last executing test programs: 10m6.532426258s ago: executing program 1 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x48810) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) socket$inet_sctp(0x2, 0x5, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f0000007400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30, 0x20000000}}], 0x1, 0x2004a880) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aa", 0x4d, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 10m4.346099986s ago: executing program 1 (id=94): socket$nl_generic(0x10, 0x3, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 10m3.418896991s ago: executing program 1 (id=96): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) msgget$private(0x0, 0x100) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 10m1.953716644s ago: executing program 1 (id=99): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x19, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x198}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9m58.664308974s ago: executing program 1 (id=111): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="300000000000000084", @ANYRESOCT, @ANYBLOB="b9cf6bf2326c09a7b2e3cb64f170a13aeffa0572658e75a4fee503d70db58c2e73fec79056d8074804461e0469d2cc726f29d21f2f4a9f9d8b490cdf6510d32152e2d0da18da85f48290d9f0183bd02b3ae2e9d4634d679a9456b8c77abc"], 0x30}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = socket$inet6(0xa, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) 9m54.154989105s ago: executing program 1 (id=118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 9m38.40668101s ago: executing program 32 (id=118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 3m25.099876583s ago: executing program 3 (id=1275): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x7, 0x70, 0x9, 0x1}) 3m24.58355799s ago: executing program 3 (id=1280): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000e23d00090000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r4, 0x6000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0) 3m21.901465114s ago: executing program 3 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) 3m18.628996332s ago: executing program 3 (id=1299): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) read$FUSE(r0, &(0x7f000000e0c0)={0x2020}, 0x2020) 3m17.926622906s ago: executing program 3 (id=1305): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8838, 0x8, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x86ba, 0x0, 0x3, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 3m16.649720143s ago: executing program 3 (id=1310): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_mount_image$exfat(0x0, &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b4884e, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 3m16.445744171s ago: executing program 33 (id=1310): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_mount_image$exfat(0x0, &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b4884e, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 34.505307806s ago: executing program 2 (id=1951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f000007a000/0x4000)=nil, 0x4000, 0x0, 0x204031, 0xffffffffffffffff, 0xec778000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) sendto(0xffffffffffffffff, &(0x7f0000000040)='A', 0xfffffffffffffd53, 0x4000086, 0x0, 0x0) 34.211543783s ago: executing program 2 (id=1955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0xc10}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.197800514s ago: executing program 0 (id=1956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 33.738304206s ago: executing program 0 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 33.183638857s ago: executing program 2 (id=1959): socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x7}, {0x2, 0x40000}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x45, 0x100e, 0x1}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0x', @ANYRESDEC]) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r3, &(0x7f0000001d00)=[{0x0}, {&(0x7f0000001c40)=""/184, 0xb8}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 32.753470986s ago: executing program 2 (id=1961): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x3810744, &(0x7f0000000140)={[{@errors_remount}, {@test_dummy_encryption_v1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x1, 0x47e, &(0x7f0000000b00)="$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") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = open(&(0x7f00000000c0)='.\x00', 0x12080, 0x65) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 32.563481833s ago: executing program 0 (id=1963): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syslog(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 31.431175936s ago: executing program 0 (id=1965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000100)) 31.323544726s ago: executing program 5 (id=1966): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x48042, 0x101) 31.319079196s ago: executing program 0 (id=1967): r0 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0xac6c) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 31.052760181s ago: executing program 2 (id=1968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 30.772488356s ago: executing program 2 (id=1970): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 30.122156325s ago: executing program 6 (id=1971): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f0000000400)={{0x2, @multicast2, 0x0, 0x3, 'wrr\x00', 0x0, 0x20, 0x10023}, {@local, 0x0, 0x10000, 0x0, 0x80000001, 0x6}}, 0x44) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) close_range(r4, 0xffffffffffffffff, 0x0) 28.507177752s ago: executing program 6 (id=1974): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000180)="10fa", 0x2, 0xffffffffffffffff) ptrace(0x11, r0) ptrace(0x11, r2) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r4) creat(&(0x7f00000020c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11) io_setup(0x7, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) 27.971503831s ago: executing program 6 (id=1975): getresgid(&(0x7f0000000640), &(0x7f0000000740), &(0x7f0000000780)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2030004, &(0x7f0000000700)={[{@resgid={'resgid', 0x3d, r0}}, {@nobh}, {@nolazytime}]}, 0x4, 0x4f8, &(0x7f0000000140)="$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") rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 24.874211144s ago: executing program 6 (id=1978): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000100)) 24.230440112s ago: executing program 4 (id=1979): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xfffffffffffffed8, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 24.095508544s ago: executing program 4 (id=1980): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400), 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x8f}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) 24.095184984s ago: executing program 6 (id=1981): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf}) 24.070474267s ago: executing program 5 (id=1982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0f1fb700000000c4e3716dee5d0f01c4660f384078006536f20f2dea66b82e008ed8f3f0865006c4e311491f542e0f01c50f01cb", 0x34}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.863888075s ago: executing program 0 (id=1983): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)) 21.495433481s ago: executing program 6 (id=1984): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) io_setup(0x7, &(0x7f0000000280)=0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r3, 0x0, 0x2) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r3, 0x1) r4 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9, 0x100}, 0x50) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}]) socket$inet6_udp(0xa, 0x2, 0x0) 21.393105021s ago: executing program 5 (id=1985): io_setup(0xea, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000980)={{0x2, 0xfff0f98f274051a7, 0x6d, 0x10000, 0xb3, 0x3}, 0x3a9, [0x5, 0x7, 0x7, 0x9, 0x6, 0x4a2, 0x6, 0x7, 0x1, 0x6468, 0x6, 0x7, 0xa3, 0x0, 0x3, 0x40000000, 0x0, 0x1, 0x7fffffff, 0x7, 0x1, 0x4, 0x3, 0x7f, 0x4, 0x6, 0xef, 0x1, 0x0, 0x7, 0x8, 0x3, 0x0, 0x81, 0x101, 0x3, 0x7, 0x62, 0x7, 0xfa5, 0x3, 0x5, 0x3, 0x6, 0x9, 0x1, 0x3, 0x0, 0x97, 0x3, 0x40, 0xaf7e, 0x2, 0x3, 0xa52b, 0x0, 0xfffffabf, 0x1, 0x5, 0x6, 0x4, 0xff2d, 0x8, 0xff, 0x80000001, 0xb7, 0x1, 0x80000001, 0x3ff, 0x4, 0x3, 0x10, 0x6, 0x5, 0xfffffffe, 0x5, 0x6, 0x80000001, 0xb, 0x1, 0x1000, 0x7f, 0x24e57b20, 0xfffffffb, 0x800, 0x3, 0xfdb6, 0x8000, 0xf7, 0x6, 0x9, 0xa1, 0xffffffff, 0x2, 0x8, 0xe04a949, 0xb, 0x9, 0x4, 0x7, 0x9, 0x0, 0x3ff, 0x1, 0xb225, 0x3, 0x7f, 0xd, 0x3cc, 0x6, 0x2, 0x0, 0x7, 0x7ff, 0x1, 0xdb, 0x3ff, 0x401, 0x8, 0x50, 0x8, 0xfffffffc, 0x7, 0x0, 0x6, 0x6, 0x3b8, 0x0, 0x80000000, 0x8d, 0x3ab, 0x4, 0xfffffffc, 0x400, 0xf38, 0x20, 0x1b, 0x3, 0x200, 0xd, 0x2, 0x3, 0x7, 0x7, 0x7ff, 0x8, 0x4, 0x2, 0x7f4, 0x1, 0x97, 0x5, 0x5, 0x2, 0x3, 0x40, 0x7f, 0x0, 0x6b1, 0x923f, 0x8, 0xa, 0xd, 0x9, 0x3, 0x8, 0x2, 0x10000, 0x2, 0x10000, 0x101, 0x40, 0x9, 0x9, 0x1, 0x9, 0xfffffc00, 0x6, 0x8, 0x0, 0x96, 0x40, 0x0, 0x7, 0x9, 0xfffffff8, 0x5, 0x9, 0x0, 0x2, 0x8, 0x9, 0xea12c02, 0x77c, 0x7fffffff, 0x101, 0x7fff, 0x3ff, 0x800, 0x9, 0x401, 0x7, 0x62, 0xffff, 0x0, 0x0, 0xd, 0x1, 0x4, 0x8, 0xd3, 0x0, 0x9bc, 0x9, 0x77, 0x4, 0x2d6f, 0x4, 0x1ff, 0x9c4, 0xffffffff, 0x401, 0x6d7, 0x47a6, 0x7, 0x4, 0x10001, 0x9, 0x7766, 0x9, 0x10001, 0x10000000, 0x8, 0x1, 0x2, 0x6, 0x101, 0x9, 0x4e, 0x1, 0xff, 0x3c4e0000, 0x5, 0x0, 0x1, 0x967, 0x0, 0x10, 0xffff, 0x3, 0x9, 0x3, 0xffffdf79, 0x0, 0x0, 0x3, 0xdf, 0x0, 0x4, 0x1, 0x3ff, 0x946, 0x2, 0x7f, 0xffff, 0x8, 0x5, 0x80000001, 0xf, 0x5, 0x5, 0x5, 0x488, 0x2, 0x2, 0x7, 0xfffffff4, 0x4929, 0x3, 0x6, 0x10001, 0x434a, 0x3, 0x9, 0x2, 0x3, 0x4, 0x6, 0xa6, 0x1, 0x5, 0x4000, 0x56000000, 0x1000, 0x9, 0x4, 0xd, 0xff, 0x810, 0xfffffffb, 0x458, 0x277, 0x7, 0x1ff, 0x7, 0x9, 0x91, 0x401, 0x6, 0x8, 0x7, 0x1, 0xd99d2b7, 0x5, 0x7fffffff, 0x8, 0x9, 0xb058, 0x7f, 0xc000, 0x5, 0xf, 0xa, 0x1, 0x5, 0xc, 0x9, 0x4, 0x3, 0x6, 0x74b, 0x7, 0x6, 0x8, 0x8, 0x0, 0x8, 0x6, 0xffffc000, 0x9, 0x3, 0x800, 0xfffffff9, 0xfffffffa, 0x0, 0x5, 0x2, 0x2, 0x100, 0xd99, 0x2, 0x0, 0x401, 0x8000, 0x3, 0x2, 0x8, 0x56f6, 0x31, 0x4, 0x1, 0x6, 0x2, 0xdfd, 0x7, 0x7, 0x4, 0x2, 0x3, 0x3, 0x0, 0x9, 0xc2, 0x0, 0xd, 0x323c0000, 0xa5, 0x7f, 0x7, 0x200, 0xfffffff2, 0x3, 0x5, 0x5, 0x7, 0x9, 0xfffffd28, 0x6, 0x3, 0xfffffffd, 0x100, 0x4, 0x4, 0x0, 0x8, 0x1, 0x3, 0x8, 0x10000, 0x800, 0x3, 0x5, 0xfffff1e5, 0xe, 0x5, 0x7, 0x7, 0x4, 0x8, 0x4, 0xddb7, 0x7fff, 0x1, 0x7, 0x9c, 0xc2, 0x2, 0x3, 0x8, 0x6, 0x10001, 0x6, 0x9, 0xc22f, 0x9, 0x7, 0xfce00, 0xffffdc9e, 0x4, 0x4, 0x0, 0x40, 0x1000, 0xbf1, 0x3, 0x4, 0x8, 0x1, 0xfff, 0x2310, 0x80000000, 0x1, 0x6, 0x2, 0xda7, 0x15c8, 0x6, 0x1, 0x3ff, 0xd5c00, 0x7, 0x7, 0xfffffffb, 0xcd, 0x8, 0x1, 0x3, 0x60e7, 0xfffffff8, 0x5, 0xd9, 0x2d12, 0x851, 0xffff235e, 0x1, 0x31, 0x1, 0x0, 0x0, 0x0, 0x4, 0x6, 0xb4f, 0xfffffffb, 0xfffff66c, 0xc631, 0x8, 0x4, 0x2, 0xd, 0x6e, 0x8, 0x9, 0xb6b8, 0x10001, 0xffffffff, 0x9, 0xc, 0x16, 0xf, 0x7fff, 0x9fd, 0x4, 0xb, 0x7, 0x2, 0x3, 0x2, 0xd, 0x3, 0xb9, 0xfffff000, 0x4, 0x2, 0x7, 0x400, 0x3, 0x0, 0x539, 0x1ef, 0x1, 0x1ff, 0x69, 0x8001, 0x4, 0x6, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x2, 0x9, 0x1800, 0x3, 0x7, 0x2, 0x9, 0xd2, 0x6, 0x7ff, 0xe, 0x6, 0xffff, 0x8, 0x9, 0x800, 0x80000000, 0x5, 0x8, 0x7, 0x0, 0xf0, 0x100, 0x0, 0x3, 0x1, 0x889, 0xc68, 0x4, 0x0, 0x3, 0x1, 0x10, 0xfffffffe, 0x10001, 0x26, 0x361ff4ad, 0x0, 0x1000, 0x3, 0x4, 0x8, 0x4, 0x474fbb72, 0xf9, 0x2cf, 0x0, 0x2, 0xb4, 0x9, 0x2, 0x400, 0x5, 0x10001, 0x8001, 0x5, 0x2, 0x2, 0x6, 0x3, 0x6, 0x10000, 0xd8d, 0x405b, 0x2, 0x0, 0x0, 0x1, 0x7, 0x1, 0x4, 0x80000000, 0x8, 0xfb, 0x80, 0x3, 0x7f, 0x3, 0x1, 0x80000001, 0x3, 0x7, 0x2, 0x7fffffff, 0x8, 0x7a94, 0xffffb4b0, 0x1, 0xffffffc0, 0x5, 0x8001, 0x2cc64ac, 0x101, 0x7f, 0x5, 0x6, 0x80000001, 0x8, 0x4, 0x6, 0x1, 0x101, 0x10000, 0x186f, 0xfffffffe, 0x58000, 0x1, 0x9, 0x2, 0x0, 0x101, 0x3f73, 0x3, 0x3, 0x2, 0xe5f8, 0x3, 0x0, 0xd, 0x6, 0x80000000, 0x1, 0x0, 0x720, 0x3ff, 0x0, 0xffffff6b, 0x9f, 0x7, 0x4, 0x0, 0x7, 0xffffff29, 0x2, 0x5, 0x6, 0x5, 0x7, 0x7, 0xffff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x5, 0x5, 0xe5f, 0x4, 0x8, 0xffffffff, 0x5, 0xe, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0xc, 0x4d, 0x3, 0x7a, 0x101, 0x1ff, 0x0, 0x0, 0x7, 0xfffffff8, 0x75, 0x10000, 0x9af7, 0x1f80, 0xa50003c, 0x7ff, 0x3b8, 0x9, 0x400, 0x1, 0x8, 0x80, 0x1, 0x7fff, 0x3, 0x10001, 0x12175bf8, 0x81, 0x0, 0x9, 0x0, 0x8, 0x9, 0x3, 0x9, 0x4, 0x0, 0x81, 0x3, 0x908, 0xe1, 0x6, 0x3, 0x7ff, 0x10000, 0xff7, 0x7, 0x1, 0x9de8, 0x8, 0x80000000, 0x4e, 0x7, 0x9, 0x9, 0x8000, 0x7ff, 0x5, 0x1232, 0x8000, 0x2, 0x80000001, 0x4ef, 0x1, 0x6, 0x1, 0x80, 0x8, 0x1, 0xbdd, 0x81, 0x401, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0xf, 0x8e, 0x3, 0x5, 0x1000, 0x10, 0xfffffffd, 0x1, 0x81, 0x1, 0x3, 0x1, 0x8000, 0xa0000, 0x400, 0x401, 0x3, 0xd, 0x64b, 0xf, 0x6, 0x2, 0x5, 0xfffffff7, 0x4, 0x2338, 0x0, 0x6, 0x0, 0x8, 0x401, 0x3, 0x4, 0x401, 0x3, 0x8e29, 0x10001, 0x2, 0xfffffff8, 0x4, 0x401, 0x3, 0x8000, 0x2, 0xa0, 0x54, 0x6, 0x3, 0x4, 0x7, 0x3, 0xf6, 0xab, 0x9b6, 0x5, 0x67, 0xfffffffd, 0x2, 0xff, 0xfffffffc, 0x8000, 0x401, 0x4, 0x0, 0x7, 0x2, 0x71c, 0x5, 0x3, 0x7fffffff, 0x2, 0x6, 0x1, 0x8, 0x401, 0x2, 0x81, 0xff, 0x1, 0x1, 0x2, 0x6, 0x9, 0x3, 0x0, 0x4, 0xb53, 0x390, 0xff, 0x0, 0x3, 0xfffffffd, 0x5, 0x1, 0x8, 0x2, 0x7, 0x4, 0x8, 0x101, 0xffffb514, 0x75490d18, 0x8, 0x0, 0x5, 0x6, 0x9, 0xc9c, 0x6, 0x18, 0x9ef8, 0x7, 0xffffffc0, 0x5, 0xda1, 0xb, 0x7, 0x8, 0x0, 0x4, 0xc, 0x9, 0x2, 0x8, 0x10001, 0x4, 0x6, 0x3ff, 0x2, 0x7, 0x6, 0xa, 0x2, 0x3, 0x101000, 0x1, 0x200, 0x5, 0x6, 0x7, 0x8, 0x3c89d0fb, 0x8, 0xe0, 0x6, 0x2, 0x9d5, 0x7, 0x3, 0x9, 0x0, 0x42c, 0x2, 0x1, 0x5, 0x8, 0x5, 0xff, 0x7, 0xf75, 0x81, 0x57, 0x5, 0x9, 0x4, 0x7fff, 0x6, 0x29c0, 0x7, 0x5, 0x81, 0x39, 0x9, 0x7, 0x7, 0x9, 0x101, 0xbf, 0xfffffbff, 0x2, 0xff, 0x4, 0x80, 0xfff, 0x2, 0x7, 0xef, 0x80, 0x3, 0x4, 0x6, 0x8, 0x5, 0x1, 0x9, 0x401, 0xf, 0x6, 0x2, 0x7, 0x81, 0x81, 0x6, 0x1, 0x8, 0x6, 0x1, 0x8, 0x5, 0xcb5a, 0x8, 0x9, 0x3, 0x2, 0x10, 0xe6, 0x0, 0x4, 0x8, 0x9, 0x1, 0x0, 0x400, 0xff, 0x3, 0x4a, 0x1, 0x3, 0x9, 0x7, 0x0, 0xfffffe00, 0xeede, 0x4, 0x4, 0x0, 0x1, 0x2, 0x7f, 0xfffffff7, 0x700, 0x5, 0x5, 0x1, 0x1, 0x2ede286, 0x2, 0x8, 0x8, 0x2, 0x7, 0x7, 0x8, 0xfffffa15, 0x1, 0xa997, 0x4, 0x11c, 0xdbe, 0x1, 0xc58, 0x94e0, 0x8, 0xcf, 0x40, 0x800, 0xb0]}) 20.482555614s ago: executing program 4 (id=1986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 19.491579714s ago: executing program 4 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000040)="76ea090000000000009ba5", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.486374974s ago: executing program 4 (id=1988): getresgid(&(0x7f0000000640), &(0x7f0000000740), &(0x7f0000000780)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2030004, &(0x7f0000000700)={[{@resgid={'resgid', 0x3d, r0}}, {@nobh}, {@nolazytime}]}, 0x4, 0x4f8, &(0x7f0000000140)="$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") rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 19.185377552s ago: executing program 5 (id=1989): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syslog(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 16.882760222s ago: executing program 4 (id=1990): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) 16.015025471s ago: executing program 5 (id=1991): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x67944000) 15.739567026s ago: executing program 5 (id=1992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 15.710293228s ago: executing program 34 (id=1970): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 8.573117509s ago: executing program 35 (id=1983): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)) 5.573175812s ago: executing program 36 (id=1984): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) io_setup(0x7, &(0x7f0000000280)=0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r3, 0x0, 0x2) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r3, 0x1) r4 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9, 0x100}, 0x50) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}]) socket$inet6_udp(0xa, 0x2, 0x0) 1.053726124s ago: executing program 37 (id=1990): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) 0s ago: executing program 38 (id=1992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) kernel console output (not intermixed with test programs): tag 0x0 [ 374.705464][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.712975][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.722152][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.729651][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.737221][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.744636][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.752128][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.759708][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.767212][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.774615][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.782107][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.789688][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.797208][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.804627][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.812173][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.820986][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.828557][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.836167][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.843662][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.851195][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.858744][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.866259][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.873867][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.881405][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.888872][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.896393][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.903915][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.911436][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.919055][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.928639][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x2 [ 374.936149][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.943565][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.951084][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.958709][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.966529][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.973950][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.981468][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.989166][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 374.996710][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.004131][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.011792][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.019423][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.029106][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.036614][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.044038][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.051559][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.059057][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.066534][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.073959][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.081568][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.089042][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.096578][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.103998][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.111501][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.118999][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.127566][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.135187][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.142722][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.150225][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.157734][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.165145][ T4224] hid-generic 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 375.207023][ T4224] hid-generic 0003:0B05:1A30.0003: hidraw0: USB HID v0.09 Device [HID 0b05:1a30] on usb-dummy_hcd.2-1/input0 [ 375.250617][ T4224] usb 3-1: USB disconnect, device number 8 [ 375.478870][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 375.956489][ T13] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.027810][ T13] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 376.044977][ T13] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.072007][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.166983][ T7642] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 376.624666][ T7664] fido_id[7664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 376.655975][ T13] usb 4-1: can't set config #27, error -71 [ 376.727867][ T13] usb 4-1: USB disconnect, device number 6 [ 376.947413][ T7672] Zero length message leads to an empty skb [ 378.527134][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.533661][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.525885][ T4394] Bluetooth: (null): Invalid header checksum [ 379.545108][ T4394] Bluetooth: (null): Invalid header checksum [ 379.604046][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.881'. [ 379.635756][ T4313] Bluetooth: (null): Invalid header checksum [ 379.645828][ T4246] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 380.055890][ T4246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.080417][ T4246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 380.395720][ T4246] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 380.405234][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.413660][ T4246] usb 1-1: Product: syz [ 380.418950][ T4246] usb 1-1: Manufacturer: syz [ 380.428415][ T4246] usb 1-1: SerialNumber: syz [ 380.449555][ T4246] usb 1-1: config 0 descriptor?? [ 380.502867][ T4246] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 380.523500][ T4246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.725467][ T4246] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 380.738258][ T4246] usb 1-1: media controller created [ 380.754876][ T4246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.773933][ T13] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 381.645298][ T4246] DVB: Unable to find symbol tda10046_attach() [ 381.652288][ T4246] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 381.661353][ T4246] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 381.806153][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 381.891475][ T7734] kvm: pic: non byte write [ 382.085703][ T13] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 382.114195][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.151951][ T13] usb 6-1: Product: syz [ 382.184029][ T13] usb 6-1: Manufacturer: syz [ 382.199957][ T13] usb 6-1: SerialNumber: syz [ 382.224975][ T13] usb 6-1: config 0 descriptor?? [ 382.255663][ T4246] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 382.275998][ T4246] usb 1-1: USB disconnect, device number 2 [ 382.290817][ T13] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 382.450464][ T4442] Bluetooth: (null): Invalid header checksum [ 382.465840][ T4442] Bluetooth: (null): Invalid header checksum [ 382.545721][ T13] gspca_sonixj: reg_w1 err -71 [ 382.551415][ T13] sonixj: probe of 6-1:0.0 failed with error -71 [ 382.571371][ T13] usb 6-1: USB disconnect, device number 7 [ 383.240633][ T4394] Bluetooth: (null): Invalid header checksum [ 383.246880][ T4394] Bluetooth: (null): Invalid header checksum [ 383.253120][ T4394] Bluetooth: (null): Invalid header checksum [ 383.259472][ T4394] Bluetooth: (null): Invalid header checksum [ 383.265623][ T4394] Bluetooth: (null): Invalid header checksum [ 383.272079][ T4394] Bluetooth: (null): Invalid header checksum [ 383.318314][ T4394] Bluetooth: (null): Invalid header checksum [ 383.794428][ T7761] netlink: 'syz.3.900': attribute type 4 has an invalid length. [ 386.575475][ T21] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 389.973697][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 390.097864][ T21] usb 6-1: device descriptor read/all, error -71 [ 395.827049][ T26] audit: type=1326 audit(1771493863.124:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 395.905504][ T26] audit: type=1326 audit(1771493863.124:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 396.797161][ T26] audit: type=1326 audit(1771493863.144:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 396.976930][ T26] audit: type=1326 audit(1771493863.144:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 397.010294][ T26] audit: type=1326 audit(1771493863.154:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 397.299036][ T26] audit: type=1326 audit(1771493863.154:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 397.321494][ T26] audit: type=1326 audit(1771493863.154:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 397.431776][ T26] audit: type=1326 audit(1771493863.154:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 397.484878][ T26] audit: type=1326 audit(1771493863.154:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 397.675603][ T26] audit: type=1326 audit(1771493863.154:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbcbaee6629 code=0x7ffc0000 [ 401.445525][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 401.762550][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 401.924083][ T23] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 401.935668][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.067416][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 402.745566][ T23] gspca_nw80x: reg_w err -71 [ 403.242508][ T23] nw80x: probe of 1-1:3.0 failed with error -71 [ 403.257185][ T23] usb 1-1: USB disconnect, device number 3 [ 404.356824][ T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 404.755608][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 405.762808][ T7] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 405.786361][ T7989] overlayfs: failed to resolve './file1': -2 [ 405.815467][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.212635][ T7] usb 6-1: config 0 has no interface number 0 [ 406.655875][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 406.699013][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.725876][ T7996] overlayfs: failed to resolve './file1': -2 [ 406.819546][ T7] usb 6-1: Product: syz [ 406.823750][ T7] usb 6-1: Manufacturer: syz [ 406.848584][ T7] usb 6-1: SerialNumber: syz [ 406.873074][ T7] usb 6-1: config 0 descriptor?? [ 407.605701][ T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 408.295757][ T7] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 408.302158][ T7] usb 6-1: No valid video chain found. [ 408.316979][ T7] usb 6-1: USB disconnect, device number 10 [ 408.332523][ T8019] comedi comedi2: comedi_config --init_data is deprecated [ 410.412371][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 410.621528][ T8036] overlayfs: failed to resolve './file0': -2 [ 410.630570][ T23] usb 4-1: unable to read config index 0 descriptor/all [ 410.673574][ T23] usb 4-1: can't read configurations, error -71 [ 411.266253][ T8044] overlayfs: failed to resolve './file1': -2 [ 411.765590][ T1111] usb 1-1: device descriptor read/all, error -71 [ 416.201500][ T8098] overlayfs: failed to resolve './file0': -2 [ 421.289358][ T8151] zonefs (nullb0) ERROR: Not a zoned block device [ 423.966964][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 424.356158][ T7] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 424.393545][ T7] usb 3-1: config 128 has no interface number 0 [ 424.470540][ T7] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 424.529950][ T7] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 424.708908][ T8181] loop3: detected capacity change from 0 to 7 [ 424.726148][ T8181] Dev loop3: unable to read RDB block 7 [ 424.732295][ T8181] loop3: unable to read partition table [ 424.738609][ T7] usb 3-1: config 128 interface 148 has no altsetting 0 [ 424.746140][ T8181] loop3: partition table beyond EOD, truncated [ 424.752762][ T8181] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 424.827835][ T3562] Dev loop3: unable to read RDB block 7 [ 424.866516][ T3562] loop3: unable to read partition table [ 424.874591][ T3562] loop3: partition table beyond EOD, truncated [ 424.955812][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 425.012721][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.111493][ T7] usb 3-1: Product: syz [ 425.161204][ T7] usb 3-1: Manufacturer: syz [ 425.230110][ T7] usb 3-1: SerialNumber: syz [ 425.812298][ T7] usb 3-1: USB disconnect, device number 9 [ 426.493542][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 427.747605][ T7] usb 3-1: device not accepting address 10, error -71 [ 430.530931][ T8247] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 430.530931][ T8247] program syz.2.1041 not setting count and/or reply_len properly [ 432.860875][ T8288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 432.860875][ T8288] program syz.2.1053 not setting count and/or reply_len properly [ 435.084888][ T8322] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 435.084888][ T8322] program syz.4.1066 not setting count and/or reply_len properly [ 438.114154][ T8354] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 438.114154][ T8354] program syz.0.1078 not setting count and/or reply_len properly [ 439.983871][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.991007][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.904816][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.912356][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.158648][ T8462] device bridge_slave_1 left promiscuous mode [ 449.198520][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.214912][ T8462] device bridge_slave_0 left promiscuous mode [ 449.221737][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.905785][ T8494] lo speed is unknown, defaulting to 1000 [ 452.739635][ T8514] lo speed is unknown, defaulting to 1000 [ 454.849510][ T8546] overlayfs: missing 'lowerdir' [ 455.036128][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 455.515953][ T21] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 455.567049][ T21] usb 3-1: config 0 has no interface number 0 [ 455.670559][ T21] usb 3-1: config 0 interface 38 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 455.761244][ T21] usb 3-1: config 0 interface 38 has no altsetting 0 [ 455.935771][ T21] usb 3-1: New USB device found, idVendor=067b, idProduct=04bb, bcdDevice= b.68 [ 455.958296][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.975060][ T21] usb 3-1: Product: syz [ 455.981365][ T21] usb 3-1: Manufacturer: syz [ 455.991742][ T21] usb 3-1: SerialNumber: syz [ 456.019804][ T21] usb 3-1: config 0 descriptor?? [ 456.185676][ T2387] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 456.310661][ T21] pl2303 3-1:0.38: required endpoints missing [ 456.345544][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 456.498631][ T21] usb 3-1: USB disconnect, device number 12 [ 456.706529][ T2387] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.769785][ T2387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.890591][ T2387] usb 6-1: Product: syz [ 456.943723][ T2387] usb 6-1: Manufacturer: syz [ 457.003892][ T2387] usb 6-1: SerialNumber: syz [ 457.255809][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 457.375555][ T13] usb 4-1: config 0 has no interfaces? [ 458.036139][ T13] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 458.133112][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.143050][ T13] usb 4-1: config 0 descriptor?? [ 458.191479][ T8576] lo speed is unknown, defaulting to 1000 [ 458.440863][ T8560] loop3: detected capacity change from 0 to 512 [ 458.595164][ T8560] EXT4-fs (loop3): Ignoring removed bh option [ 458.665610][ T8560] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 459.395566][ T2387] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 459.402693][ T2387] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 459.425575][ T2387] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 459.430857][ T8560] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.1143: corrupted in-inode xattr [ 459.454237][ T2387] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 459.469214][ T2387] usb 6-1: USB disconnect, device number 11 [ 459.485885][ T2387] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 459.588775][ T8560] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1143: couldn't read orphan inode 15 (err -117) [ 459.977335][ T8560] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 460.181219][ T4246] usb 4-1: USB disconnect, device number 9 [ 462.746274][ T8636] overlayfs: missing 'lowerdir' [ 463.445410][ T8640] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 465.143692][ T8667] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 465.143692][ T8667] program syz.4.1170 not setting count and/or reply_len properly [ 466.025504][ T21] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 466.411782][ T21] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 466.423404][ T21] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 466.457037][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.618706][ T21] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 466.628488][ T21] usb 3-1: config 0 has no interface number 0 [ 466.634573][ T21] usb 3-1: config 0 has no interface number 1 [ 466.641046][ T21] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 466.650403][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.368872][ T21] usb 3-1: config 0 descriptor?? [ 467.427247][ T21] usb 3-1: unknown number of interfaces: 2 [ 468.278021][ T8688] loop0: detected capacity change from 0 to 1024 [ 468.340376][ T13] usb 3-1: USB disconnect, device number 13 [ 468.350662][ T8688] EXT4-fs (loop0): Ignoring removed orlov option [ 468.514545][ T8699] overlayfs: missing 'lowerdir' [ 468.527056][ T8688] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,nobarrier,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 468.943183][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'. [ 469.100490][ T8707] loop5: detected capacity change from 0 to 1024 [ 469.796522][ T8707] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 469.910926][ T8717] loop3: detected capacity change from 0 to 1024 [ 470.050449][ T8717] EXT4-fs (loop3): Ignoring removed bh option [ 470.123696][ T8723] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 470.123696][ T8723] program syz.0.1182 not setting count and/or reply_len properly [ 470.179386][ T8717] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bh,errors=remount-ro,. Quota mode: writeback. [ 470.209823][ T8726] EXT4-fs error (device loop5): xattr_find_entry:297: inode #12: comm syz.5.1181: corrupted xattr entries [ 470.261026][ T8725] loop4: detected capacity change from 0 to 2048 [ 470.404201][ T8717] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.1184: corrupted xattr entries [ 470.445940][ T8725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.485413][ T8717] EXT4-fs (loop3): Remounting filesystem read-only [ 470.525531][ T13] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 470.540917][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 470.540933][ T26] audit: type=1800 audit(1771493937.834:33): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1185" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 470.582084][ T8717] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #15: comm syz.3.1184: corrupt xattr in inline inode [ 470.634616][ T8717] EXT4-fs (loop3): Remounting filesystem read-only [ 470.965690][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 470.985475][ T13] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 471.032697][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.062498][ T13] usb 3-1: config 0 descriptor?? [ 471.145761][ T8718] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 471.232699][ T8746] overlayfs: missing 'lowerdir' [ 471.790068][ T8747] loop5: detected capacity change from 0 to 16 [ 471.878138][ T8747] erofs: (device loop5): mounted with root inode @ nid 36. [ 472.037270][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 472.051704][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 472.064134][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 472.081364][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 472.100987][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 472.117448][ T6351] Bluetooth: (null): Invalid header checksum [ 472.123565][ T6351] Bluetooth: (null): Invalid header checksum [ 472.132182][ T13] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 472.246491][ T13] usb 3-1: USB disconnect, device number 14 [ 472.332622][ T8755] fido_id[8755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 473.108414][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1195'. [ 473.373609][ T8765] loop5: detected capacity change from 0 to 512 [ 473.560869][ T8765] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 473.576523][ T8767] loop2: detected capacity change from 0 to 256 [ 473.664667][ T8765] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.750827][ T8765] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1198: corrupted inode contents [ 474.305682][ T8765] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.1198: mark_inode_dirty error [ 474.321305][ T8765] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1198: corrupted inode contents [ 474.351133][ T8776] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1198: corrupted inode contents [ 474.439578][ T8776] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.1198: mark_inode_dirty error [ 474.469606][ T8776] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1198: corrupted inode contents [ 474.557888][ T8780] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 474.557888][ T8780] program syz.2.1202 not setting count and/or reply_len properly [ 474.579182][ T8776] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1198: mark_inode_dirty error [ 474.636185][ T8776] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1198: corrupted inode contents [ 474.715884][ T8776] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.1198: mark_inode_dirty error [ 474.824486][ T8777] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1198: corrupted inode contents [ 474.953331][ T8788] loop0: detected capacity change from 0 to 128 [ 475.318839][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 475.895178][ T8798] loop5: detected capacity change from 0 to 512 [ 475.985575][ T8798] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 476.052391][ T8798] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1207: iget: bad i_size value: 38620345925642 [ 476.080539][ T8798] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1207: couldn't read orphan inode 15 (err -117) [ 476.172601][ T8798] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,usrjquota=,bsdgroups,jqfmt=vfsv1,nouid32,,errors=continue. Quota mode: writeback. [ 476.328733][ T8798] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1207: iget: bad i_size value: 38620345925642 [ 476.395511][ T8803] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 478.864060][ T8819] loop5: detected capacity change from 0 to 2048 [ 479.057344][ T8819] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.223779][ T8831] loop0: detected capacity change from 0 to 1024 [ 479.490400][ T26] audit: type=1800 audit(1771493946.784:34): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1218" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 479.796126][ T8845] loop5: detected capacity change from 0 to 164 [ 479.953516][ T8845] ISOFS: unable to read i-node block [ 480.022915][ T8846] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 480.022915][ T8846] program syz.3.1214 not setting count and/or reply_len properly [ 480.041257][ T8845] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 480.796448][ T8865] loop2: detected capacity change from 0 to 128 [ 480.916448][ T8865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 480.923586][ T8865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 480.975625][ T8865] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 481.013713][ T8865] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 481.053112][ T8865] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 481.096778][ T8865] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 482.403500][ T8886] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 482.403500][ T8886] program syz.5.1235 not setting count and/or reply_len properly [ 483.797547][ T8921] loop2: detected capacity change from 0 to 2048 [ 484.325702][ T8921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.736948][ T8937] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 484.736948][ T8937] program syz.4.1248 not setting count and/or reply_len properly [ 485.613903][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1254'. [ 485.781717][ T8964] loop5: detected capacity change from 0 to 8 [ 485.841113][ T8964] SQUASHFS error: zlib decompression failed, data probably corrupt [ 485.849524][ T8964] SQUASHFS error: Failed to read block 0x9b: -5 [ 485.857126][ T8964] SQUASHFS error: Unable to read metadata cache entry [99] [ 485.864347][ T8964] SQUASHFS error: Unable to read inode 0x104 [ 486.644998][ T8972] loop0: detected capacity change from 0 to 1024 [ 486.699307][ T8972] EXT4-fs (loop0): Ignoring removed oldalloc option [ 486.735154][ T8972] EXT4-fs (loop0): Ignoring removed bh option [ 486.758752][ T8972] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 487.071497][ T8972] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 491.484889][ T9031] loop4: detected capacity change from 0 to 32768 [ 491.550712][ T9031] loop4: p1 p3 < p5 p6 > [ 494.579835][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1277'. [ 495.653508][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 495.673516][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 495.707908][ T7610] udevd[7610]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 495.718202][ T9064] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1283'. [ 495.728199][ T7609] udevd[7609]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 495.932959][ T9073] loop2: detected capacity change from 0 to 1024 [ 496.894732][ T9083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1289'. [ 497.047642][ T9085] loop5: detected capacity change from 0 to 4096 [ 497.417266][ T9085] EXT4-fs (loop5): Test dummy encryption mode enabled [ 497.444414][ T9085] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 497.577493][ T9085] System zones: 0-5 [ 497.743531][ T9085] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 498.289390][ T9109] loop4: detected capacity change from 0 to 128 [ 498.343860][ T9109] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 498.515788][ T26] audit: type=1800 audit(1771493965.814:35): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1296" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 498.585589][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 498.865533][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 499.000885][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.012206][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.027938][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 499.041007][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.132217][ T21] usb 1-1: config 0 descriptor?? [ 499.186588][ T21] hub 1-1:0.0: USB hub found [ 499.635951][ T21] hub 1-1:0.0: 1 port detected [ 499.875884][ T21] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 499.893070][ T21] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 500.268411][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 500.332069][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 500.598956][ T21] usb 1-1: USB disconnect, device number 6 [ 500.955105][ T9120] loop5: detected capacity change from 0 to 512 [ 501.036893][ T9123] loop3: detected capacity change from 0 to 2048 [ 501.075891][ T9120] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 501.095758][ T9120] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 501.123485][ T9120] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1297: corrupted inode contents [ 501.175267][ T9123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.203712][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1302'. [ 501.331235][ T9120] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.1297: mark_inode_dirty error [ 501.371398][ T9120] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.1297: corrupted inode contents [ 501.407412][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.413830][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.457003][ T9120] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1297: mark_inode_dirty error [ 501.678954][ T4195] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 502.027857][ T4195] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 502.107659][ T9145] loop2: detected capacity change from 0 to 256 [ 502.109068][ T9147] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 502.182268][ T9145] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 502.264080][ T9145] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 502.291325][ T9145] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 502.315518][ T9145] UDF-fs: Scanning with blocksize 512 failed [ 502.374350][ T9145] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 502.428030][ T9145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.492502][ T9145] UDF-fs: error (device loop2): udf_read_inode: (ino 48) failed !bh [ 502.534189][ T9145] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=2, partition=0 [ 502.650454][ T4394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.793723][ T4394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.917350][ T4394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.920258][ T4394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.063369][ T9170] loop2: detected capacity change from 0 to 128 [ 505.177008][ T9170] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 505.225906][ T9170] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 505.352526][ T9168] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 505.401836][ T9171] lo speed is unknown, defaulting to 1000 [ 505.479587][ T9168] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 506.048216][ T9192] loop0: detected capacity change from 0 to 256 [ 506.172719][ T9192] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 506.611096][ T9171] chnl_net:caif_netlink_parms(): no params data found [ 507.427668][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 508.647493][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.713181][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.752633][ T9171] device bridge_slave_0 entered promiscuous mode [ 508.994590][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.008169][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.029105][ T9171] device bridge_slave_1 entered promiscuous mode [ 509.215397][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.276157][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.495619][ T4224] Bluetooth: hci0: command 0x041b tx timeout [ 509.633273][ T9171] team0: Port device team_slave_0 added [ 509.670031][ T9171] team0: Port device team_slave_1 added [ 509.744447][ T4394] IPVS: stopping backup sync thread 5657 ... [ 509.764977][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.793362][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.886034][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.928223][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.935204][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.053062][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.228978][ T9171] device hsr_slave_0 entered promiscuous mode [ 510.272218][ T9171] device hsr_slave_1 entered promiscuous mode [ 510.282168][ T9171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.312381][ T9171] Cannot create hsr debugfs directory [ 510.510031][ T9264] loop2: detected capacity change from 0 to 512 [ 510.772600][ T9264] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 511.565598][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 511.583512][ T9264] EXT4-fs (loop2): 1 truncate cleaned up [ 511.707129][ T9264] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 512.751436][ T4394] device hsr_slave_0 left promiscuous mode [ 512.767248][ T4394] device hsr_slave_1 left promiscuous mode [ 513.979734][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 514.028844][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.070874][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.150244][ T9299] loop2: detected capacity change from 0 to 1024 [ 514.174175][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.196389][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.249054][ T9299] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 514.268689][ T4394] device bridge_slave_1 left promiscuous mode [ 514.274906][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.289283][ T4394] device bridge_slave_0 left promiscuous mode [ 514.335916][ T9299] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.351799][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.495507][ T4394] device veth1_macvtap left promiscuous mode [ 514.533727][ T4394] device veth0_macvtap left promiscuous mode [ 514.544644][ T9299] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.1338: lblock 3 mapped to illegal pblock 3 (length 3) [ 514.575512][ T4394] device veth1_vlan left promiscuous mode [ 514.594411][ T4394] device veth0_vlan left promiscuous mode [ 514.633139][ T9299] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 514.682569][ T9299] EXT4-fs (loop2): This should not happen!! Data will be lost [ 514.682569][ T9299] [ 514.701833][ T9317] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.1338: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 514.782773][ T9317] EXT4-fs error (device loop2) in ext4_setattr:5626: Corrupt filesystem [ 516.114632][ T4394] bond4 (unregistering): Released all slaves [ 516.155082][ T4394] bond3 (unregistering): Released all slaves [ 516.191540][ T4394] bond2 (unregistering): Released all slaves [ 516.237298][ T4394] bond1 (unregistering): Released all slaves [ 516.307749][ T4224] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 516.495835][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 516.524858][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 516.540418][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.555439][ T4224] usb 3-1: Using ep0 maxpacket: 32 [ 516.563881][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.682104][ T4224] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 516.697985][ T4394] bond0 (unregistering): Released all slaves [ 516.863461][ T4224] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 516.996590][ T4224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.004717][ T4224] usb 3-1: Product: syz [ 517.009837][ T4224] usb 3-1: Manufacturer: syz [ 517.014803][ T4224] usb 3-1: SerialNumber: syz [ 517.067015][ T4224] usb 3-1: config 0 descriptor?? [ 517.140441][ T9329] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 517.618171][ T9171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.938374][ T9171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 517.962839][ T9342] usb 3-1: USB disconnect, device number 15 [ 518.184327][ T9171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 518.352410][ T9171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 518.552537][ T9359] loop4: detected capacity change from 0 to 512 [ 518.754149][ T9363] loop0: detected capacity change from 0 to 1024 [ 518.994414][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.070840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 519.103548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 519.122784][ T9359] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 519.167422][ T9359] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.237979][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.278708][ T9171] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.299482][ T9382] loop5: detected capacity change from 0 to 8 [ 519.332495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.348886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.376331][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.383482][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.624042][ T9382] SQUASHFS error: zlib decompression failed, data probably corrupt [ 519.784612][ T9382] SQUASHFS error: Failed to read block 0x9b: -5 [ 519.918234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 519.927857][ T9382] SQUASHFS error: Unable to read metadata cache entry [99] [ 520.003432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.109333][ T9382] SQUASHFS error: Unable to read inode 0x104 [ 520.191042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.199835][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.206959][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.215176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 520.271443][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.318032][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.397013][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.437533][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.500730][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.532674][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 520.554410][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.573526][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.601377][ T9171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.836284][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.919974][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 520.942449][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.014070][ T9410] loop0: detected capacity change from 0 to 8192 [ 523.110686][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.132943][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.194277][ T9441] overlayfs: missing 'lowerdir' [ 523.338376][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.646141][ T9452] loop2: detected capacity change from 0 to 256 [ 523.732768][ T9452] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 524.284658][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 524.314441][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.368297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 524.383195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.439398][ T9171] device veth0_vlan entered promiscuous mode [ 524.453851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.463857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.489373][ T9171] device veth1_vlan entered promiscuous mode [ 524.572887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 524.591107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.610381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.625506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.694500][ T9171] device veth0_macvtap entered promiscuous mode [ 524.827316][ T9171] device veth1_macvtap entered promiscuous mode [ 524.902542][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.931738][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.959491][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.024114][ T9489] loop0: detected capacity change from 0 to 4096 [ 525.035379][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.056700][ T9493] overlayfs: missing 'lowerdir' [ 525.185807][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.240311][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.298558][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.348706][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.410940][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.484305][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 525.506601][ T9489] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 525.556804][ T9489] fs-verity: sha256 using implementation "sha256-avx2" [ 525.573990][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 525.632850][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.694246][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.747276][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.782167][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.830612][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.870670][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.940777][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.004905][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.056753][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.072048][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.091281][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.116162][ T9171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.125065][ T9171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.135504][ T9171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.149125][ T9171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.175568][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.196843][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.411275][ T9541] loop2: detected capacity change from 0 to 1024 [ 526.577974][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.753833][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.014358][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 527.315024][ T9541] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 527.344588][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.357664][ T9541] hfsplus: failed to load root directory [ 527.364590][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.376372][ T9549] loop0: detected capacity change from 0 to 1024 [ 527.394783][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 527.522820][ T9549] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 527.598205][ T9559] overlayfs: missing 'lowerdir' [ 528.475564][ T4224] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 528.754910][ T9587] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 528.754910][ T9587] program syz.4.1396 not setting count and/or reply_len properly [ 528.846016][ T4224] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 528.999443][ T4224] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 44346, setting to 64 [ 529.254940][ T4224] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.309301][ T4224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.415786][ T4224] usb 3-1: can't set config #27, error -71 [ 529.446298][ T4224] usb 3-1: USB disconnect, device number 16 [ 529.592780][ T9598] loop6: detected capacity change from 0 to 8 [ 529.813041][ T9598] attempt to access beyond end of device [ 529.813041][ T9598] loop6: rw=2048, want=36028797018963976, limit=8 [ 529.910314][ T9598] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 529.952198][ T9598] unable to read xattr id index table [ 530.213776][ T9598] loop6: detected capacity change from 0 to 1024 [ 530.398238][ T9598] attempt to access beyond end of device [ 530.398238][ T9598] loop6: rw=2057, want=65536, limit=1024 [ 530.453199][ T9614] loop5: detected capacity change from 0 to 512 [ 530.469174][ T9598] attempt to access beyond end of device [ 530.469174][ T9598] loop6: rw=1, want=2310, limit=1024 [ 530.514632][ T9598] attempt to access beyond end of device [ 530.514632][ T9598] loop6: rw=1, want=4358, limit=1024 [ 530.543526][ T9598] attempt to access beyond end of device [ 530.543526][ T9598] loop6: rw=1, want=6406, limit=1024 [ 530.554966][ T9598] attempt to access beyond end of device [ 530.554966][ T9598] loop6: rw=1, want=8454, limit=1024 [ 530.582164][ T9598] attempt to access beyond end of device [ 530.582164][ T9598] loop6: rw=1, want=10502, limit=1024 [ 530.669192][ T9614] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 530.685723][ T9598] attempt to access beyond end of device [ 530.685723][ T9598] loop6: rw=1, want=12550, limit=1024 [ 530.696880][ T9614] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.721552][ T9598] attempt to access beyond end of device [ 530.721552][ T9598] loop6: rw=1, want=14598, limit=1024 [ 530.836383][ T9598] attempt to access beyond end of device [ 530.836383][ T9598] loop6: rw=1, want=16646, limit=1024 [ 531.584175][ T9633] loop0: detected capacity change from 0 to 1024 [ 531.658767][ T9636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 531.736735][ T9633] EXT4-fs (loop0): inline encryption not supported [ 531.760502][ T9633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 531.783471][ T9633] System zones: 0-1, 3-36 [ 531.842950][ T9633] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,usrjquota=,debug,nodioread_nolock,bsddf,grpquota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 532.245562][ T9646] loop4: detected capacity change from 0 to 1024 [ 532.327447][ T9646] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 532.375275][ T9646] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.415579][ T26] audit: type=1800 audit(1771493999.714:36): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1409" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 532.666565][ T26] audit: type=1800 audit(1771493999.794:37): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1409" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 533.477182][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1410'. [ 535.029767][ T9697] loop0: detected capacity change from 0 to 2048 [ 535.088095][ T9700] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 535.088095][ T9700] program syz.5.1416 not setting count and/or reply_len properly [ 535.674525][ T9697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.874129][ T9707] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1422'. [ 538.494232][ T9747] loop0: detected capacity change from 0 to 1024 [ 538.750483][ T9747] hfsplus: invalid length 32517 has been corrected to 255 [ 539.379447][ T26] audit: type=1804 audit(1771494006.674:38): pid=9747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1431" name="/newroot/307/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 539.414423][ T9756] loop5: detected capacity change from 0 to 1024 [ 539.494859][ T9756] EXT4-fs (loop5): Ignoring removed orlov option [ 539.621022][ T9756] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,nobarrier,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 539.762331][ T9763] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 540.767200][ T9781] loop5: detected capacity change from 0 to 512 [ 540.808542][ T9781] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 541.122753][ T9781] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1438: inode has both inline data and extents flags [ 541.136618][ T9781] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1438: couldn't read orphan inode 15 (err -117) [ 541.149062][ T9781] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,block_validity,quota,nombcache,,errors=continue. Quota mode: writeback. [ 541.181638][ T9781] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1438: inode has both inline data and extents flags [ 541.419240][ T9792] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 541.419240][ T9792] program syz.0.1442 not setting count and/or reply_len properly [ 542.687000][ T9809] raw_sendmsg: syz.6.1447 forgot to set AF_INET. Fix it! [ 542.696071][ T9809] af_packet: tpacket_rcv: packet too big, clamped from 34 to 4294967286. macoff=82 [ 543.884019][ T9814] loop5: detected capacity change from 0 to 4096 [ 544.003799][ T9826] overlayfs: missing 'workdir' [ 544.350730][ T9814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 544.765268][ T26] audit: type=1804 audit(1771494012.054:39): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1449" name="/newroot/251/file0/file0/file0" dev="loop5" ino=13 res=1 errno=0 [ 545.310345][ T9845] loop6: detected capacity change from 0 to 2048 [ 545.597692][ T9845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.109541][ T9867] loop6: detected capacity change from 0 to 256 [ 546.218165][ T9867] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d) [ 546.453702][ T9871] loop5: detected capacity change from 0 to 1024 [ 546.474296][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1462'. [ 546.534950][ T9871] EXT4-fs (loop5): Unrecognized mount option "subj_type=$" or missing value [ 546.833679][ T9884] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 546.833679][ T9884] program syz.2.1463 not setting count and/or reply_len properly [ 546.909922][ T9886] overlayfs: missing 'lowerdir' [ 547.676463][ T9889] loop5: detected capacity change from 0 to 2048 [ 547.796746][ T9889] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 547.860858][ T9889] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.026639][ T9889] fs-verity (loop5, inode 18): Unknown hash algorithm number: 3 [ 548.302079][ T9906] loop5: detected capacity change from 0 to 512 [ 548.371327][ T9906] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 548.402658][ T9911] loop0: detected capacity change from 0 to 256 [ 548.447138][ T9911] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 548.472472][ T9906] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1467: invalid indirect mapped block 4294967295 (level 1) [ 548.515457][ T9911] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 548.529741][ T9906] EXT4-fs (loop5): Remounting filesystem read-only [ 548.536681][ T9906] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1467: invalid indirect mapped block 4294967295 (level 1) [ 548.587473][ T9906] EXT4-fs (loop5): Remounting filesystem read-only [ 548.595262][ T9906] EXT4-fs (loop5): 2 truncates cleaned up [ 548.601500][ T9906] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x0000000000000006,. Quota mode: writeback. [ 548.609535][ T9911] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 548.636033][ T9906] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.1467: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 548.670803][ T9906] EXT4-fs (loop5): Remounting filesystem read-only [ 548.711015][ T9906] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.1467: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 548.808429][ T9906] EXT4-fs (loop5): Remounting filesystem read-only [ 549.363170][ T9941] loop5: detected capacity change from 0 to 512 [ 549.432327][ T9941] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.1475: inode #1: comm syz.5.1475: iget: illegal inode # [ 549.552277][ T9941] EXT4-fs (loop5): Remounting filesystem read-only [ 549.568766][ T9941] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1475: error while reading EA inode 1 err=-117 [ 549.587921][ T9941] EXT4-fs (loop5): Remounting filesystem read-only [ 549.741377][ T9941] EXT4-fs (loop5): 1 orphan inode deleted [ 549.747853][ T9941] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,errors=remount-ro,noblock_validity,noquota,. Quota mode: none. [ 549.803322][ T9954] loop4: detected capacity change from 0 to 2048 [ 549.910458][ T9955] loop2: detected capacity change from 0 to 4096 [ 549.954262][ T9954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.002069][ T9955] EXT4-fs (loop2): Test dummy encryption mode enabled [ 550.025538][ T9955] EXT4-fs (loop2): Ignoring removed oldalloc option [ 550.063692][ T9955] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c01c, mo2=0002] [ 550.090875][ T9955] System zones: 0-5 [ 550.253821][ T9955] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,data_err=abort,oldalloc,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 551.146250][ T9955] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 552.658615][T10002] loop4: detected capacity change from 0 to 2048 [ 552.760745][T10002] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 552.782829][T10002] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 552.902388][T10002] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,quota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: writeback. [ 552.957870][T10002] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1486: bg 0: block 234: padding at end of block bitmap is not set [ 553.100902][T10002] EXT4-fs (loop4): Remounting filesystem read-only [ 553.171143][T10002] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 553.240298][T10002] EXT4-fs (loop4): Remounting filesystem read-only [ 553.683214][T10029] loop4: detected capacity change from 0 to 128 [ 553.721498][T10029] EXT4-fs (loop4): Ignoring removed nobh option [ 553.779125][T10029] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 553.879889][T10029] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 555.248948][T10061] loop0: detected capacity change from 0 to 512 [ 555.279611][T10063] Device name cannot be null; rc = [-22] [ 555.518446][T10061] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 555.616680][T10061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 555.636954][T10071] loop5: detected capacity change from 0 to 128 [ 555.741004][T10061] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 555.814485][T10061] EXT4-fs (loop0): 1 truncate cleaned up [ 555.831397][T10071] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 555.845002][T10061] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,stripe=0x0000000000000007,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 555.915513][T10071] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 556.026047][T10061] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 556.223240][T10087] loop5: detected capacity change from 0 to 1024 [ 556.319362][T10087] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 556.364279][T10087] EXT4-fs (loop5): shut down requested (2) [ 558.610502][T10145] loop0: detected capacity change from 0 to 512 [ 558.739741][T10145] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 558.767239][T10153] loop5: detected capacity change from 0 to 16 [ 558.833749][ T4313] Bluetooth: (null): Invalid header checksum [ 558.860533][ T4313] Bluetooth: (null): Invalid header checksum [ 558.874242][T10145] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.933379][T10153] erofs: (device loop5): mounted with root inode @ nid 36. [ 558.952797][ T4442] Bluetooth: (null): Invalid header checksum [ 559.054325][T10153] erofs: (device loop5): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 559.065805][ T4313] Bluetooth: (null): Invalid header checksum [ 559.101060][T10153] erofs: (device loop5): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 559.132579][T10153] erofs: (device loop5): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 559.164393][T10154] erofs: (device loop5): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 559.177088][ T4394] Bluetooth: (null): Invalid header checksum [ 559.215224][T10153] erofs: (device loop5): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 559.290168][ T4394] Bluetooth: (null): Invalid header checksum [ 559.325937][T10153] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 559.444466][T10159] loop6: detected capacity change from 0 to 1024 [ 559.486735][T10153] erofs: (device loop5): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 560.731281][ T8610] hfsplus: bad catalog file entry [ 560.748285][ T8610] hfsplus: b-tree write err: -5, ino 3 [ 561.152838][T10177] loop4: detected capacity change from 0 to 128 [ 561.410757][ T26] audit: type=1804 audit(1771494028.694:40): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1521" name="/newroot/298/file0/bus" dev="loop4" ino=1048602 res=1 errno=0 [ 561.516039][ T26] audit: type=1804 audit(1771494028.704:41): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1521" name="/newroot/298/file0/bus" dev="loop4" ino=1048602 res=1 errno=0 [ 561.920470][ T26] audit: type=1804 audit(1771494028.704:42): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1521" name="/newroot/298/file0/bus" dev="loop4" ino=1048602 res=1 errno=0 [ 562.847677][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.854250][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.314158][T10191] loop0: detected capacity change from 0 to 8 [ 564.620736][T10191] SQUASHFS error: lzo decompression failed, data probably corrupt [ 564.737362][T10191] SQUASHFS error: Failed to read block 0x144: -5 [ 564.810766][T10191] SQUASHFS error: Unable to read metadata cache entry [142] [ 564.874321][T10191] SQUASHFS error: Unable to read inode 0x11f [ 565.135418][ T4227] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 565.515448][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 565.635826][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.671300][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.731480][ T4227] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 565.750564][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.783009][ T4227] usb 3-1: config 0 descriptor?? [ 565.799355][ T4464] Bluetooth: (null): Invalid header checksum [ 565.812988][ T4464] Bluetooth: (null): Invalid header checksum [ 565.820359][ T4464] Bluetooth: (null): Invalid header checksum [ 565.834818][ T4227] hub 3-1:0.0: USB hub found [ 565.899300][ T4313] Bluetooth: (null): Invalid header checksum [ 566.026008][ T4442] Bluetooth: (null): Invalid header checksum [ 566.057717][ T4227] hub 3-1:0.0: 1 port detected [ 566.128997][ T4442] Bluetooth: (null): Invalid header checksum [ 566.276996][ T4442] Bluetooth: (null): Invalid header checksum [ 566.339585][ T144] Bluetooth: (null): Invalid header checksum [ 567.325632][ T4227] hub 3-1:0.0: activate --> -90 [ 567.575480][ T9342] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 567.740252][ T1111] usb 3-1: USB disconnect, device number 17 [ 567.835431][ T9342] usb 5-1: Using ep0 maxpacket: 32 [ 567.998713][ T9342] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.118979][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.149822][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.414030][ T9342] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.742788][T10243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1543'. [ 568.825601][ T9342] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 568.875437][ T9342] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 568.904228][ T9342] usb 5-1: Product: syz [ 568.945415][ T9342] usb 5-1: Manufacturer: syz [ 569.006567][ T9342] hub 5-1:4.0: USB hub found [ 570.910793][ T9342] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 571.235728][ T4291] usb 5-1: USB disconnect, device number 5 [ 571.595692][ T4607] Bluetooth: (null): Invalid header checksum [ 571.603822][ T4607] Bluetooth: (null): Invalid header checksum [ 571.620302][T10288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1556'. [ 571.709559][ T4607] Bluetooth: (null): Invalid header checksum [ 571.817614][ T4442] Bluetooth: (null): Invalid header checksum [ 571.925827][ T4464] Bluetooth: (null): Invalid header checksum [ 574.835547][ T4227] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 575.110626][T10328] loop0: detected capacity change from 0 to 128 [ 575.138121][T10326] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1568'. [ 575.357852][T10328] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 575.688232][T10328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.785616][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.872627][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.885898][ T4227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.899200][ T4227] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.913768][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.924728][ T4227] usb 3-1: config 0 descriptor?? [ 576.781813][ T4227] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 576.848703][T10345] loop0: detected capacity change from 0 to 2048 [ 576.860691][ T4227] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 577.005719][T10345] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 578.015411][ T4227] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 578.997523][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 579.255031][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1582'. [ 579.601429][ T4227] usb 6-1: unable to get BOS descriptor or descriptor too short [ 579.724635][ T4227] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 579.755811][ T4227] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 579.784575][ T4227] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.936999][ T1111] usb 3-1: USB disconnect, device number 18 [ 579.975783][ T4227] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.108587][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.379305][ T4227] usb 6-1: Product: syz [ 580.422295][ T4227] usb 6-1: Manufacturer: syz [ 580.435542][ T4227] usb 6-1: SerialNumber: syz [ 580.460420][T10395] loop4: detected capacity change from 0 to 512 [ 580.475738][ T4227] usb 6-1: can't set config #1, error -71 [ 580.490178][ T4227] usb 6-1: USB disconnect, device number 12 [ 580.548214][T10395] EXT4-fs (loop4): inline encryption not supported [ 580.663371][T10395] EXT4-fs (loop4): 1 orphan inode deleted [ 580.674646][T10395] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 580.690227][T10395] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.695275][T10407] loop6: detected capacity change from 0 to 512 [ 581.380694][T10413] loop0: detected capacity change from 0 to 2048 [ 581.440067][ T4227] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 581.496196][T10413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 581.506707][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1595'. [ 581.524422][ T1111] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 581.857245][ T4227] usb 6-1: Using ep0 maxpacket: 32 [ 581.925568][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 582.015814][ T4227] usb 6-1: config 2 has an invalid interface number: 122 but max is 0 [ 582.024882][ T4227] usb 6-1: config 2 has no interface number 0 [ 582.034348][ T4227] usb 6-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=8f.7e [ 582.050162][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.095729][ T1111] usb 3-1: config 250 has an invalid interface number: 255 but max is 0 [ 582.124539][ T1111] usb 3-1: config 250 has no interface number 0 [ 582.134673][ T1111] usb 3-1: config 250 interface 255 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 582.157351][ T1111] usb 3-1: config 250 interface 255 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 582.179938][ T1111] usb 3-1: config 250 interface 255 altsetting 5 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 582.201806][ T1111] usb 3-1: config 250 interface 255 has no altsetting 0 [ 582.395765][ T4227] usb 6-1: string descriptor 0 read error: -71 [ 582.431031][ T1111] usb 3-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 582.440646][ T4227] rndis_wlan 6-1:2.122: More than one union descriptor, skipping ... [ 582.455194][ T4227] usb 6-1: bad CDC descriptors [ 582.461851][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.478764][ T4227] rndis_host 6-1:2.122: More than one union descriptor, skipping ... [ 582.492919][ T1111] usb 3-1: Product: syz [ 582.497192][ T1111] usb 3-1: Manufacturer: syz [ 582.501963][ T1111] usb 3-1: SerialNumber: syz [ 582.511712][ T4227] usb 6-1: bad CDC descriptors [ 582.517864][ T4227] cdc_acm 6-1:2.122: More than one union descriptor, skipping ... [ 582.559670][ T4227] usb 6-1: USB disconnect, device number 13 [ 583.447163][T10447] loop5: detected capacity change from 0 to 1024 [ 583.465756][ T4292] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 583.487001][ T1111] usb-storage 3-1:250.255: USB Mass Storage device detected [ 583.510333][T10447] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 583.535789][T10447] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.541447][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1606'. [ 583.549092][ T1111] usb-storage 3-1:250.255: Quirks match for vid 050d pid 0115: 4 [ 583.570911][ T26] audit: type=1800 audit(1771494050.864:43): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1604" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 583.624691][ T26] audit: type=1800 audit(1771494050.914:44): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1604" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 583.630460][T10447] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 583.692058][T10456] loop0: detected capacity change from 0 to 512 [ 583.692816][T10447] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 583.707135][ T1111] usb 3-1: USB disconnect, device number 19 [ 583.718637][T10447] EXT4-fs (loop5): This should not happen!! Data will be lost [ 583.718637][T10447] [ 583.771799][T10457] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 583.789713][ T4292] usb 5-1: Using ep0 maxpacket: 32 [ 583.823503][T10446] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 583.853460][T10446] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 583.875124][T10457] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 583.945843][ T4292] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 583.949788][T10457] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.1604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 583.957514][ T4292] usb 5-1: config 0 has no interface number 0 [ 584.000220][ T4292] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 584.008567][T10446] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 584.031402][T10446] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 584.048040][T10446] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 584.063003][T10447] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.1604: lblock 0 mapped to illegal pblock 0 (length 1) [ 584.198469][T10466] loop2: detected capacity change from 0 to 1024 [ 584.236214][ T4292] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 584.256137][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.310518][ T4292] usb 5-1: Product: syz [ 584.314762][ T4292] usb 5-1: Manufacturer: syz [ 584.349817][ T4292] usb 5-1: SerialNumber: syz [ 584.390892][ T4292] usb 5-1: config 0 descriptor?? [ 584.425931][T10439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 584.521489][T10477] loop2: detected capacity change from 0 to 512 [ 584.559998][T10477] EXT4-fs (loop2): Ignoring removed oldalloc option [ 584.578976][T10477] EXT4-fs (loop2): Unrecognized mount option "context=staff_u" or missing value [ 584.615580][ T2387] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 584.658463][T10439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 584.855529][ T2387] usb 7-1: Using ep0 maxpacket: 32 [ 584.986081][ T2387] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 585.029555][ T2387] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 585.110444][ T2387] usb 7-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 585.194158][ T2387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.434503][ T4292] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 585.455097][ T4292] asix: probe of 5-1:0.188 failed with error -61 [ 585.616132][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1618'. [ 586.389535][T10500] device syzkaller0 entered promiscuous mode [ 586.782722][ T9] Bluetooth: (null): Invalid header checksum [ 586.805806][ T9] Bluetooth: (null): Invalid header checksum [ 586.812367][ T9] Bluetooth: (null): Invalid header checksum [ 586.823887][T10506] loop0: detected capacity change from 0 to 512 [ 586.950731][T10506] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1623: iget: bad i_size value: 38620345925642 [ 586.979836][ T4246] usb 5-1: USB disconnect, device number 6 [ 587.021776][T10506] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1623: couldn't read orphan inode 15 (err -117) [ 587.092479][T10506] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 587.310480][T10506] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.0.1623: path /347/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 587.320138][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1629'. [ 587.332811][ T2387] usb 7-1: string descriptor 0 read error: -71 [ 587.370301][ T2387] usb 7-1: USB disconnect, device number 2 [ 587.391168][T10524] loop4: detected capacity change from 0 to 512 [ 589.825772][T10535] loop6: detected capacity change from 0 to 512 [ 589.893093][T10535] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1634: inode has both inline data and extents flags [ 589.964518][T10535] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1634: couldn't read orphan inode 15 (err -117) [ 590.010721][T10535] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 590.956557][ T5053] Bluetooth: (null): Invalid header checksum [ 590.985257][ T5053] Bluetooth: (null): Invalid header checksum [ 591.047274][ T5053] Bluetooth: (null): Invalid header checksum [ 591.055711][T10551] loop2: detected capacity change from 0 to 2048 [ 591.096763][T10551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.119779][T10555] loop0: detected capacity change from 0 to 1024 [ 591.267843][ T4394] Bluetooth: (null): Invalid header checksum [ 591.275114][ T4394] Bluetooth: (null): Invalid header checksum [ 592.409776][T10567] loop4: detected capacity change from 0 to 512 [ 592.438621][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1642'. [ 593.529997][T10599] loop4: detected capacity change from 0 to 256 [ 593.697959][ T4314] Bluetooth: (null): Invalid header checksum [ 593.708824][ T4314] Bluetooth: (null): Invalid header checksum [ 593.806849][ T4394] Bluetooth: (null): Invalid header checksum [ 593.841114][T10606] binder: 10600:10606 ioctl c0306201 2000000001c0 returned -14 [ 593.921271][ T5053] Bluetooth: (null): Invalid header checksum [ 594.027757][ T5053] Bluetooth: (null): Invalid header checksum [ 594.137454][ T5053] Bluetooth: (null): Invalid header checksum [ 594.195472][T10614] loop4: detected capacity change from 0 to 2048 [ 594.431552][T10623] loop5: detected capacity change from 0 to 512 [ 594.447540][T10614] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 594.638243][T10614] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.1660: iget: bad i_size value: 8796093031208 [ 595.710051][T10643] loop4: detected capacity change from 0 to 8192 [ 599.151952][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1683'. [ 599.349420][ T144] Bluetooth: (null): Invalid header checksum [ 599.362271][ T144] Bluetooth: (null): Invalid header checksum [ 599.384438][ T144] Bluetooth: (null): Invalid header checksum [ 599.455678][ T4607] Bluetooth: (null): Invalid header checksum [ 599.889548][T10718] loop4: detected capacity change from 0 to 1024 [ 600.106820][T10723] loop0: detected capacity change from 0 to 128 [ 601.077113][T10725] 9pnet: Insufficient options for proto=fd [ 601.211561][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1699'. [ 601.601109][T10746] loop0: detected capacity change from 0 to 8192 [ 602.067556][ T5053] Bluetooth: (null): Invalid header checksum [ 602.154296][ T5053] Bluetooth: (null): Invalid header checksum [ 602.808910][T10758] loop6: detected capacity change from 0 to 2048 [ 602.913130][T10758] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 602.956465][T10758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.881830][T10767] loop4: detected capacity change from 0 to 32768 [ 603.935785][ T4175] loop4: p1 p3 < p5 p6 > [ 604.013668][T10767] loop4: p1 p3 < p5 p6 > [ 604.074726][T10775] 9pnet: p9_errstr2errno: server reported unknown error [ 604.597311][ T4314] Bluetooth: (null): Invalid header checksum [ 604.615021][ T4314] Bluetooth: (null): Invalid header checksum [ 604.831590][ T4314] Bluetooth: (null): Invalid header checksum [ 604.984223][ T4314] Bluetooth: (null): Invalid header checksum [ 604.991284][ T4314] Bluetooth: (null): Invalid header checksum [ 605.300263][T10790] loop6: detected capacity change from 0 to 8192 [ 605.408840][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 605.419514][ T7610] udevd[7610]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 605.445189][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 605.633647][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 606.032884][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 606.047448][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 606.061207][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 606.100720][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 606.147802][T10805] loop4: detected capacity change from 0 to 256 [ 606.224223][T10805] exfat: Deprecated parameter 'utf8' [ 606.285558][T10807] loop5: detected capacity change from 0 to 1024 [ 606.337740][T10805] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 606.389154][T10807] EXT4-fs (loop5): Ignoring removed orlov option [ 606.521767][T10807] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 606.736171][T10816] loop4: detected capacity change from 0 to 8 [ 606.905940][T10816] SQUASHFS error: Unable to read directory block [1d0:0] [ 607.140784][T10826] loop5: detected capacity change from 0 to 512 [ 607.180435][T10828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1728'. [ 607.226492][T10826] EXT4-fs (loop5): Test dummy encryption mode enabled [ 607.332785][T10826] EXT4-fs error (device loop5): __ext4_iget:4912: inode #11: block 1: comm syz.5.1727: invalid block [ 607.355823][T10826] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1727: couldn't read orphan inode 11 (err -117) [ 607.450636][T10826] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,noquota,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nodiscard,test_dummy_encryption,jqfmt=vfsold,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 607.519924][T10826] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 607.589143][T10838] loop0: detected capacity change from 0 to 256 [ 607.618470][T10838] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 607.652364][T10838] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 607.681917][T10838] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001057d, chksum : 0xc03cc181, utbl_chksum : 0xe619d30d) [ 607.685438][ T13] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 608.006424][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 608.065762][T10848] device batadv_slave_1 entered promiscuous mode [ 608.088065][T10846] loop4: detected capacity change from 0 to 512 [ 608.096164][T10847] device batadv_slave_1 left promiscuous mode [ 608.156737][ T13] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 608.187725][ T13] usb 3-1: config 0 has no interface number 0 [ 608.208697][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1739'. [ 608.220667][ T13] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 608.242374][T10846] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 608.286014][ T13] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 608.300916][T10846] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.472008][T10846] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.1736: Directory hole found for htree leaf block 0 [ 608.506635][ T13] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 608.526710][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.534786][ T13] usb 3-1: Product: syz [ 608.549686][ T13] usb 3-1: Manufacturer: syz [ 608.554328][ T13] usb 3-1: SerialNumber: syz [ 608.573076][ T13] usb 3-1: config 0 descriptor?? [ 608.595768][T10834] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 608.705451][T10834] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 609.219160][T10834] loop2: detected capacity change from 0 to 1024 [ 609.263043][T10870] loop4: detected capacity change from 0 to 512 [ 609.476125][T10870] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 609.501740][T10870] EXT4-fs (loop4): orphan cleanup on readonly fs [ 609.527832][T10834] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,stripe=0x000000000ac99de6,resuid=0x0000000000000000,resuid=0x0000000000000000,usrjquota=,nodioread_nolock,,errors=continue. Quota mode: none. [ 609.538847][T10870] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.1743: Allocating blocks 41-42 which overlap fs metadata [ 609.594027][T10834] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.608084][T10834] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 609.615680][T10834] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 609.693593][T10870] Quota error (device loop4): write_blk: dquota write failed [ 609.715485][T10870] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 609.735419][T10870] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1743: Failed to acquire dquot type 0 [ 609.779567][T10870] EXT4-fs (loop4): 1 truncate cleaned up [ 609.796804][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1745'. [ 609.803316][T10870] EXT4-fs (loop4): pa ffff8880749ccc40: logic 1, phys. 41, len 23 [ 609.814438][T10870] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 609.835585][T10870] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,usrjquota=,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 609.847467][ T13] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 609.923712][ T13] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 609.947611][ T13] asix: probe of 3-1:0.251 failed with error -5 [ 610.098657][ T13] usb 3-1: USB disconnect, device number 20 [ 610.349500][T10883] Illegal XDP return value 4294967274, expect packet loss! [ 610.391862][T10883] loop4: detected capacity change from 0 to 1024 [ 610.431112][T10883] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 610.448406][T10883] EXT4-fs (loop4): #clusters per group too big: 4278198272 [ 611.114140][ T26] audit: type=1326 audit(1771494078.404:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd24bf1e629 code=0x0 [ 611.241185][T10905] loop4: detected capacity change from 0 to 128 [ 612.188373][T10912] loop5: detected capacity change from 0 to 512 [ 612.271539][T10914] loop0: detected capacity change from 0 to 1024 [ 612.439961][T10912] EXT4-fs (loop5): Unrecognized mount option "subj_type=/deT9kvm" or missing value [ 612.495015][T10905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 612.570215][T10905] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.591645][ T4464] hfsplus: b-tree write err: -5, ino 4 [ 613.264658][T10927] loop2: detected capacity change from 0 to 1024 [ 613.340095][T10927] EXT4-fs (loop2): Ignoring removed bh option [ 613.402725][T10927] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nombcache,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 613.459787][ T26] audit: type=1800 audit(1771494080.754:46): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1763" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 613.511042][ T26] audit: type=1800 audit(1771494080.754:47): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1763" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 613.723799][T10944] loop5: detected capacity change from 0 to 512 [ 613.970921][T10953] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 614.000246][T10951] loop4: detected capacity change from 0 to 1024 [ 614.253989][T10959] loop6: detected capacity change from 0 to 1024 [ 614.721032][T10964] loop0: detected capacity change from 0 to 512 [ 615.357425][T10951] EXT4-fs (loop4): inline encryption not supported [ 615.369076][T10951] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 615.448901][T10951] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,noquota,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 615.814599][T10983] loop2: detected capacity change from 0 to 256 [ 615.870021][T10951] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.1772: Allocating blocks 497-513 which overlap fs metadata [ 615.944212][T10983] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 616.008501][T10951] EXT4-fs (loop4): pa ffff88805f195540: logic 256, phys. 433, len 5 [ 616.017349][T10951] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 616.080100][T10983] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 616.494541][T10983] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 616.766384][T10995] usb usb1: usbfs: process 10995 (syz.0.1787) did not claim interface 0 before use [ 616.999265][T11000] loop0: detected capacity change from 0 to 512 [ 617.092897][T11004] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 617.092897][T11004] program syz.5.1789 not setting count and/or reply_len properly [ 617.641893][T11015] loop4: detected capacity change from 0 to 256 [ 617.732071][T11015] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 618.768798][T11043] loop6: detected capacity change from 0 to 4096 [ 618.834741][T11043] EXT4-fs (loop6): Test dummy encryption mode enabled [ 618.892749][T11043] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,delalloc,nombcache,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 619.070311][T11051] device syzkaller0 entered promiscuous mode [ 619.192015][T11058] binder: 11057:11058 unknown command 0 [ 619.231333][T11058] binder: 11057:11058 ioctl c0306201 2000000001c0 returned -22 [ 619.242340][T11058] loop5: detected capacity change from 0 to 128 [ 619.408526][T11058] EXT4-fs (loop5): Ignoring removed nobh option [ 619.500342][T11058] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 619.610667][T11058] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 619.947610][T11072] loop4: detected capacity change from 0 to 16 [ 620.071021][T11077] 9pnet: Unknown protocol version 9p20\++} [ 620.135798][T11072] erofs: (device loop4): mounted with root inode @ nid 36. [ 620.254644][T11077] loop2: detected capacity change from 0 to 1024 [ 620.933663][T11086] loop4: detected capacity change from 0 to 512 [ 621.012799][T11077] EXT4-fs (loop2): inline encryption not supported [ 621.024602][T11077] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 621.060049][T11086] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 621.119617][T11086] EXT4-fs (loop4): orphan cleanup on readonly fs [ 621.136988][T11086] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.1814: Allocating blocks 41-42 which overlap fs metadata [ 621.270110][T11077] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 621.299052][T11086] Quota error (device loop4): write_blk: dquota write failed [ 621.317817][T11086] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 621.338610][T11086] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1814: Failed to acquire dquot type 0 [ 621.431293][T11086] EXT4-fs (loop4): 1 truncate cleaned up [ 621.455213][T11086] EXT4-fs (loop4): pa ffff888074963ee0: logic 1, phys. 41, len 23 [ 621.463290][T11086] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 621.543654][T11077] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.1813: Allocating blocks 497-513 which overlap fs metadata [ 621.573515][T11077] EXT4-fs (loop2): pa ffff888074963e00: logic 128, phys. 385, len 8 [ 621.582213][T11077] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 621.595652][T11086] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,usrjquota=,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 622.038180][T11126] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 622.038180][T11126] program syz.5.1819 not setting count and/or reply_len properly [ 622.486636][T11127] loop0: detected capacity change from 0 to 512 [ 622.741270][T11127] EXT4-fs (loop0): Ignoring removed bh option [ 622.747774][T11127] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 622.760088][T11127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 622.916677][T11127] EXT4-fs (loop0): 1 truncate cleaned up [ 622.922411][T11127] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,resgid=0x0000000000000000,jqfmt=vfsold,bsdgroups,bh,,errors=continue. Quota mode: none. [ 623.316224][T11134] loop4: detected capacity change from 0 to 1024 [ 623.437038][T11134] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 623.503888][T11142] loop0: detected capacity change from 0 to 128 [ 623.631784][T11142] EXT4-fs (loop0): Ignoring removed nobh option [ 623.718426][T11142] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 623.735565][T11142] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 624.287911][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.294287][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.244339][T11173] loop2: detected capacity change from 0 to 2048 [ 626.258035][T11173] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,dioread_lock,,errors=continue. Quota mode: writeback. [ 627.723256][ T4324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 627.785625][T11209] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 627.793711][ T4324] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 360 with error 28 [ 627.885474][ T4324] EXT4-fs (loop2): This should not happen!! Data will be lost [ 627.885474][ T4324] [ 627.938918][ T4324] EXT4-fs (loop2): Total free blocks count 0 [ 627.965505][ T4324] EXT4-fs (loop2): Free/Dirty block details [ 627.971469][ T4324] EXT4-fs (loop2): free_blocks=4096 [ 627.995457][ T4324] EXT4-fs (loop2): dirty_blocks=368 [ 628.000698][ T4324] EXT4-fs (loop2): Block reservation details [ 628.035358][ T4324] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 630.750463][ T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 630.873490][T11262] loop2: detected capacity change from 0 to 512 [ 631.037334][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 631.215873][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 631.387971][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 631.659669][ T23] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.085534][ T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 632.110411][ T23] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 632.130600][ T23] usb 6-1: Product: syz [ 632.134801][ T23] usb 6-1: Manufacturer: syz [ 632.151019][ T23] usb 6-1: SerialNumber: syz [ 632.185712][T11250] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 632.209339][ T23] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input9 [ 632.365844][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 632.447710][ T23] usb 6-1: USB disconnect, device number 14 [ 632.704042][ T23] appletouch 6-1:1.0: input: appletouch disconnected [ 633.464009][T11334] loop4: detected capacity change from 0 to 256 [ 633.502904][T11334] exfat: Unknown parameter '18446744073709551615' [ 634.403482][T11342] loop2: detected capacity change from 0 to 512 [ 634.764703][T11353] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 634.764703][T11353] program syz.0.1872 not setting count and/or reply_len properly [ 634.770083][T11342] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 634.933249][T11342] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 635.006842][T11342] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1870: attempt to clear invalid blocks 2 len 1 [ 635.112883][T11342] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 635.196086][T11342] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1870: invalid indirect mapped block 1819239214 (level 0) [ 635.258632][T11342] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1870: invalid indirect mapped block 1819239214 (level 1) [ 635.326859][T11342] EXT4-fs (loop2): 1 truncate cleaned up [ 635.374833][T11342] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 635.542044][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 635.592290][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.786246][T11366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.991876][T11370] 9pnet: Unknown protocol version 9p20\++} [ 636.038920][T11370] loop6: detected capacity change from 0 to 1024 [ 636.173165][T11370] EXT4-fs (loop6): inline encryption not supported [ 636.202960][T11370] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 636.292320][T11370] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 636.420778][T11370] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.1876: Allocating blocks 497-513 which overlap fs metadata [ 636.456637][T11370] EXT4-fs (loop6): pa ffff88805f195e00: logic 128, phys. 385, len 8 [ 636.464770][T11370] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 638.074328][T11402] loop0: detected capacity change from 0 to 1024 [ 638.103540][T11403] loop4: detected capacity change from 0 to 128 [ 638.190783][T11403] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 638.190783][T11403] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 638.190783][T11403] [ 638.209739][T11403] EXT4-fs (loop4): quotafile must be on filesystem root [ 638.273324][T11402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 638.311482][T11405] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 638.311482][T11405] program syz.6.1882 not setting count and/or reply_len properly [ 638.428512][T11404] loop5: detected capacity change from 0 to 512 [ 638.659477][T11404] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 638.759124][T11404] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.870611][T11404] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on [ 642.231243][T11423] loop4: detected capacity change from 0 to 1024 [ 642.328019][T11423] EXT4-fs (loop4): Ignoring removed bh option [ 645.108096][T11423] EXT4-fs: error -4 creating inode table initialization thread [ 645.116664][T11423] EXT4-fs (loop4): mount failed [ 646.929417][T11460] loop6: detected capacity change from 0 to 16 [ 646.939178][T11463] loop2: detected capacity change from 0 to 512 [ 648.609248][T11460] erofs: (device loop6): mounted with root inode @ nid 36. [ 648.891414][T11463] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1902: inode has both inline data and extents flags [ 648.904208][T11460] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 648.915705][T11463] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1902: couldn't read orphan inode 15 (err -117) [ 648.918043][T11470] loop4: detected capacity change from 0 to 512 [ 648.937194][T11463] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 648.986150][T11463] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Out of memory [ 649.003811][T11463] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #18: comm syz.2.1902: mark_inode_dirty error [ 649.298061][T11475] loop0: detected capacity change from 0 to 1024 [ 649.406380][T11475] EXT4-fs (loop0): Ignoring removed bh option [ 649.548562][T11475] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nombcache,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 649.637754][ T26] audit: type=1800 audit(1771494116.924:48): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1904" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 650.197757][T11470] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 650.253473][T11481] loop5: detected capacity change from 0 to 2048 [ 650.260309][T11470] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.273188][ T26] audit: type=1800 audit(1771494116.974:49): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1904" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 650.439497][T11481] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 650.637423][T11481] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1905: bg 0: block 234: padding at end of block bitmap is not set [ 650.845654][T11493] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 650.845654][T11493] program syz.6.1906 not setting count and/or reply_len properly [ 651.551304][T11505] loop5: detected capacity change from 0 to 256 [ 653.816036][T11522] loop4: detected capacity change from 0 to 128 [ 654.060313][T11522] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 654.183708][T11522] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 654.340404][T11526] loop5: detected capacity change from 0 to 512 [ 654.546991][T11526] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 654.676699][T11526] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.841228][ T1111] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 655.870391][T11550] loop2: detected capacity change from 0 to 2048 [ 655.920505][ T1111] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 657.130959][T11557] loop6: detected capacity change from 0 to 512 [ 657.172132][T11550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.360176][T11564] usb usb7: usbfs: process 11564 (syz.0.1931) did not claim interface 5 before use [ 660.736369][T11577] fido_id[11577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 660.737776][T11581] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1937'. [ 661.003363][T11590] loop4: detected capacity change from 0 to 128 [ 661.218832][T11591] ODEBUG: Out of memory. ODEBUG disabled [ 661.610616][T11599] loop5: detected capacity change from 0 to 1024 [ 661.693869][T11599] EXT4-fs (loop5): inline encryption not supported [ 661.725502][T11599] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 661.875204][T11599] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 662.010894][T11608] loop6: detected capacity change from 0 to 512 [ 662.102220][T11608] EXT4-fs (loop6): inline encryption not supported [ 662.127386][T11599] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.1942: Allocating blocks 497-513 which overlap fs metadata [ 662.152059][T11608] EXT4-fs (loop6): 1 orphan inode deleted [ 662.160015][T11608] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 662.173535][T11599] EXT4-fs (loop5): pa ffff88805f195380: logic 128, phys. 385, len 8 [ 662.181702][T11599] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 662.185830][T11608] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.273531][T11614] loop2: detected capacity change from 0 to 512 [ 664.990498][T11630] loop6: detected capacity change from 0 to 2048 [ 665.171942][T11630] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 665.188778][T11643] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 665.188778][T11643] program syz.4.1952 not setting count and/or reply_len properly [ 665.215588][T11638] loop5: detected capacity change from 0 to 4096 [ 665.390083][T11638] EXT4-fs (loop5): Test dummy encryption mode enabled [ 665.448568][T11635] kvm [11634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x224e5ac1 [ 665.458453][T11638] EXT4-fs (loop5): Ignoring removed oldalloc option [ 665.749349][T11635] kvm [11634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x224e7e89 [ 665.761066][T11638] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c01c, mo2=0002] [ 665.796103][T11638] System zones: 0-5 [ 665.994855][T11638] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,data_err=abort,oldalloc,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 666.191036][T11656] 9pnet: Unknown protocol version 9p20\++} [ 666.276666][T11656] loop2: detected capacity change from 0 to 1024 [ 666.295589][T11638] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 666.321550][T11656] EXT4-fs (loop2): inline encryption not supported [ 666.338201][T11656] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 666.366827][T11656] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 666.425500][ T4246] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 666.445112][T11656] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.1959: Allocating blocks 497-513 which overlap fs metadata [ 666.461836][T11656] EXT4-fs (loop2): pa ffff888074963540: logic 128, phys. 385, len 8 [ 666.470113][T11656] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 666.854458][T11667] loop5: detected capacity change from 0 to 512 [ 666.973930][ T4246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.097770][T11673] loop2: detected capacity change from 0 to 512 [ 667.332916][ T4246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.343990][ T4246] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 667.359178][T11673] EXT4-fs (loop2): Test dummy encryption mode enabled [ 667.474413][ T4246] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 667.496131][T11673] EXT4-fs error (device loop2): __ext4_iget:4912: inode #11: block 1: comm syz.2.1961: invalid block [ 667.561028][T11673] EXT4-fs (loop2): Remounting filesystem read-only [ 667.585470][T11673] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1961: couldn't read orphan inode 11 (err -117) [ 667.687187][ T4246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.716364][ T4246] usb 7-1: config 0 descriptor?? [ 667.865403][T11673] EXT4-fs (loop2): Remounting filesystem read-only [ 667.872068][T11673] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,test_dummy_encryption=v1,journal_ioprio=0x0000000000000002,. Quota mode: none. [ 667.894179][T11673] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.1961: Directory hole found for htree leaf block 0 [ 667.924525][T11673] EXT4-fs (loop2): Remounting filesystem read-only [ 667.937959][T11673] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.1961: Directory hole found for htree leaf block 0 [ 667.985667][T11673] EXT4-fs (loop2): Remounting filesystem read-only [ 668.288932][ T4246] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 668.331605][ T4246] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 668.498475][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x224e5ac1 [ 668.561980][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x224e7e89 [ 668.567564][ T4292] usb 7-1: USB disconnect, device number 3 [ 668.611796][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x224eea1c [ 668.661788][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x224ebcfa [ 668.732425][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x224e5bd1 [ 668.853497][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x224e71b2 [ 668.954217][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x224ee981 [ 669.005227][T11688] kvm [11687]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x224edae5 [ 669.231117][T11702] loop6: detected capacity change from 0 to 256 [ 669.316218][T11702] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 669.385425][T11702] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 669.465167][T11702] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 671.438138][T11718] loop6: detected capacity change from 0 to 512 [ 677.647884][T11739] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 677.647884][T11739] program syz.4.1980 not setting count and/or reply_len properly [ 677.816526][T11735] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 677.831356][T11735] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 678.205482][ T23] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 678.455428][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 678.575456][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.592097][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.602791][ T23] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 678.617913][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.640892][ T23] usb 6-1: config 0 descriptor?? [ 679.250745][ T23] savu 0003:1E7D:2D5A.0008: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 679.536429][T11746] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -19 [ 679.549314][T11746] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -19 [ 679.562741][ T23] usb 6-1: USB disconnect, device number 15 [ 679.851144][T11753] loop4: detected capacity change from 0 to 512 [ 683.372316][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1990'. [ 685.965363][ T4246] Bluetooth: hci3: command 0x0409 tx timeout [ 688.045372][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 690.125417][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 692.205351][ T4246] Bluetooth: hci3: command 0x0419 tx timeout [ 693.325408][ T4246] Bluetooth: hci6: command 0x0409 tx timeout [ 695.405362][ T23] Bluetooth: hci6: command 0x041b tx timeout [ 696.125353][ T23] Bluetooth: hci7: command 0x0409 tx timeout [ 697.485424][ T23] Bluetooth: hci6: command 0x040f tx timeout [ 698.205353][ T23] Bluetooth: hci7: command 0x041b tx timeout [ 699.565334][ T4246] Bluetooth: hci6: command 0x0419 tx timeout [ 700.285412][ T23] Bluetooth: hci7: command 0x040f tx timeout [ 700.605373][ T23] Bluetooth: hci8: command 0x0409 tx timeout [ 701.645370][ T23] Bluetooth: hci9: command 0x0409 tx timeout [ 702.365356][ T23] Bluetooth: hci7: command 0x0419 tx timeout [ 702.685377][ T23] Bluetooth: hci8: command 0x041b tx timeout [ 703.725356][ T23] Bluetooth: hci9: command 0x041b tx timeout [ 704.765435][ T23] Bluetooth: hci8: command 0x040f tx timeout [ 705.805400][ T23] Bluetooth: hci9: command 0x040f tx timeout [ 706.845426][ T23] Bluetooth: hci8: command 0x0419 tx timeout [ 707.885386][ T23] Bluetooth: hci9: command 0x0419 tx timeout [ 746.045355][ T4246] Bluetooth: hci10: command 0x0409 tx timeout [ 748.125424][ T4246] Bluetooth: hci10: command 0x041b tx timeout [ 750.205384][ T4246] Bluetooth: hci10: command 0x040f tx timeout [ 752.305285][ T4246] Bluetooth: hci10: command 0x0419 tx timeout [ 753.005369][ T4246] Bluetooth: hci11: command 0x0409 tx timeout [ 755.085436][ T23] Bluetooth: hci11: command 0x041b tx timeout [ 756.525346][ T23] Bluetooth: hci12: command 0x0409 tx timeout [ 757.165364][ T23] Bluetooth: hci11: command 0x040f tx timeout [ 758.605341][ T23] Bluetooth: hci12: command 0x041b tx timeout [ 759.245437][ T4246] Bluetooth: hci11: command 0x0419 tx timeout [ 760.685331][ T23] Bluetooth: hci12: command 0x040f tx timeout [ 761.005312][ T23] Bluetooth: hci13: command 0x0409 tx timeout [ 762.045371][ T23] Bluetooth: hci14: command 0x0409 tx timeout [ 762.765380][ T23] Bluetooth: hci12: command 0x0419 tx timeout [ 763.085446][ T23] Bluetooth: hci13: command 0x041b tx timeout [ 764.125303][ T23] Bluetooth: hci14: command 0x041b tx timeout [ 765.165298][ T23] Bluetooth: hci13: command 0x040f tx timeout [ 766.205326][ T23] Bluetooth: hci14: command 0x040f tx timeout [ 767.245339][ T23] Bluetooth: hci13: command 0x0419 tx timeout [ 768.285358][ T23] Bluetooth: hci14: command 0x0419 tx timeout [ 788.195207][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 788.201980][ C0] rcu: 0-....: (8 GPs behind) idle=613/1/0x4000000000000000 softirq=38260/38261 fqs=5244 [ 788.213513][ C0] (t=10502 jiffies g=51065 q=2048) [ 788.218715][ C0] NMI backtrace for cpu 0 [ 788.223052][ C0] CPU: 0 PID: 11699 Comm: syz.2.1970 Not tainted syzkaller #0 [ 788.230590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.240723][ C0] Call Trace: [ 788.243989][ C0] [ 788.246810][ C0] dump_stack_lvl+0x188/0x250 [ 788.251517][ C0] ? show_regs_print_info+0x20/0x20 [ 788.256690][ C0] ? load_image+0x400/0x400 [ 788.261312][ C0] ? vprintk_emit+0x150/0x150 [ 788.266001][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 788.271055][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 788.277186][ C0] ? vprintk_emit+0xf9/0x150 [ 788.281763][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 788.287327][ C0] ? _raw_spin_lock+0x40/0x40 [ 788.291976][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 788.298074][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 788.304036][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 788.309193][ C0] print_cpu_stall+0x31d/0x5f0 [ 788.313931][ C0] rcu_sched_clock_irq+0x6ea/0x1120 [ 788.319107][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 788.323932][ C0] ? account_process_tick+0x22a/0x3a0 [ 788.329438][ C0] update_process_times+0x193/0x200 [ 788.334647][ C0] tick_sched_timer+0x37d/0x560 [ 788.339527][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 788.345044][ C0] __hrtimer_run_queues+0x4ad/0xb70 [ 788.350229][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 788.355320][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 788.361804][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 788.366729][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 788.372691][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 788.378409][ C0] [ 788.381317][ C0] [ 788.384240][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 788.390288][ C0] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 788.396383][ C0] Code: 8a e8 a6 ec 72 08 65 66 8b 05 ae 5b ba 7e 66 85 c0 75 54 bf 01 00 00 00 e8 bf 24 09 00 e8 9a 10 36 00 fb 65 8b 05 5a 32 b9 7e <85> c0 75 05 e8 a9 3f b7 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 788.415966][ C0] RSP: 0018:ffffc9000354fc20 EFLAGS: 00000282 [ 788.422097][ C0] RAX: 0000000080000000 RBX: 0000000000000200 RCX: 83ea7398c1e6a100 [ 788.430047][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f740 [ 788.438081][ C0] RBP: ffffc9000354fcb0 R08: ffff88813fe22407 R09: 1ffff11027fc4480 [ 788.446215][ C0] R10: dffffc0000000000 R11: ffffed1027fc4481 R12: ffffffff812c28e5 [ 788.454209][ C0] R13: 1ffff920006a9fff R14: dffffc0000000000 R15: 1ffff920006a9f84 [ 788.462186][ C0] ? local_bh_enable+0x5/0x20 [ 788.466910][ C0] ? _local_bh_enable+0xa0/0xa0 [ 788.471730][ C0] ? rcu_is_watching+0x11/0xa0 [ 788.476498][ C0] ? fpu__clear_user_states+0x1a5/0x260 [ 788.482064][ C0] arch_do_signal_or_restart+0xec1/0x12c0 [ 788.487914][ C0] ? _copy_from_user+0x111/0x170 [ 788.492909][ C0] ? get_sigframe_size+0x10/0x10 [ 788.497836][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 788.503272][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 788.508533][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 788.514064][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 788.519607][ C0] do_syscall_64+0x58/0xa0 [ 788.523996][ C0] ? clear_bhb_loop+0x30/0x80 [ 788.528645][ C0] ? clear_bhb_loop+0x30/0x80 [ 788.533296][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 788.539163][ C0] RIP: 0033:0x7f2ee43ebbd0 [ 788.543556][ C0] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d a2 22 07 00 e8 a5 65 f9 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 788.563220][ C0] RSP: 002b:00007f2ee2625b38 EFLAGS: 00000246 [ 788.569263][ C0] RAX: 0000000000000000 RBX: 00007f2ee4645fa8 RCX: 00007f2ee43cc629 [ 788.577211][ C0] RDX: 00007f2ee2625b40 RSI: 00007f2ee2625c70 RDI: 0000000000000021 [ 788.585167][ C0] RBP: 00007f2ee4645fa0 R08: 0000000000000000 R09: 0000000000000000 [ 788.593113][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.601059][ C0] R13: 00007f2ee4646038 R14: 00007fff96f25740 R15: 00007fff96f25828 [ 788.609015][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)