last executing test programs: 2m53.227947188s ago: executing program 3 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0xfffffffffffffffe}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001800)=@filter={'filter\x00', 0x42, 0x4, 0x4a8, 0xffffffff, 0x1c0, 0x1c0, 0xf8, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xffffffff, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {0xff}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xffffffff, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x11, 0x2}, {0x4, 0x5, 0x1}, 0xf09, 0x81}}}, {{@ip={@private=0xa010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x2}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private0, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x28}, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d6, 0x0, 0x73, 0x1, 0x0, 0x7}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xff, 0xffffff00], 0x4d3, 0x3509, 0x3b, 0x0, 0x10, 0x3}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@remote, [0xff, 0xff, 0x80000080, 0xff], 0x4d5, 0x3507, 0x0, 0x1, 0x0, 0x1}, {@ipv4=@local, [0xff, 0xffffff00, 0xffffff00, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [0xff, 0xff000000, 0x0, 0xffffffff], 0x4d5, 0x0, 0x33, 0x1, 0x4, 0x4}], 0x2, 0x1}}, @common=@inet=@tos={{0x28}, {0xa, 0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7, 0xc, [0x39, 0x14, 0xd, 0x15, 0x1b, 0x6, 0x1f, 0x4, 0x2c, 0x4, 0x17, 0x24, 0x10, 0x0, 0x15, 0x34], 0x2, 0xe, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x200000000000000, &(0x7f0000000440)=[@request_death={0x40046305}], 0xffffffffffffff9a, 0x1000000, 0x0}) 2m52.386210869s ago: executing program 3 (id=145): socket$key(0xf, 0x3, 0x2) inotify_init1(0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffffffffffc2, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fchdir(0xffffffffffffffff) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f000097f000/0x4000)=nil, 0x4000, 0x1000009) 2m51.128184308s ago: executing program 3 (id=148): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@dax_always}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@nombcache}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x489, &(0x7f0000001f80)="$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") mlockall(0x7) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt(r1, 0x28, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) write(r0, &(0x7f0000000080)='4', 0x1) 2m49.971987862s ago: executing program 3 (id=153): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x1005) r3 = socket$unix(0x1, 0x1, 0x0) accept$unix(r2, 0x0, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m49.17880037s ago: executing program 3 (id=163): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="726f6469722c6e6f636173652c726f6469722c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c696f000000007365743d6370313235312c6e6f6e756d7461696c3d302c73686f727496616d653d77696e6e742c636865636b3d7374726963742c636f6465706167653d3835302c6e6f6e756d7461696c3d302c696f636861727365743d69736f383835392d332c696f636861727365743d6575632d62702c7379735f696d6d757461626c652c757466383d302c757466383d312c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=1,audit,\x00'], 0x3, 0x279, &(0x7f0000001080)="$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") r0 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0xffff) read$FUSE(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000100)=0x4, 0x8112) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2m48.232199814s ago: executing program 3 (id=178): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) fallocate(r0, 0x20, 0x4000, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) 2m48.179497297s ago: executing program 32 (id=178): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) fallocate(r0, 0x20, 0x4000, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) 2m28.812101611s ago: executing program 5 (id=316): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) 2m28.756247953s ago: executing program 5 (id=317): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4105, 0x1009}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.520082334s ago: executing program 5 (id=319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x20000002}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'aegis256-generic\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m28.405030949s ago: executing program 5 (id=321): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000006c0)={[{@utf8}, {@utf8}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}]}, 0x1, 0x153c, &(0x7f00000008c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 2m28.137124362s ago: executing program 5 (id=324): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) 2m26.928236009s ago: executing program 5 (id=328): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmsg$inet_nvme(r0, &(0x7f0000004040)={0x0, 0x0, 0x0}, 0x220) 2m26.428437533s ago: executing program 33 (id=328): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmsg$inet_nvme(r0, &(0x7f0000004040)={0x0, 0x0, 0x0}, 0x220) 2m3.498130645s ago: executing program 6 (id=464): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x0, 0xf, 0x6, "127fafa22b17"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x1, "d1"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x40, 0x11, 0x66, "cc0167434e29c684d5b694ac49aa920320d2c35a20da68a76331259fe3d532cd18053d1fa02550efc0d5f15cb76ae6fe82f782abd509ea54d02a02060f761930df35fa4f6c9d916a88290b39fb94248639f0e00f7abda9b3f0b9db34fa2ca91cd03085b8a496"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x5}, 0x0, 0x0, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m2.260411253s ago: executing program 6 (id=470): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) unshare(0x40400) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 2m2.167842947s ago: executing program 6 (id=473): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/25, 0x19}], 0x1) 2m1.968078747s ago: executing program 6 (id=477): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@bh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/81, 0x51) lseek(r0, 0x3ff, 0x1) 2m1.873650371s ago: executing program 6 (id=479): socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='traceon', 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m1.371170605s ago: executing program 6 (id=484): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000bc0)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x8e, 0x7e, 0x8, 0x2d, @local, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8000, 0x10, 0x2d82, 0xffffffff}}) 2m1.310074488s ago: executing program 34 (id=484): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000bc0)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x8e, 0x7e, 0x8, 0x2d, @local, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8000, 0x10, 0x2d82, 0xffffffff}}) 33.763796587s ago: executing program 7 (id=893): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0xa}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@check_strict}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) 33.69714652s ago: executing program 7 (id=896): socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x20, r1, 0x607, 0x4, 0xfffffffd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) 33.646894623s ago: executing program 7 (id=897): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) 32.757057765s ago: executing program 7 (id=902): r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x400201, 0x190) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@jqfmt_vfsv1}]}, 0x2, 0x44c, &(0x7f0000000600)="$eJzs281vG0UbAPBn13H69m1LQikf/QACBRHxkTRtgR44AAKJQ5GQ4ADHKEmrUrdBTZBoVUGLUDkhhMQZxJF/gRNcEOKExBXuqFKFemnLyWjt3cR2HDdx7brUv5+07czubGYe7449s2MHMLQmsn+SiO0R8UdEjNWzzQUm6v9dv3p+7sbV83NJVKtv/53Uyl27en6uKFqcty3PTKYR6WdJ7G1T79LZcydnK5WFM3l+evnUB9NLZ889d+LU7PGF4wunDx45cvjQzIsvHHy+J3Fmbbq25+PFfbvfeO+rN49+0RR/Sxw9MtHp4JPVao+rG6wdDelkZIANYVNKEZFdrnKt/49FKVYv3li8/ulAGwf0VbVarW5b//CFKnAXS6I5r8vDsCg+6LP5b7G1DgJe7t/wY+CuvFKfAGVxX8+3+pGRSPMy5Zb5bS9NRMS7F/75NtuiP88hAACa/JiNf55tN/5L44GGcvfka0PjEXFvROyMiPsiYldE3B9RK/tgRDy0yfpbF0nWjn/Sy10FtkHZ+O+lfG2refxXjP5ivJTndtTiLyfHTlQWDuSvyWSUt2T5mQ51/PTa71+ud6xx/JdtWf3FWDBvx+WRLc3nzM8uz95KzI2uXIzYM9Iu/mRlJSCJiN0RsafLOk48/f2+WuKbLWuO3Tz+DnqwzlT9LuKp+vW/EC3xF5LO65PT/4vKwoHp4q5Y69ffLr21Xv23FH8PZNf//23v/5X4x5PG9dqlzddx6c/P153TdHv/jybv1NKj+b6PZpeXz8xEjCZH641u3H9w9dwiX5TP4p/c377/74zVV2JvRGQ38cMR8UhEPJq3/bGIeDwi9neI/5dXn3i/+/j7K4t/flPXfzUxGq172idKJ3/+oanS8TXx3+h8/Q/XUpP5no28/22kXd3dzQAAAPDfk0bE9kjSqZV0mk5N1b8vvysirSwuLT9zbPHD0/P13wiMRzktnnSNNTwPncmn9fX8xYiof7WgOH4of278dWlrLT81t1iZH3TwMOS2rdP/M3+VBt06oO/8XguGl/4Pw0v/h+Gl/8PwatP/tw6iHcDt1+7z/5MBtAO4/Vr6v2U/GCLm/zC89H8YXvo/DKWlrXHzH8l3TBR/qcvT79pElO+IZvQtEekd0QyJPiUG+74EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQK/8GAAD//z0p4Xc=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 32.64808337s ago: executing program 7 (id=904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000000)) 32.116013485s ago: executing program 7 (id=908): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000805e141600000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003080)={&(0x7f0000001fc0)='~', 0x0, 0x0, 0x0, 0x81, r1}, 0x38) 32.052218618s ago: executing program 35 (id=908): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000805e141600000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003080)={&(0x7f0000001fc0)='~', 0x0, 0x0, 0x0, 0x81, r1}, 0x38) 3.80030719s ago: executing program 4 (id=1078): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x121c088, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de", @ANYRESDEC], 0x4a, 0x2e9, &(0x7f00000001c0)="$eJzs3T+LHGUcB/Df7O3NTlTYK6xEyIAprIKXTmz2kATEqwxXRAtzmARkdxFycBAV11S2NhYWvgJBsPFdpPEdCLaCnRECI/PvdnZvk7uLbiS5z6e53z3P853nmdlhb7eY526+Ph3fyuPO/S9/iyxLojeKUTxMYit60fo6Foy+DQDgefawKOLPolY1JKfLlcOy9S4NAFiTY3//V+rPy5+fybIAgDW6fuPD93d2d69+kEUW16bfHO6V3+zLn3X/zp34NCZxO96KYTyKqD4nNF/8y/paURSzfl7aikvT2eFemZx+/KA5/s4fEVV+O4axdRSrPm1U+fd2r25X8XzQyc/KdbzUzD8q81diGK8ehRfyV+p83s3HXhpvvtFZ/+UYxq+fxGcxiVvVIub5r7bz/N3iu7+++KhcXplPZod7g2pc5ZVq2RvP+rUBAAAAAAAAAAAAAAAAAAAAAODFdTlvN9/JL8aladnU7L+z8ShtxtQjbnZSZX9dHW0X3NkfqDQr4od6S8HNhfnm+/v047V+d2NBAAAAAAAAAAAAAAAAAAAAOL8O7n0+3p9Mbt/9T4ok4kJ75L+vRzztcUadlosx70ojYnnwoJlvfzLpNeXCAR+kTUv0xvuT2GjHJBFPXEb0l+Z6+tM5qbiQLa25LX78qTzBsxww67S8vfoEN49fw8XixuDf3hvtPTDeT1bPNYi2JWuu6vdpxHxMGqecK31cVxHd1+ukU05Xdg3PfO7py1Uxe+yYIllxi3aKd36v+5uWJJbuurS6qitn32yKTnzp3jjhIjTxrI4ff69Iqt06Bmt4FwIAAAAAAAAAAAAAAAAAAKJ6mrd9+rf87ZfFzvtPjPYKjwIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8II4uNf+//8zFLMmfIrBadw9+J9PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPgnwAAAP//qf1IxA==") unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200) 3.741683453s ago: executing program 4 (id=1080): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x1f5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x82) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) fstat(r0, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40a, 0x103) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 3.553640982s ago: executing program 2 (id=1082): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)="8d27d1991dbc7be243b863d49049c61159a4a37b6d7927a2fdf36d0318e91718987b72cee6a63c9e5cb70827b94ad26d13daa042eeac589065b81d8b38a36bb96292471c4c7a02c5", 0x48, 0xfffffffffffffffb) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) r5 = getegid() keyctl$chown(0x4, r3, r4, r5) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x40c4) 2.716056692s ago: executing program 1 (id=1088): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e78", 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x150) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.53725497s ago: executing program 4 (id=1089): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, 0x0, 0xb00}, 0x20) 2.501512432s ago: executing program 4 (id=1090): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) execve(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000006c0)={0x2, {{0x2, 0x4e21, @multicast1}}}, 0x90) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x1}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xffdd) close(r0) close(0x4) 1.345022036s ago: executing program 2 (id=1092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000043c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) write(0xffffffffffffffff, &(0x7f0000000a00)="c7", 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6, r1}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='.\x02\x00', 0x2810400, &(0x7f0000000140)=ANY=[], 0x1, 0x214, &(0x7f0000000540)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r7 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r7, &(0x7f0000000080)='N\x00', 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) 1.344893507s ago: executing program 8 (id=1093): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 1.344577396s ago: executing program 4 (id=1095): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0x62e8}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1}, 0x20040051) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x31, 0x0, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pread64(r6, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x8, 0x6, 0xb}], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x212400, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x28, r9, 0x1, 0x4070bd31, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 1.308333718s ago: executing program 1 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bb"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8f70120b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.26142619s ago: executing program 8 (id=1097): unshare(0x400) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x58) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x2) 1.254332991s ago: executing program 1 (id=1098): ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7dfc0001}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x1a, 0x0, 0x8}, 0x28) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) 1.188029084s ago: executing program 0 (id=1099): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000500)=ANY=[@ANYBLOB='shortname=mixed,utf8=0,iocharset=cp860,shortname=lower,uni_xlate=1,allow_utime=00000000000000000000006,utf8=0,uni_xlate=1,iocharset=cp437,nonumtail=0,rodir,shortname=mixed,nocase,uni_xlate=0,shortname=mixed,errors=remount-ro,shortname=lower,smackfsdef=utf8=0,dirsync,smackfshat=&,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c000000000035fc629a1f6ac8ebae4efb00f047f7487635f05e58ca2600"/40], 0x25, 0x34f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 1.187887434s ago: executing program 8 (id=1100): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 570.479643ms ago: executing program 0 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r5) syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) 565.907903ms ago: executing program 1 (id=1102): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) lseek(r0, 0x8, 0x4) 486.749757ms ago: executing program 8 (id=1103): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0204200504000025"], 0x20}}, 0x20000000) 486.586297ms ago: executing program 1 (id=1104): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xcd5, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x4}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) 485.368717ms ago: executing program 2 (id=1105): syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000280)='./file0\x00', 0x1000400, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0) 459.624868ms ago: executing program 4 (id=1106): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e78", 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x150) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 351.997783ms ago: executing program 0 (id=1107): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 351.871703ms ago: executing program 2 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bb"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8f70120b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 257.293887ms ago: executing program 8 (id=1109): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 231.439679ms ago: executing program 1 (id=1110): setregid(0xee00, 0x0) setfsgid(0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x8}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8c) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x130) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000060000000e0000000100000407000000050000000110000002000000000000000300000d000000001000000001000000040000000300000003000000040000000000000007b1000000000000000000000400000003000000000000000700000005000000a300000004000000020000000100000010000000000400000800000001000000005f005f6100"], &(0x7f0000000980)=""/245, 0x9e, 0xf5, 0x1, 0x2, 0x10000, @value=r1}, 0x28) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="696f636861727365743d63703836322c666c7573682c73686f72746e616d653d6d697865642c636f6465706167653d313235302c757466383d312c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c646d61736b3d30303030303030303030303030303030303135353534302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6c6f7765722c002c67f45d38e113e045adef3cdf5f62da6ba1efa4513ced37e3667fec1737130fe7115d032c06ca2e78052af37dc1599262d32be9510bef1abf7f66fcdce775bcacf5dbfd5744a92efc4eb1b09ed7d6f01cd472ff6fcb2c46b0ad64020af7916d51d40d4df1282171812358ba4a65f6436d60de01be03070f1f8a2eef4cb6e52b3657c8a9230d7048335758f4af24371dab00b43aa187260037dee067e4"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0xd, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x80000000) 231.275249ms ago: executing program 0 (id=1111): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 195.19268ms ago: executing program 2 (id=1112): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xab}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]}) close_range(r1, r1, 0x2) 140.108903ms ago: executing program 0 (id=1113): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1ba) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 128.859584ms ago: executing program 2 (id=1114): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@nodioread_nolock}, {@data_err_ignore}, {@debug}, {@dioread_nolock}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xaf9}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) chdir(0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) 81.622626ms ago: executing program 8 (id=1115): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x4000) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2}, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$eJzs3c9vG1UeAPDv2EmaNNUmjVa72z1sI61WrbTbpEnbVYQ4tFdUReWHuMCB0KSlNG2jJghSkJpK5YKEuCCExIkD5b+Ail57ghMHLpxQpQhQuSFhZHsmiRM7P5zEU3U+H8n1zHuevO80+Xpmnt8bB1BYw9V/ShFHImIuiRhIllbquiKtHK6/7vGv712sPpKoVF78eSiStCx7fZI+96cb90bEt98kMVTe2O784q2rU7OzMzfT9dGFa3Oj84u3Tly5NnV55vLM9fH/j0+cOX1mYuxkW/t1e2PRb+fvvvn2wAeTr3zx2e/J2Jc/TCZxNp5LX7h2P/bKcAzX/k+SjVX9E3vdWE7K6d9JpVKpZGVJV74xsX3Z7687Iv4eA1GO1V/eQLz/fK7BAfuqktTfu4EiStrK/769DwTosOw8ILu2X38dXMrlrATohOVz9Q6AjfnfVe8bjN5a38DBx0ms7dZJIqK9nrlGhyLi4YPJu5ceTN6NfeqHA5pbuhMR/2iW/0kt/wejNwZr+V9qyP/qecGF9Lla/kKb7a/vKpb/0Dn1/O/dNP+jRf6/Vn2+Xc/h19tqvXftyht9Dfnf1+4uAQAAAAAAQGHdPxcR/1v5/L9n9fO30sr4n2gy/qc/Is7uQfvD69Y3fv5ferQHzQBNLJ+LeLbp+N9SNvp3sLxmCutgdCeXrszOnIyIv0TE8eg+UF0f26SNEx8Ofdqqbjgd/5c9qu0/TMcCpnE86jrQuM301MLULnYZSC3fifI/m47/TVaO/0mT43/1nWFum20M/efehVZ1W+c/sF8qn0cca3r8X71rRbL5/TlGa+cDo9lZwUb/evejr1q1327+u8UE7N7ynYiDm+f/YLL2fj3zO2/j1GJXpVVdu+f/PclLtbsK9aRl70wtLNwci+hJzperpQ3l4zuPGZ5GWT5k+VLN/+P/Xs3/cpP+v2bn/30RsbTuZye/NM4pzvztj/4fW8Xj/B/yU83/6R0d/3e+MH5v8OtW7W/v+H+6dqw/npbo/4O6T7I07eluKG+Sjl3NqjoeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BUoRcSiS0sjKcqk0MhLRHxF/jYOl2RvzC/+9dOOt69PVutr3/5eyb/odqK8n2ff/D65ZH1+3fioiDkfEx+W+2vrIxRuz03nvPAAAAAAAAAAAAAAAAAAAADwh+lvM/6/6qZx3dMC+68o7ACA3TfL/uzziADrP8R+KS/5Dccl/KC75D8Ul/6G4Ns//Vyc6FgjQcY7/UFzyHwAAAAAAniqHj97/PomIpWf6ao+qnrSuO9fIgP1WyjsAIDdu8QPFZegPFJdrfCDZor635UZbbbmZuYu72BgAAAAAAAAAAAAACufYEfP/oajM/4fiMv8fiiub/3805ziAznOND8QWM/mbzv/fcqs1XGgAAAAAAAAAAAAAwK7NL966OjU7O3PTwsttbJWNas49+PYWKpXK7Wr4T0o8e7+QpCPUO9JoNhS+83vas50dzOb6be8nb3yvONCh9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRnwEAAP//4Fgg0g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000043c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) write(0xffffffffffffffff, &(0x7f0000000a00)="c7", 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6, r1}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='.\x02\x00', 0x2810400, &(0x7f0000000140)=ANY=[], 0x1, 0x214, &(0x7f0000000540)="$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") r7 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r7, &(0x7f0000000080)='N\x00', 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) kernel console output (not intermixed with test programs): 2670][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.076163][ T1613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.080434][ T4929] chnl_net:caif_netlink_parms(): no params data found [ 51.089824][ T4962] xt_hashlimit: size too large, truncated to 1048576 [ 51.131808][ T4968] 9pnet_fd: p9_fd_create_tcp (4968): problem binding to privport [ 51.158715][ T4973] netlink: 164 bytes leftover after parsing attributes in process `syz.1.200'. [ 51.165952][ T4929] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.167376][ T4929] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.172555][ T4929] device bridge_slave_0 entered promiscuous mode [ 51.177431][ T4929] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.180940][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.205814][ T4929] device bridge_slave_1 entered promiscuous mode [ 51.221730][ T4929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.224436][ T4929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.231866][ T4929] team0: Port device team_slave_0 added [ 51.234089][ T4929] team0: Port device team_slave_1 added [ 51.240643][ T4929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.241801][ T4929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.245468][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 51.247220][ T4929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.250893][ T4929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.252185][ T4929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.256952][ T4929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.259103][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.266922][ T4929] device hsr_slave_0 entered promiscuous mode [ 51.268443][ T4929] device hsr_slave_1 entered promiscuous mode [ 51.269688][ T4929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.271584][ T4929] Cannot create hsr debugfs directory [ 51.271958][ T7] usb 1-1: config 2 has an invalid interface number: 20 but max is 0 [ 51.277279][ T7] usb 1-1: config 2 has no interface number 0 [ 51.287780][ T7] usb 1-1: config 2 interface 20 has no altsetting 0 [ 51.296673][ T7] usb 1-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=d4.62 [ 51.300876][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.311757][ T4982] fuse: Bad value for 'fd' [ 51.313796][ T7] usb 1-1: Product: syz [ 51.314562][ T7] usb 1-1: Manufacturer: syz [ 51.315772][ T7] usb 1-1: SerialNumber: syz [ 51.433121][ T4929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.436030][ T4929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.438585][ T4929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.444425][ T4929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.496759][ T4929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.512245][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.514013][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.518663][ T4929] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.524504][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.526212][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.528377][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.529488][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.530861][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.545822][ T7] uvcvideo 1-1:2.20: Found Unit with invalid ID 0 [ 51.548732][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.550482][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.551904][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.553162][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.565145][ T7] usb 1-1: USB disconnect, device number 2 [ 51.583348][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.587175][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.590931][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.596421][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.598029][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.607557][ T4929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.609294][ T4929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.615918][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.617766][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.619354][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.625240][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.631459][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.634725][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.636358][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.773117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.774620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.777610][ T4929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.035222][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.037075][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.045963][ T4979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.047436][ T4979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.051945][ T4979] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 52.059156][ T4979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.060203][ T4979] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.066908][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.068593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.069981][ T4979] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 52.070232][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.073794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.084229][ T4979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.086387][ T4929] device veth0_vlan entered promiscuous mode [ 52.091244][ T4979] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.105109][ T1613] device hsr_slave_0 left promiscuous mode [ 52.106863][ T4979] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 52.108532][ T1613] device hsr_slave_1 left promiscuous mode [ 52.109944][ T1613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.111355][ T1613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.112148][ T4979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 52.114377][ T4979] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 52.115046][ T1613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.116867][ T1613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.156988][ T4979] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 52.158582][ T4979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.159604][ T4979] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.161806][ T1613] device bridge_slave_1 left promiscuous mode [ 52.163520][ T1613] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.170440][ T1613] device bridge_slave_0 left promiscuous mode [ 52.172185][ T1613] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.186658][ T4979] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 52.212733][ T1613] device veth1_macvtap left promiscuous mode [ 52.213904][ T1613] device veth0_macvtap left promiscuous mode [ 52.214891][ T1613] device veth1_vlan left promiscuous mode [ 52.216175][ T1613] device veth0_vlan left promiscuous mode [ 52.856160][ T5040] loop0: detected capacity change from 0 to 32768 [ 53.047323][ T5040] loop0: p1 p2 p3 < p5 p6 p7 > [ 53.054435][ T5040] loop0: p2 size 16775168 extends beyond EOD, truncated [ 53.078877][ T5040] loop0: p5 start 4294970168 is beyond EOD, truncated [ 53.293860][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 53.750531][ T5062] loop2: detected capacity change from 0 to 512 [ 53.762728][ T5062] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.765066][ T5062] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.783361][ T5062] EXT4-fs (loop2): 1 truncate cleaned up [ 53.784372][ T5062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.853647][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 54.092700][ T4344] Bluetooth: hci3: command 0x0c1a tx timeout [ 54.092785][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.182610][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 54.252665][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 55.372656][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 55.554031][ T1613] team0 (unregistering): Port device team_slave_1 removed [ 55.723559][ T1613] team0 (unregistering): Port device team_slave_0 removed [ 55.883054][ T1613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.083032][ T1613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.172677][ T4345] Bluetooth: hci2: command 0x0406 tx timeout [ 56.173726][ T4345] Bluetooth: hci3: command 0x0406 tx timeout [ 56.252619][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 56.332985][ T4345] Bluetooth: hci0: command 0x040f tx timeout [ 57.553639][ T1613] bond0 (unregistering): Released all slaves [ 57.845629][ T4929] device veth1_vlan entered promiscuous mode [ 57.856530][ T4929] device veth0_macvtap entered promiscuous mode [ 57.859133][ T4929] device veth1_macvtap entered promiscuous mode [ 57.866511][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.868328][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.870225][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.872017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.874394][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.875840][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.906509][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.908204][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.909932][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.911660][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.922890][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.924676][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.926370][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.928102][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.930362][ T4929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.935515][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.937143][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.949410][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.951187][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.956201][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.958022][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.960081][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.964164][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.966062][ T4929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.967893][ T4929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.970097][ T4929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.024445][ T5090] Unsupported ieee802154 address type: 0 [ 58.039233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.041060][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.048747][ T4929] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.050385][ T4929] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.051965][ T4929] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.073800][ T4929] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.152423][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.154050][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.155930][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.163117][ T5104] syz.0.225 (5104) used obsolete PPPIOCDETACH ioctl [ 58.192906][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.194360][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.196104][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.309449][ T5119] IPv4: Oversized IP packet from 127.202.26.0 [ 58.412908][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 59.169526][ T5125] loop0: detected capacity change from 0 to 256 [ 59.236784][ T5125] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 59.249811][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.251376][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.319604][ T5131] netlink: 165 bytes leftover after parsing attributes in process `syz.1.228'. [ 59.385806][ T5098] loop2: detected capacity change from 0 to 40427 [ 59.431403][ T5098] F2FS-fs (loop2): invalid crc value [ 59.457909][ T5098] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.502882][ T5098] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.550759][ T4339] syz-executor: attempt to access beyond end of device [ 59.550759][ T4339] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.571652][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 59.590771][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.696978][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.887435][ T5163] loop5: detected capacity change from 0 to 512 [ 60.191742][ T5163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 60.193263][ T5163] System zones: 1-12 [ 60.194655][ T5163] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.237: missing EA_INODE flag [ 60.197711][ T5163] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.237: error while reading EA inode 12 err=-117 [ 60.202571][ T5163] EXT4-fs (loop5): 1 orphan inode deleted [ 60.204437][ T5163] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 60.368805][ T5157] loop2: detected capacity change from 0 to 40427 [ 60.385878][ T5157] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 60.397143][ T5157] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 60.403279][ T5157] F2FS-fs (loop2): invalid crc value [ 60.415678][ T5157] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 60.415948][ T5189] loop0: detected capacity change from 0 to 128 [ 60.444062][ T5189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.464233][ T5157] F2FS-fs (loop2): recover fsync data on readonly fs [ 60.472547][ T5157] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 60.494936][ T5157] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.502853][ T4345] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.521533][ T5157] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 60.535939][ T5157] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 60.753838][ T4929] EXT4-fs (loop5): unmounting filesystem. [ 60.906811][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 60.965201][ T5218] loop0: detected capacity change from 0 to 256 [ 62.508884][ T5235] loop2: detected capacity change from 0 to 40427 [ 62.529440][ T5235] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 62.530729][ T5235] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.542841][ T5235] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 62.573609][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 62.844782][ T5207] loop5: detected capacity change from 0 to 131072 [ 62.860404][ T5207] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 62.867304][ T5207] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 62.871699][ T5207] F2FS-fs (loop5): invalid crc value [ 62.925360][ T5207] F2FS-fs (loop5): Found nat_bits in checkpoint [ 62.956932][ T5207] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 62.958192][ T5207] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 63.079409][ T5268] loop2: detected capacity change from 0 to 512 [ 63.161384][ T5268] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.163324][ T5268] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 63.164787][ T5268] System zones: 0-1, 15-15, 18-18, 34-34 [ 63.166171][ T5268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.167294][ T5268] __quota_error: 214 callbacks suppressed [ 63.167303][ T5268] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 63.169936][ T5268] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.172333][ T5268] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 63.183416][ T5268] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.256: bad orphan inode 16 [ 63.185327][ T5268] ext4_test_bit(bit=15, block=18) = 1 [ 63.186227][ T5268] is_bad_inode(inode)=0 [ 63.186873][ T5268] NEXT_ORPHAN(inode)=0 [ 63.187495][ T5268] max_ino=32 [ 63.187986][ T5268] i_nlink=2 [ 63.188538][ T5268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 63.339498][ T5281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'. [ 63.345063][ T5268] input: syz0 as /devices/virtual/input/input3 [ 63.374502][ T5268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.376054][ T5268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.408778][ T5248] loop0: detected capacity change from 0 to 131072 [ 63.416857][ T5248] F2FS-fs (loop0): invalid crc value [ 63.730571][ T5248] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.749610][ T5248] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.750883][ T5294] netlink: 420 bytes leftover after parsing attributes in process `syz.5.263'. [ 63.759497][ T5248] fscrypt (loop0, inode 3): Mutually exclusive encryption flags (0x0c) [ 63.818629][ T5300] erofs: (device loop5): mounted with root inode @ nid 36. [ 63.936472][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 64.062092][ T5315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.065444][ T5315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.881567][ T5311] set_capacity_and_notify: 2 callbacks suppressed [ 64.881576][ T5311] loop2: detected capacity change from 0 to 2048 [ 64.893530][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.897829][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.905054][ T5311] loop2: p1 < > p4 [ 64.905054][ T5311] p4: [ 64.906806][ T5311] loop2: p4 size 722688 extends beyond EOD, truncated [ 64.933598][ T5315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 64.935871][ T5315] System zones: 0-1, 3-36 [ 64.946461][ T5315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.990753][ T5323] 9pnet_fd: p9_fd_create_tcp (5323): problem binding to privport [ 65.072875][ T5083] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.370026][ T5331] overlayfs: failed to clone upperpath [ 65.374834][ T5083] udevd[5083]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 65.402992][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 65.409653][ T5081] udevd[5081]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 65.628499][ T5347] capability: warning: `syz.5.283' uses 32-bit capabilities (legacy support in use) [ 66.794002][ T5359] 9pnet_fd: p9_fd_create_tcp (5359): problem binding to privport [ 66.878697][ T5365] support for the xor transformation has been removed. [ 67.007314][ T4378] kernel write not supported for file events/sched/sched_switch/trigger (pid: 4378 comm: kworker/0:5) [ 67.970954][ T5380] loop5: detected capacity change from 0 to 256 [ 68.331533][ T5346] loop2: detected capacity change from 0 to 131072 [ 68.349916][ T5346] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 68.351346][ T5346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 68.368801][ T5346] F2FS-fs (loop2): Test dummy encryption mode enabled [ 68.372052][ T5346] F2FS-fs (loop2): invalid crc value [ 68.392294][ T5346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.400934][ T5346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 68.425211][ T5346] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 68.433141][ T5346] F2FS-fs (loop2): Start checkpoint disabled! [ 68.496545][ T5346] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 68.497896][ T5346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 69.208152][ T5431] loop2: detected capacity change from 0 to 1024 [ 69.216073][ T5431] EXT4-fs: Ignoring removed orlov option [ 69.220533][ T5431] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 69.428410][ T5441] loop5: detected capacity change from 0 to 1024 [ 69.451295][ T5441] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 69.455648][ T5441] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.463886][ T5441] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 69.465858][ T5441] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 69.467789][ T5441] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.312: Failed to acquire dquot type 0 [ 69.470069][ T5441] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 69.472082][ T5441] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 69.476640][ T5441] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.312: Failed to acquire dquot type 0 [ 69.479196][ T5441] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.312: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.484644][ T5441] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 69.486444][ T5441] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 69.488222][ T5441] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.312: Failed to acquire dquot type 0 [ 69.490829][ T5441] EXT4-fs (loop5): 1 orphan inode deleted [ 69.495508][ T5441] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.568033][ T5441] EXT4-fs error (device loop5): ext4_lookup:1860: inode #15: comm syz.5.312: iget: bad extended attribute block 6 [ 69.614549][ T3435] cfg80211: failed to load regulatory.db [ 69.653140][ T4929] EXT4-fs (loop5): unmounting filesystem. [ 69.760748][ T5452] overlayfs: failed to resolve './bus': -2 [ 70.375618][ T5470] loop5: detected capacity change from 0 to 256 [ 70.390048][ T5470] exfat: Deprecated parameter 'utf8' [ 70.391054][ T5470] exfat: Deprecated parameter 'utf8' [ 70.425488][ T5470] exfat: Deprecated parameter 'namecase' [ 70.426538][ T5470] exfat: Deprecated parameter 'namecase' [ 70.427659][ T5470] exfat: Deprecated parameter 'namecase' [ 70.435046][ T5470] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 71.634358][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.753456][ T5483] loop0: detected capacity change from 0 to 1024 [ 72.118381][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.206340][ T5483] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.217804][ T5483] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.224105][ T5483] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 72.225890][ T5483] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 72.227763][ T5483] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.326: Failed to acquire dquot type 0 [ 72.237032][ T5483] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 72.253396][ T5483] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 72.256753][ T5483] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.326: Failed to acquire dquot type 0 [ 72.265284][ T5483] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.326: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.273608][ T5483] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.326: Failed to acquire dquot type 0 [ 72.275723][ T5483] EXT4-fs (loop0): 1 orphan inode deleted [ 72.276950][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.284562][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.317653][ T5483] EXT4-fs error (device loop0): ext4_lookup:1860: inode #15: comm syz.0.326: iget: bad extended attribute block 6 [ 72.318354][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.323279][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.325335][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.328765][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.334486][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.336059][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.361851][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 72.406357][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.636786][ T5491] chnl_net:caif_netlink_parms(): no params data found [ 73.801045][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.802498][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.805648][ T5491] device bridge_slave_0 entered promiscuous mode [ 73.862354][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.864365][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.872370][ T5491] device bridge_slave_1 entered promiscuous mode [ 73.904447][ T5491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.916746][ T5491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.959716][ T5491] team0: Port device team_slave_0 added [ 73.976034][ T5491] team0: Port device team_slave_1 added [ 73.998537][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.010141][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.030280][ T5491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.032890][ T4432] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.049815][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.050975][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.070847][ T5491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.192684][ T4432] usb 1-1: device descriptor read/64, error -71 [ 74.324546][ T5491] device hsr_slave_0 entered promiscuous mode [ 74.352811][ T5491] device hsr_slave_1 entered promiscuous mode [ 74.405366][ T5491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.406918][ T5491] Cannot create hsr debugfs directory [ 74.412853][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 74.441652][ T5532] loop2: detected capacity change from 0 to 131072 [ 74.443504][ T5532] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 74.444952][ T5532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.456881][ T5532] F2FS-fs (loop2): invalid crc value [ 74.462758][ T4432] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.501159][ T5532] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.525691][ T5532] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.526959][ T5532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 74.612931][ T4432] usb 1-1: device descriptor read/64, error -71 [ 74.951729][ T4432] usb usb1-port1: attempt power cycle [ 75.058510][ T5491] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.075404][ T5491] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.414397][ T5593] loop2: detected capacity change from 0 to 32768 [ 76.558722][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 76.754854][ T5593] loop2: p1 p2 p3 < p5 p6 p7 > [ 76.758801][ T5593] loop2: p2 size 16775168 extends beyond EOD, truncated [ 76.764240][ T5593] loop2: p5 start 4294970168 is beyond EOD, truncated [ 76.815054][ T5491] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.218647][ T5606] loop0: detected capacity change from 0 to 256 [ 77.406306][ T4432] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.456305][ T5491] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.487394][ T5619] loop0: detected capacity change from 0 to 512 [ 77.576652][ T5080] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.619462][ T5083] udevd[5083]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 77.619970][ T5080] udevd[5080]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 77.623799][ T4432] usb 1-1: device not accepting address 5, error -71 [ 77.643502][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 77.666697][ T5081] udevd[5081]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 77.678090][ T5082] udevd[5082]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 77.703810][ T5636] loop2: detected capacity change from 0 to 512 [ 77.761517][ T5636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.768663][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.779154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.781109][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.791119][ T5491] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.794797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.796712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.798459][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.799899][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.801666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.820981][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 77.963753][ T5650] futex_wake_op: syz.2.364 tries to shift op by 144; fix this program [ 78.211060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.215565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.221453][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.222754][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.324479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.327344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.333061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.340609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.345861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.352001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.357850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.572849][ T4345] Bluetooth: hci0: command 0x040f tx timeout [ 78.649822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.651934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.657884][ T5491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.660286][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.662146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.667811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.753859][ T5684] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 78.821358][ T56] device hsr_slave_0 left promiscuous mode [ 78.863265][ T56] device hsr_slave_1 left promiscuous mode [ 79.186023][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.188770][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.192124][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.196887][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.198614][ T56] device bridge_slave_1 left promiscuous mode [ 79.201099][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.228906][ T5711] loop2: detected capacity change from 0 to 2048 [ 79.234827][ T56] device bridge_slave_0 left promiscuous mode [ 79.236901][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.267949][ T5711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.282067][ T5711] fs-verity: sha512 using implementation "sha512-ce" [ 79.302536][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 79.323041][ T56] device veth1_macvtap left promiscuous mode [ 79.324204][ T56] device veth0_macvtap left promiscuous mode [ 79.325814][ T56] device veth1_vlan left promiscuous mode [ 79.327004][ T56] device veth0_vlan left promiscuous mode [ 79.557381][ T5722] loop2: detected capacity change from 0 to 512 [ 79.570974][ T5722] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 79.577343][ T5722] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 79.583093][ T5722] System zones: 0-1, 15-15, 18-18, 34-34 [ 79.584633][ T5722] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.585953][ T5722] __quota_error: 2 callbacks suppressed [ 79.585960][ T5722] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 79.588875][ T5722] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.591608][ T5722] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 79.594282][ T5722] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.376: bad orphan inode 16 [ 79.596410][ T5722] ext4_test_bit(bit=15, block=18) = 1 [ 79.597444][ T5722] is_bad_inode(inode)=0 [ 79.598129][ T5722] NEXT_ORPHAN(inode)=0 [ 79.598918][ T5722] max_ino=32 [ 79.599417][ T5722] i_nlink=2 [ 79.599941][ T5722] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.653471][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 80.764958][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 81.732705][ T5738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.734561][ T5738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.285140][ T5740] loop2: detected capacity change from 0 to 8192 [ 82.303927][ T56] team0 (unregistering): Port device team_slave_1 removed [ 82.444370][ T56] team0 (unregistering): Port device team_slave_0 removed [ 82.478830][ T5744] loop2: detected capacity change from 0 to 40427 [ 82.488765][ T5744] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 82.489988][ T5744] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.520874][ T5744] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.543084][ T5744] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.544300][ T5744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.569058][ T4339] syz-executor: attempt to access beyond end of device [ 82.569058][ T4339] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.603759][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.685977][ T5750] loop2: detected capacity change from 0 to 4096 [ 82.695476][ T5750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.711738][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 82.783684][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.564852][ T56] bond0 (unregistering): Released all slaves [ 84.934884][ T5757] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.936657][ T5757] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 84.943840][ T5491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.982956][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.984334][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.327538][ T5774] loop2: detected capacity change from 0 to 128 [ 85.490461][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.492521][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.505230][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.507159][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.509162][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.513620][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.519506][ T5491] device veth0_vlan entered promiscuous mode [ 85.528563][ T5491] device veth1_vlan entered promiscuous mode [ 85.557717][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.563902][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.567853][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.572303][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.578664][ T5491] device veth0_macvtap entered promiscuous mode [ 85.588988][ T5491] device veth1_macvtap entered promiscuous mode [ 85.609751][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.623486][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.628321][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.632323][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.637397][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.640455][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.642457][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.644892][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.647540][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.657095][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.660122][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.661947][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.664252][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.666257][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.668763][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.671471][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.678028][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.680118][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.681961][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.684410][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.686550][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.688519][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.840786][ T5491] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846841][ T5491] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.851059][ T5491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.855049][ T5491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.968947][ T4460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.970687][ T4460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.972217][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.120568][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.122224][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.124109][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.518815][ T5848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'. [ 87.521841][ T5848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'. [ 87.709314][ T5863] loop2: detected capacity change from 0 to 512 [ 87.749062][ T5863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.785559][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 88.004393][ T5885] netlink: 736 bytes leftover after parsing attributes in process `syz.0.414'. [ 88.006153][ T5885] netlink: 136 bytes leftover after parsing attributes in process `syz.0.414'. [ 88.324986][ T5890] loop6: detected capacity change from 0 to 40427 [ 88.342976][ T5890] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x40002010) [ 88.344376][ T5890] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 88.355907][ T5890] F2FS-fs (loop6): invalid crc value [ 88.413352][ T5890] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241185545270265317) [ 88.425485][ T5890] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 88.426712][ T5890] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 89.232095][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.247348][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.435158][ T5943] loop6: detected capacity change from 0 to 40427 [ 90.443180][ T5943] F2FS-fs (loop6): Unrecognized mount option "whint_mode=fs-based" or missing value [ 91.729141][ T5992] loop2: detected capacity change from 0 to 40427 [ 91.738417][ T5992] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x40002010) [ 91.739876][ T5992] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 91.757190][ T5992] F2FS-fs (loop2): invalid crc value [ 91.783363][ T5992] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241185545270265317) [ 91.816745][ T5992] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 91.817978][ T5992] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.092445][ T5983] loop6: detected capacity change from 0 to 131072 [ 93.111773][ T5983] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 93.123185][ T5983] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 93.124878][ T5983] F2FS-fs (loop6): invalid crc value [ 93.163738][ T5983] F2FS-fs (loop6): Found nat_bits in checkpoint [ 93.182964][ T5983] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 93.184244][ T5983] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 93.190979][ T5983] F2FS-fs (loop6): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 93.848703][ T6071] loop6: detected capacity change from 0 to 1024 [ 93.852756][ T6071] ext4: Unknown parameter 'noacl' [ 94.900254][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.911967][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.019368][ T6083] loop6: detected capacity change from 0 to 40427 [ 95.055873][ T6083] F2FS-fs (loop6): invalid crc value [ 95.066340][ T6083] F2FS-fs (loop6): Found nat_bits in checkpoint [ 95.107555][ T6083] F2FS-fs (loop6): Start checkpoint disabled! [ 95.111107][ T6083] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 95.173718][ T4431] kworker/u4:7: attempt to access beyond end of device [ 95.173718][ T4431] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 95.311416][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.316884][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.317665][ T6149] loop6: detected capacity change from 0 to 512 [ 96.357509][ T6137] loop2: detected capacity change from 0 to 40427 [ 96.386677][ T6137] F2FS-fs (loop2): invalid crc value [ 96.408591][ T6149] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 96.419888][ T6137] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.476255][ T6159] Illegal XDP return value 4294967277 on prog (id 23) dev syz_tun, expect packet loss! [ 96.482408][ T6137] F2FS-fs (loop2): Start checkpoint disabled! [ 96.497285][ T5491] EXT4-fs (loop6): unmounting filesystem. [ 96.507517][ T6137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 96.692068][ T6175] loop6: detected capacity change from 0 to 512 [ 96.698318][ T6175] EXT4-fs: Ignoring removed bh option [ 96.739971][ T6175] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 96.797521][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.822216][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.825752][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.828511][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.831508][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.834595][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.839485][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.842700][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.845469][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 96.850498][ T5491] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 97.131483][ T4749] kworker/u4:13: attempt to access beyond end of device [ 97.131483][ T4749] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.284252][ T5491] EXT4-fs (loop6): unmounting filesystem. [ 97.417065][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.419044][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.070513][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.075535][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.077593][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.082961][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.084555][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.086204][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.218187][ T5352] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.376858][ T5352] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.505784][ T5352] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.510091][ T6201] chnl_net:caif_netlink_parms(): no params data found [ 98.643717][ T5352] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.689696][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.695935][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.697663][ T6201] device bridge_slave_0 entered promiscuous mode [ 98.700427][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.701849][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.705831][ T6201] device bridge_slave_1 entered promiscuous mode [ 98.714323][ T6201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.716951][ T6201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.724220][ T6201] team0: Port device team_slave_0 added [ 98.726040][ T6201] team0: Port device team_slave_1 added [ 98.731716][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.787570][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.791862][ T6201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.794318][ T6261] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 99.868284][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.869706][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.875571][ T6201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.998096][ T6201] device hsr_slave_0 entered promiscuous mode [ 100.044584][ T6201] device hsr_slave_1 entered promiscuous mode [ 100.083280][ T6201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.084611][ T6201] Cannot create hsr debugfs directory [ 100.173039][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 100.236855][ T6294] binder: 6293:6294 ioctl 40046210 0 returned -14 [ 101.074324][ T6201] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 101.848957][ T6328] x_tables: duplicate underflow at hook 4 [ 101.898141][ T6201] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 102.384139][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 102.804790][ T6201] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 102.845109][ T6201] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 102.848873][ T6359] loop2: detected capacity change from 0 to 256 [ 102.850450][ T6359] exfat: Deprecated parameter 'utf8' [ 102.851583][ T6359] exfat: Deprecated parameter 'namecase' [ 102.858941][ T6359] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 103.052192][ T6201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.077810][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.079491][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.116144][ T6201] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.119257][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.121317][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.126680][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.127967][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.142279][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.146337][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.153718][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.153961][ T6361] loop2: detected capacity change from 0 to 40427 [ 103.155469][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.157400][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.167425][ T6361] F2FS-fs (loop2): invalid crc value [ 103.179024][ T6361] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 103.186333][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.191638][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.194616][ T6361] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.287826][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.291330][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.300072][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.303696][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.312132][ T6201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.317847][ T6201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.323459][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.326410][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.329518][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.338026][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.343594][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.347450][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.397839][ T6401] Cannot find add_set index 1 as target [ 103.878711][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.880431][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.885187][ T6201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.992540][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.994365][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.068957][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 104.072537][ T6448] netlink: 75 bytes leftover after parsing attributes in process `syz.1.552'. [ 104.105405][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.109440][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.242688][ T4377] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.316797][ T6461] loop2: detected capacity change from 0 to 256 [ 104.318267][ T6461] FAT-fs (loop2): Unrecognized mount option "qni_xlate=1" or missing value [ 104.347003][ T5080] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.351304][ T6461] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 104.375870][ T6464] loop2: detected capacity change from 0 to 512 [ 104.385552][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.387421][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.389926][ T6201] device veth0_vlan entered promiscuous mode [ 104.397157][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.399515][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.406970][ T6201] device veth1_vlan entered promiscuous mode [ 104.413083][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 104.417956][ T6464] EXT4-fs (loop2): 1 orphan inode deleted [ 104.419158][ T6464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.444259][ T4377] usb 1-1: config 0 has no interfaces? [ 104.446886][ T4377] usb 1-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 104.448764][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.450313][ T4377] usb 1-1: Product: syz [ 104.451066][ T4377] usb 1-1: Manufacturer: syz [ 104.451986][ T4377] usb 1-1: SerialNumber: syz [ 104.453891][ T4377] usb 1-1: config 0 descriptor?? [ 104.455703][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.457960][ T6349] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.461721][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.465599][ T6349] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:20: Failed to release dquot type 1 [ 104.468855][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.474883][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.478857][ T6201] device veth0_macvtap entered promiscuous mode [ 104.482176][ T6201] device veth1_macvtap entered promiscuous mode [ 104.659850][ T4432] usb 1-1: USB disconnect, device number 7 [ 104.760171][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.767553][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.772386][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.776573][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.778673][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.781180][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.785737][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.787535][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.789245][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.791160][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.794239][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.797952][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.799891][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.801491][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.814180][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.819893][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.828739][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.833383][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.837654][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.839576][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.845952][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.847840][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.849939][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.855385][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.911696][ T5352] device hsr_slave_0 left promiscuous mode [ 104.943145][ T5352] device hsr_slave_1 left promiscuous mode [ 105.002942][ T5352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.004249][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.005750][ T5352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.007072][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.008662][ T5352] device bridge_slave_1 left promiscuous mode [ 105.009847][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.062338][ T5352] device bridge_slave_0 left promiscuous mode [ 105.063794][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.155374][ T5352] device veth1_macvtap left promiscuous mode [ 105.156557][ T5352] device veth0_macvtap left promiscuous mode [ 105.157669][ T5352] device veth1_vlan left promiscuous mode [ 105.158730][ T5352] device veth0_vlan left promiscuous mode [ 105.354044][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 106.534055][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 106.548496][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.556540][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.244884][ T5352] team0 (unregistering): Port device team_slave_1 removed [ 108.403356][ T5352] team0 (unregistering): Port device team_slave_0 removed [ 108.564083][ T5352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.763409][ T5352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.243595][ T5352] bond0 (unregistering): Released all slaves [ 110.525710][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.527590][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.530480][ T6201] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.531842][ T6201] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.533469][ T6201] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.534863][ T6201] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.581886][ T1613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.590907][ T1613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.595010][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 110.606704][ T6588] netlink: 75 bytes leftover after parsing attributes in process `syz.4.570'. [ 110.638672][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.682051][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.683906][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.686283][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.766817][ T6615] loop7: detected capacity change from 0 to 256 [ 110.768845][ T6615] exfat: Deprecated parameter 'utf8' [ 110.770677][ T6615] exfat: Deprecated parameter 'namecase' [ 110.772053][ T6615] exfat: Deprecated parameter 'namecase' [ 110.778206][ T6615] exfat: Deprecated parameter 'namecase' [ 110.791490][ T6615] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 111.303077][ T4378] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 111.817828][ T4378] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.819173][ T4378] usb 1-1: config 0 has no interface number 0 [ 111.820272][ T4378] usb 1-1: config 0 interface 8 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.822110][ T4378] usb 1-1: config 0 interface 8 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.834197][ T4378] usb 1-1: config 0 interface 8 has no altsetting 0 [ 111.835517][ T4378] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 111.837021][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.846543][ T4378] usb 1-1: config 0 descriptor?? [ 112.546722][ T4378] uclogic 0003:5543:0045.0001: interface is invalid, ignoring [ 113.235083][ T22] usb 1-1: USB disconnect, device number 8 [ 113.248000][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.587'. [ 113.258150][ T6671] netlink: 75 bytes leftover after parsing attributes in process `syz.7.587'. [ 113.436387][ T6697] loop2: detected capacity change from 0 to 512 [ 113.451144][ T6697] EXT4-fs: Ignoring removed oldalloc option [ 113.459124][ T6697] EXT4-fs: Ignoring removed orlov option [ 113.468724][ T6697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.480588][ T6697] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 114.501148][ T6705] loop2: detected capacity change from 0 to 512 [ 114.530253][ T6705] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.561547][ T6705] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.594: Allocating blocks 41-42 which overlap fs metadata [ 114.567951][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 114.569242][ T6705] Quota error (device loop2): write_blk: dquota write failed [ 114.570578][ T6705] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 114.572273][ T6705] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.594: Allocating blocks 41-42 which overlap fs metadata [ 114.690760][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 114.692068][ T6705] Quota error (device loop2): write_blk: dquota write failed [ 114.701089][ T6705] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 114.703687][ T6705] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.594: Failed to acquire dquot type 1 [ 114.707674][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 114.709109][ T6705] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 114.726725][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 114.729909][ T6705] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.594: corrupted inode contents [ 115.031079][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.032237][ T6705] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.594: mark_inode_dirty error [ 115.034659][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.035818][ T6705] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.594: corrupted inode contents [ 115.039233][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.040414][ T6705] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.594: mark_inode_dirty error [ 115.044453][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.045642][ T6705] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.594: corrupted inode contents [ 115.048473][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.049673][ T6705] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 115.055063][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.056164][ T6705] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.594: corrupted inode contents [ 115.069802][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.071071][ T6705] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.594: mark_inode_dirty error [ 115.075631][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.076824][ T6705] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 115.078532][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 115.079854][ T6705] EXT4-fs (loop2): 1 truncate cleaned up [ 115.080974][ T6705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.157993][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.594'. [ 115.197674][ T6678] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 115.204283][ T6678] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 115.209007][ T6678] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 115.214155][ T6678] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 115.232355][ T6678] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 115.234371][ T6678] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 115.235925][ T6678] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 115.243848][ T3435] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 115.245292][ T3435] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:01:0b [ 115.246369][ T3435] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 115.247377][ T3435] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 115.376724][ T3435] gvnic 0000:00:00.0: GVE version 1.0.0 [ 115.377743][ T3435] gvnic 0000:00:00.0: GVE queue format 3 [ 115.455843][ T5080] gvnic 0000:00:00.0 enp0s0: renamed from eth12 [ 115.552543][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 115.742704][ T6745] loop7: detected capacity change from 0 to 2048 [ 116.443129][ T6745] loop7: p1 < > p4 [ 116.443129][ T6745] p4: [ 116.445074][ T6745] loop7: p4 size 722688 extends beyond EOD, truncated [ 118.011707][ T4532] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 118.019790][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 125.933016][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934275][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.744120][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.778196][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.034984][ T7014] loop7: detected capacity change from 0 to 1024 [ 131.074969][ T7014] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 131.094814][ T7014] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 131.096318][ T7014] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 131.626227][ T6201] EXT4-fs (loop7): unmounting filesystem. [ 132.389400][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 132.408767][ T7064] netlink: 75 bytes leftover after parsing attributes in process `syz.2.608'. [ 133.725685][ T7067] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 133.731036][ T7067] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 133.737295][ T7067] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 133.740801][ T7067] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 133.755891][ T7067] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 133.757379][ T7067] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 133.758949][ T7067] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 134.086509][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 134.089286][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 134.094941][ T4378] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 134.096594][ T4378] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:01:0b [ 134.103774][ T4378] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 134.106116][ T4378] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 134.146200][ T4378] gvnic 0000:00:00.0: GVE version 1.0.0 [ 134.148419][ T4378] gvnic 0000:00:00.0: GVE queue format 3 [ 134.153280][ T7049] gvnic 0000:00:00.0 enp0s0: renamed from eth12 [ 134.325455][ T7072] loop7: detected capacity change from 0 to 131072 [ 134.331992][ T7072] F2FS-fs (loop7): invalid crc value [ 134.347452][ T7072] F2FS-fs (loop7): Found nat_bits in checkpoint [ 134.358762][ T7072] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 134.370513][ T7072] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 135.032708][ T5700] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.182739][ T5700] usb 1-1: device descriptor read/64, error -71 [ 135.221672][ T6349] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 135.226851][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 135.452624][ T5700] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.602622][ T5700] usb 1-1: device descriptor read/64, error -71 [ 135.722781][ T5700] usb usb1-port1: attempt power cycle [ 136.132626][ T5700] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 136.163029][ T5700] usb 1-1: device descriptor read/8, error -71 [ 136.442692][ T5700] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.473207][ T5700] usb 1-1: device descriptor read/8, error -71 [ 136.603505][ T5700] usb usb1-port1: unable to enumerate USB device [ 146.451842][ T7251] loop2: detected capacity change from 0 to 256 [ 146.462497][ T7251] exfat: Deprecated parameter 'utf8' [ 146.463855][ T7251] exfat: Deprecated parameter 'namecase' [ 146.464860][ T7251] exfat: Deprecated parameter 'namecase' [ 146.493344][ T7251] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 148.493538][ T7293] Cannot find add_set index 0 as target [ 148.519463][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 148.521496][ T7289] netlink: 75 bytes leftover after parsing attributes in process `syz.2.639'. [ 150.252932][ T7316] device sit0 entered promiscuous mode [ 150.265119][ T7316] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 150.266528][ T7316] netlink: 1 bytes leftover after parsing attributes in process `syz.0.645'. [ 152.791446][ T7382] loop7: detected capacity change from 0 to 256 [ 154.902567][ T7409] xt_hashlimit: size too large, truncated to 1048576 [ 154.961105][ T7411] xt_hashlimit: size too large, truncated to 1048576 [ 155.110080][ T7425] loop7: detected capacity change from 0 to 4096 [ 155.119840][ T7421] loop2: detected capacity change from 0 to 8192 [ 155.122875][ T4379] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.129820][ T7421] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.130760][ T7425] EXT4-fs (loop7): Test dummy encryption mode enabled [ 155.155432][ T7425] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 155.161934][ T7425] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 155.189116][ T6201] EXT4-fs (loop7): unmounting filesystem. [ 155.324257][ T4379] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.326821][ T4379] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 155.330592][ T4379] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 155.332275][ T4379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.335966][ T4379] usb 1-1: Product: syz [ 155.336891][ T4379] usb 1-1: Manufacturer: syz [ 155.340094][ T4379] usb 1-1: SerialNumber: syz [ 155.629554][ T4379] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.462390][ T4379] usb 1-1: failed to enable PITCH for EP 0x82 [ 156.466569][ T4379] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 156.469527][ T4379] usb 1-1: clock source 0 is not valid, cannot use [ 156.471085][ T4379] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 156.472948][ T4379] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 156.507005][ T4379] usb 1-1: USB disconnect, device number 13 [ 156.649849][ T7467] loop7: detected capacity change from 0 to 40427 [ 156.658819][ T7467] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 156.660220][ T7467] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 156.662344][ T7467] F2FS-fs (loop7): invalid crc value [ 156.680880][ T7467] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 156.704997][ T7467] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 156.706618][ T7467] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 156.724233][ T7407] udevd[7407]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.912236][ T7482] loop7: detected capacity change from 0 to 512 [ 156.929279][ T7482] ext4: Unknown parameter 'appraise' [ 157.439940][ T7496] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.485042][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 158.550918][ T7530] tipc: Started in network mode [ 158.552026][ T7530] tipc: Node identity 2000004, cluster identity 4711 [ 158.556853][ T7530] tipc: Node number set to 33554436 [ 158.583490][ T7537] loop2: detected capacity change from 0 to 1024 [ 158.612163][ T7537] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 158.636600][ T7537] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 158.638165][ T7537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.074237][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 159.652903][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 159.758865][ T27] audit: type=1326 audit(159.740:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.764124][ T27] audit: type=1326 audit(159.750:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=46 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.771683][ T27] audit: type=1326 audit(159.750:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.786484][ T27] audit: type=1326 audit(159.750:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=76 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.806665][ T27] audit: type=1326 audit(159.750:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.817291][ T27] audit: type=1326 audit(159.750:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.827975][ T27] audit: type=1326 audit(159.750:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.838722][ T27] audit: type=1326 audit(159.750:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=77 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 159.855148][ T27] audit: type=1326 audit(159.750:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 160.543203][ T7588] loop2: detected capacity change from 0 to 40427 [ 160.556988][ T7588] F2FS-fs (loop2): invalid crc value [ 160.557632][ T7603] loop7: detected capacity change from 0 to 1024 [ 160.569430][ T7588] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.584506][ T7603] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 160.589046][ T7603] EXT4-fs error (device loop7): ext4_empty_dir:3168: inode #11: block 623: comm syz.7.735: Attempting to read directory block (623) that is past i_size (638464) [ 160.605924][ T7603] EXT4-fs (loop7): Remounting filesystem read-only [ 160.608548][ T7588] F2FS-fs (loop2): Start checkpoint disabled! [ 160.613092][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'. [ 160.627134][ T7588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 160.671946][ T6201] EXT4-fs (loop7): unmounting filesystem. [ 161.027463][ T7614] netlink: 96 bytes leftover after parsing attributes in process `syz.7.736'. [ 162.762612][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 162.775978][ T7651] netlink: 75 bytes leftover after parsing attributes in process `syz.0.749'. [ 162.927005][ T7664] loop2: detected capacity change from 0 to 512 [ 162.951743][ T7664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.755: bg 0: block 5: invalid block bitmap [ 162.956035][ T7664] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 162.958036][ T7664] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.755: invalid indirect mapped block 3 (level 2) [ 162.966605][ T7664] EXT4-fs (loop2): 1 orphan inode deleted [ 162.969572][ T7664] EXT4-fs (loop2): 1 truncate cleaned up [ 162.971216][ T7664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.392641][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 163.394242][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 163.832878][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 163.865275][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.872067][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.320117][ T7691] loop2: detected capacity change from 0 to 131072 [ 164.324888][ T7691] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 164.335440][ T7691] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 164.356389][ T7691] F2FS-fs (loop2): invalid crc value [ 164.413142][ T7691] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.428236][ T7691] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 164.429672][ T7691] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 165.594147][ T7714] loop7: detected capacity change from 0 to 128 [ 165.597691][ T7714] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 165.972209][ T7465] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.182837][ T7728] block device autoloading is deprecated and will be removed. [ 166.185666][ T7728] syz.7.768: attempt to access beyond end of device [ 166.185666][ T7728] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 167.610419][ T7762] loop7: detected capacity change from 0 to 256 [ 167.618149][ T7760] overlayfs: failed to clone upperpath [ 167.630730][ T7762] exfat: Deprecated parameter 'utf8' [ 167.631728][ T7762] exfat: Deprecated parameter 'namecase' [ 167.632820][ T7762] exfat: Deprecated parameter 'namecase' [ 167.633831][ T7762] exfat: Deprecated parameter 'utf8' [ 167.634681][ T7762] exfat: Deprecated parameter 'namecase' [ 167.668894][ T7762] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 169.595902][ T7798] device wireguard0 entered promiscuous mode [ 170.120546][ T7814] loop2: detected capacity change from 0 to 512 [ 170.127550][ T7814] EXT4-fs: user quota file already specified [ 170.216181][ T7820] loop7: detected capacity change from 0 to 512 [ 170.234858][ T7820] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 171.492570][ T7828] 9pnet_fd: Insufficient options for proto=fd [ 171.714764][ T6201] EXT4-fs (loop7): unmounting filesystem. [ 172.446616][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 172.448852][ T7846] netlink: 75 bytes leftover after parsing attributes in process `syz.4.811'. [ 172.498235][ T7849] loop7: detected capacity change from 0 to 256 [ 173.628692][ T7837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.629815][ T7837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.630887][ T7837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.631926][ T7837] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.632912][ T7837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.633906][ T7837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 173.668666][ T7837] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 173.670535][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.672075][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.819948][ T7862] ipt_CLUSTERIP: Please specify destination IP [ 174.422083][ T7867] fuse: Unknown parameter '0x0000000000000009' [ 174.451400][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.818708][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 175.649013][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 175.651649][ T7891] netlink: 75 bytes leftover after parsing attributes in process `syz.0.827'. [ 175.668450][ T4345] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.669564][ T4345] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.670579][ T4345] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.671605][ T4345] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.738916][ T7873] loop2: detected capacity change from 0 to 131072 [ 175.741109][ T7873] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 175.742761][ T7873] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 175.744578][ T7873] F2FS-fs (loop2): invalid crc value [ 175.746910][ T7873] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.755693][ T7873] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 175.756849][ T7873] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 177.224516][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.226309][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.636345][ T7934] loop7: detected capacity change from 0 to 128 [ 177.775318][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 178.149558][ T3435] wiimote 0005:057E:0330.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 178.155138][ T3435] wiimote 0005:057E:0330.0002: New device registered [ 178.165863][ T7941] wiimote 0005:057E:0330.0002: Device removed [ 178.190824][ T7943] fido_id[7943]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.263396][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 178.265534][ T7944] netlink: 75 bytes leftover after parsing attributes in process `syz.0.845'. [ 178.497897][ T7949] loop7: detected capacity change from 0 to 40427 [ 178.499943][ T7949] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 178.518763][ T7949] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 178.527029][ T7949] F2FS-fs (loop7): invalid crc value [ 178.530671][ T7949] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 178.557952][ T7949] F2FS-fs (loop7): Start checkpoint disabled! [ 178.573328][ T7949] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 178.575058][ T7949] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 178.895847][ T7961] loop7: detected capacity change from 0 to 512 [ 178.899680][ T7963] netlink: 64 bytes leftover after parsing attributes in process `syz.1.853'. [ 178.929856][ T7961] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.852: invalid indirect mapped block 256 (level 2) [ 178.934049][ T7961] EXT4-fs (loop7): 2 truncates cleaned up [ 178.938302][ T7961] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 178.965935][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.973324][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.393808][ T3435] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 179.413458][ T3435] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input6 [ 179.423582][ T3435] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input7 [ 179.430828][ T3435] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input5 [ 179.986163][ T6201] EXT4-fs (loop7): unmounting filesystem. [ 180.024085][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.028256][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.301881][ T27] audit: type=1326 audit(179.929:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 180.308268][ T27] audit: type=1326 audit(179.929:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 180.319740][ T27] audit: type=1326 audit(179.939:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 180.324461][ T27] audit: type=1326 audit(179.939:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 180.328646][ T27] audit: type=1326 audit(179.939:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb4f79368 code=0x7ffc0000 [ 180.337008][ T27] audit: type=1326 audit(179.939:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb4f79060 code=0x7ffc0000 [ 180.341386][ T27] audit: type=1326 audit(179.939:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb4f5c22c code=0x7ffc0000 [ 180.346148][ T27] audit: type=1326 audit(179.939:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffb4f7910c code=0x7ffc0000 [ 180.350620][ T27] audit: type=1326 audit(179.939:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4f5c22c code=0x7ffc0000 [ 180.358150][ T27] audit: type=1326 audit(179.939:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4f78f90 code=0x7ffc0000 [ 180.579976][ T7999] netlink: 75 bytes leftover after parsing attributes in process `syz.4.865'. [ 182.632522][ T8018] loop7: detected capacity change from 0 to 1024 [ 182.703148][ T8018] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 182.710423][ T8018] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 182.711683][ T8018] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 183.497600][ T6201] EXT4-fs (loop7): unmounting filesystem. [ 183.715946][ T8055] netlink: 75 bytes leftover after parsing attributes in process `syz.7.884'. [ 184.893064][ T8078] loop7: detected capacity change from 0 to 256 [ 185.084606][ T8092] overlayfs: failed to clone upperpath [ 185.562266][ T8098] netlink: 75 bytes leftover after parsing attributes in process `syz.1.899'. [ 185.932904][ T8107] loop7: detected capacity change from 0 to 512 [ 185.950130][ T8107] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 185.976194][ T8107] EXT4-fs (loop7): 1 truncate cleaned up [ 185.977368][ T8107] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 186.012307][ T6201] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 186.202811][ T8112] loop2: detected capacity change from 0 to 40427 [ 186.208136][ T8112] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 186.209625][ T8112] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 186.211539][ T8112] F2FS-fs (loop2): invalid crc value [ 186.222022][ T8112] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 186.255731][ T8112] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 186.257171][ T8112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.270891][ T8112] syz.2.905: attempt to access beyond end of device [ 186.270891][ T8112] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 186.286405][ T8112] syz.2.905: attempt to access beyond end of device [ 186.286405][ T8112] loop2: rw=2049, sector=53256, nr_sectors = 128 limit=40427 [ 186.333637][ T4339] syz-executor: attempt to access beyond end of device [ 186.333637][ T4339] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.467211][ T8010] EXT4-fs (loop7): unmounting filesystem. [ 186.688423][ T8126] loop2: detected capacity change from 0 to 1024 [ 186.734095][ T4345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.736114][ T8126] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 186.738636][ T4345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.740664][ T4345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.742914][ T4345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.745165][ T4345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 186.746430][ T4345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.755252][ T8126] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 186.756550][ T8126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.768711][ T5418] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.895153][ T5418] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.242503][ T5418] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.363158][ T5418] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.497367][ T8127] chnl_net:caif_netlink_parms(): no params data found [ 187.540180][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 187.637614][ T8127] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.638878][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.640402][ T8127] device bridge_slave_0 entered promiscuous mode [ 187.655355][ T8127] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.656768][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.658436][ T8127] device bridge_slave_1 entered promiscuous mode [ 187.681270][ T8127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.739053][ T8127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.748406][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 187.750161][ T8162] bridge: RTM_NEWNEIGH with invalid ether address [ 187.752061][ T8162] netlink: 75 bytes leftover after parsing attributes in process `syz.1.918'. [ 187.770924][ T8162] bridge: RTM_NEWNEIGH with invalid ether address [ 187.786734][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.787963][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.952366][ T8127] team0: Port device team_slave_0 added [ 187.959201][ T8127] team0: Port device team_slave_1 added [ 187.978498][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.981069][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.994216][ T8127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.049670][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.051069][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.058426][ T8127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.181116][ T8127] device hsr_slave_0 entered promiscuous mode [ 188.227692][ T8127] device hsr_slave_1 entered promiscuous mode [ 188.267716][ T8127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.269298][ T8127] Cannot create hsr debugfs directory [ 188.546513][ T8127] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.642870][ T8127] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.774514][ T8127] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 188.822017][ T8127] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 189.151370][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 191.239668][ T8127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.245139][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 191.246566][ T8247] bridge: RTM_NEWNEIGH with invalid ether address [ 191.252950][ T8248] netlink: 75 bytes leftover after parsing attributes in process `syz.4.934'. [ 191.255250][ T8248] bridge: RTM_NEWNEIGH with invalid ether address [ 191.270225][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.271789][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.274867][ T8127] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.286586][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.288306][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.290447][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.291690][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.293668][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.300566][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.303867][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.306591][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.307880][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.322606][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.326720][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.329783][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.333513][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 191.340675][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.348567][ T8127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.350862][ T8127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.360362][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.362367][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.367468][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.370520][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.380404][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.384738][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.388770][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.398026][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.436848][ T6300] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 191.757084][ T6300] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 191.758731][ T6300] usb 1-1: config 0 has no interface number 0 [ 191.761634][ T6300] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 191.763527][ T6300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.765061][ T6300] usb 1-1: Product: syz [ 191.768189][ T6300] usb 1-1: Manufacturer: syz [ 191.769051][ T6300] usb 1-1: SerialNumber: syz [ 191.773760][ T6300] usb 1-1: config 0 descriptor?? [ 191.855357][ T8127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.859414][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.860849][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.222713][ T6300] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 192.224541][ T6300] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 192.229530][ T6300] asix: probe of 1-1:0.251 failed with error -5 [ 192.429089][ T6300] usb 1-1: USB disconnect, device number 14 [ 192.604076][ T5418] device hsr_slave_0 left promiscuous mode [ 192.958376][ T5418] device hsr_slave_1 left promiscuous mode [ 193.031564][ T5418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.033047][ T5418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.034808][ T5418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.036395][ T5418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.038116][ T5418] device bridge_slave_1 left promiscuous mode [ 193.041797][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.083137][ T5418] device bridge_slave_0 left promiscuous mode [ 193.084466][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.202869][ T5418] device veth1_macvtap left promiscuous mode [ 193.206329][ T5418] device veth0_macvtap left promiscuous mode [ 193.207660][ T5418] device veth1_vlan left promiscuous mode [ 193.208898][ T5418] device veth0_vlan left promiscuous mode [ 193.423285][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 193.441654][ T8335] loop2: detected capacity change from 0 to 1024 [ 193.487008][ T8335] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 193.501325][ T8335] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 193.502584][ T8335] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.432692][ T8356] overlayfs: failed to clone upperpath [ 195.501977][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 196.909617][ T5418] team0 (unregistering): Port device team_slave_1 removed [ 197.079712][ T5418] team0 (unregistering): Port device team_slave_0 removed [ 197.238881][ T5418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.439177][ T5418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.209690][ T5418] bond0 (unregistering): Released all slaves [ 199.491482][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 199.493177][ T8333] bridge: RTM_NEWNEIGH with invalid ether address [ 199.496159][ T8342] netlink: 75 bytes leftover after parsing attributes in process `syz.0.951'. [ 199.497825][ T8342] bridge: RTM_NEWNEIGH with invalid ether address [ 199.534342][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 199.717713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.719456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.728284][ T8127] device veth0_vlan entered promiscuous mode [ 199.732212][ T8127] device veth1_vlan entered promiscuous mode [ 199.736529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.741044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.760266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.769812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.776590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.781583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.794700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.797143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.803215][ T8127] device veth0_macvtap entered promiscuous mode [ 199.808690][ T8127] device veth1_macvtap entered promiscuous mode [ 199.857180][ T8127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.859015][ T8127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.862962][ T8127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.869814][ T8127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.873756][ T8127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.875827][ T8127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.899748][ T8127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.901644][ T8127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.905902][ T8127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.909189][ T8127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.911230][ T8127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.912994][ T8127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.914779][ T8127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.921359][ T8127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.923412][ T8127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.925977][ T8127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.930062][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.931973][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.933668][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.935703][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.938320][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.938551][ T8437] loop2: detected capacity change from 0 to 1024 [ 199.940211][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.134110][ T8127] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.157085][ T8127] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.196232][ T8127] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.243398][ T8127] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.319388][ T8437] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 200.325775][ T8437] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 200.327459][ T8437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.432152][ T4532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.433821][ T4532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.436494][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.447088][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.449715][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.451187][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.848273][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 200.918198][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 200.920297][ T8457] netlink: 75 bytes leftover after parsing attributes in process `syz.4.986'. [ 200.948826][ T8465] loop2: detected capacity change from 0 to 16 [ 200.997011][ T8465] erofs: (device loop2): mounted with root inode @ nid 36. [ 201.102757][ T5926] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 201.708489][ T8477] loop8: detected capacity change from 0 to 32768 [ 202.552446][ T5926] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 202.554189][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.556680][ T5926] usb 1-1: config 0 descriptor?? [ 202.628586][ T8485] xt_hashlimit: size too large, truncated to 1048576 [ 202.960369][ T8477] loop8: p1 p2 p3 < p5 p6 p7 > [ 202.961767][ T8477] loop8: p2 size 16775168 extends beyond EOD, truncated [ 202.963752][ T8477] loop8: p5 start 4294970168 is beyond EOD, truncated [ 202.966716][ T5926] usb 1-1: Cannot set MAC address [ 202.967613][ T5926] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 202.978103][ T5926] usb 1-1: USB disconnect, device number 15 [ 204.063116][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.997'. [ 204.067478][ T8494] udevd[8494]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 204.069937][ T8519] netlink: 75 bytes leftover after parsing attributes in process `syz.8.997'. [ 204.075177][ T8397] udevd[8397]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 204.078459][ T8460] udevd[8460]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 204.083274][ T8446] udevd[8446]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 204.096686][ T8458] udevd[8458]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 204.753434][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.756331][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.773585][ T8552] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 450000 [ 205.686936][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1009'. [ 205.689264][ T8575] netlink: 75 bytes leftover after parsing attributes in process `syz.8.1009'. [ 206.319275][ T8585] loop8: detected capacity change from 0 to 40427 [ 206.331457][ T8585] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 206.336372][ T8585] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 206.338466][ T8585] F2FS-fs (loop8): invalid crc value [ 206.339558][ T8585] F2FS-fs (loop8): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 206.413788][ T8585] F2FS-fs (loop8): Found nat_bits in checkpoint [ 206.423856][ T8585] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 206.425431][ T8585] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 206.477901][ T8127] syz-executor: attempt to access beyond end of device [ 206.477901][ T8127] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 206.481230][ T8127] syz-executor: attempt to access beyond end of device [ 206.481230][ T8127] loop8: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 206.625107][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 206.625117][ T27] audit: type=1326 audit(206.120:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.630555][ T27] audit: type=1326 audit(206.120:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.647490][ T27] audit: type=1326 audit(206.140:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.654493][ T27] audit: type=1326 audit(206.140:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.661514][ T27] audit: type=1326 audit(206.140:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.668289][ T27] audit: type=1326 audit(206.150:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.680444][ T27] audit: type=1326 audit(206.150:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.685295][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.686942][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.713858][ T27] audit: type=1326 audit(206.190:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.717752][ T27] audit: type=1326 audit(206.190:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.721673][ T27] audit: type=1326 audit(206.190:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1018" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa7979368 code=0x7ffc0000 [ 206.939731][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 206.941871][ T8620] netlink: 75 bytes leftover after parsing attributes in process `syz.1.1023'. [ 207.296782][ T4378] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 207.478319][ T4378] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 207.480365][ T4378] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 207.482253][ T4378] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.486788][ T4378] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 207.488589][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.513205][ T8616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.514952][ T8616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.519082][ T4378] pl2303 1-1:1.0: pl2303 converter detected [ 207.535943][ T4378] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 207.558841][ T8640] loop8: detected capacity change from 0 to 1024 [ 207.577061][ T8640] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 207.586568][ T8640] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 207.592091][ T8640] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 207.638490][ T8647] xt_hashlimit: size too large, truncated to 1048576 [ 208.908944][ T8127] EXT4-fs (loop8): unmounting filesystem. [ 209.000702][ T5700] usb 1-1: USB disconnect, device number 16 [ 209.003994][ T5700] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 209.006058][ T5700] pl2303 1-1:1.0: device disconnected [ 209.037527][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1035'. [ 209.039829][ T8664] netlink: 75 bytes leftover after parsing attributes in process `syz.8.1035'. [ 209.365115][ T8670] loop8: detected capacity change from 0 to 40427 [ 209.409479][ T8670] F2FS-fs (loop8): invalid crc value [ 209.434343][ T8670] F2FS-fs (loop8): Found nat_bits in checkpoint [ 209.446431][ T8687] loop2: detected capacity change from 0 to 1024 [ 209.483954][ T8670] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 209.494595][ T8687] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 209.502295][ T8687] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 209.503883][ T8687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.955967][ T8127] syz-executor: attempt to access beyond end of device [ 209.955967][ T8127] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.321404][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 210.385732][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1050'. [ 210.386377][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.390289][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.390806][ T8726] netlink: 75 bytes leftover after parsing attributes in process `syz.8.1050'. [ 210.488180][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.489622][ T8730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.491047][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.492239][ T8730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.593254][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.780884][ T8744] loop8: detected capacity change from 0 to 256 [ 212.225966][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'. [ 212.228583][ T8764] netlink: 75 bytes leftover after parsing attributes in process `syz.2.1063'. [ 213.309841][ T8789] FAULT_INJECTION: forcing a failure. [ 213.309841][ T8789] name failslab, interval 1, probability 0, space 0, times 0 [ 213.322400][ T8789] CPU: 1 PID: 8789 Comm: syz.2.1072 Not tainted syzkaller #0 [ 213.323739][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 213.325497][ T8789] Call trace: [ 213.326075][ T8789] dump_backtrace+0x1c4/0x1f0 [ 213.326952][ T8789] show_stack+0x2c/0x3c [ 213.327676][ T8789] __dump_stack+0x30/0x40 [ 213.328425][ T8789] dump_stack_lvl+0xf4/0x15c [ 213.329223][ T8789] dump_stack+0x1c/0x5c [ 213.329931][ T8789] should_fail_ex+0x3cc/0x524 [ 213.330726][ T8789] __should_failslab+0xc0/0x11c [ 213.331567][ T8789] should_failslab+0x10/0x28 [ 213.332426][ T8789] __kmem_cache_alloc_node+0x7c/0x318 [ 213.333372][ T8789] __kmalloc_node_track_caller+0xb8/0x174 [ 213.334397][ T8789] krealloc+0xa0/0x150 [ 213.335149][ T8789] copy_verifier_state+0xdc/0x9cc [ 213.336061][ T8789] do_check_common+0x2f28/0x9f10 [ 213.336988][ T8789] bpf_check+0x32ac/0xdfc0 [ 213.337778][ T8789] bpf_prog_load+0xe2c/0x12c0 [ 213.338626][ T8789] __sys_bpf+0x494/0x660 [ 213.339344][ T8789] __arm64_sys_bpf+0x80/0x98 [ 213.340169][ T8789] invoke_syscall+0x98/0x290 [ 213.340963][ T8789] el0_svc_common+0x13c/0x258 [ 213.341795][ T8789] do_el0_svc+0x5c/0x134 [ 213.342534][ T8789] el0_svc+0x58/0x128 [ 213.343235][ T8789] el0t_64_sync_handler+0x84/0xf0 [ 213.344144][ T8789] el0t_64_sync+0x18c/0x190 [ 213.417120][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 213.420478][ T8794] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1074'. [ 213.518044][ T8798] loop2: detected capacity change from 0 to 256 [ 213.524306][ T8798] exfat: Deprecated parameter 'utf8' [ 213.535855][ T8798] exfat: Deprecated parameter 'namecase' [ 213.536766][ T8798] exfat: Deprecated parameter 'namecase' [ 213.632495][ T8798] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 214.276282][ T8806] loop2: detected capacity change from 0 to 1024 [ 214.298135][ T8806] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 214.317399][ T8806] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 214.319951][ T8806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.912666][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1079'. [ 214.918828][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1079'. [ 215.110460][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 215.378124][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1085'. [ 215.384553][ T8844] netlink: 75 bytes leftover after parsing attributes in process `syz.8.1085'. [ 217.341714][ T8888] loop2: detected capacity change from 0 to 1024 [ 217.382694][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 217.384870][ T8893] netlink: 75 bytes leftover after parsing attributes in process `syz.1.1096'. [ 217.423420][ T8888] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 217.439845][ T8888] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 217.441188][ T8888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 217.441329][ T8900] loop8: detected capacity change from 0 to 128 [ 217.444373][ T8900] EXT4-fs (loop8): Test dummy encryption mode enabled [ 218.081838][ T8900] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 218.135730][ T8127] EXT4-fs (loop8): unmounting filesystem. [ 218.178545][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 218.228698][ T8927] loop2: detected capacity change from 0 to 512 [ 218.371063][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 218.373286][ T8941] netlink: 75 bytes leftover after parsing attributes in process `syz.2.1108'. [ 218.564601][ T5926] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.577598][ T8964] loop2: detected capacity change from 0 to 512 [ 218.622571][ T8964] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.633090][ T8964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 218.635266][ T8964] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.641744][ T8964] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1114: Allocating blocks 41-42 which overlap fs metadata [ 218.682142][ T8964] __quota_error: 69 callbacks suppressed [ 218.682151][ T8964] Quota error (device loop2): write_blk: dquota write failed [ 218.696746][ T8964] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 218.779584][ T8964] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1114: Failed to acquire dquot type 0 [ 218.792423][ T8964] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 218.796760][ T5926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.798598][ T5926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.803189][ T5926] usb 1-1: Dual-Role OTG device on HNP port [ 218.804623][ T5926] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 218.806654][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.820937][ C1] ------------[ cut here ]------------ [ 218.822022][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 218.823383][ C1] WARNING: CPU: 1 PID: 8970 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x2a8/0x528 [ 218.825180][ C1] Modules linked in: [ 218.825878][ C1] CPU: 1 PID: 8970 Comm: syz.0.1116 Not tainted syzkaller #0 [ 218.827239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 218.829100][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 218.830588][ C1] pc : usb_ep_enable+0x2a8/0x528 [ 218.831503][ C1] lr : usb_ep_enable+0x2a8/0x528 [ 218.832411][ C1] sp : ffff800008017880 [ 218.833173][ C1] x29: ffff800008017880 x28: 1fffe0001ed3a6d2 x27: 1fffe0001ed3a6e8 [ 218.834646][ C1] x26: dfff800000000000 x25: ffff0000f69d3690 x24: 1fffe00019fc1821 [ 218.836136][ C1] x23: ffff0000cfe0c0e8 x22: dfff800000000000 x21: 0000000000000081 [ 218.837630][ C1] x20: ffff0000d103633a x19: ffff0000cfe0c0e0 x18: 1fffe00033e6db7e [ 218.839122][ C1] x17: 0000000000000000 x16: ffff800011bb65f8 x15: 0000000000000000 [ 218.840566][ C1] x14: 0000000000000001 x13: 1fffe00033e6dba3 x12: 0000000000000000 [ 218.842032][ C1] x11: ff00800008195f68 x10: 0000000000000000 x9 : a7856cb09b5b7c00 [ 218.843438][ C1] x8 : a7856cb09b5b7c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 218.844847][ C1] x5 : ffff800008017318 x4 : ffff8000154a4e80 x3 : ffff800008541118 [ 218.846270][ C1] x2 : 0000000000000001 x1 : 0000000100000103 x0 : 0000000000000000 [ 218.847704][ C1] Call trace: [ 218.848279][ C1] usb_ep_enable+0x2a8/0x528 [ 218.849060][ C1] hidg_set_alt+0x128/0x820 [ 218.850014][ C1] set_config+0x668/0xdf8 [ 218.850823][ C1] composite_setup+0x1590/0x27f4 [ 218.851735][ C1] configfs_composite_setup+0xc0/0x104 [ 218.852748][ C1] dummy_timer+0xdb0/0x29b0 [ 218.853538][ C1] __hrtimer_run_queues+0x444/0xc58 [ 218.854473][ C1] hrtimer_run_softirq+0x164/0x408 [ 218.855413][ C1] handle_softirqs+0x318/0xc90 [ 218.856242][ C1] __do_softirq+0x14/0x20 [ 218.857021][ C1] ____do_softirq+0x14/0x20 [ 218.857812][ C1] call_on_irq_stack+0x30/0x48 [ 218.858669][ C1] do_softirq_own_stack+0x20/0x2c [ 218.859543][ C1] __irq_exit_rcu+0x23c/0x430 [ 218.860375][ C1] irq_exit_rcu+0x14/0x84 [ 218.861150][ C1] el1_interrupt+0x38/0x54 [ 218.861946][ C1] el1h_64_irq_handler+0x18/0x24 [ 218.862855][ C1] el1h_64_irq+0x64/0x68 [ 218.863623][ C1] lock_release+0x4c4/0x90c [ 218.864457][ C1] _raw_spin_unlock+0x30/0x84 [ 218.865288][ C1] unix_wait_for_peer+0x174/0x264 [ 218.866156][ C1] unix_dgram_sendmsg+0xc84/0x13e4 [ 218.867072][ C1] ____sys_sendmsg+0x588/0x90c [ 218.867923][ C1] __sys_sendmmsg+0x320/0x7ec [ 218.868744][ C1] __arm64_sys_sendmmsg+0xa4/0xc0 [ 218.869631][ C1] invoke_syscall+0x98/0x290 [ 218.870440][ C1] el0_svc_common+0x13c/0x258 [ 218.871224][ C1] do_el0_svc+0x5c/0x134 [ 218.871952][ C1] el0_svc+0x58/0x128 [ 218.872697][ C1] el0t_64_sync_handler+0x84/0xf0 [ 218.873574][ C1] el0t_64_sync+0x18c/0x190 [ 218.874373][ C1] irq event stamp: 47541 [ 218.875149][ C1] hardirqs last enabled at (47540): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 218.877021][ C1] hardirqs last disabled at (47541): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 218.878964][ C1] softirqs last enabled at (45798): [] local_bh_enable+0x10/0x34 [ 218.880662][ C1] softirqs last disabled at (47537): [] __do_softirq+0x14/0x20 [ 218.882245][ C1] ---[ end trace 0000000000000000 ]--- [ 218.883216][ C1] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 219.061025][ T8964] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1114: corrupted inode contents [ 219.063681][ T8964] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.1114: mark_inode_dirty error [ 219.066124][ T8964] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1114: corrupted inode contents [ 219.074880][ T5926] usb 1-1: can't set config #1, error -32 [ 219.084214][ T8964] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.1114: mark_inode_dirty error [ 219.094854][ T8964] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1114: corrupted inode contents [ 219.102396][ T8964] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 219.107133][ T8964] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1114: corrupted inode contents [ 219.119937][ T8964] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.1114: mark_inode_dirty error [ 219.127888][ T8964] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 219.136464][ T8964] EXT4-fs (loop2): 1 truncate cleaned up [ 219.140910][ T8964] EXT4-fs (loop2): pa 000000007631e5ee: logic 1, phys. 41, len 23 [ 219.142338][ T8964] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 219.156491][ T8964] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.430547][ T4339] EXT4-fs (loop2): unmounting filesystem.