] SQUASHFS error: Unable to read inode 0x11f [ 1440.531708][T18627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.531804][T18627] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.747084][T18634] FAULT_INJECTION: forcing a failure. [ 1440.747084][T18634] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1440.747133][T18634] CPU: 0 UID: 0 PID: 18634 Comm: syz.0.3483 Tainted: G L syzkaller #0 PREEMPT(full) [ 1440.747170][T18634] Tainted: [L]=SOFTLOCKUP [ 1440.747181][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1440.747200][T18634] Call Trace: [ 1440.747212][T18634] [ 1440.747224][T18634] dump_stack_lvl+0xe8/0x150 [ 1440.747271][T18634] should_fail_ex+0x410/0x560 [ 1440.747313][T18634] get_futex_key+0x1b4/0x1580 [ 1440.747353][T18634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1440.747391][T18634] ? cpuset_num_cpus+0x49/0x200 [ 1440.747432][T18634] ? __pfx_get_futex_key+0x10/0x10 [ 1440.747469][T18634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1440.747502][T18634] ? update_se+0x90/0x1080 [ 1440.747544][T18634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1440.747584][T18634] futex_wait_setup+0x4a/0x590 [ 1440.747620][T18634] ? __futex_wait+0xdf/0x400 [ 1440.747653][T18634] __futex_wait+0x15f/0x400 [ 1440.747699][T18634] ? __pfx___futex_wait+0x10/0x10 [ 1440.747732][T18634] ? __pfx_futex_wake_mark+0x10/0x10 [ 1440.747783][T18634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1440.747816][T18634] ? try_to_wake_up+0x8c5/0x14d0 [ 1440.747860][T18634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1440.747900][T18634] futex_wait+0x121/0x390 [ 1440.747930][T18634] ? __pfx_futex_wait+0x10/0x10 [ 1440.747982][T18634] do_futex+0x3e7/0x4e0 [ 1440.748028][T18634] ? __pfx_do_futex+0x10/0x10 [ 1440.748079][T18634] __se_sys_futex+0x3a8/0x450 [ 1440.748127][T18634] ? __pfx___se_sys_futex+0x10/0x10 [ 1440.748177][T18634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1440.748210][T18634] ? __x64_sys_futex+0x21/0xf0 [ 1440.748253][T18634] do_syscall_64+0x166/0x520 [ 1440.748293][T18634] ? trace_irq_disable+0x3b/0x140 [ 1440.748324][T18634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.748360][T18634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.748389][T18634] RIP: 0033:0x7fc58719e159 [ 1440.748415][T18634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.748440][T18634] RSP: 002b:00007fc587faa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1440.748470][T18634] RAX: ffffffffffffffda RBX: 00007fc587425fa8 RCX: 00007fc58719e159 [ 1440.748492][T18634] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc587425fa8 [ 1440.748510][T18634] RBP: 00007fc587425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.748529][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.748546][T18634] R13: 00007fc587426038 R14: 00007ffdf1f87b10 R15: 00007ffdf1f87bf8 [ 1440.748588][T18634] [ 1440.867398][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.985997][T18637] cgroup: Unknown subsys name 'cpuset' [ 1441.223727][T18643] fuse: Bad value for 'rootmode' [ 1441.231105][ T983] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1441.386830][ T983] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1441.388180][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.412806][ T983] usb 2-1: config 0 descriptor?? [ 1441.589540][T18660] loop3: detected capacity change from 0 to 512 [ 1441.592291][T18660] EXT4-fs: Ignoring removed nobh option [ 1441.611484][T18660] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1441.611510][T18660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1441.657833][T18660] EXT4-fs (loop3): 1 truncate cleaned up [ 1441.663224][T18660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.182112][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 1442.185588][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.834279][ T983] usb 2-1: Cannot set autoneg [ 1442.834519][ T983] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1442.889810][ T983] usb 2-1: USB disconnect, device number 102 [ 1443.347277][T18688] loop5: detected capacity change from 0 to 2048 [ 1443.362724][T18688] udf: Bad value for 'session' [ 1443.522722][T18694] netlink: 'syz.8.3500': attribute type 1 has an invalid length. [ 1445.106625][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3508'. [ 1445.233252][T18723] loop3: detected capacity change from 0 to 128 [ 1445.540305][T18725] loop7: detected capacity change from 0 to 2048 [ 1445.617252][T18729] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[16778] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[18729] [ 1446.264117][T18725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1446.538509][T12306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.642184][T18745] loop8: detected capacity change from 0 to 128 [ 1446.660898][T18745] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1446.858175][T18743] loop5: detected capacity change from 0 to 2048 [ 1446.904821][T18754] loop7: detected capacity change from 0 to 512 [ 1446.906251][T18754] EXT4-fs: Ignoring removed oldalloc option [ 1446.910424][T18754] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1446.926497][T18745] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1446.963917][T18745] ext2 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1446.980671][T18743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1447.002361][ T30] audit: type=1800 audit(1790852610.567:91): pid=18743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3512" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 1447.045924][ T30] audit: type=1804 audit(1790852610.607:92): pid=18743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3512" name="/newroot/102/file0/bus" dev="loop5" ino=1367 res=1 errno=0 [ 1447.070267][ T30] audit: type=1804 audit(1790852610.627:93): pid=18743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3512" name="/newroot/102/file0/bus" dev="loop5" ino=1367 res=1 errno=0 [ 1447.080671][T18754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1447.159972][T18742] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 39424 lbcount: 40960 extent 65+5632 [ 1447.262440][T18765] loop1: detected capacity change from 0 to 1024 [ 1447.263567][T18765] EXT4-fs: Ignoring removed bh option [ 1447.359426][T18765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1447.392098][T12306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.509473][T18773] loop3: detected capacity change from 0 to 512 [ 1447.522708][T18773] EXT4-fs: Ignoring removed nobh option [ 1447.559037][T18773] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1447.568105][T18773] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.3516: EA inode 11 has unexpected i_nlink=2 ref_count=18446744069414584320 [ 1447.568145][T18773] loop3: lost filesystem error report for type 5 error -117 [ 1447.570997][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1447.571019][ C0] EXT4-fs (loop3): initial error at time 1790852611: ext4_xattr_inode_iget:473 [ 1447.571047][ C0] EXT4-fs (loop3): last error at time 1790852611: ext4_xattr_inode_iget:473 [ 1447.670866][T18773] EXT4-fs (loop3): Remounting filesystem read-only [ 1447.671024][T18773] EXT4-fs (loop3): 1 orphan inode deleted [ 1447.702090][T18773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1447.811613][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.861943][T14477] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1447.966618][ T52] Bluetooth: hci0: Zero size dump init pkt [ 1448.066020][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.520183][T18811] loop0: detected capacity change from 0 to 256 [ 1448.635451][T18813] loop3: detected capacity change from 0 to 2048 [ 1448.721827][T18813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1449.920320][T18837] fuse: Unknown parameter 'grou00000000000000000000' [ 1449.979105][T18835] loop8: detected capacity change from 0 to 2048 [ 1449.980477][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.137959][T18835] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1450.137985][T18835] UDF-fs: Scanning with blocksize 512 failed [ 1450.336214][T18844] loop1: detected capacity change from 0 to 1024 [ 1450.342377][T18844] ext4: Unknown parameter 'noacl' [ 1450.867426][T18835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1451.006305][T18846] loop0: detected capacity change from 0 to 256 [ 1451.022095][T18846] exfat: Deprecated parameter 'namecase' [ 1451.088641][T18846] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1451.092695][T18849] loop3: detected capacity change from 0 to 512 [ 1451.323992][T18855] loop1: detected capacity change from 0 to 512 [ 1451.344409][T18855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1451.377106][T18849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.377211][T18849] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.638718][T18855] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3544: bg 0: block 393: padding at end of block bitmap is not set [ 1451.638761][T18855] loop1: lost filesystem error report for type 5 error -117 [ 1451.641040][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1451.641061][ C0] EXT4-fs (loop1): initial error at time 1790852615: ext4_validate_block_bitmap:445 [ 1451.641091][ C0] EXT4-fs (loop1): last error at time 1790852615: ext4_validate_block_bitmap:445 [ 1451.953589][T18855] EXT4-fs (loop1): Remounting filesystem read-only [ 1452.091937][T18855] EXT4-fs (loop1): 2 truncates cleaned up [ 1452.142256][T18855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1452.285840][T18864] loop7: detected capacity change from 0 to 16 [ 1452.334203][T18864] erofs (device loop7): mounted with root inode @ nid 36. [ 1452.342953][T18864] erofs (device loop7): compressed inode (nid 89) is invalid in a plain filesystem [ 1452.441757][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.691799][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.729825][T18871] binder_alloc: 18870: binder_alloc_buf, no vma [ 1454.945705][T18886] loop5: detected capacity change from 0 to 256 [ 1455.001400][T18886] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1455.789108][T18882] loop1: detected capacity change from 0 to 2048 [ 1456.037112][T18882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1457.309489][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.284090][T18921] loop5: detected capacity change from 0 to 128 [ 1458.304869][T18921] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1458.344523][T18921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1458.442775][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3561'. [ 1458.561935][T18929] loop7: detected capacity change from 0 to 512 [ 1458.577385][T18929] EXT4-fs: Ignoring removed nobh option [ 1458.595781][T18932] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1458.619451][T18929] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1458.619474][T18929] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1458.716412][T18929] EXT4-fs (loop7): 1 truncate cleaned up [ 1458.743611][T18929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1459.524739][ T30] audit: type=1800 audit(1790852623.057:94): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3566" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 1459.557867][T18928] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1459.557915][T18928] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1459.557941][T18928] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1460.830899][T18928] syz.3.3566 (18928) used greatest stack depth: 18312 bytes left [ 1461.092222][T18963] loop1: detected capacity change from 0 to 2048 [ 1461.189882][T18963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1461.685360][ T5839] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1462.371803][ T5839] usb 4-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 1462.373057][ T5839] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1462.373091][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1462.373129][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.425132][ T5839] usb 4-1: config 0 descriptor?? [ 1462.506639][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.697515][T12306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.725166][T18988] loop5: detected capacity change from 0 to 128 [ 1462.776437][T18988] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1462.778114][T18988] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.843138][T18988] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop5' because it doesn't have stable inode numbers [ 1462.950118][T18996] input: syz1 as /devices/virtual/input/input37 [ 1462.989519][ T5839] hid_parser_main: 11 callbacks suppressed [ 1462.989544][ T5839] wacom 0003:056A:00D6.0016: unknown main item tag 0x0 [ 1462.989571][ T5839] wacom 0003:056A:00D6.0016: unknown main item tag 0x0 [ 1462.989596][ T5839] wacom 0003:056A:00D6.0016: unknown main item tag 0x0 [ 1462.989621][ T5839] wacom 0003:056A:00D6.0016: unknown main item tag 0x0 [ 1462.989646][ T5839] wacom 0003:056A:00D6.0016: unknown main item tag 0x0 [ 1462.989671][ T5839] wacom 0003:056A:00D6.0016: unknown main item tag 0x0 [ 1463.011388][T16407] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1463.150178][ T5839] usb 4-1: USB disconnect, device number 89 [ 1464.399768][T18994] loop1: detected capacity change from 0 to 8192 [ 1464.425861][T18994] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1464.537255][T18994] FAULT_INJECTION: forcing a failure. [ 1464.537255][T18994] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.537296][T18994] CPU: 1 UID: 0 PID: 18994 Comm: syz.1.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.537332][T18994] Tainted: [L]=SOFTLOCKUP [ 1464.537343][T18994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1464.537361][T18994] Call Trace: [ 1464.537372][T18994] [ 1464.537384][T18994] dump_stack_lvl+0xe8/0x150 [ 1464.537431][T18994] should_fail_ex+0x410/0x560 [ 1464.537471][T18994] ? __pfx_fat_alloc_inode+0x10/0x10 [ 1464.537504][T18994] should_failslab+0xa8/0x100 [ 1464.537543][T18994] ? __pfx_fat_alloc_inode+0x10/0x10 [ 1464.537572][T18994] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1464.537605][T18994] ? fat_alloc_inode+0x30/0xf0 [ 1464.537634][T18994] ? fat_alloc_inode+0x30/0xf0 [ 1464.537672][T18994] ? __pfx_fat_alloc_inode+0x10/0x10 [ 1464.537702][T18994] fat_alloc_inode+0x30/0xf0 [ 1464.537736][T18994] ? __pfx_fat_alloc_inode+0x10/0x10 [ 1464.537765][T18994] alloc_inode+0x6a/0x1b0 [ 1464.537807][T18994] new_inode+0x1f/0x170 [ 1464.537853][T18994] fat_build_inode+0x201/0x3e0 [ 1464.537890][T18994] vfat_lookup+0x255/0x490 [ 1464.537934][T18994] ? __pfx_vfat_lookup+0x10/0x10 [ 1464.537974][T18994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.538009][T18994] ? do_raw_spin_unlock+0xf5/0x200 [ 1464.538055][T18994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.538088][T18994] ? _raw_spin_unlock+0x28/0x50 [ 1464.538120][T18994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.538161][T18994] ? d_alloc+0x144/0x190 [ 1464.538191][T18994] lookup_one_qstr_excl+0x12d/0x360 [ 1464.538219][T18994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.538257][T18994] filename_create+0x20e/0x370 [ 1464.538296][T18994] ? __pfx_filename_create+0x10/0x10 [ 1464.538340][T18994] filename_mknodat+0x18c/0x660 [ 1464.538379][T18994] ? __pfx_filename_mknodat+0x10/0x10 [ 1464.538415][T18994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.538447][T18994] ? do_getname+0x151/0x250 [ 1464.538492][T18994] __se_sys_mknodat+0x3b/0x150 [ 1464.538527][T18994] do_syscall_64+0x166/0x520 [ 1464.538567][T18994] ? trace_irq_disable+0x3b/0x140 [ 1464.538597][T18994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.538633][T18994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.538662][T18994] RIP: 0033:0x7f85f619e159 [ 1464.538686][T18994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.538710][T18994] RSP: 002b:00007f85f700c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1464.538739][T18994] RAX: ffffffffffffffda RBX: 00007f85f6425fa0 RCX: 00007f85f619e159 [ 1464.538762][T18994] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1464.538782][T18994] RBP: 00007f85f623506b R08: 0000000000000000 R09: 0000000000000000 [ 1464.538801][T18994] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000000 [ 1464.538819][T18994] R13: 00007f85f6426038 R14: 00007f85f6425fa0 R15: 00007ffd206bc828 [ 1464.538862][T18994] [ 1465.761761][T16914] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 1465.761794][T16914] FAT-fs (loop1): Filesystem has been set read-only [ 1465.850554][T19026] fuse: Unknown parameter 'group_i00000000000000000000' [ 1466.086883][T19034] ip_tables: iptables: counters copy to user failed while replacing table [ 1467.673475][T19044] loop7: detected capacity change from 0 to 512 [ 1467.686683][T19044] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1467.726231][T19044] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1467.926634][T19052] loop5: detected capacity change from 0 to 256 [ 1467.952610][T19052] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1467.952630][T19052] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1467.980061][T12306] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1468.071056][T19057] loop0: detected capacity change from 0 to 512 [ 1468.094425][T19052] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1468.096681][T19052] exFAT-fs (loop5): failed to load alloc-bitmap [ 1468.098301][T19052] exFAT-fs (loop5): failed to recognize exfat type [ 1468.138697][T19057] EXT4-fs (loop0): 1 truncate cleaned up [ 1468.151831][T19056] loop1: detected capacity change from 0 to 512 [ 1468.161355][T19056] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 1468.185057][T19057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.456181][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.816244][T19088] loop7: detected capacity change from 0 to 512 [ 1469.825320][T19088] EXT4-fs: Ignoring removed nobh option [ 1470.143585][T19088] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1470.143607][T19088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1470.170096][T19088] EXT4-fs (loop7): 1 truncate cleaned up [ 1470.171988][T19088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.306331][T12306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.543602][T19096] loop0: detected capacity change from 0 to 512 [ 1470.581060][T12175] Bluetooth: hci3: command 0x0406 tx timeout [ 1470.909823][T19104] binder: 19097:19104 ioctl c0306201 0 returned -14 [ 1471.924508][T19115] loop8: detected capacity change from 0 to 512 [ 1471.983698][T19115] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.3614: corrupted in-inode xattr: invalid ea_ino [ 1471.983735][T19115] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1471.984034][T19115] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.3614: couldn't read orphan inode 15 (err -117) [ 1471.984070][T19115] loop8: lost filesystem error report for type 5 error -117 [ 1472.044486][T19115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1472.110813][T19123] loop0: detected capacity change from 0 to 512 [ 1472.121106][T19123] EXT4-fs: Ignoring removed bh option [ 1472.139474][T19123] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1472.183475][ T30] audit: type=1800 audit(1790852635.747:95): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3614" name="file1" dev="loop8" ino=18 res=0 errno=0 [ 1472.280128][T19123] EXT4-fs (loop0): 1 truncate cleaned up [ 1472.358454][T19123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.403991][T14477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.642168][T19138] loop1: detected capacity change from 0 to 256 [ 1472.810214][T19141] loop8: detected capacity change from 0 to 1024 [ 1472.866320][T19141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1472.913469][T19148] netlink: 'syz.1.3627': attribute type 2 has an invalid length. [ 1472.913491][T19148] netlink: 'syz.1.3627': attribute type 1 has an invalid length. [ 1473.000021][T19150] loop1: detected capacity change from 0 to 2048 [ 1473.139963][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1473.326290][T19161] loop5: detected capacity change from 0 to 1024 [ 1473.677481][T19150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1474.714607][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.777092][T19172] loop8: detected capacity change from 0 to 128 [ 1474.832050][T13281] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1474.837332][T19172] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1474.868260][T19172] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1474.936721][T19172] syz.8.3630 (pid 19172) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1475.013491][T13281] usb 1-1: Using ep0 maxpacket: 32 [ 1475.020591][T13281] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1475.028939][T13281] usb 1-1: config 1 has an invalid descriptor of length 132, skipping remainder of the config [ 1475.028992][T13281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 143, changing to 7 [ 1475.029024][T13281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9413, setting to 1024 [ 1475.029057][T13281] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.042964][T13281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.042993][T13281] usb 1-1: Product: syz [ 1475.043011][T13281] usb 1-1: Manufacturer: syz [ 1475.043030][T13281] usb 1-1: SerialNumber: syz [ 1476.151194][T19179] loop1: detected capacity change from 0 to 256 [ 1476.237995][T14477] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1476.253771][T13281] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1476.332956][T19179] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 1476.359086][T19179] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 1476.655875][T13281] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1476.679169][T13281] usb 1-1: USB disconnect, device number 80 [ 1476.700589][T19188] tipc: Started in network mode [ 1476.700623][T19188] tipc: Node identity 823230706bab, cluster identity 4711 [ 1476.700795][T19188] tipc: Enabled bearer , priority 0 [ 1476.720561][T19188] syzkaller0: entered promiscuous mode [ 1476.720583][T19188] syzkaller0: entered allmulticast mode [ 1476.781441][T14966] udevd[14966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.827919][T19185] loop5: detected capacity change from 0 to 4096 [ 1476.846165][T19189] tipc: Resetting bearer [ 1476.869847][T19186] tipc: Resetting bearer [ 1476.958036][T19185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.979855][T19186] tipc: Disabling bearer [ 1477.397515][T16407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.592787][T19232] loop8: detected capacity change from 0 to 16 [ 1478.615971][T19232] erofs (device loop8): mounted with root inode @ nid 36. [ 1478.626420][T19232] syz.8.3648: attempt to access beyond end of device [ 1478.626420][T19232] loop8: rw=8912896, sector=68719476744, nr_sectors = 32 limit=16 [ 1478.630769][T19232] syz.8.3648: attempt to access beyond end of device [ 1478.630769][T19232] loop8: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16 [ 1478.659214][ T30] audit: type=1800 audit(1790852642.187:96): pid=19232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3648" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1478.719545][T19229] loop0: detected capacity change from 0 to 2048 [ 1478.856446][T19229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1478.856544][T19229] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1478.857465][T19241] loop7: detected capacity change from 0 to 512 [ 1478.894673][T19235] loop5: detected capacity change from 0 to 2048 [ 1478.937728][T19235] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1479.022469][T19241] Quota error (device loop7): do_check_range: Getting dqdh_entries 64 out of range 0-14 [ 1479.022614][T19241] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1479.022679][T19241] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.3650: Failed to acquire dquot type 1 [ 1479.022708][T19241] loop7: lost filesystem error report for type 5 error -117 [ 1479.030989][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1479.031013][ C1] EXT4-fs (loop7): initial error at time 1790852642: ext4_acquire_dquot:7069 [ 1479.031055][ C1] EXT4-fs (loop7): last error at time 1790852642: ext4_acquire_dquot:7069 [ 1479.112660][T19241] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.3650: corrupted inode contents [ 1479.112693][T19241] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1479.119173][T19241] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #16: comm syz.7.3650: mark_inode_dirty error [ 1479.119206][T19241] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1479.159764][T19241] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.3650: corrupted inode contents [ 1479.159798][T19241] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1479.183499][T19241] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.3650: mark_inode_dirty error [ 1479.183533][T19241] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1479.184236][T19241] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.3650: corrupted inode contents [ 1479.184268][T19241] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1479.196740][T19241] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem [ 1479.196767][T19241] loop7: lost filesystem error report for type 5 error -117 [ 1479.200337][T19241] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.3650: corrupted inode contents [ 1479.200371][T19241] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1479.202207][T19241] EXT4-fs error (device loop7): ext4_truncate:4721: inode #16: comm syz.7.3650: mark_inode_dirty error [ 1479.202239][T19241] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1479.218554][T19241] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem [ 1479.218580][T19241] loop7: lost filesystem error report for type 5 error -117 [ 1479.274201][T19241] EXT4-fs (loop7): 1 truncate cleaned up [ 1479.326760][T19241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.326864][T19241] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.355047][ T30] audit: type=1800 audit(1790852642.907:97): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3646" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 1479.370756][T19241] Quota error (device loop7): do_check_range: Getting dqdh_entries 64 out of range 0-14 [ 1479.370894][T19241] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1479.403393][T19241] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.3650: Failed to acquire dquot type 1 [ 1479.513486][T19255] loop8: detected capacity change from 0 to 128 [ 1479.517760][T19248] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 40960 lbcount: 45056 extent 129+9216 [ 1479.531104][T19252] loop3: detected capacity change from 0 to 512 [ 1479.558108][T19255] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1479.675523][T19255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1480.109493][T12306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.129406][T19252] loop3: detected capacity change from 0 to 2048 [ 1480.142940][T19252] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 1480.190904][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.096547][T19289] loop3: detected capacity change from 0 to 2048 [ 1483.162577][T19289] loop3: p4 < > [ 1483.207903][T19296] ip_tables: iptables: counters copy to user failed while replacing table [ 1483.868578][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.053355][T19322] bridge0: port 2(bridge_slave_1) entered listening state [ 1484.064856][T19322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.006572][T19339] loop5: detected capacity change from 0 to 128 [ 1485.080441][T19339] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1485.130270][T19339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1486.011034][T12175] Bluetooth: hci1: command 0x0406 tx timeout [ 1487.362430][T19358] fuse: Unknown parameter '0xffffffffffffffff' [ 1487.695138][T19363] loop0: detected capacity change from 0 to 512 [ 1487.714057][T19363] EXT4-fs: Ignoring removed nobh option [ 1487.802024][T19371] overlayfs: missing 'lowerdir' [ 1487.824981][T19363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1487.825063][T19363] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1488.000010][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.853792][T19391] loop0: detected capacity change from 0 to 2048 [ 1489.083767][T19399] /dev/loop0: Can't open blockdev [ 1489.124725][T19391] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1489.124747][T19391] UDF-fs: Scanning with blocksize 512 failed [ 1489.130642][T19384] loop5: detected capacity change from 0 to 2048 [ 1489.260305][T19391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1489.291544][T19384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1490.194492][T16407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.311921][T19421] fuse: Unknown parameter '0x0000000000000003' [ 1490.717509][T19435] loop3: detected capacity change from 0 to 256 [ 1490.730384][T19428] syzkaller0: entered promiscuous mode [ 1490.730409][T19428] syzkaller0: entered allmulticast mode [ 1490.957225][T19446] loop5: detected capacity change from 0 to 512 [ 1491.007777][T19446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1491.007875][T19446] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1491.141418][T12175] Bluetooth: hci2: command 0x0405 tx timeout [ 1491.837779][T19461] loop7: detected capacity change from 0 to 256 [ 1491.840511][T16407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.840662][T19454] loop8: detected capacity change from 0 to 1024 [ 1491.897986][T19461] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1491.914970][T19454] hfsplus: failed to load extents file [ 1491.961278][ T3209] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1492.115144][ T3209] usb 4-1: Using ep0 maxpacket: 16 [ 1492.119049][ T3209] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1492.125329][ T3209] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.125366][ T3209] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1492.125399][ T3209] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1492.125438][ T3209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.147331][ T3209] usb 4-1: config 0 descriptor?? [ 1492.289618][T19469] fuse: Unknown parameter '0x0000000000000003' [ 1492.514713][T19475] loop5: detected capacity change from 0 to 16 [ 1492.579629][T19475] erofs (device loop5): mounted with root inode @ nid 36. [ 1493.086910][ T3209] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.0017/input/input39 [ 1493.097877][ T3209] elan 0003:04F3:074D.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0 [ 1493.101059][ T3209] usb 4-1: USB disconnect, device number 90 [ 1493.340777][T19477] fido_id[19477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1493.349668][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3717'. [ 1494.070137][T19485] loop3: detected capacity change from 0 to 1024 [ 1494.077786][T19485] ext4: Unknown parameter 'noacl' [ 1494.813206][T19489] loop3: detected capacity change from 0 to 256 [ 1494.893830][T19489] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1496.570836][T19493] loop1: detected capacity change from 0 to 2048 [ 1496.624568][T19493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1496.624673][T19493] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1496.779598][T19509] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3721: bg 0: block 345: padding at end of block bitmap is not set [ 1496.785603][T19509] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 1496.785642][T19509] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1496.785642][T19509] [ 1496.785661][T19509] EXT4-fs (loop1): Total free blocks count 0 [ 1496.785680][T19509] EXT4-fs (loop1): Free/Dirty block details [ 1496.785697][T19509] EXT4-fs (loop1): free_blocks=0 [ 1496.785715][T19509] EXT4-fs (loop1): dirty_blocks=144 [ 1496.785732][T19509] EXT4-fs (loop1): Block reservation details [ 1496.785766][T19509] EXT4-fs (loop1): i_reserved_data_blocks=9 [ 1497.053664][ T94] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 115 with error 28 [ 1497.191378][T19521] loop0: detected capacity change from 0 to 512 [ 1497.429328][T19521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1497.630068][T19533] loop1: detected capacity change from 0 to 1024 [ 1497.637109][T19533] ext4: Unknown parameter 'noacl' [ 1497.836948][T19507] EXT4-fs error (device loop0): ext4_validate_block_bitmap:427: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 1498.356212][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.485804][T19545] loop3: detected capacity change from 0 to 128 [ 1498.510327][T19545] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1498.536553][T19545] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1498.555725][T19545] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1498.748021][T16778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1498.924629][T19562] loop0: detected capacity change from 0 to 128 [ 1498.950352][T19562] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1498.980320][T19562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1499.025466][T19568] loop3: detected capacity change from 0 to 128 [ 1499.040839][T19568] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1499.079960][T19568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1500.002525][T19587] loop8: detected capacity change from 0 to 1024 [ 1500.009066][T19587] ext4: Unknown parameter 'noacl' [ 1500.546039][T19591] loop5: detected capacity change from 0 to 256 [ 1500.849346][T19602] loop3: detected capacity change from 0 to 128 [ 1500.993081][T10019] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1501.024893][T19607] loop0: detected capacity change from 0 to 512 [ 1501.083874][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1501.109781][T19607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.109879][T19607] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.163556][T10019] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1501.164733][T10019] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.164761][T10019] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1501.170024][T10019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.170053][T10019] usb 2-1: Product: syz [ 1501.170073][T10019] usb 2-1: Manufacturer: syz [ 1501.170092][T10019] usb 2-1: SerialNumber: syz [ 1501.364274][T19613] loop8: p2 < > p3 < p5 > p4 [ 1501.364305][T19613] loop8: partition table partially beyond EOD, truncated [ 1501.364513][T19613] loop8: p2 start 4278190080 is beyond EOD, truncated [ 1501.379777][T19613] loop8: p4 size 8192 extends beyond EOD, truncated [ 1501.395212][T19613] loop8: p5 size 8192 extends beyond EOD, truncated [ 1501.406272][T17679] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1501.441586][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.482864][T10019] usb 2-1: 0:2 : does not exist [ 1501.550046][T10019] usb 2-1: unknown interface protocol 0x1, assuming v1 [ 1501.550073][T10019] usb 2-1: cannot find UAC_HEADER [ 1501.563938][T17679] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1501.566267][T17679] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 1501.566300][T17679] usb 6-1: config 255 has no interface number 0 [ 1501.566348][T17679] usb 6-1: config 255 interface 97 has no altsetting 0 [ 1501.570078][T17679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.570109][T17679] usb 6-1: Product: syz [ 1501.570130][T17679] usb 6-1: Manufacturer: syz [ 1501.570150][T17679] usb 6-1: SerialNumber: syz [ 1501.824928][T19620] set_capacity_and_notify: 1 callbacks suppressed [ 1501.824954][T19620] loop0: detected capacity change from 0 to 512 [ 1501.826073][T19620] EXT4-fs: Ignoring removed i_version option [ 1501.845696][T19620] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1501.888156][T19620] EXT4-fs (loop0): 1 truncate cleaned up [ 1501.906985][T19620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1501.908166][T17679] rndis_host 6-1:255.97: invalid descriptor buffer length [ 1501.908189][T17679] rndis_host 6-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1502.014861][T17679] usb 6-1: USB disconnect, device number 76 [ 1502.022602][T10019] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1502.048372][T10019] usb 2-1: USB disconnect, device number 103 [ 1502.260922][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.427160][T14966] udevd[14966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1502.504447][T19635] loop1: detected capacity change from 0 to 256 [ 1502.532632][T19635] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1502.532659][T19635] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1502.604797][T19635] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xda9de4d5, utbl_chksum : 0xe619d30d) [ 1502.617164][T19635] exFAT-fs (loop1): failed to load alloc-bitmap [ 1502.617181][T19635] exFAT-fs (loop1): failed to recognize exfat type [ 1502.673406][T19641] loop0: detected capacity change from 0 to 128 [ 1502.699384][T19641] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1502.748384][T19641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1503.316164][T19654] loop3: detected capacity change from 0 to 2048 [ 1503.473325][T19654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1503.686931][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.801797][T19667] loop5: detected capacity change from 0 to 512 [ 1503.824699][T19667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1503.843123][T19667] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3771: invalid indirect mapped block 32768 (level 2) [ 1503.843171][T19667] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1503.850985][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1503.851008][ C1] EXT4-fs (loop5): initial error at time 1790852667: ext4_free_branches:1023: inode 16 [ 1503.851046][ C1] EXT4-fs (loop5): last error at time 1790852667: ext4_free_branches:1023: inode 16 [ 1503.896123][T19667] EXT4-fs (loop5): 1 orphan inode deleted [ 1503.896153][T19667] EXT4-fs (loop5): 1 truncate cleaned up [ 1503.900640][T19670] loop0: detected capacity change from 0 to 128 [ 1503.908877][T19667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1503.977364][T19667] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1504.000144][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1504.222684][T16407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.259240][T19682] loop1: detected capacity change from 0 to 256 [ 1504.353773][T19684] netlink: 'syz.8.3776': attribute type 12 has an invalid length. [ 1505.067195][T19682] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1505.067233][T19682] FAT-fs (loop1): Filesystem has been set read-only [ 1505.067355][T19682] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1505.067391][T19682] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1505.070642][ T30] audit: type=1800 audit(1790852668.627:98): pid=19682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3777" name="file1" dev="loop1" ino=1048881 res=0 errno=0 [ 1505.099788][T19682] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 1505.320805][T19692] loop0: detected capacity change from 0 to 512 [ 1505.321915][T19692] EXT4-fs: Ignoring removed nobh option [ 1505.329013][T19692] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1505.329033][T19692] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1505.354781][T19692] EXT4-fs (loop0): 1 truncate cleaned up [ 1505.398412][T19692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.518716][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.643732][T19691] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 1506.919753][ T5732] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1507.484710][T19706] loop1: detected capacity change from 0 to 128 [ 1507.489664][T19706] FAT-fs (loop1): data area starts beyond volume (1024 > 255) [ 1507.489691][T19706] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1507.526648][ T5732] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1507.526700][ T5732] usb 9-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice= 0.40 [ 1507.534902][ T5732] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.534929][ T5732] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1507.550198][ T5732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.550225][ T5732] usb 9-1: Product: syz [ 1507.550243][ T5732] usb 9-1: Manufacturer: syz [ 1507.550261][ T5732] usb 9-1: SerialNumber: syz [ 1507.580279][T19691] udc dummy_udc.0: failed to start g1: -19 [ 1507.581176][T19700] loop3: detected capacity change from 0 to 4096 [ 1507.584350][T19691] UDC core: g1: couldn't find an available UDC or it's busy [ 1507.608754][T19700] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1507.650122][T19700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.672760][T19713] loop7: detected capacity change from 0 to 128 [ 1507.682729][T19713] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1507.710387][T19713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1507.718505][T19700] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1507.943952][ T5732] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1508.034840][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.144646][T19727] loop5: detected capacity change from 0 to 128 [ 1508.163204][T19727] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1508.188598][T19727] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1508.188938][T19727] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.963435][ T5732] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1508.969766][ T5732] usb 9-1: can't set first interface for hiFace device. [ 1508.969794][ T5732] snd-usb-hiface 9-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1508.984065][ T5732] usb 9-1: can't set first interface for hiFace device. [ 1508.984093][ T5732] snd-usb-hiface 9-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1508.991046][ T5732] usb 9-1: USB disconnect, device number 11 [ 1509.161473][T14714] udevd[14714]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1509.210839][T16407] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1509.512535][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1509.533083][T19756] loop0: detected capacity change from 0 to 1024 [ 1509.540266][T19756] EXT4-fs: Ignoring removed mblk_io_submit option [ 1509.540296][T19756] EXT4-fs: Ignoring removed oldalloc option [ 1509.593387][T19756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.593482][T19756] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.712939][T19766] fuse: Unknown parameter 'fd0x0000000000000003' [ 1509.779952][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1510.044815][T19773] loop1: detected capacity change from 0 to 2048 [ 1510.050332][T19775] loop7: detected capacity change from 0 to 512 [ 1510.084521][T19775] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1510.102177][T19773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.384497][T19778] loop0: detected capacity change from 0 to 512 [ 1510.981101][T12175] Bluetooth: hci2: command 0x0405 tx timeout [ 1511.144257][T19787] loop5: detected capacity change from 0 to 256 [ 1511.161255][T19778] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1511.188891][T19778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a046c128, mo2=0002] [ 1511.189017][T19778] System zones: 1-12 [ 1511.189254][T19778] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1511.193916][T19787] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1511.244264][T19775] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 1511.262580][T19775] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 1511.286136][T19778] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1511.286168][T19778] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1511.823571][T19778] EXT4-fs (loop0): 1 truncate cleaned up [ 1512.190482][T19778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1512.840179][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.345864][T19814] loop5: detected capacity change from 0 to 16 [ 1513.348953][T19814] erofs (device loop5): invalid ishare xattr prefix id 0 [ 1513.401110][T19733] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1513.427757][T19816] loop0: detected capacity change from 0 to 128 [ 1513.493091][T19816] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1513.496921][T19822] loop5: detected capacity change from 0 to 8 [ 1513.498362][T19816] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.552567][T19733] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1513.553588][T19733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.553615][T19733] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1513.556296][T19733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1513.556325][T19733] usb 4-1: SerialNumber: syz [ 1513.566285][T19816] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 1514.744638][T19827] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3820'. [ 1514.777860][T19733] usb 4-1: 0:2 : does not exist [ 1514.865041][T16659] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1515.119890][T19733] usb 4-1: USB disconnect, device number 91 [ 1515.129764][ T5271] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1515.364326][T14966] udevd[14966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1515.570303][T19850] loop8: detected capacity change from 0 to 128 [ 1515.602141][T19850] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1515.658420][T19850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1518.619617][T19887] loop3: detected capacity change from 0 to 1024 [ 1518.620598][T19887] ext4: Unknown parameter 'noacl' [ 1518.972132][T19898] loop0: detected capacity change from 0 to 256 [ 1519.214345][T19898] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1519.688570][ T5342] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1519.841717][ T5342] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1519.844053][ T5342] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1519.844091][ T5342] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1519.844132][ T5342] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1519.844181][ T5342] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.849870][ T5342] usb 9-1: config 0 descriptor?? [ 1519.914722][T19891] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1519.978690][T19903] loop1: detected capacity change from 0 to 4096 [ 1519.994801][T19903] EXT4-fs: Ignoring removed mblk_io_submit option [ 1519.997215][T19903] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1520.041027][T17699] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1520.112901][ T5271] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1520.193440][T17699] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1520.194857][T17699] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.194889][T17699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1520.194959][T17699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.274602][T17699] usb 4-1: config 0 descriptor?? [ 1520.304305][T19903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.022126][ T5342] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1521.029969][ T5342] usb 9-1: USB disconnect, device number 12 [ 1521.189951][T19919] ip_tables: iptables: counters copy to user failed while replacing table [ 1521.386362][T17699] logitech-hidpp-device 0003:046D:C262.0019: unbalanced collection at end of report description [ 1521.406683][T17699] logitech-hidpp-device 0003:046D:C262.0019: hidpp_probe:parse failed [ 1521.406800][T17699] logitech-hidpp-device 0003:046D:C262.0019: probe with driver logitech-hidpp-device failed with error -22 [ 1521.532574][T19927] loop5: detected capacity change from 0 to 128 [ 1521.533449][T19922] fido_id[19922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1521.555024][T19927] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1521.595439][T19927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1521.628487][ T5839] usb 4-1: USB disconnect, device number 92 [ 1521.751595][T19932] loop8: detected capacity change from 0 to 1024 [ 1521.790263][T19932] hfsplus: invalid btree flag [ 1521.790526][T19932] hfsplus: failed to load extents file [ 1522.795482][T19941] loop8: detected capacity change from 0 to 512 [ 1522.822206][T19941] EXT4-fs: Ignoring removed nobh option [ 1522.832029][T19941] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1522.832051][T19941] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1522.863532][T19941] EXT4-fs (loop8): 1 truncate cleaned up [ 1522.898426][T19941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1523.106546][T14477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.407912][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.083749][ T5271] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1524.246870][T19975] ip_tables: iptables: counters copy to user failed while replacing table [ 1524.269326][T19971] loop3: detected capacity change from 0 to 2048 [ 1524.294598][T19976] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3856'. [ 1524.344447][T19971] EXT4-fs: Mount option(s) incompatible with ext2 [ 1524.406819][T19984] loop0: detected capacity change from 0 to 128 [ 1524.448344][T19984] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1524.450432][T19984] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.590881][T19984] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1524.774553][T16659] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1524.805207][ T5732] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1524.972443][ T5732] usb 4-1: not running at top speed; connect to a high speed hub [ 1524.972483][ T5732] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1524.973532][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.975138][ T5732] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1524.975167][ T5732] usb 4-1: Product: syz [ 1524.975201][ T5732] usb 4-1: Manufacturer: syz [ 1525.076922][ T5732] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1525.076992][ T5732] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 1525.098942][T20006] loop1: detected capacity change from 0 to 8 [ 1525.495283][T20013] loop5: detected capacity change from 0 to 512 [ 1525.538103][T20013] EXT4-fs: Ignoring removed nobh option [ 1525.563100][T20013] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1525.563180][T20013] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1525.673186][ T5342] usb 4-1: USB disconnect, device number 93 [ 1525.679100][T20013] EXT4-fs (loop5): 1 truncate cleaned up [ 1525.730213][T20013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1525.887481][T20022] overlayfs: missing 'lowerdir' [ 1525.950710][T16407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.021184][T19733] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1526.171019][T19733] usb 1-1: Using ep0 maxpacket: 32 [ 1526.171849][T19733] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1526.173068][T19733] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1526.173096][T19733] usb 1-1: config 0 has no interface number 0 [ 1526.175473][T19733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.175501][T19733] usb 1-1: Product: syz [ 1526.175519][T19733] usb 1-1: Manufacturer: syz [ 1526.175539][T19733] usb 1-1: SerialNumber: syz [ 1526.206414][T19733] usb 1-1: config 0 descriptor?? [ 1526.304867][T20038] loop5: detected capacity change from 0 to 2048 [ 1526.369609][T20038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1526.555643][T20044] loop3: detected capacity change from 0 to 512 [ 1526.570359][T20044] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1526.580053][ T5271] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1526.600540][T20044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a046c128, mo2=0002] [ 1526.600679][T20044] System zones: 1-12 [ 1526.601004][T20044] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1526.601070][T20044] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1526.601097][T20044] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1526.612984][T20044] EXT4-fs (loop3): 1 truncate cleaned up [ 1526.638814][T20044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1526.656414][T19733] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1526.656447][T19733] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1526.894507][T20053] loop1: detected capacity change from 0 to 512 [ 1526.975878][T20053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.3883: bg 0: block 5: invalid block bitmap [ 1526.975913][T20053] loop1: lost filesystem error report for type 5 error -117 [ 1526.981192][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1526.981214][ C0] EXT4-fs (loop1): initial error at time 1790852690: ext4_validate_block_bitmap:436 [ 1526.981243][ C0] EXT4-fs (loop1): last error at time 1790852690: ext4_validate_block_bitmap:436 [ 1526.983783][T20053] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1526.983808][T20053] loop1: lost filesystem error report for type 5 error -117 [ 1526.986860][T20053] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3883: invalid indirect mapped block 3 (level 2) [ 1526.986899][T20053] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1526.991208][T20053] EXT4-fs (loop1): 1 orphan inode deleted [ 1526.991231][T20053] EXT4-fs (loop1): 1 truncate cleaned up [ 1527.011203][T20053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.107945][T19733] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1527.108206][T19733] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1527.135665][T19733] usb 1-1: USB disconnect, device number 81 [ 1527.227496][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.378335][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.567701][T20067] loop1: detected capacity change from 0 to 128 [ 1527.578327][T20067] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1527.611032][ T5732] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1527.697994][T20071] loop8: detected capacity change from 0 to 1024 [ 1527.709604][T20071] hfsplus: failed to load extents file [ 1527.753807][ T5839] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1527.789410][ T5732] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1527.789461][ T5732] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1527.792803][ T5732] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.792830][ T5732] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1527.792879][ T5732] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1527.792923][ T5732] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1527.792969][ T5732] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1527.793000][ T5732] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1527.803691][ T5732] usb 6-1: string descriptor 0 read error: -22 [ 1527.803837][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.935059][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1527.939022][ T5839] usb 4-1: not running at top speed; connect to a high speed hub [ 1527.939087][ T5839] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1527.946584][ T5839] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1527.956938][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.956966][ T5839] usb 4-1: Product: syz [ 1527.956985][ T5839] usb 4-1: Manufacturer: syz [ 1527.957004][ T5839] usb 4-1: SerialNumber: syz [ 1528.077221][T20076] overlayfs: missing 'lowerdir' [ 1528.215127][ T5839] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1528.264858][ T5839] usb 4-1: USB disconnect, device number 94 [ 1528.481633][ T5732] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1528.549242][T20095] loop8: detected capacity change from 0 to 128 [ 1528.801502][ T5732] usb 6-1: USB disconnect, device number 77 [ 1529.493141][T19733] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1529.748195][T19733] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.06 [ 1529.853303][T19733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.987315][T19733] usb 4-1: config 0 descriptor?? [ 1530.007426][T19733] hub 4-1:0.0: bad descriptor, ignoring hub [ 1530.007455][T19733] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1530.027303][T19733] cp210x 4-1:0.0: cp210x converter detected [ 1530.310321][T20129] loop0: detected capacity change from 0 to 16 [ 1530.325968][T20129] erofs (device loop0): mounted with root inode @ nid 36. [ 1530.375722][T20130] overlayfs: missing 'workdir' [ 1530.411314][T20129] syz.0.3904: attempt to access beyond end of device [ 1530.411314][T20129] loop0: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1530.412159][T20133] loop5: detected capacity change from 0 to 512 [ 1530.424240][T20129] syz.0.3904: attempt to access beyond end of device [ 1530.424240][T20129] loop0: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1530.450535][ T30] audit: type=1800 audit(1790852694.007:99): pid=20129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3904" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1530.478920][T19733] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1530.501973][T19733] usb 4-1: USB disconnect, device number 95 [ 1530.509721][T19733] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1530.525550][T19733] cp210x 4-1:0.0: device disconnected [ 1531.758972][T20153] FAULT_INJECTION: forcing a failure. [ 1531.758972][T20153] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.759016][T20153] CPU: 0 UID: 0 PID: 20153 Comm: syz.0.3912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1531.759054][T20153] Tainted: [L]=SOFTLOCKUP [ 1531.759066][T20153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1531.759082][T20153] Call Trace: [ 1531.759093][T20153] [ 1531.759105][T20153] dump_stack_lvl+0xe8/0x150 [ 1531.759158][T20153] should_fail_ex+0x410/0x560 [ 1531.759199][T20153] should_failslab+0xa8/0x100 [ 1531.759237][T20153] ? key_alloc+0x318/0x1020 [ 1531.759273][T20153] kmem_cache_alloc_noprof+0xa1/0x600 [ 1531.759305][T20153] ? key_alloc+0x318/0x1020 [ 1531.759352][T20153] key_alloc+0x318/0x1020 [ 1531.759404][T20153] keyring_alloc+0x45/0xb0 [ 1531.759450][T20153] look_up_user_keyrings+0x461/0x670 [ 1531.759498][T20153] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 1531.759537][T20153] ? __pfx___key_instantiate_and_link+0x10/0x10 [ 1531.759585][T20153] call_sbin_request_key+0x21d/0xbf0 [ 1531.759622][T20153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1531.759655][T20153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1531.759698][T20153] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1531.759733][T20153] ? do_raw_spin_unlock+0xf5/0x200 [ 1531.759817][T20153] ? __pfx_request_key_auth_new+0x10/0x10 [ 1531.759869][T20153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1531.759907][T20153] request_key_and_link+0xf13/0x15a0 [ 1531.759956][T20153] ? __pfx_request_key_and_link+0x10/0x10 [ 1531.759995][T20153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1531.760038][T20153] ? __pfx_asymmetric_key_cmp_name+0x10/0x10 [ 1531.760074][T20153] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1531.760130][T20153] ? down_read+0x2be/0x330 [ 1531.760171][T20153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1531.760204][T20153] ? _copy_from_user+0x94/0xb0 [ 1531.760251][T20153] __se_sys_request_key+0x29a/0x350 [ 1531.760285][T20153] ? __pfx___se_sys_request_key+0x10/0x10 [ 1531.760317][T20153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1531.760360][T20153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1531.760400][T20153] do_syscall_64+0x166/0x520 [ 1531.760440][T20153] ? trace_irq_disable+0x3b/0x140 [ 1531.760472][T20153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.760508][T20153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.760537][T20153] RIP: 0033:0x7fc58719e159 [ 1531.760562][T20153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.760586][T20153] RSP: 002b:00007fc587faa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1531.760616][T20153] RAX: ffffffffffffffda RBX: 00007fc587425fa0 RCX: 00007fc58719e159 [ 1531.760638][T20153] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1531.760659][T20153] RBP: 00007fc58723506b R08: 0000000000000000 R09: 0000000000000000 [ 1531.760678][T20153] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1531.760698][T20153] R13: 00007fc587426038 R14: 00007fc587425fa0 R15: 00007ffdf1f87bf8 [ 1531.760741][T20153] [ 1532.162289][ T3209] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1532.315217][ T3209] usb 9-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 1532.319447][ T3209] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1532.327833][ T3209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.327861][ T3209] usb 9-1: Product: syz [ 1532.327880][ T3209] usb 9-1: Manufacturer: syz [ 1532.327899][ T3209] usb 9-1: SerialNumber: syz [ 1532.353102][T20159] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1532.396717][T20178] loop1: detected capacity change from 0 to 1024 [ 1532.397713][T20178] EXT4-fs: Ignoring removed nobh option [ 1532.441027][T19733] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1532.479262][T20178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.560475][T20186] loop3: detected capacity change from 0 to 256 [ 1532.596444][T19733] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1532.600920][T19733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1532.601040][T19733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1532.601072][T19733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1532.601103][T19733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 1532.601139][T19733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 64 [ 1532.607885][T20186] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1532.607968][T20186] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1532.608003][T20186] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1532.608214][ T30] audit: type=1800 audit(1790852696.167:100): pid=20186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3922" name="file1" dev="loop3" ino=1048882 res=0 errno=0 [ 1532.611218][ T3209] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1532.611270][ T3209] usb 9-1: MIDIStreaming interface descriptor not found [ 1532.618586][T20186] FAT-fs (loop3): unable to read block(21474836480) for building NFS inode [ 1532.662460][T12175] Bluetooth: hci2: command 0x0405 tx timeout [ 1532.693452][T19733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.693482][T19733] usb 1-1: Product: syz [ 1532.693502][T19733] usb 1-1: Manufacturer: syz [ 1532.693521][T19733] usb 1-1: SerialNumber: syz [ 1532.775271][T20169] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1532.775393][T20169] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1532.775509][T20169] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1532.775809][T20169] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1532.776046][T20169] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1532.780386][T19733] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 1532.841178][T19733] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1532.850908][T19733] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1532.881525][T19733] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1532.905196][T19733] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1533.008987][T20196] loop5: detected capacity change from 0 to 764 [ 1533.187161][T20199] loop3: detected capacity change from 0 to 16 [ 1533.281404][T20199] erofs (device loop3): mounted with root inode @ nid 36. [ 1535.618400][T17699] usb 1-1: USB disconnect, device number 82 [ 1535.623648][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.716004][ T3209] usb 9-1: USB disconnect, device number 13 [ 1535.785413][T17699] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1535.836115][T17699] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1535.876148][T17699] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1535.903171][T17699] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1535.908164][T17699] keyspan 1-1:1.0: device disconnected [ 1536.023157][T20229] loop1: detected capacity change from 0 to 1024 [ 1536.113078][T20229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.203084][T20236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3939'. [ 1536.382181][T20237] loop3: detected capacity change from 0 to 1024 [ 1536.388310][T20237] EXT4-fs: Ignoring removed bh option [ 1536.466059][T20237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.475816][T14970] udevd[14970]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1536.488352][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.793395][T20255] loop1: detected capacity change from 0 to 1024 [ 1536.850767][T20255] hfsplus: cannot replace xattr [ 1536.966320][T20260] loop5: detected capacity change from 0 to 2048 [ 1537.000846][T20260] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1537.018821][T20260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1537.625222][T16407] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 1537.765563][T16407] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 1537.918720][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.969294][T20269] loop0: detected capacity change from 0 to 256 [ 1538.038740][T20269] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1538.039175][T20269] exFAT-fs (loop0): failed to load alloc-bitmap [ 1538.039189][T20269] exFAT-fs (loop0): failed to recognize exfat type [ 1538.399314][T20283] loop0: detected capacity change from 0 to 128 [ 1538.401059][ T187] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1538.449390][T20283] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1538.497747][T20283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1538.572154][ T187] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1538.576789][ T187] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.576826][ T187] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1538.576860][ T187] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1538.576900][ T187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.593713][ T187] usb 9-1: config 0 descriptor?? [ 1538.649683][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.008315][T20292] loop0: detected capacity change from 0 to 256 [ 1539.025121][T20293] raw_sendmsg: syz.1.3960 forgot to set AF_INET. Fix it! [ 1539.028509][T20292] exfat: Deprecated parameter 'utf8' [ 1539.028566][T20292] exfat: Deprecated parameter 'namecase' [ 1539.028595][T20292] exfat: Deprecated parameter 'utf8' [ 1539.046545][ T187] hid-multitouch 0003:0EEF:72C4.001A: unbalanced collection at end of report description [ 1539.065179][ T187] hid-multitouch 0003:0EEF:72C4.001A: probe with driver hid-multitouch failed with error -22 [ 1539.077620][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.171174][T20292] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1539.232839][ T187] usb 9-1: USB disconnect, device number 14 [ 1539.253552][T20304] netlink: 'syz.1.3961': attribute type 4 has an invalid length. [ 1540.172345][T20307] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 1540.266830][T12175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1540.272079][T12175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1540.272903][T12175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1540.274463][T12175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1540.275162][T12175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1540.619890][T20318] loop3: detected capacity change from 0 to 1024 [ 1540.625856][T20318] ext4: Unknown parameter 'noacl' [ 1541.005056][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.734324][T17699] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1542.041195][T17699] usb 2-1: Using ep0 maxpacket: 16 [ 1542.043154][T17699] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1542.044360][T17699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.044396][T17699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.044425][T17699] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1542.044474][T17699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.093284][T17699] usb 2-1: config 0 descriptor?? [ 1542.353981][ T52] Bluetooth: hci3: command tx timeout [ 1542.942991][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.173244][T17699] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001B/input/input41 [ 1543.199976][T17699] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1543.377902][T20351] loop8: detected capacity change from 0 to 128 [ 1543.379148][T17699] usb 2-1: USB disconnect, device number 104 [ 1543.380213][T20351] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1543.412783][T20351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1543.555781][T20348] fido_id[20348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1543.861024][ T5342] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1543.867125][ T50] bridge_slave_1: left allmulticast mode [ 1543.867152][ T50] bridge_slave_1: left promiscuous mode [ 1543.867366][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.872006][ T50] bridge_slave_0: left allmulticast mode [ 1543.872029][ T50] bridge_slave_0: left promiscuous mode [ 1543.872248][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.977509][T20369] loop3: detected capacity change from 0 to 1024 [ 1543.984428][T20369] EXT4-fs: Ignoring removed nobh option [ 1544.026180][ T5342] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1544.029052][ T5342] usb 1-1: not running at top speed; connect to a high speed hub [ 1544.029087][ T5342] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1544.039127][ T5342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.039156][ T5342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1544.059089][T20370] loop8: detected capacity change from 0 to 2048 [ 1544.088539][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.088569][ T5342] usb 1-1: Product: syz [ 1544.088589][ T5342] usb 1-1: Manufacturer: syz [ 1544.088617][ T5342] usb 1-1: SerialNumber: syz [ 1544.124032][T20369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1544.136767][T20370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1544.159843][ T5342] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1544.431784][ T52] Bluetooth: hci3: command tx timeout [ 1544.633032][ T5342] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1544.755258][T14714] udevd[14714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.857652][T20397] loop1: detected capacity change from 0 to 1024 [ 1544.891536][T20397] hfsplus: failed to load extents file [ 1544.950041][T14477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.973952][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.311515][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.751576][T20408] loop8: detected capacity change from 0 to 512 [ 1546.090416][T20408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.147718][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3983'. [ 1546.195181][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.217380][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.228099][ T50] bond0 (unregistering): Released all slaves [ 1546.300089][T20403] bridge1: entered promiscuous mode [ 1546.305221][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3983'. [ 1546.451305][T20424] loop1: detected capacity change from 0 to 128 [ 1546.469730][T20424] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1546.501642][ T52] Bluetooth: hci3: command tx timeout [ 1546.541447][T20424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1546.541792][T14477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.619095][T20428] overlayfs: failed to clone upperpath [ 1546.808752][T17699] usb 1-1: USB disconnect, device number 83 [ 1548.103911][T20454] loop3: detected capacity change from 0 to 128 [ 1548.151062][T20454] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1548.170140][T20454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1548.641340][T12175] Bluetooth: hci3: command tx timeout [ 1550.183064][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1550.359477][T20491] loop8: detected capacity change from 0 to 16 [ 1550.373202][T20491] erofs (device loop8): mounted with root inode @ nid 36. [ 1550.479822][T20493] loop0: detected capacity change from 0 to 1024 [ 1550.490925][T20493] EXT4-fs: Ignoring removed mblk_io_submit option [ 1550.500829][T20493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1550.519213][T20493] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1550.545013][T20493] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.4008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1550.545086][T20493] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1550.547537][T20493] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.4008: couldn't read orphan inode 11 (err -117) [ 1550.547573][T20493] loop0: lost filesystem error report for type 5 error -117 [ 1550.600274][T20493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1550.746195][T20493] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.4008: Invalid block bitmap block 0 in block_group 0 [ 1550.775872][T20493] Quota error (device loop0): write_blk: dquota write failed [ 1550.775911][T20493] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1550.785773][T20493] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.4008: Failed to acquire dquot type 0 [ 1550.892827][ T50] hsr_slave_0: left promiscuous mode [ 1550.914758][ T50] hsr_slave_1: left promiscuous mode [ 1550.917582][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.917605][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.927706][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.927728][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.543043][ T50] veth1_macvtap: left promiscuous mode [ 1551.543088][ T50] veth0_macvtap: left promiscuous mode [ 1551.543227][ T50] veth1_vlan: left promiscuous mode [ 1551.543315][ T50] veth0_vlan: left promiscuous mode [ 1551.606455][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.615720][T16659] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 21474836481 in block_group 0 [ 1551.615756][T16659] loop0: lost filesystem error report for type 5 error -117 [ 1552.081024][T17699] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1552.231116][T17699] usb 1-1: Using ep0 maxpacket: 32 [ 1552.234539][T17699] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1552.244138][T17699] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.244232][T17699] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.400449][T17699] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1552.400574][T17699] usb 1-1: Product: syz [ 1552.400659][T17699] usb 1-1: Manufacturer: syz [ 1552.893335][T17699] hub 1-1:4.0: USB hub found [ 1552.958288][T20530] loop8: detected capacity change from 0 to 16 [ 1552.970771][T20530] erofs (device loop8): mounted with root inode @ nid 36. [ 1553.228202][T20535] loop1: detected capacity change from 0 to 512 [ 1553.229435][T20535] EXT4-fs: Ignoring removed oldalloc option [ 1553.236857][T20535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1553.273449][T17699] hub 1-1:4.0: 2 ports detected [ 1553.309827][T20535] EXT4-fs (loop1): 1 orphan inode deleted [ 1553.309850][T20535] EXT4-fs (loop1): 1 truncate cleaned up [ 1553.324667][T20535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1553.429390][T20539] 9p: Bad value for 'rfdno' [ 1553.537911][T20535] EXT4-fs (loop1): shut down requested (0) [ 1554.017139][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.050742][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1554.084574][T17699] usb 1-1: USB disconnect, device number 84 [ 1554.257870][T20544] loop8: detected capacity change from 0 to 512 [ 1554.270481][T20544] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1554.324534][T20544] EXT4-fs (loop8): 1 truncate cleaned up [ 1554.326845][T20544] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1554.424448][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1555.083568][T20550] loop1: detected capacity change from 0 to 2048 [ 1555.086705][T20550] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1555.118154][T20550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1556.071266][ T30] audit: type=1326 audit(1790852719.617:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.071674][ T30] audit: type=1326 audit(1790852719.617:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.089076][ T30] audit: type=1326 audit(1790852719.417:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.093220][ T30] audit: type=1326 audit(1790852719.657:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.101974][ T30] audit: type=1326 audit(1790852719.657:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.256146][ T30] audit: type=1326 audit(1790852719.817:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.260311][ T30] audit: type=1326 audit(1790852719.817:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.336486][ T30] audit: type=1326 audit(1790852719.897:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.337056][ T30] audit: type=1326 audit(1790852719.897:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1556.473068][ T30] audit: type=1326 audit(1790852719.817:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20560 comm="syz.1.4027" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f619e159 code=0x7ffc0000 [ 1557.231486][T20580] loop3: detected capacity change from 0 to 512 [ 1557.385564][T20580] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1557.386555][T14477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.628143][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1557.851812][T20313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.851924][T20313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.852063][T20313] bridge_slave_0: entered allmulticast mode [ 1557.866007][T20313] bridge_slave_0: entered promiscuous mode [ 1557.875022][T20313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.875142][T20313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.879952][T20313] bridge_slave_1: entered allmulticast mode [ 1557.912976][T20313] bridge_slave_1: entered promiscuous mode [ 1557.968250][T20580] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 1558.008839][T20580] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 1558.115321][T20313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.174550][T20313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.288953][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4041'. [ 1558.444848][T20313] team0: Port device team_slave_0 added [ 1558.468417][T20313] team0: Port device team_slave_1 added [ 1558.544316][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4040'. [ 1558.579036][T20313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.579054][T20313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.579089][T20313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.623320][T20614] loop3: detected capacity change from 0 to 256 [ 1558.632761][T20313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.632778][T20313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.632814][T20313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.734049][T20614] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1558.825333][T20313] hsr_slave_0: entered promiscuous mode [ 1558.826495][T20313] hsr_slave_1: entered promiscuous mode [ 1558.827344][T20313] debugfs: 'hsr0' already exists in 'hsr' [ 1558.827366][T20313] Cannot create hsr debugfs directory [ 1559.940810][T20630] loop0: detected capacity change from 0 to 256 [ 1559.948609][T20630] vfat: Unknown parameter '00000000000000000000000' [ 1560.054463][T20632] loop3: detected capacity change from 0 to 512 [ 1560.074538][T20632] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.4048: bad orphan inode 13 [ 1560.074589][T20632] loop3: lost filesystem error report for type 5 error -117 [ 1560.076531][T20632] ext4_test_bit(bit=12, block=4) = 1 [ 1560.076553][T20632] is_bad_inode(inode)=0 [ 1560.076564][T20632] NEXT_ORPHAN(inode)=0 [ 1560.076575][T20632] max_ino=32 [ 1560.076587][T20632] i_nlink=1 [ 1560.080422][T20632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.219968][T20632] EXT4-fs warning (device loop3): dx_probe:813: inode #2: comm syz.3.4048: Hash code is SIPHASH, but hash not in dirent [ 1560.220001][T20632] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4048: Corrupt directory, running e2fsck is recommended [ 1560.330690][T20632] EXT4-fs warning (device loop3): dx_probe:813: inode #2: comm syz.3.4048: Hash code is SIPHASH, but hash not in dirent [ 1560.330760][T20632] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4048: Corrupt directory, running e2fsck is recommended [ 1560.602048][T20635] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1560.729206][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4049'. [ 1560.918388][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4054'. [ 1561.009224][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.048974][T20650] loop1: detected capacity change from 0 to 512 [ 1561.067366][T20650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1561.107061][T20656] loop0: detected capacity change from 0 to 128 [ 1561.126302][T20656] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1561.170204][T20650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.170300][T20650] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.183329][T20656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1561.425392][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.424518][T20679] loop3: detected capacity change from 0 to 1764 [ 1562.505817][T20682] trusted_key: encrypted_key: keyword 'new!default' not recognized [ 1562.551271][T20662] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 1562.669659][T20687] loop0: detected capacity change from 0 to 256 [ 1562.681015][T20687] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1562.681035][T20687] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1562.733026][T20687] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1562.733918][T20687] exFAT-fs (loop0): failed to load alloc-bitmap [ 1562.733933][T20687] exFAT-fs (loop0): failed to recognize exfat type [ 1562.782051][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4065'. [ 1563.048816][T20696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4067'. [ 1563.188721][T20313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1563.235687][T20313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1563.236708][T20313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1563.264893][T20313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1563.266203][T20313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1563.289816][T20313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1563.299761][T20313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1563.316202][T20313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1563.467793][T20707] loop8: detected capacity change from 0 to 1024 [ 1563.535865][T20710] loop3: detected capacity change from 0 to 128 [ 1563.592828][T20710] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1563.597594][T20710] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.646790][T20710] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x16) [ 1563.878668][T16778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1563.884755][T20313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.052768][T20717] syz.8.4069: attempt to access beyond end of device [ 1564.052768][T20717] loop8: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 1564.052960][T20717] Buffer I/O error on dev loop8, logical block 2889, async page read [ 1564.053622][T20717] syz.8.4069: attempt to access beyond end of device [ 1564.053622][T20717] loop8: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 1564.053704][T20717] Buffer I/O error on dev loop8, logical block 2889, async page read [ 1564.123618][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1564.123670][ T30] audit: type=1800 audit(1790852727.617:124): pid=20717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4069" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1564.537415][T20313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.548713][T18501] kworker/u8:14: attempt to access beyond end of device [ 1564.548713][T18501] loop8: rw=8388609, sector=5778, nr_sectors = 2 limit=1024 [ 1564.548749][T18501] Buffer I/O error on dev loop8, logical block 2889, lost async page write [ 1564.578908][T18499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.579044][T18499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.594707][T18235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.594823][T18235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.205215][T20720] loop0: detected capacity change from 0 to 512 [ 1566.280462][T20726] loop3: detected capacity change from 0 to 512 [ 1566.296195][T20726] EXT4-fs: Ignoring removed nobh option [ 1566.298303][T20726] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1566.298325][T20726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1566.344444][T20726] EXT4-fs (loop3): 1 truncate cleaned up [ 1566.360383][T20726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1566.493776][T16778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.817070][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1566.888043][T20741] futex_wake_op: syz.8.4077 tries to shift op by 144; fix this program [ 1566.929665][T20741] loop8: detected capacity change from 0 to 256 [ 1567.630704][T20741] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1567.667537][T20740] exFAT-fs (loop8): valid_size(562949953421322) is greater than size(10) [ 1567.668455][ T30] audit: type=1800 audit(1790852731.227:125): pid=20740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4077" name="file1" dev="loop8" ino=1048888 res=0 errno=0 [ 1567.805318][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1568.114917][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4080'. [ 1569.450712][T20775] fuse: Bad value for 'fd' [ 1570.139122][T20783] loop3: detected capacity change from 0 to 8 [ 1570.143343][T20783] squashfs: Unknown parameter '' [ 1571.669169][T20788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1572.405175][T20313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.618047][T20313] veth0_vlan: entered promiscuous mode [ 1572.620425][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'. [ 1572.675302][T20313] veth1_vlan: entered promiscuous mode [ 1572.717917][T20313] veth0_macvtap: entered promiscuous mode [ 1572.730009][T20313] veth1_macvtap: entered promiscuous mode [ 1572.782089][T20313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1572.786632][T20313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.872996][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.892100][T18235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.894510][T18235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.895060][T18235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.452408][T20816] loop0: detected capacity change from 0 to 1024 [ 1573.459257][T20816] ext4: Unknown parameter 'noacl' [ 1574.020311][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.020340][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.196610][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.196637][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.539076][T20830] loop2: detected capacity change from 0 to 256 [ 1574.650255][T20830] exFAT-fs (loop2): failed to read sector(0x100) [ 1574.650280][T20830] exFAT-fs (loop2): failed to load upcase table [ 1574.650293][T20830] exFAT-fs (loop2): failed to recognize exfat type [ 1574.831358][T20838] fuse: Invalid rootmode [ 1574.972839][T20842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1575.849687][T20662] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1575.867299][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4107'. [ 1576.245512][T20864] trusted_key: encrypted_key: insufficient parameters specified [ 1577.784460][T20861] loop2: detected capacity change from 0 to 4096 [ 1577.818391][T20861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1577.860723][T20861] netlink: 'syz.2.4109': attribute type 4 has an invalid length. [ 1578.185212][T20313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.309256][T20876] loop0: detected capacity change from 0 to 512 [ 1578.327712][T20876] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1578.358621][T20876] EXT4-fs (loop0): 1 truncate cleaned up [ 1578.373102][T20876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.461937][ T30] audit: type=1326 audit(1790852742.027:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.462099][ T30] audit: type=1326 audit(1790852742.027:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.468811][ T30] audit: type=1326 audit(1790852742.027:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.469163][ T30] audit: type=1326 audit(1790852742.027:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.470679][ T30] audit: type=1326 audit(1790852742.027:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.470867][ T30] audit: type=1326 audit(1790852742.027:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.498539][ T30] audit: type=1326 audit(1790852742.027:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.498600][ T30] audit: type=1326 audit(1790852742.037:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.498658][ T30] audit: type=1326 audit(1790852742.037:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.498715][ T30] audit: type=1326 audit(1790852742.037:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.2.4114" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fde1fb9e159 code=0x7ffc0000 [ 1578.923200][T20891] fuse: Invalid rootmode [ 1579.073372][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.081060][T17679] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1579.234367][T17679] usb 2-1: not running at top speed; connect to a high speed hub [ 1579.234409][T17679] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1579.235733][T17679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1579.238362][T17679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.238391][T17679] usb 2-1: Product: syz [ 1579.238645][T17679] usb 2-1: Manufacturer: syz [ 1579.238859][T17679] usb 2-1: SerialNumber: syz [ 1579.321743][T17679] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1579.325064][T17679] keyspan 2-1:1.0: unsupported endpoint type 0 [ 1579.355238][T17679] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1579.360918][T17679] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1579.385096][T17679] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1579.389940][T17679] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1579.545361][T17679] usb 2-1: USB disconnect, device number 105 [ 1579.626781][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4123'. [ 1579.707139][T17679] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1579.747354][T17679] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1579.765748][T17679] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1579.786028][T17679] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1579.787603][T17679] keyspan 2-1:1.0: device disconnected [ 1579.799128][T20914] loop3: detected capacity change from 0 to 136 [ 1579.859260][T20914] Attempt to read inode for relocated directory [ 1580.399453][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1580.448624][T20931] serial 00:03: in use; can't configure [ 1581.118055][T20927] loop1: detected capacity change from 0 to 1024 [ 1581.164362][T20927] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1581.282587][T20927] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.4129: lblock 2 mapped to illegal pblock 2 (length 1) [ 1581.282633][T20927] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1581.289874][T20927] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.4129: lblock 0 mapped to illegal pblock 48 (length 1) [ 1581.289918][T20927] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1581.291000][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 1581.291023][ C0] EXT4-fs (loop1): initial error at time 1790852744: ext4_map_blocks:790: inode 3: block 2 [ 1581.291068][ C0] EXT4-fs (loop1): last error at time 1790852744: ext4_map_blocks:790: inode 3: block 48 [ 1581.292662][T20938] loop0: detected capacity change from 0 to 512 [ 1581.319566][T20938] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.4133: corrupted in-inode xattr: invalid ea_ino [ 1581.319601][T20938] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1581.319962][T20938] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.4133: couldn't read orphan inode 15 (err -117) [ 1581.319996][T20938] loop0: lost filesystem error report for type 5 error -117 [ 1581.322972][T20938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.352624][T20927] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.4129: Failed to acquire dquot type 0 [ 1581.352654][T20927] loop1: lost filesystem error report for type 5 error -117 [ 1581.356013][T20927] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 1581.356070][T20927] loop1: lost filesystem error report for type 5 error -117 [ 1581.356366][T20927] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.4129: mark_inode_dirty error [ 1581.356397][T20927] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1581.356717][T20927] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 1581.356805][T20927] EXT4-fs (loop1): 1 orphan inode deleted [ 1581.367531][T20927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1581.380161][T18539] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 1581.427830][T18539] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:15: Failed to release dquot type 0 [ 1581.475879][T20662] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 1581.477503][T20662] Bluetooth: hci2: unexpected event for opcode 0x204b [ 1581.517858][T16659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.731258][T18501] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 1581.731305][T18501] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1581.735482][T16914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.748101][T18501] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:14: Failed to release dquot type 0 [ 1581.748132][T18501] loop1: lost filesystem error report for type 5 error -117 [ 1581.763246][T16914] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1581.763280][T16914] loop1: lost filesystem error report for type 5 error -117 [ 1581.803112][T16914] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 1581.803139][T16914] loop1: lost filesystem error report for type 5 error -117 [ 1581.806844][T16914] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 1581.806876][T16914] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1581.819218][T16914] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1581.819252][T16914] loop1: lost filesystem error report for type 5 error -117 [ 1581.958290][T20949] loop2: detected capacity change from 0 to 512 [ 1581.969443][T20949] EXT4-fs: Ignoring removed oldalloc option [ 1582.037820][T20949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1582.037919][T20949] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1582.338200][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'. [ 1582.402530][ T5342] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1582.558103][T20972] loop1: detected capacity change from 0 to 128 [ 1582.571643][ T5342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1582.571698][ T5342] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1582.577868][ T5342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.577898][ T5342] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1582.577926][ T5342] usb 3-1: config 1 has no interface number 1 [ 1582.577982][ T5342] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1582.587485][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.587516][ T5342] usb 3-1: Product: syz [ 1582.587542][ T5342] usb 3-1: Manufacturer: syz [ 1582.587562][ T5342] usb 3-1: SerialNumber: syz [ 1584.620052][ C0] I/O error, dev loop1, sector 1 op 0x1:(WRITE) flags 0x800000 phys_seg 1 prio class 2 [ 1584.620130][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1584.620562][T20972] ------------[ cut here ]------------ [ 1584.620576][T20972] !buffer_uptodate(bh) [ 1584.620587][T20972] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#1: syz.1.4140/20972 [ 1584.638864][T20980] loop1: detected capacity change from 128 to 0 [ 1584.666732][T20972] Modules linked in: [ 1584.670641][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.1.4140 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.682724][T20972] Tainted: [L]=SOFTLOCKUP [ 1584.687052][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1584.697292][T20972] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1584.703100][T20972] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 0f f7 67 ff eb 8c e8 08 f7 67 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 fa f6 67 ff 90 0f 0b 90 e9 cf fd ff ff [ 1584.722793][T20972] RSP: 0018:ffffc9000e457438 EFLAGS: 00010287 [ 1584.728906][T20972] RAX: ffffffff825ff428 RBX: ffff888050a499a0 RCX: 0000000000080000 [ 1584.736946][T20972] RDX: ffffc90005ce9000 RSI: 000000000000788f RDI: 0000000000007890 [ 1584.744990][T20972] RBP: dffffc0000000001 R08: ffff888050a499a7 R09: 1ffff1100a149334 [ 1584.753090][T20972] R10: dffffc0000000000 R11: ffffed100a149335 R12: dffffc0000000000 [ 1584.761827][T20972] R13: 1ffff92001c8aebe R14: ffffc9000e4575f0 R15: ffff888068033a08 [ 1584.769806][T20972] FS: 00007f85f700c6c0(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 1584.779266][T20972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1584.785903][T20972] CR2: 000056049123c950 CR3: 0000000063e61000 CR4: 0000000000350ef0 [ 1584.793941][T20972] Call Trace: [ 1584.797220][T20972] [ 1584.800152][T20972] mmb_mark_buffer_dirty+0x2c/0x1f0 [ 1584.805431][T20972] fat12_ent_put+0x1b7/0x2f0 [ 1584.810089][T20972] fat_ent_write+0xb8/0x190 [ 1584.814653][T20972] fat_chain_add+0x409/0x8e0 [ 1584.819274][T20972] ? __pfx_fat_chain_add+0x10/0x10 [ 1584.824837][T20972] ? clean_bdev_aliases+0x62e/0x750 [ 1584.830065][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.835951][T20972] ? fat_bmap+0x487/0x5a0 [ 1584.840335][T20972] fat_get_block+0x768/0xae0 [ 1584.845031][T20972] ? __pfx_fat_get_block+0x10/0x10 [ 1584.850160][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.856589][T20972] ? do_raw_spin_unlock+0xf5/0x200 [ 1584.862234][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.867884][T20972] ? _raw_spin_unlock+0x28/0x50 [ 1584.872797][T20972] ? create_empty_buffers+0x460/0x520 [ 1584.878194][T20972] __block_write_begin_int+0x6c2/0x1900 [ 1584.883830][T20972] ? __pfx_fat_get_block+0x10/0x10 [ 1584.888954][T20972] ? __pfx___block_write_begin_int+0x10/0x10 [ 1584.891117][T10019] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1584.902673][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.908335][T20972] cont_write_begin+0x71b/0xac0 [ 1584.913319][T20972] ? __pfx_cont_write_begin+0x10/0x10 [ 1584.918811][T20972] ? do_raw_spin_unlock+0xf5/0x200 [ 1584.924001][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.929652][T20972] ? _raw_spin_unlock+0x28/0x50 [ 1584.934602][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.940277][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.945982][T20972] fat_write_begin+0x7a/0x150 [ 1584.950674][T20972] ? __pfx_fat_get_block+0x10/0x10 [ 1584.955863][T20972] generic_perform_write+0x2d5/0x8f0 [ 1584.961924][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.967586][T20972] ? __pfx_generic_perform_write+0x10/0x10 [ 1584.973904][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.979588][T20972] ? file_update_time_flags+0x3ab/0x440 [ 1584.985335][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1584.991023][T20972] ? __generic_file_write_iter+0xf9/0x230 [ 1584.996768][T20972] ? generic_file_write_iter+0x9a/0x330 [ 1585.002488][T20972] generic_file_write_iter+0xae/0x330 [ 1585.007895][T20972] vfs_write+0x612/0xba0 [ 1585.012214][T20972] ? __pfx_vfs_write+0x10/0x10 [ 1585.016999][T20972] ? __fget_files+0x2a/0x420 [ 1585.021699][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.027356][T20972] ksys_write+0x150/0x270 [ 1585.031761][T20972] ? __pfx_ksys_write+0x10/0x10 [ 1585.036639][T20972] do_syscall_64+0x166/0x520 [ 1585.041302][T20972] ? trace_irq_disable+0x3b/0x140 [ 1585.046338][T20972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.052488][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.058390][T20972] RIP: 0033:0x7f85f619e159 [ 1585.063646][T20972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.083786][T20972] RSP: 002b:00007f85f700c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.091654][T10019] usb 2-1: Using ep0 maxpacket: 8 [ 1585.093761][T10019] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1585.095060][T10019] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 93, changing to 7 [ 1585.098419][T10019] usb 2-1: string descriptor 0 read error: -22 [ 1585.098585][T10019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.131407][T20972] RAX: ffffffffffffffda RBX: 00007f85f6425fa0 RCX: 00007f85f619e159 [ 1585.139388][T20972] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000005 [ 1585.147423][T20972] RBP: 00007f85f623506b R08: 0000000000000000 R09: 0000000000000000 [ 1585.155446][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1585.164223][T20972] R13: 00007f85f6426038 R14: 00007f85f6425fa0 R15: 00007ffd206bc828 [ 1585.172730][T20972] [ 1585.175756][T20972] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1585.183068][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.1.4140 Tainted: G L syzkaller #0 PREEMPT(full) [ 1585.194060][T20972] Tainted: [L]=SOFTLOCKUP [ 1585.198380][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1585.208439][T20972] Call Trace: [ 1585.211712][T20972] [ 1585.214640][T20972] vpanic+0x56d/0xa60 [ 1585.218657][T20972] ? __pfx__printk+0x10/0x10 [ 1585.223254][T20972] ? __pfx_vpanic+0x10/0x10 [ 1585.227773][T20972] ? is_bpf_text_address+0x292/0x2b0 [ 1585.233073][T20972] ? is_bpf_text_address+0x26/0x2b0 [ 1585.238298][T20972] panic+0xc5/0xd0 [ 1585.242048][T20972] ? __pfx_panic+0x10/0x10 [ 1585.246502][T20972] __warn+0x315/0x4c0 [ 1585.250500][T20972] ? mark_buffer_dirty+0x299/0x410 [ 1585.255628][T20972] ? mark_buffer_dirty+0x299/0x410 [ 1585.260753][T20972] __report_bug+0x276/0x570 [ 1585.265275][T20972] ? __pfx___schedule+0x10/0x10 [ 1585.270138][T20972] ? mark_buffer_dirty+0x299/0x410 [ 1585.275263][T20972] ? __pfx___report_bug+0x10/0x10 [ 1585.280301][T20972] ? schedule+0x90/0x2b0 [ 1585.284559][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.290193][T20972] ? __lock_acquire+0x747/0x2de0 [ 1585.295145][T20972] ? mark_buffer_dirty+0x299/0x410 [ 1585.300272][T20972] report_bug+0x16b/0x220 [ 1585.304618][T20972] ? mark_buffer_dirty+0x299/0x410 [ 1585.309733][T20972] ? mark_buffer_dirty+0x29b/0x410 [ 1585.314854][T20972] handle_bug+0x9c/0x200 [ 1585.319113][T20972] exc_invalid_op+0x1a/0x50 [ 1585.323637][T20972] asm_exc_invalid_op+0x1a/0x20 [ 1585.328490][T20972] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1585.334214][T20972] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 0f f7 67 ff eb 8c e8 08 f7 67 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 fa f6 67 ff 90 0f 0b 90 e9 cf fd ff ff [ 1585.353821][T20972] RSP: 0018:ffffc9000e457438 EFLAGS: 00010287 [ 1585.359895][T20972] RAX: ffffffff825ff428 RBX: ffff888050a499a0 RCX: 0000000000080000 [ 1585.367870][T20972] RDX: ffffc90005ce9000 RSI: 000000000000788f RDI: 0000000000007890 [ 1585.375840][T20972] RBP: dffffc0000000001 R08: ffff888050a499a7 R09: 1ffff1100a149334 [ 1585.383808][T20972] R10: dffffc0000000000 R11: ffffed100a149335 R12: dffffc0000000000 [ 1585.392212][T20972] R13: 1ffff92001c8aebe R14: ffffc9000e4575f0 R15: ffff888068033a08 [ 1585.400195][T20972] ? mark_buffer_dirty+0x298/0x410 [ 1585.405324][T20972] ? mark_buffer_dirty+0x298/0x410 [ 1585.410452][T20972] mmb_mark_buffer_dirty+0x2c/0x1f0 [ 1585.415671][T20972] fat12_ent_put+0x1b7/0x2f0 [ 1585.420297][T20972] fat_ent_write+0xb8/0x190 [ 1585.424825][T20972] fat_chain_add+0x409/0x8e0 [ 1585.429434][T20972] ? __pfx_fat_chain_add+0x10/0x10 [ 1585.434550][T20972] ? clean_bdev_aliases+0x62e/0x750 [ 1585.439764][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.445398][T20972] ? fat_bmap+0x487/0x5a0 [ 1585.449743][T20972] fat_get_block+0x768/0xae0 [ 1585.454348][T20972] ? __pfx_fat_get_block+0x10/0x10 [ 1585.459453][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.465082][T20972] ? do_raw_spin_unlock+0xf5/0x200 [ 1585.470204][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.475841][T20972] ? _raw_spin_unlock+0x28/0x50 [ 1585.480692][T20972] ? create_empty_buffers+0x460/0x520 [ 1585.486076][T20972] __block_write_begin_int+0x6c2/0x1900 [ 1585.491650][T20972] ? __pfx_fat_get_block+0x10/0x10 [ 1585.496758][T20972] ? __pfx___block_write_begin_int+0x10/0x10 [ 1585.502741][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.508384][T20972] cont_write_begin+0x71b/0xac0 [ 1585.513252][T20972] ? __pfx_cont_write_begin+0x10/0x10 [ 1585.518622][T20972] ? do_raw_spin_unlock+0xf5/0x200 [ 1585.523742][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.529370][T20972] ? _raw_spin_unlock+0x28/0x50 [ 1585.534219][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.539852][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.545485][T20972] fat_write_begin+0x7a/0x150 [ 1585.550157][T20972] ? __pfx_fat_get_block+0x10/0x10 [ 1585.555266][T20972] generic_perform_write+0x2d5/0x8f0 [ 1585.560561][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.566202][T20972] ? __pfx_generic_perform_write+0x10/0x10 [ 1585.572021][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.577651][T20972] ? file_update_time_flags+0x3ab/0x440 [ 1585.583199][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.588827][T20972] ? __generic_file_write_iter+0xf9/0x230 [ 1585.594551][T20972] ? generic_file_write_iter+0x9a/0x330 [ 1585.600109][T20972] generic_file_write_iter+0xae/0x330 [ 1585.605492][T20972] vfs_write+0x612/0xba0 [ 1585.609736][T20972] ? __pfx_vfs_write+0x10/0x10 [ 1585.614500][T20972] ? __fget_files+0x2a/0x420 [ 1585.619106][T20972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1585.624738][T20972] ksys_write+0x150/0x270 [ 1585.629063][T20972] ? __pfx_ksys_write+0x10/0x10 [ 1585.633919][T20972] do_syscall_64+0x166/0x520 [ 1585.638521][T20972] ? trace_irq_disable+0x3b/0x140 [ 1585.643542][T20972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.649610][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.655497][T20972] RIP: 0033:0x7f85f619e159 [ 1585.659903][T20972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.679499][T20972] RSP: 002b:00007f85f700c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.687909][T20972] RAX: ffffffffffffffda RBX: 00007f85f6425fa0 RCX: 00007f85f619e159 [ 1585.695872][T20972] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000005 [ 1585.703831][T20972] RBP: 00007f85f623506b R08: 0000000000000000 R09: 0000000000000000 [ 1585.711799][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1585.719772][T20972] R13: 00007f85f6426038 R14: 00007f85f6425fa0 R15: 00007ffd206bc828 [ 1585.727760][T20972] [ 1585.730977][T20972] Kernel Offset: disabled [ 1585.735283][T20972] Rebooting in 86400 seconds..