last executing test programs: 4m29.036208645s ago: executing program 0 (id=359): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x7a, 0x9, 0x7ed, 0x2df, 0x2, 0x0, 0x4002004c4, 0xfe6, 0x45c8, 0xc5d5, 0x40, 0x102, 0x3, 0x1, 0x8fd, 0x9], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m28.209123115s ago: executing program 0 (id=365): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, &(0x7f00000007c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m24.84055251s ago: executing program 0 (id=378): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x81c010, &(0x7f00000002c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1524, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f0000002780), &(0x7f00000027c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000002840)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./proc\x00', 0x20480c0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 4m24.425772901s ago: executing program 0 (id=381): mkdir(&(0x7f0000000000)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f00000000c0)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 4m24.154689988s ago: executing program 0 (id=385): r0 = gettid() migrate_pages(r0, 0x3, &(0x7f0000000100)=0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_dump={0x47, 0x1ff, 0x7}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) 4m23.814768556s ago: executing program 0 (id=387): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000005c0), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000640), 0xf00) 4m23.451581875s ago: executing program 32 (id=387): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000005c0), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000640), 0xf00) 3m33.338870726s ago: executing program 2 (id=730): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c) lseek(r5, 0x100, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000040)=0x13c) r7 = open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) 3m32.295030612s ago: executing program 2 (id=737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x4, 0xe, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000001fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x22, 0x0, &(0x7f0000000800)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m32.164684205s ago: executing program 2 (id=739): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, &(0x7f00000007c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3m31.067535083s ago: executing program 2 (id=742): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@fat=@debug}, {@utf8}, {@fat=@nfs}, {@utf8no}, {@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@fat=@flush}, {@numtail}, {@uni_xlateno}]}, 0x0, 0x2cd, &(0x7f00000001c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) 3m30.434037179s ago: executing program 2 (id=748): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c) lseek(r5, 0x100, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000040)=0x13c) r7 = open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) 3m24.761386281s ago: executing program 2 (id=767): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4bc, &(0x7f00000005c0)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000a80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m24.653124824s ago: executing program 33 (id=767): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4bc, &(0x7f00000005c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000a80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m35.209752548s ago: executing program 3 (id=1011): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m32.31858378s ago: executing program 3 (id=1026): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x2c, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000029c0)=ANY=[@ANYBLOB], 0x0) 2m32.286660281s ago: executing program 3 (id=1027): ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 2m32.180289924s ago: executing program 3 (id=1030): r0 = syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000640)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") mkdirat(r0, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./proc\x00', &(0x7f0000000e00)='proc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc0104d08, &(0x7f0000000e80)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd5) write$binfmt_elf32(r1, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x69) 2m31.582084809s ago: executing program 3 (id=1035): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x60}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x80000000, 0x0, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') setreuid(0x0, 0xee00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x2, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) getdents(r1, 0x0, 0x0) 2m30.660753202s ago: executing program 3 (id=1041): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000700)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000900)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m29.53581655s ago: executing program 34 (id=1041): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000700)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000900)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) close_range(r3, 0xffffffffffffffff, 0x0) 34.747943165s ago: executing program 4 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, 0x0, 0x0, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00006dbffc), 0x4) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r2, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)}], 0x2, 0x0, 0x98}, 0x8000) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 34.293064106s ago: executing program 4 (id=1508): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000580)=ANY=[], 0x81, 0x710, &(0x7f00000009c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 34.087530841s ago: executing program 4 (id=1511): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000002c0)={0x1, &(0x7f00000003c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys_mnt\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000580), 0x100) flock(r0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f00000f7000/0x7000)=nil, 0x7000, 0x4) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001500192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100003000b0c10000000224e224e00", 0x57}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000000000001"], 0x30, 0x40800}}], 0x1, 0x44000) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x220000, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x200080c0, &(0x7f0000000140)={0xa, 0x2, 0x9000, @loopback, 0xffffff1e}, 0x1c) splice(r5, 0x0, r7, 0x0, 0x6, 0xc) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x7ff}}, 0xfe68) 31.25354179s ago: executing program 4 (id=1523): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x41038, 0x0, 0xfc, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x81900) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x9801) move_mount(r1, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f00000002c0)='\x00', 0x89901) 31.071040485s ago: executing program 4 (id=1525): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x41, 0x1506, &(0x7f0000002540)="$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") syz_mount_image$vfat(&(0x7f0000003a80), &(0x7f0000003ac0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000003b00)) syz_mount_image$vfat(&(0x7f0000003b40), &(0x7f0000003b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380687b, 0x0, 0x5, 0x0, &(0x7f0000003c80)) mkdirat(0xffffffffffffff9c, &(0x7f0000003cc0)='./file0\x00', 0x1a1) chdir(&(0x7f0000003f40)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003f80)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000003fc0), 0x208e24b) 29.66308783s ago: executing program 4 (id=1531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x1, 0x4, 0x100, 0x8, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.447965665s ago: executing program 35 (id=1531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x1, 0x4, 0x100, 0x8, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.938384162s ago: executing program 5 (id=1584): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='limits\x00') lseek(r0, 0x80, 0x0) connect$inet6(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) creat(&(0x7f0000001e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70) prlimit64(0x0, 0xe, &(0x7f0000001fc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002000)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000020c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002140), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002180), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000022c0)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 10.501597122s ago: executing program 5 (id=1597): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x800402, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) 10.274791678s ago: executing program 5 (id=1599): socket$netlink(0x10, 0x3, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000380)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xd, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000bc0)={0x3, &(0x7f0000000c00)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="7e756a4590", 0x5}], 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="c8000000000000008601000006000000593a6da3eb308cf17edca33537dcaa43a46038cd2c874a0e7cc0d0896078571fdcde235d9b5f72db57251a8f88ad6213d461dac723bb0e7e59c45cd37656cb057056f2d22ba1ef7eb32c0fbe1a7fdc99853a469a55980b31bd8fb9e39bcbe17ea402a309caa29f794ee1c2535d9be2a33f0501542d7f9c741d5722079b9ea5d00d09806ed3482cc0d22b5ab88c6c7d857f348652d7e0214eae9238598cf524acd08c86864b31818265c25a4cc8e169986ca47709f42b3cf0200000000000000002010000040000009b708c7935bbf31dec10a20000000000a0000000000000000201000009000000a8979e5a7f46343c10a0c593c464fdbafab71de81171153c9b4e2eac94a43b513dfcf51780364fef0620c69ee1cb327b8c2c59df37fb8042efb05558d6cf5ea2321dedf09c15ab3f6c4b237ecf81df04385e2a351b03c2ce4cf468d989631adaa66bc2bed9eca71c05a3114ded473f8133b9e42bfb792cac83a2087ee956a20bec1788df6e9da03338d54a87d4d5000040000000000000000e010000010000008ba8e8fdfee5340d11d5a1a1641758773aea6d7dd88f9bc09b3565c9ada276c9aefaa0b14aa5bf853c21000000000000a8"], 0x270}}], 0x1, 0x40840) 9.274318682s ago: executing program 7 (id=1606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, 0x0, 0x0, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00006dbffc), 0x4) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r4, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)}], 0x2, 0x0, 0x98}, 0x8000) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 8.292625746s ago: executing program 7 (id=1610): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x6000, 0x24, &(0x7f0000000100)=""/36}, {0x0, 0xffb, &(0x7f0000000980)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x4005}) 8.064836282s ago: executing program 6 (id=1612): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000005c0)=0x8, 0x4) 8.055477222s ago: executing program 7 (id=1613): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x75, 0x109301) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 7.925670715s ago: executing program 6 (id=1615): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000380)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="28000000130a0103000000000000"], 0x28}}, 0x0) 7.923302085s ago: executing program 7 (id=1617): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffe, 0x2) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$UI_DEV_CREATE(r2, 0x5501) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) read$watch_queue(r2, &(0x7f00000002c0)=""/152, 0x98) 7.875125077s ago: executing program 1 (id=1618): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0xf4240}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) 7.789622039s ago: executing program 1 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, 0x0, 0x0, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00006dbffc), 0x4) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r4, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)}], 0x2, 0x0, 0x98}, 0x8000) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 6.967895929s ago: executing program 6 (id=1622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x1, 0x800, 0x0, {{@in6=@mcast2, @in6=@empty, 0x0, 0xecdf, 0x4e24, 0x0, 0xa, 0x80, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x4}, {0x3bc7, 0x7, 0x80000007, 0x1}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x880000, 0x2, 0x0, 0x4, 0xe5}}, 0xf0}}, 0x24004000) 6.825498752s ago: executing program 7 (id=1623): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x0, 0x2, 0xd, "7f9a1f1ad011e94470b780b2ea"}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.386968593s ago: executing program 6 (id=1624): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r0, &(0x7f0000000300)=""/56, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x13, r5, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 6.232084837s ago: executing program 1 (id=1625): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 5.582934133s ago: executing program 8 (id=1630): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000010140)={0x12, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x1c, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x4e) 5.572224323s ago: executing program 5 (id=1631): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 5.522959504s ago: executing program 8 (id=1632): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000380)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="28000000130a0103000000000000"], 0x28}}, 0x0) 5.522784184s ago: executing program 1 (id=1633): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffe, 0x2) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$UI_DEV_CREATE(r2, 0x5501) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) read$watch_queue(r2, &(0x7f00000002c0)=""/152, 0x98) 5.491369665s ago: executing program 5 (id=1634): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x203}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0x89}, {0x6, 0x24, 0x1a, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x84474a213c53fed8, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x1, 0x919f, 0x3, 0x1, 0xe51, 0x838, 0x6, 0x1, 0x0, 0x3ff, 0xfff, 0x1000}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0xef6}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001680), &(0x7f00000016c0)='./file2\x00', 0x80, &(0x7f0000001700)=ANY=[], 0x7d, 0x1508, &(0x7f0000001740)="$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") truncate(0x0, 0x6000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) 4.566563698s ago: executing program 8 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, 0x0, 0x0, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00006dbffc), 0x4) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r4, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)}], 0x2, 0x0, 0x98}, 0x8000) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 4.438992871s ago: executing program 1 (id=1636): openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x141102) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x0, 0x0, {0x2, 0xfffffff8, 0x2}}, {0x8, 0x2, 0x0, {0x80000000, 0x0, 0x2}}], 0x2, 0x20, 0x200, 0x5}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r2, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002840)={0x2c, 0x0, 0xfffffffb}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000700)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000740), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000400), 0x0) 3.650993221s ago: executing program 8 (id=1637): getpid() syz_clone3(&(0x7f00000004c0)={0x180801400, &(0x7f0000000540)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) process_madvise(r0, 0x0, 0x0, 0xb, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000005c0), 0x318, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000600)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0xfffffffc, 0x84, 0x4}) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$iso9660(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r3, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x20060400) r5 = openat(r4, &(0x7f0000000100)='./file2\x00', 0x52942, 0x40) lseek(r5, 0xab07, 0x1) getdents64(r5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000f00), &(0x7f0000000f40)='./file6\x00', 0x2a08800, &(0x7f0000000f80)=ANY=[], 0x41, 0x6af, &(0x7f0000000fc0)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001680)='./file2\x00', 0x81c0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000016c0), 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000001700)={0x2}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000001740)={0x1, 0xffffffffffffffff, 0x1}) 2.599561616s ago: executing program 8 (id=1638): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.198612817s ago: executing program 6 (id=1639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x300}}) 883.108259ms ago: executing program 7 (id=1640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 454.351529ms ago: executing program 5 (id=1641): socket$netlink(0x10, 0x3, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000380)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xd, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000bc0)={0x3, &(0x7f0000000c00)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="7e756a4590", 0x5}], 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x270}}], 0x1, 0x40840) 447.241989ms ago: executing program 8 (id=1642): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x10, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000680)="$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") close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000640)=[{&(0x7f0000000900)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f00000009c0)={0x60, 0xfffffffffffffffe, 0x0, {{0x6, 0x5, 0x401, 0x4, 0x1, 0x7, 0x3, 0x7}}}, 0x60) 435.49094ms ago: executing program 1 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24d41b6036a153c7}, 0x4) 0s ago: executing program 6 (id=1644): r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x108000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') pread64(r1, &(0x7f00000007c0)=""/102400, 0x19000, 0x1000000000) kernel console output (not intermixed with test programs): dev="loop1" ino=1048679 res=0 errno=0 [ 172.168001][ T6161] loop4: detected capacity change from 0 to 512 [ 172.263956][ T6154] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.304620][ T6154] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.316959][ T6161] EXT4-fs (loop4): Ignoring removed nobh option [ 172.397354][ T6161] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 172.432462][ T6161] ext4 filesystem being mounted at /145/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.633233][ T6179] fuse: Bad value for 'fd' [ 172.716716][ T6161] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.687: corrupted inode contents [ 172.754463][ T6161] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #2: comm syz.4.687: mark_inode_dirty error [ 172.781892][ T6161] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.687: corrupted inode contents [ 172.805307][ T6188] loop3: detected capacity change from 0 to 512 [ 172.815079][ T6187] EXT4-fs (loop4): shut down requested (2) [ 172.907861][ T6188] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.695: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 9, max 4(4), depth 0(0) [ 173.182312][ T6188] EXT4-fs (loop3): get root inode failed [ 173.208423][ T6188] EXT4-fs (loop3): mount failed [ 173.243800][ T6196] netlink: 5856 bytes leftover after parsing attributes in process `syz.1.697'. [ 173.312012][ T6196] loop1: detected capacity change from 0 to 1024 [ 173.380255][ T6196] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 173.522262][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 173.638859][ T4334] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 173.795531][ T6203] loop5: detected capacity change from 0 to 512 [ 173.952330][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.982321][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.003711][ T6203] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.062359][ T1107] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.067352][ T6203] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.082095][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.090441][ T1107] usb 3-1: SerialNumber: syz [ 174.144373][ T6215] fuse: Bad value for 'fd' [ 174.485036][ T1107] usb 3-1: 0:2 : does not exist [ 174.506194][ T6230] loop4: detected capacity change from 0 to 256 [ 174.581804][ T6232] netlink: 72 bytes leftover after parsing attributes in process `syz.1.711'. [ 174.591663][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 174.600879][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 175.163674][ T6230] FAT-fs (loop4): Directory bread(block 64) failed [ 175.176227][ T6233] loop5: detected capacity change from 0 to 512 [ 175.201430][ T6230] FAT-fs (loop4): Directory bread(block 65) failed [ 175.242381][ T6230] FAT-fs (loop4): Directory bread(block 66) failed [ 175.273125][ T6230] FAT-fs (loop4): Directory bread(block 67) failed [ 175.304342][ T1107] usb 3-1: USB disconnect, device number 3 [ 175.422380][ T6230] FAT-fs (loop4): Directory bread(block 68) failed [ 175.472876][ T6230] FAT-fs (loop4): Directory bread(block 69) failed [ 175.484439][ T6230] FAT-fs (loop4): Directory bread(block 70) failed [ 175.491038][ T6230] FAT-fs (loop4): Directory bread(block 71) failed [ 175.580494][ T6230] FAT-fs (loop4): Directory bread(block 72) failed [ 175.587198][ T6230] FAT-fs (loop4): Directory bread(block 73) failed [ 175.696733][ T6233] EXT4-fs (loop5): Ignoring removed nobh option [ 175.708953][ T6230] attempt to access beyond end of device [ 175.708953][ T6230] loop4: rw=524288, want=1196, limit=256 [ 175.753627][ T6230] attempt to access beyond end of device [ 175.753627][ T6230] loop4: rw=0, want=1196, limit=256 [ 175.764616][ T26] audit: type=1800 audit(1792058218.750:63): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.712" name="file1" dev="loop4" ino=1048680 res=0 errno=0 [ 175.789498][ T5217] udevd[5217]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.830793][ T6230] attempt to access beyond end of device [ 175.830793][ T6230] loop4: rw=0, want=1196, limit=256 [ 175.853309][ T6233] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 175.874187][ T6233] ext4 filesystem being mounted at /46/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.902075][ T6247] loop3: detected capacity change from 0 to 512 [ 175.988329][ T6247] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 176.024569][ T6247] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.716: invalid indirect mapped block 256 (level 1) [ 176.056496][ T6247] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.716: invalid indirect mapped block 2683928664 (level 1) [ 176.195613][ T6247] EXT4-fs (loop3): 1 truncate cleaned up [ 176.223205][ T6233] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.710: corrupted inode contents [ 176.247291][ T6247] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 176.396684][ T6233] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.710: mark_inode_dirty error [ 176.594962][ T6233] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.710: corrupted inode contents [ 176.669152][ T6233] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.710: mark_inode_dirty error [ 176.751863][ T6259] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.716: Invalid block bitmap block 3 in block_group 0 [ 177.401641][ T6269] loop4: detected capacity change from 0 to 1024 [ 177.491478][ T6271] netlink: 72 bytes leftover after parsing attributes in process `syz.1.724'. [ 177.500523][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 177.509454][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 178.320307][ T6282] loop1: detected capacity change from 0 to 128 [ 178.369789][ T4334] hfsplus: b-tree write err: -5, ino 25 [ 178.392721][ T4334] hfsplus: b-tree write err: -5, ino 4 [ 178.591611][ T6286] loop3: detected capacity change from 0 to 256 [ 178.617429][ T4334] hfsplus: b-tree write err: -5, ino 2 [ 178.636978][ T4334] hfsplus: b-tree write err: -5, ino 26 [ 178.675916][ T6282] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 178.693580][ T6282] FAT-fs (loop1): Filesystem has been set read-only [ 178.700534][ T6282] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 52) [ 178.716703][ T6282] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 52) [ 178.943411][ T6291] loop1: detected capacity change from 0 to 512 [ 178.991126][ T6286] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 179.027228][ T6291] EXT4-fs (loop1): Ignoring removed nobh option [ 179.048573][ T6294] loop4: detected capacity change from 0 to 512 [ 179.123185][ T26] audit: type=1800 audit(1792058222.100:64): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.732" name="file2" dev="loop3" ino=1048682 res=0 errno=0 [ 179.279088][ T6291] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 179.351560][ T6291] ext4 filesystem being mounted at /127/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.391798][ T6304] ip_tables: iptables: counters copy to user failed while replacing table [ 179.424637][ T6303] loop5: detected capacity change from 0 to 512 [ 179.479923][ T6291] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.733: corrupted inode contents [ 179.508768][ T6291] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #2: comm syz.1.733: mark_inode_dirty error [ 179.563147][ T6291] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.733: corrupted inode contents [ 179.667452][ T6291] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.733: mark_inode_dirty error [ 179.864217][ T6313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.739'. [ 179.873293][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 179.882135][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 180.085593][ T6303] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 180.233035][ T6303] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.736: invalid indirect mapped block 256 (level 1) [ 180.257224][ T6315] loop4: detected capacity change from 0 to 256 [ 180.305636][ T6303] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.736: invalid indirect mapped block 2683928664 (level 1) [ 180.346590][ T6303] EXT4-fs (loop5): 1 truncate cleaned up [ 180.358863][ T6303] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 180.551519][ T6319] loop2: detected capacity change from 0 to 128 [ 180.777860][ T6325] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.736: Invalid block bitmap block 3 in block_group 0 [ 181.654713][ T6335] ip_tables: iptables: counters copy to user failed while replacing table [ 182.316738][ T6349] netlink: 72 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.325804][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.334728][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.838999][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.860553][ T6351] loop5: detected capacity change from 0 to 164 [ 183.427806][ T4268] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 183.602454][ T4334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.822341][ T4268] usb 6-1: not running at top speed; connect to a high speed hub [ 184.113090][ T4268] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 184.154819][ T4334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.175820][ T4268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.283249][ T4268] usb 6-1: Product: syz [ 184.359215][ T4268] usb 6-1: Manufacturer: syz [ 184.433205][ T4268] usb 6-1: SerialNumber: syz [ 184.743224][ T4268] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 184.794576][ T6370] ip_tables: iptables: counters copy to user failed while replacing table [ 184.834853][ T4268] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 184.846363][ T6371] loop3: detected capacity change from 0 to 512 [ 184.852824][ T7] usb 2-1: device descriptor read/all, error -71 [ 184.910597][ T4268] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 185.303567][ T6371] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 185.365553][ T6371] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.761: invalid indirect mapped block 256 (level 1) [ 185.379427][ T6371] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.761: invalid indirect mapped block 2683928664 (level 1) [ 185.393285][ T4268] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 185.414782][ T6371] EXT4-fs (loop3): 1 truncate cleaned up [ 185.420486][ T6371] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 185.460507][ T4268] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 185.601034][ T4334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.916412][ T4334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.170217][ T6392] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.761: Invalid block bitmap block 3 in block_group 0 [ 187.001786][ T6392] netlink: 27 bytes leftover after parsing attributes in process `syz.3.761'. [ 187.026799][ T4417] usb 6-1: USB disconnect, device number 2 [ 187.270397][ T4417] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 187.382262][ T4417] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 187.527736][ T4417] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 187.540095][ T6406] ip_tables: iptables: counters copy to user failed while replacing table [ 187.634971][ T4417] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 187.660343][ T4417] keyspan 6-1:1.0: device disconnected [ 187.701248][ T6411] netlink: 72 bytes leftover after parsing attributes in process `syz.5.772'. [ 187.710359][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 187.719223][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 188.350681][ T6402] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.482565][ T4334] tipc: Left network mode [ 189.205010][ T6432] loop3: detected capacity change from 0 to 128 [ 189.438163][ T6440] loop3: detected capacity change from 0 to 512 [ 189.459325][ T6402] chnl_net:caif_netlink_parms(): no params data found [ 189.473483][ T6440] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.573897][ T6440] EXT4-fs error (device loop3): ext4_quota_enable:6440: comm syz.3.781: Bad quota inum: 1, type: 2 [ 189.585498][ T6440] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 189.610610][ T6440] EXT4-fs (loop3): mount failed [ 189.694024][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 190.410153][ T6453] loop1: detected capacity change from 0 to 1024 [ 190.593647][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.603681][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.614164][ T6453] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,dioread_lock,nodioread_nolock,noquota,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 190.620433][ T6462] loop3: detected capacity change from 0 to 512 [ 190.644430][ T6402] device bridge_slave_0 entered promiscuous mode [ 190.904219][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.911415][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.379438][ T6402] device bridge_slave_1 entered promiscuous mode [ 191.457055][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.489521][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.655970][ T6470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.787'. [ 191.665207][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 191.674065][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 191.812493][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 191.865794][ T6481] loop3: detected capacity change from 0 to 128 [ 192.190476][ T6402] team0: Port device team_slave_0 added [ 192.445352][ T6402] team0: Port device team_slave_1 added [ 192.532522][ T4415] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.912741][ T4415] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.953443][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.974262][ T4415] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.025540][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.052170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 193.101175][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.112042][ T4415] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 193.117527][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.128090][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.154704][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.179856][ T4415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.371851][ T6503] loop5: detected capacity change from 0 to 512 [ 193.386267][ T6402] device hsr_slave_0 entered promiscuous mode [ 193.401329][ T6402] device hsr_slave_1 entered promiscuous mode [ 193.413777][ T6402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.421378][ T6402] Cannot create hsr debugfs directory [ 193.483388][ T4415] usb 2-1: cannot find UAC_HEADER [ 193.557584][ T4415] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 193.619645][ T5217] udevd[5217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.708353][ T4415] usb 2-1: USB disconnect, device number 8 [ 193.758046][ T6517] loop5: detected capacity change from 0 to 128 [ 193.776252][ T6514] loop3: detected capacity change from 0 to 512 [ 193.883055][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 193.924382][ T6514] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.801: Unimplemented hash flags: 0x0001 [ 194.012705][ T6514] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.801: Corrupt directory, running e2fsck is recommended [ 194.044882][ T6514] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 194.054280][ T6514] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.801: corrupted in-inode xattr [ 194.063810][ T6402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.068875][ T6514] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.801: couldn't read orphan inode 15 (err -117) [ 194.110834][ T6514] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.min_batch_time=0x0000000000000006,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 194.139316][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.139411][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.357594][ T6402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.368284][ T6402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.378809][ T6402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 194.516902][ T6534] netlink: 72 bytes leftover after parsing attributes in process `syz.5.803'. [ 194.525958][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'. [ 194.534846][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'. [ 194.818062][ T6536] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.801: Unimplemented hash flags: 0x0001 [ 194.830166][ T6536] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.801: Corrupt directory, running e2fsck is recommended [ 194.845580][ T6536] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.801: Unimplemented hash flags: 0x0001 [ 194.857502][ T6536] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.801: Corrupt directory, running e2fsck is recommended [ 194.881476][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 194.979423][ T4334] device hsr_slave_0 left promiscuous mode [ 195.019326][ T4334] device hsr_slave_1 left promiscuous mode [ 195.038507][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.049125][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.074786][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.090596][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.188293][ T4334] device bridge_slave_1 left promiscuous mode [ 195.227196][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.294821][ T4334] device bridge_slave_0 left promiscuous mode [ 195.301078][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.347115][ T4334] device veth1_macvtap left promiscuous mode [ 195.354553][ T4334] device veth0_macvtap left promiscuous mode [ 195.360668][ T4334] device veth1_vlan left promiscuous mode [ 195.367643][ T4334] device veth0_vlan left promiscuous mode [ 195.905387][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 195.922031][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 195.937110][ T6553] loop1: detected capacity change from 0 to 128 [ 195.961887][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.970951][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 195.999460][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.006817][ T6553] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 196.032759][ T6553] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.044153][ T6553] ext2 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.167584][ T4334] bond0 (unregistering): Released all slaves [ 196.216922][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 196.224318][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 196.230434][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 196.420787][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.465976][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.477068][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.495374][ T6402] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.542901][ T6561] IPv6: NLM_F_REPLACE set, but no existing node found! [ 196.561672][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.577674][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.608448][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.615612][ T4433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.748312][ T6569] loop1: detected capacity change from 0 to 512 [ 196.757829][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.848802][ T6571] netlink: 72 bytes leftover after parsing attributes in process `syz.4.815'. [ 196.857995][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 196.867111][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 197.416045][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.482203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 197.531855][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.566253][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.573435][ T4433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.595479][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.600757][ T6569] EXT4-fs (loop1): Ignoring removed oldalloc option [ 197.607034][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.628181][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.672318][ T6569] EXT4-fs (loop1): Ignoring removed nobh option [ 197.816027][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.852916][ T6589] loop3: detected capacity change from 0 to 512 [ 197.875262][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.892900][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.920998][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.929698][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,nobh,quota,,errors=continue. Quota mode: writeback. [ 197.982121][ T6569] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.994371][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.024153][ T6589] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 198.054564][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.063609][ T6589] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.079875][ T6569] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.817: corrupted inode contents [ 198.115391][ T6402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.152478][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.160593][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.168896][ T6569] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #2: comm syz.1.817: mark_inode_dirty error [ 198.182988][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.194678][ T6569] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.817: corrupted inode contents [ 198.208177][ T6569] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.817: mark_inode_dirty error [ 198.485603][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.827'. [ 198.576934][ T6611] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.718098][ T6617] netlink: 9 bytes leftover after parsing attributes in process `syz.5.827'. [ 198.872179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 198.892183][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 198.902182][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 198.912181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 198.922181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 198.932181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 199.604226][ T6617] device gretap0 entered promiscuous mode [ 199.604754][ T6624] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.704045][ T6611] netlink: 'syz.5.827': attribute type 4 has an invalid length. [ 199.726036][ T6628] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.697766][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.705799][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.783942][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.430058][ T6681] fuse: Bad value for 'group_id' [ 202.667070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.770780][ T4283] Bluetooth: hci2: command 0x0405 tx timeout [ 203.410159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.726723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.753315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.709088][ T6402] device veth0_vlan entered promiscuous mode [ 204.844695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.934891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.966307][ T6402] device veth1_vlan entered promiscuous mode [ 205.066443][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.087070][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.114451][ T6402] device veth0_macvtap entered promiscuous mode [ 205.144787][ T6402] device veth1_macvtap entered promiscuous mode [ 205.211485][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.242426][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.259716][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 205.263030][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.311349][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.333471][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.355157][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.375176][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.404699][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.448361][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.472627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.482083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.498678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.521773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.569811][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 205.577680][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.596856][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.609495][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.630571][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.655220][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.679637][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.697485][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.712516][ T7] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 205.730801][ T7] usb 6-1: config 0 has no interface number 0 [ 205.739384][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.760688][ T7] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.789456][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.812414][ T7] usb 6-1: config 0 interface 85 has no altsetting 0 [ 205.824546][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.840295][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.875158][ T6402] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.896610][ T6402] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.912972][ T6402] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.941301][ T6402] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.974220][ T6736] loop4: detected capacity change from 0 to 128 [ 206.012529][ T6732] loop1: detected capacity change from 0 to 4096 [ 206.031269][ T6736] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 206.050463][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.076819][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.096534][ T7] usb 6-1: Product: syz [ 206.100752][ T7] usb 6-1: Manufacturer: syz [ 206.106879][ T6736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.115927][ T7] usb 6-1: SerialNumber: syz [ 206.132787][ T7] usb 6-1: config 0 descriptor?? [ 206.182274][ T26] audit: type=1800 audit(1792058249.160:65): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.858" name="file1" dev="loop4" ino=104 res=0 errno=0 [ 206.212965][ T7] appletouch 6-1:0.85: Could not find int-in endpoint [ 206.219941][ T7] appletouch: probe of 6-1:0.85 failed with error -5 [ 206.248784][ T7] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 206.260108][ T6732] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.328603][ T6732] Quota error (device loop1): find_tree_dqentry: Getting block too big (8 >= 6) [ 206.390458][ T13] usb 6-1: USB disconnect, device number 3 [ 206.402689][ T6732] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 206.427295][ T6732] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.857: Failed to acquire dquot type 0 [ 206.488600][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.516474][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.627258][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.661404][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.675633][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.714152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.273629][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 207.612750][ T6765] loop3: detected capacity change from 0 to 256 [ 207.656415][ T6765] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.751631][ T6763] loop4: detected capacity change from 0 to 2048 [ 207.983337][ T6763] UDF-fs: bad mount option "anchor=000P0000000000000001" or missing value [ 208.052976][ T6765] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 208.090201][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.6.768'. [ 208.208515][ T6765] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 208.311705][ T6775] loop1: detected capacity change from 0 to 512 [ 208.583334][ T6775] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.866: inode has both inline data and extents flags [ 208.681165][ T6775] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.866: couldn't read orphan inode 15 (err -117) [ 208.860451][ T6775] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,acl,nodiscard,,errors=continue. Quota mode: none. [ 209.860077][ T6795] loop3: detected capacity change from 0 to 128 [ 210.009182][ T6795] FAT-fs (loop3): Directory bread(block 32) failed [ 210.067083][ T6795] FAT-fs (loop3): Directory bread(block 33) failed [ 210.093899][ T6795] FAT-fs (loop3): Directory bread(block 34) failed [ 210.126608][ T6795] FAT-fs (loop3): Directory bread(block 35) failed [ 210.160546][ T6795] FAT-fs (loop3): Directory bread(block 36) failed [ 210.185364][ T6795] FAT-fs (loop3): Directory bread(block 37) failed [ 210.212750][ T6795] FAT-fs (loop3): Directory bread(block 38) failed [ 210.219720][ T6795] FAT-fs (loop3): Directory bread(block 39) failed [ 210.257125][ T6802] loop1: detected capacity change from 0 to 256 [ 210.267323][ T6795] FAT-fs (loop3): Directory bread(block 40) failed [ 210.312356][ T6795] FAT-fs (loop3): Directory bread(block 41) failed [ 210.338089][ T6802] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 210.471690][ T6802] attempt to access beyond end of device [ 210.471690][ T6802] loop1: rw=524288, want=408, limit=256 [ 210.541956][ T6802] attempt to access beyond end of device [ 210.541956][ T6802] loop1: rw=524288, want=664, limit=256 [ 210.623031][ T6802] attempt to access beyond end of device [ 210.623031][ T6802] loop1: rw=0, want=288, limit=256 [ 210.684573][ T26] audit: type=1800 audit(1792058253.670:66): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.872" name="file1" dev="loop1" ino=1048697 res=0 errno=0 [ 211.490877][ T6827] loop1: detected capacity change from 0 to 1024 [ 211.697730][ T6827] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x0000000000007fff,noblock_validity,nouid32,norecovery,quota,data_err=ignore,jqfmt=vfsold,minixdf,auto_da_alloc=0x0000000000000800,,errors=continue. Quota mode: writeback. [ 211.843404][ T6827] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.911417][ T6827] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.877: lblock 0 mapped to illegal pblock 0 (length 6) [ 211.984042][ T6827] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 212.040046][ T6827] EXT4-fs (loop1): This should not happen!! Data will be lost [ 212.040046][ T6827] [ 212.097332][ T6835] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.877: bg 0: block 112: padding at end of block bitmap is not set [ 212.168817][ T6835] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 212.212253][ T6835] EXT4-fs (loop1): This should not happen!! Data will be lost [ 212.212253][ T6835] [ 212.221955][ T6835] EXT4-fs (loop1): Total free blocks count 0 [ 212.244193][ T6843] loop4: detected capacity change from 0 to 512 [ 212.263672][ T6835] EXT4-fs (loop1): Free/Dirty block details [ 212.293139][ T6835] EXT4-fs (loop1): free_blocks=0 [ 212.298246][ T6835] EXT4-fs (loop1): dirty_blocks=48 [ 212.325691][ T6835] EXT4-fs (loop1): Block reservation details [ 212.332405][ T6835] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 212.576269][ T6843] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.753214][ T6843] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.367811][ T6863] loop1: detected capacity change from 0 to 1024 [ 213.407920][ T6866] loop6: detected capacity change from 0 to 128 [ 213.518201][ T6866] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 214.239499][ T6866] FAT-fs (loop6): error, clusters badly computed (3 != 1) [ 214.393498][ T26] audit: type=1800 audit(1792058257.380:67): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.883" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=2 res=0 errno=0 [ 214.444490][ T6866] FAT-fs (loop6): Filesystem has been set read-only [ 214.531415][ T6402] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 214.792405][ T4268] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 215.212619][ T4268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.314235][ T4268] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 215.483704][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.591294][ T4268] usb 6-1: config 0 descriptor?? [ 216.030700][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.892'. [ 216.144791][ T4268] wacom 0003:056A:0331.0001: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 216.354394][ T4268] usb 6-1: USB disconnect, device number 4 [ 216.550749][ T6912] loop4: detected capacity change from 0 to 256 [ 216.588286][ T6912] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 216.761533][ T6908] fido_id[6908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 216.821613][ T26] audit: type=1800 audit(1792058259.800:68): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.895" name="file2" dev="loop4" ino=1048704 res=0 errno=0 [ 217.636531][ T6926] loop1: detected capacity change from 0 to 1024 [ 217.767820][ T6928] 9pnet: Insufficient options for proto=fd [ 217.779901][ T6926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.181875][ T6941] loop4: detected capacity change from 0 to 512 [ 218.253945][ T6941] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.559515][ T6941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 218.650929][ T6941] System zones: 1-12 [ 218.837228][ T6941] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.904: bad orphan inode 131072 [ 218.938449][ T6941] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,data=journal,journal_dev=0x0000000000000004,,errors=continue. Quota mode: none. [ 219.002545][ T6941] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.4.904: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 219.027532][ T6941] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem [ 219.260783][ T6955] bridge0: port 3(syz_tun) entered blocking state [ 219.292404][ T6955] bridge0: port 3(syz_tun) entered disabled state [ 219.299970][ T6955] device syz_tun entered promiscuous mode [ 221.980638][ T7007] loop1: detected capacity change from 0 to 1024 [ 222.061442][ T7009] loop6: detected capacity change from 0 to 128 [ 222.196620][ T7007] EXT4-fs (loop1): Ignoring removed bh option [ 222.321962][ T7014] bridge0: port 3(syz_tun) entered blocking state [ 222.357568][ T7007] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,commit=0x0000000000000000,. Quota mode: none. [ 222.378464][ T7014] bridge0: port 3(syz_tun) entered disabled state [ 223.006364][ T7007] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 223.151453][ T7014] device syz_tun entered promiscuous mode [ 223.168418][ T7007] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 223.237598][ T7014] bridge0: port 3(syz_tun) entered blocking state [ 223.244158][ T7014] bridge0: port 3(syz_tun) entered listening state [ 223.750041][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.928'. [ 224.674893][ T7043] loop6: detected capacity change from 0 to 512 [ 224.705831][ T7043] EXT4-fs (loop6): Ignoring removed oldalloc option [ 224.720284][ T7043] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 224.814318][ T7043] EXT4-fs (loop6): mounted filesystem without journal. Opts: oldalloc,grpjquota=./file1,noinit_itable,,errors=continue. Quota mode: writeback. [ 224.901943][ T7043] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.417497][ T7057] loop4: detected capacity change from 0 to 1024 [ 225.781518][ T7057] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 225.822584][ T7057] EXT4-fs (loop4): invalid journal inode [ 225.828454][ T7057] EXT4-fs (loop4): can't get journal size [ 225.861015][ T7057] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 226.375893][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.5.939'. [ 227.083851][ T4268] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 227.572381][ T7092] ip_tables: iptables: counters copy to user failed while replacing table [ 227.752641][ T4268] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 227.782488][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.889649][ T4268] usb 2-1: Product: syz [ 227.961143][ T4268] usb 2-1: Manufacturer: syz [ 228.049502][ T4268] usb 2-1: SerialNumber: syz [ 229.136264][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.6.950'. [ 229.263797][ T4268] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 229.350241][ T7139] ip_tables: iptables: counters copy to user failed while replacing table [ 229.365839][ T4268] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 229.373693][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.953'. [ 229.420163][ T4268] usb 2-1: USB disconnect, device number 9 [ 230.458929][ T5217] udevd[5217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.458721][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.5.967'. [ 231.590419][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.970'. [ 231.621783][ T7185] ip_tables: iptables: counters copy to user failed while replacing table [ 231.748785][ T7192] loop3: detected capacity change from 0 to 2048 [ 231.853418][ T7192] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 232.328294][ T7192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.478808][ T7209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 232.627225][ T7218] loop4: detected capacity change from 0 to 1024 [ 232.726885][ T7224] loop5: detected capacity change from 0 to 256 [ 232.737313][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.983'. [ 232.800939][ T7226] ip_tables: iptables: counters copy to user failed while replacing table [ 233.342271][ T4415] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 233.358420][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 233.702965][ T4415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.850649][ T4415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.044766][ T4415] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 234.252625][ T4415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.318997][ T4415] usb 5-1: config 0 descriptor?? [ 234.368516][ T7266] input: syz1 as /devices/virtual/input/input9 [ 234.787396][ T7276] ip_tables: iptables: counters copy to user failed while replacing table [ 234.845688][ T4415] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 234.874074][ T4415] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 234.897683][ T4415] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 234.922407][ T4415] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 234.957178][ T4415] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 234.982675][ T4415] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 235.117820][ T4415] usb 5-1: USB disconnect, device number 3 [ 235.150073][ T7286] fido_id[7286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 235.243159][ T7296] loop3: detected capacity change from 0 to 2048 [ 235.329738][ T7296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.378668][ T7309] FAULT_INJECTION: forcing a failure. [ 235.378668][ T7309] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 235.392339][ T7309] CPU: 0 PID: 7309 Comm: syz.5.1007 Not tainted syzkaller #0 [ 235.399764][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.409864][ T7309] Call Trace: [ 235.413174][ T7309] [ 235.416135][ T7309] dump_stack_lvl+0x188/0x250 [ 235.420870][ T7309] ? show_regs_print_info+0x20/0x20 [ 235.426114][ T7309] ? load_image+0x410/0x410 [ 235.430648][ T7309] ? verify_lock_unused+0x140/0x140 [ 235.435891][ T7309] ? mark_lock+0x94/0x320 [ 235.440266][ T7309] should_fail+0x383/0x4b0 [ 235.444730][ T7309] prepare_alloc_pages+0x1e3/0x5b0 [ 235.449887][ T7309] __alloc_pages+0x11b/0x480 [ 235.454518][ T7309] ? zone_statistics+0x170/0x170 [ 235.459504][ T7309] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 235.465525][ T7309] ? __lock_acquire+0x7d40/0x7d40 [ 235.467558][ T7311] loop6: detected capacity change from 0 to 128 [ 235.470582][ T7309] ? alloc_pages+0x452/0x560 [ 235.470635][ T7309] new_slab+0xc0/0x4b0 [ 235.485545][ T7309] ___slab_alloc+0x807/0xdd0 [ 235.490173][ T7309] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 235.495948][ T7309] __kmalloc+0x11d/0x340 [ 235.500222][ T7309] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 235.506018][ T7309] tomoyo_realpath_from_path+0xed/0x5e0 [ 235.511624][ T7309] tomoyo_path_number_perm+0x251/0x6b0 [ 235.517126][ T7309] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 235.522623][ T7309] ? do_futex+0xd83/0x12b0 [ 235.527143][ T7309] security_file_ioctl+0x6c/0xa0 [ 235.532127][ T7309] __se_sys_ioctl+0x48/0x170 [ 235.536756][ T7309] do_syscall_64+0x4c/0xa0 [ 235.541203][ T7309] ? clear_bhb_loop+0x30/0x80 [ 235.545915][ T7309] ? clear_bhb_loop+0x30/0x80 [ 235.550628][ T7309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.556572][ T7309] RIP: 0033:0x7f00f7776559 [ 235.561018][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.580762][ T7309] RSP: 002b:00007f00f59ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.589218][ T7309] RAX: ffffffffffffffda RBX: 00007f00f79fdfa0 RCX: 00007f00f7776559 [ 235.597235][ T7309] RDX: 0000200000000940 RSI: 0000000000005423 RDI: 0000000000000003 [ 235.605245][ T7309] RBP: 00007f00f780d8b0 R08: 0000000000000000 R09: 0000000000000000 [ 235.613251][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.621284][ T7309] R13: 00007f00f79fe038 R14: 00007f00f79fdfa0 R15: 00007ffeea26c298 [ 235.629309][ T7309] [ 235.734411][ T7311] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 235.759751][ T7311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.436943][ T7326] ip_tables: iptables: counters copy to user failed while replacing table [ 236.686664][ T7345] loop5: detected capacity change from 0 to 512 [ 236.799524][ T7345] EXT4-fs (loop5): Ignoring removed nobh option [ 236.913562][ T7345] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 236.959282][ T7345] ext4 filesystem being mounted at /108/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.148436][ T7345] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1016: corrupted inode contents [ 237.179662][ T7363] EXT4-fs (loop5): shut down requested (2) [ 237.192276][ T7345] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.1016: mark_inode_dirty error [ 238.265844][ T4333] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 238.284386][ C1] bridge0: port 3(syz_tun) entered learning state [ 238.354507][ T7374] loop4: detected capacity change from 0 to 512 [ 238.515132][ T7380] ip_tables: iptables: counters copy to user failed while replacing table [ 238.543116][ T7374] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.1022: inode has both inline data and extents flags [ 238.859316][ T7374] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1022: couldn't read orphan inode 15 (err -117) [ 239.101721][ T7374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.461769][ T7395] loop3: detected capacity change from 0 to 1024 [ 239.913185][ T7409] loop5: detected capacity change from 0 to 512 [ 239.922848][ T7395] hfsplus: b-tree write err: -5, ino 3 [ 239.957267][ T7414] input: syz0 as /devices/virtual/input/input10 [ 240.011613][ T4199] hfsplus: bad catalog entry type [ 240.032291][ T7409] EXT4-fs (loop5): Ignoring removed nobh option [ 240.091323][ T7409] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 240.184563][ T7409] ext4 filesystem being mounted at /110/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.231596][ T7409] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1032: corrupted inode contents [ 240.285475][ T7409] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.1032: mark_inode_dirty error [ 240.330350][ T7409] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1032: corrupted inode contents [ 240.362819][ T7409] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1032: mark_inode_dirty error [ 240.754348][ T5676] hfsplus: b-tree write err: -5, ino 3 [ 240.787013][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.233688][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.943614][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.111399][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.131946][ T7464] loop6: detected capacity change from 0 to 512 [ 242.147510][ T7463] loop4: detected capacity change from 0 to 1024 [ 242.288147][ T7464] EXT4-fs (loop6): Ignoring removed nobh option [ 242.316794][ T26] audit: type=1800 audit(1792058285.300:69): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1047" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=2 res=0 errno=0 [ 242.384506][ T7464] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1046: invalid indirect mapped block 256 (level 2) [ 242.569030][ T7464] EXT4-fs (loop6): 2 truncates cleaned up [ 242.598963][ T7464] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 242.632212][ T7464] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 242.804681][ T7473] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.527258][ T7498] loop1: detected capacity change from 0 to 512 [ 243.568892][ T7500] loop4: detected capacity change from 0 to 128 [ 243.648879][ T7500] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 243.695745][ T7498] EXT4-fs (loop1): Ignoring removed nobh option [ 243.795069][ T7498] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 243.829598][ T7498] ext4 filesystem being mounted at /216/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.327860][ T7498] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.1054: corrupted inode contents [ 244.404895][ T7498] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #2: comm syz.1.1054: mark_inode_dirty error [ 244.455658][ T7498] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.1054: corrupted inode contents [ 244.576946][ T7498] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1054: mark_inode_dirty error [ 244.612198][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 244.638044][ T7473] chnl_net:caif_netlink_parms(): no params data found [ 244.903434][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.910728][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.919311][ T7473] device bridge_slave_0 entered promiscuous mode [ 244.932883][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.940195][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.948739][ T7473] device bridge_slave_1 entered promiscuous mode [ 244.956267][ T7528] loop6: detected capacity change from 0 to 1024 [ 244.995672][ T7473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.088954][ T26] audit: type=1800 audit(1792058288.070:70): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1058" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=2 res=0 errno=0 [ 245.161841][ T7473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.365106][ T7473] team0: Port device team_slave_0 added [ 245.405409][ T7473] team0: Port device team_slave_1 added [ 245.530327][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.706849][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.751855][ T7473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.833889][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.869257][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.943765][ T7473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.961451][ T7556] fuse: Unknown parameter 'group_i00000000000000000000' [ 245.981477][ T9] device hsr_slave_0 left promiscuous mode [ 245.995937][ T9] device hsr_slave_1 left promiscuous mode [ 246.028492][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.065934][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.097629][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.125620][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.173834][ T9] device veth1_macvtap left promiscuous mode [ 246.262340][ T9] device veth0_macvtap left promiscuous mode [ 246.306725][ T9] device veth1_vlan left promiscuous mode [ 246.366485][ T9] device veth0_vlan left promiscuous mode [ 247.091823][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 247.400838][ T7575] loop5: detected capacity change from 0 to 512 [ 248.243232][ T7575] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 248.278396][ T7575] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1070: invalid indirect mapped block 256 (level 1) [ 248.422663][ T7575] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1070: invalid indirect mapped block 2683928664 (level 1) [ 248.488548][ T7575] EXT4-fs (loop5): 1 truncate cleaned up [ 248.532569][ T7575] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 249.162223][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 249.282266][ T9] team0 (unregistering): Port device team_slave_1 removed [ 249.363078][ T9] team0 (unregistering): Port device team_slave_0 removed [ 249.482768][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.568932][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.619869][ T7590] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1070: Invalid block bitmap block 3 in block_group 0 [ 249.929902][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1073'. [ 250.119448][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 250.160624][ T9] bond0 (unregistering): Released all slaves [ 250.289394][ T7590] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1070'. [ 250.356538][ T7473] device hsr_slave_0 entered promiscuous mode [ 250.425664][ T7473] device hsr_slave_1 entered promiscuous mode [ 250.765602][ T7606] fuse: Bad value for 'fd' [ 251.036677][ T7612] loop6: detected capacity change from 0 to 128 [ 251.065087][ T7473] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.085984][ T7473] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.105429][ T7612] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 251.115491][ T7615] loop4: detected capacity change from 0 to 16 [ 251.173217][ T7473] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.190413][ T7615] erofs: (device loop4): mounted with root inode @ nid 36. [ 251.252535][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 251.310595][ T7473] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.318173][ T7398] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 251.620096][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 251.675656][ T7473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.849401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.913038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.022829][ T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.096729][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.147580][ T7473] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.195714][ T7630] loop5: detected capacity change from 0 to 512 [ 252.385230][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.420010][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.460452][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.467621][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.477777][ T7] usb 5-1: config 0 descriptor?? [ 252.532419][ T4418] Bluetooth: hci0: command 0x0406 tx timeout [ 252.539951][ T7] cp210x 5-1:0.0: cp210x converter detected [ 252.565202][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.582405][ T7630] EXT4-fs (loop5): Ignoring removed nobh option [ 252.605731][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.622896][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.651440][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.658625][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.703531][ T7630] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 252.722409][ T7630] ext4 filesystem being mounted at /119/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.775338][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.845948][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.888761][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.903723][ T7630] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1082: corrupted inode contents [ 252.926051][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.969822][ T7630] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.1082: mark_inode_dirty error [ 252.989850][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.029077][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.052891][ T7630] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1082: corrupted inode contents [ 253.090463][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.106579][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.132989][ T7630] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1082: mark_inode_dirty error [ 253.165405][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.183015][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.207386][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.237609][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.352344][ T7] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 253.360213][ T7] cp210x 5-1:0.0: querying part number failed [ 253.420878][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 253.457336][ T7] usb 5-1: USB disconnect, device number 4 [ 253.509145][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 253.565477][ T7] cp210x 5-1:0.0: device disconnected [ 253.642198][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 253.648856][ C1] bridge0: topology change detected, propagating [ 254.718904][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.734614][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.810283][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.936485][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1088'. [ 255.115644][ T7672] fuse: Unknown parameter 'group_id00000000000000000000' [ 255.565654][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.574145][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.980456][ T7690] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 257.033515][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.080502][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.106445][ T7704] loop6: detected capacity change from 0 to 512 [ 257.156339][ T7704] EXT4-fs (loop6): Ignoring removed nobh option [ 257.199613][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.218490][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.261510][ T7473] device veth0_vlan entered promiscuous mode [ 257.281289][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.310030][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.369060][ T7473] device veth1_vlan entered promiscuous mode [ 257.417089][ T7704] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 257.431395][ T7704] ext4 filesystem being mounted at /40/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.031364][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.049987][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.096328][ T7704] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1094: corrupted inode contents [ 258.133053][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.214873][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.234989][ T7704] EXT4-fs error (device loop6): ext4_dirty_inode:6087: inode #2: comm syz.6.1094: mark_inode_dirty error [ 258.279959][ T7473] device veth0_macvtap entered promiscuous mode [ 258.319603][ T7704] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1094: corrupted inode contents [ 258.350134][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.376272][ T7704] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1094: mark_inode_dirty error [ 258.405129][ T7473] device veth1_macvtap entered promiscuous mode [ 258.490335][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.531943][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.627611][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.638189][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.648068][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.685337][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.712275][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.782236][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.855524][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.936220][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.007942][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.084064][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.127361][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.137277][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.147751][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.162168][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.174593][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.193660][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.201496][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.243236][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.273203][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.302736][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.453630][ T7473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.493561][ T7473] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.621610][ T7473] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.833485][ T7473] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.418114][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1102'. [ 260.514381][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.543070][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.551538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.608567][ T5676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.662613][ T5676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.695559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.044656][ T7776] loop6: detected capacity change from 0 to 2048 [ 263.068113][ T7781] loop7: detected capacity change from 0 to 512 [ 263.087516][ T7776] UDF-fs: bad mount option "anchor=000P0000000000000001" or missing value [ 263.197991][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 263.318224][ T7781] EXT4-fs (loop7): Ignoring removed nobh option [ 263.517547][ T7781] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 263.566711][ T7781] ext4 filesystem being mounted at /2/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.639382][ T7781] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1110: corrupted inode contents [ 263.708998][ T7781] EXT4-fs error (device loop7): ext4_dirty_inode:6087: inode #2: comm syz.7.1110: mark_inode_dirty error [ 263.751699][ T7781] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1110: corrupted inode contents [ 263.814564][ T7781] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.1110: mark_inode_dirty error [ 267.205881][ T7843] ip_tables: iptables: counters copy to user failed while replacing table [ 267.697981][ T7861] loop4: detected capacity change from 0 to 128 [ 267.857558][ T7861] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 268.057053][ T5676] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 271.256827][ T7901] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1140'. [ 271.265989][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1140'. [ 271.275079][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1140'. [ 271.372131][ C0] sched: RT throttling activated [ 271.542718][ T7898] loop5: detected capacity change from 0 to 2048 [ 271.895346][ T7898] UDF-fs: bad mount option "anchor=000P0000000000000001" or missing value [ 273.764988][ T7939] loop6: detected capacity change from 0 to 128 [ 273.966399][ T7939] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.004300][ T7939] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.123285][ T4415] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 274.412374][ T4415] usb 8-1: Using ep0 maxpacket: 8 [ 274.783100][ T4415] usb 8-1: unable to get BOS descriptor or descriptor too short [ 275.222578][ T4415] usb 8-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 275.244066][ T4415] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.292724][ T4415] usb 8-1: Product: syz [ 275.296978][ T4415] usb 8-1: Manufacturer: syz [ 275.301612][ T4415] usb 8-1: SerialNumber: syz [ 275.434614][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 275.762448][ T4415] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 275.794267][ T4415] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 275.915000][ T4415] usb 8-1: USB disconnect, device number 2 [ 275.980660][ T5217] udevd[5217]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.082374][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 277.194389][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 277.312546][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.369903][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.411134][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.462293][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.533016][ T13] usb 2-1: config 0 descriptor?? [ 277.603443][ T13] hub 2-1:0.0: USB hub found [ 277.645856][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1169'. [ 277.823447][ T13] hub 2-1:0.0: 1 port detected [ 278.042386][ T13] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 278.052443][ T13] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 278.182373][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 278.188404][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 278.267042][ T13] usb 2-1: USB disconnect, device number 10 [ 278.275454][ T8023] loop7: detected capacity change from 0 to 128 [ 278.337560][ T8023] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 278.422937][ T154] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 278.571035][ T8029] loop7: detected capacity change from 0 to 512 [ 278.630321][ T8029] EXT4-fs (loop7): Ignoring removed nobh option [ 278.691706][ T8029] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 278.720370][ T8029] ext4 filesystem being mounted at /14/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.967657][ T8029] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1176: corrupted inode contents [ 280.049256][ T8029] EXT4-fs error (device loop7): ext4_dirty_inode:6087: inode #2: comm syz.7.1176: mark_inode_dirty error [ 280.122605][ T8029] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1176: corrupted inode contents [ 280.202619][ T8029] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.1176: mark_inode_dirty error [ 280.397320][ T8057] loop1: detected capacity change from 0 to 128 [ 280.423763][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1185'. [ 280.458042][ T8057] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 280.587238][ T6367] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 282.715821][ T8097] loop5: detected capacity change from 0 to 512 [ 283.067663][ T8104] loop5: detected capacity change from 0 to 136 [ 283.532053][ T8115] loop5: detected capacity change from 0 to 512 [ 283.595076][ T8115] EXT4-fs (loop5): Ignoring removed nobh option [ 283.697525][ T8121] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1202'. [ 283.706654][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 283.715704][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 284.358886][ T8115] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobh,minixdf,,errors=continue. Quota mode: writeback. [ 284.494585][ T8115] ext4 filesystem being mounted at /136/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.576672][ T8115] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1203: corrupted inode contents [ 284.628182][ T8133] EXT4-fs (loop5): shut down requested (2) [ 284.667232][ T8115] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.1203: mark_inode_dirty error [ 284.754175][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1206'. [ 285.733005][ T7398] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 287.812692][ T8188] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1217'. [ 287.821810][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 287.830809][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 289.761043][ T8202] rxe_eth0 speed is unknown, defaulting to 1000 [ 289.822063][ T8204] Zero length message leads to an empty skb [ 290.132196][ T4418] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 290.182329][ T4396] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.542364][ T4418] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.550953][ T4396] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.569124][ T4418] usb 2-1: no configurations [ 290.584539][ T4396] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.598786][ T4418] usb 2-1: can't read configurations, error -22 [ 290.626380][ T4396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.658722][ T4396] usb 7-1: config 0 descriptor?? [ 290.821834][ T8238] fuse: Bad value for 'fd' [ 290.934239][ T8243] ip_tables: iptables: counters copy to user failed while replacing table [ 291.416360][ T8256] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1233'. [ 291.425918][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 291.435214][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 292.314845][ T4396] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 292.327647][ T4396] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0003/input/input11 [ 292.474005][ T4396] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 292.519816][ T4396] usb 7-1: USB disconnect, device number 2 [ 293.704632][ T8265] fido_id[8265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 293.798287][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 293.869398][ T8287] loop1: detected capacity change from 0 to 512 [ 294.003906][ T8287] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 294.015008][ T8296] fuse: Bad value for 'fd' [ 294.080639][ T8287] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1239: invalid indirect mapped block 256 (level 1) [ 294.158871][ T8287] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1239: invalid indirect mapped block 2683928664 (level 1) [ 294.203648][ T8287] EXT4-fs (loop1): 1 truncate cleaned up [ 294.209391][ T8287] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 294.353258][ T8303] ip_tables: iptables: counters copy to user failed while replacing table [ 294.487389][ T8287] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1239'. [ 294.627376][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 295.149412][ T8319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1245'. [ 295.158623][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 295.167687][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 298.167530][ T8346] fuse: Bad value for 'fd' [ 299.780916][ T8373] loop1: detected capacity change from 0 to 128 [ 300.049586][ T8373] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 300.474090][ T8373] FAT-fs (loop1): error, clusters badly computed (3 != 1) [ 300.540164][ T8373] FAT-fs (loop1): Filesystem has been set read-only [ 300.765454][ T4192] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 300.944190][ T8394] fuse: Invalid rootmode [ 302.564635][ T8418] loop6: detected capacity change from 0 to 256 [ 303.554194][ T8431] loop4: detected capacity change from 0 to 128 [ 303.578066][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1273'. [ 303.615758][ T8431] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 303.673552][ T8431] FAT-fs (loop4): error, clusters badly computed (3 != 1) [ 303.680733][ T8431] FAT-fs (loop4): Filesystem has been set read-only [ 303.818924][ T4186] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 304.305570][ T8447] fuse: Invalid rootmode [ 305.335462][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1283'. [ 305.398512][ T8467] loop4: detected capacity change from 0 to 128 [ 305.964928][ T8467] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 306.058327][ T8467] FAT-fs (loop4): error, clusters badly computed (3 != 1) [ 306.122377][ T8467] FAT-fs (loop4): Filesystem has been set read-only [ 306.252689][ T4186] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 306.419900][ T8491] fuse: Invalid rootmode [ 306.503513][ T8493] kvm [8492]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0x400006 [ 307.983905][ T8521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 309.687001][ T8551] fuse: Bad value for 'rootmode' [ 310.044762][ T8561] loop7: detected capacity change from 0 to 1024 [ 310.105223][ T8561] EXT4-fs (loop7): Ignoring removed orlov option [ 310.158537][ T8553] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 310.195194][ T8553] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 310.212276][ T8568] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1309'. [ 311.829322][ T8588] fuse: Bad value for 'rootmode' [ 311.868703][ T8590] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1315'. [ 312.277592][ T8599] loop6: detected capacity change from 0 to 1024 [ 312.505246][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1321'. [ 313.962333][ T4396] Bluetooth: hci2: command 0x0406 tx timeout [ 313.996732][ T8620] fuse: Bad value for 'rootmode' [ 314.007518][ T8622] loop7: detected capacity change from 0 to 512 [ 314.151388][ T8622] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 314.216973][ T8622] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.308581][ T8622] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: writeback. [ 314.330524][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1330'. [ 314.639009][ T8644] loop7: detected capacity change from 0 to 512 [ 314.669918][ T8644] EXT4-fs (loop7): Ignoring removed orlov option [ 314.685036][ T8644] EXT4-fs (loop7): Ignoring removed oldalloc option [ 314.693214][ T8644] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.709347][ T8644] EXT4-fs (loop7): failed to initialize system zone (-117) [ 314.717883][ T8644] EXT4-fs (loop7): mount failed [ 315.577378][ T8648] ODEBUG: Out of memory. ODEBUG disabled [ 315.747095][ T4255] Bluetooth: hci4: command 0x0405 tx timeout [ 315.901818][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1336'. [ 317.033057][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.437406][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.696371][ T8669] fuse: Unknown parameter 'use00000000000000000000' [ 319.026936][ T8680] loop4: detected capacity change from 0 to 8 [ 319.635327][ T8680] SQUASHFS error: Failed to read block 0x636: -5 [ 319.673273][ T8680] SQUASHFS error: Unable to read metadata cache entry [634] [ 319.875756][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1352'. [ 320.825889][ T8705] fuse: Unknown parameter 'use00000000000000000000' [ 322.423684][ T8726] loop1: detected capacity change from 0 to 512 [ 322.470617][ T8728] loop4: detected capacity change from 0 to 164 [ 322.494797][ T8726] EXT4-fs (loop1): Ignoring removed orlov option [ 322.511528][ T8726] EXT4-fs (loop1): Ignoring removed oldalloc option [ 322.568395][ T8726] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.640776][ T8726] EXT4-fs (loop1): failed to initialize system zone (-117) [ 322.643098][ T8728] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 322.688115][ T8726] EXT4-fs (loop1): mount failed [ 322.960383][ T8728] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 324.325218][ T8753] fuse: Unknown parameter 'use00000000000000000000' [ 324.422955][ T8757] loop5: detected capacity change from 0 to 512 [ 325.131473][ T8757] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 325.175739][ T8757] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.341304][ T8757] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback. [ 325.427115][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1376'. [ 325.605222][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1378'. [ 326.278412][ T8788] loop4: detected capacity change from 0 to 512 [ 326.324910][ T8788] EXT4-fs (loop4): Ignoring removed orlov option [ 326.331387][ T8788] EXT4-fs (loop4): Ignoring removed oldalloc option [ 326.374333][ T8788] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 326.425574][ T8788] EXT4-fs (loop4): failed to initialize system zone (-117) [ 326.465527][ T8788] EXT4-fs (loop4): mount failed [ 328.426025][ T8803] fuse: Unknown parameter 'user_i00000000000000000000' [ 328.462319][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 329.302368][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.335375][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.525592][ T8821] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1389'. [ 329.534739][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1389'. [ 329.543895][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1389'. [ 329.680711][ T7] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 329.761504][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.963392][ T7] usb 7-1: config 0 descriptor?? [ 330.326440][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1394'. [ 330.469938][ T7] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 330.489685][ T7] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 330.520592][ T7] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 330.546389][ T7] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 330.569312][ T7] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 330.617048][ T7] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 330.767611][ T7] usb 7-1: USB disconnect, device number 3 [ 330.873361][ T8833] fido_id[8833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 330.935796][ T8836] loop7: detected capacity change from 0 to 164 [ 331.074027][ T8836] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 331.152377][ T8836] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 332.190787][ T8843] fuse: Unknown parameter 'user_i00000000000000000000' [ 333.347122][ T8861] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1403'. [ 333.347288][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 333.347391][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 334.368824][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1416'. [ 334.385903][ T8871] loop6: detected capacity change from 0 to 164 [ 334.722343][ T4396] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 335.038966][ T8877] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 335.153372][ T8871] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 335.192310][ T4396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.213514][ T4396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.242231][ T4396] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 335.272146][ T4396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.350604][ T4396] usb 6-1: config 0 descriptor?? [ 335.948245][ T4396] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 336.369897][ T4396] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 336.378663][ T4396] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 336.386220][ T4396] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 336.394254][ T4396] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 336.403348][ T4396] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 336.454722][ T4396] usb 6-1: USB disconnect, device number 5 [ 336.522882][ T8889] loop6: detected capacity change from 0 to 512 [ 336.616335][ T8887] fido_id[8887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 336.693856][ T8889] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1411: invalid indirect mapped block 10 (level 1) [ 336.788445][ T8889] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1411: invalid indirect mapped block 8 (level 1) [ 337.311175][ T8889] EXT4-fs (loop6): 1 truncate cleaned up [ 337.330816][ T8889] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.406737][ T8897] fuse: Unknown parameter 'user_i00000000000000000000' [ 337.574215][ T8899] loop5: detected capacity change from 0 to 2048 [ 337.644742][ T8899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.766067][ T8905] loop6: detected capacity change from 0 to 2048 [ 337.798603][ T8905] UDF-fs: bad mount option "anchor=000P0000000000000001" or missing value [ 339.194187][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1424'. [ 339.920542][ T8935] loop1: detected capacity change from 0 to 16 [ 340.004467][ T8935] erofs: (device loop1): mounted with root inode @ nid 36. [ 340.322288][ T4255] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 340.735002][ T4255] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.752469][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.792959][ T4255] usb 2-1: config 0 descriptor?? [ 340.857959][ T4255] cp210x 2-1:0.0: cp210x converter detected [ 341.752651][ T4255] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 341.769790][ T4255] cp210x 2-1:0.0: querying part number failed [ 341.813099][ T4255] usb 2-1: cp210x converter now attached to ttyUSB0 [ 341.993774][ T4255] usb 2-1: USB disconnect, device number 13 [ 342.013049][ T4255] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 342.032809][ T4255] cp210x 2-1:0.0: device disconnected [ 342.742318][ T8973] loop4: detected capacity change from 0 to 8 [ 343.119162][ T8980] loop4: detected capacity change from 0 to 2048 [ 343.148889][ T8986] loop7: detected capacity change from 0 to 512 [ 343.282306][ T8980] UDF-fs: bad mount option "anchor=000P0000000000000001" or missing value [ 343.417814][ T8986] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 343.744500][ T8986] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.917109][ T8986] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: writeback. [ 344.017956][ T8997] loop6: detected capacity change from 0 to 512 [ 344.196973][ T8997] EXT4-fs (loop6): Ignoring removed nobh option [ 344.614100][ T8997] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 344.760192][ T8997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 344.790730][ T8997] System zones: 1-12 [ 344.808041][ T8997] EXT4-fs (loop6): 1 truncate cleaned up [ 344.836753][ T8997] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nobh,data_err=ignore,debug,norecovery,acl,,errors=continue. Quota mode: none. [ 344.979377][ T8997] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: none. [ 345.159774][ T9013] loop1: detected capacity change from 0 to 8 [ 347.287753][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1467'. [ 347.714057][ T9055] loop7: detected capacity change from 0 to 8 [ 347.778202][ T9057] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1469'. [ 347.787417][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 347.796405][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 350.138644][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1479'. [ 350.483298][ T9095] loop1: detected capacity change from 0 to 164 [ 350.618150][ T9095] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 350.672680][ T9097] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1482'. [ 350.681796][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1482'. [ 350.691170][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1482'. [ 351.910503][ T9109] loop1: detected capacity change from 0 to 512 [ 351.955438][ T9109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 352.100797][ T9109] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1488: invalid indirect mapped block 32768 (level 2) [ 352.297062][ T9109] EXT4-fs (loop1): 1 orphan inode deleted [ 352.365264][ T9109] EXT4-fs (loop1): 1 truncate cleaned up [ 352.440505][ T9109] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.831517][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1489'. [ 353.591607][ T9130] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 353.912908][ T9138] loop1: detected capacity change from 0 to 256 [ 354.423562][ T9138] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 354.787711][ T9146] loop4: detected capacity change from 0 to 164 [ 355.832246][ T4418] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 356.187640][ T9166] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1501'. [ 356.993889][ T4418] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 357.002338][ T4418] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 357.013043][ T4418] usb 6-1: config 220 has no interface number 2 [ 357.019422][ T4418] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 357.033107][ T4418] usb 6-1: config 220 interface 0 has no altsetting 0 [ 357.039989][ T4418] usb 6-1: config 220 interface 76 has no altsetting 0 [ 357.047300][ T4418] usb 6-1: config 220 interface 1 has no altsetting 0 [ 357.242496][ T4418] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 357.258829][ T4418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.288545][ T4418] usb 6-1: Product: syz [ 357.305630][ T4418] usb 6-1: Manufacturer: syz [ 357.320653][ T4418] usb 6-1: SerialNumber: syz [ 357.347985][ T9183] loop4: detected capacity change from 0 to 1024 [ 358.432497][ T4418] usb 6-1: selecting invalid altsetting 0 [ 358.439537][ T4418] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 358.446016][ T4418] usb 6-1: No valid video chain found. [ 358.498467][ T4418] usb 6-1: selecting invalid altsetting 0 [ 358.512132][ T4418] usbtest: probe of 6-1:220.1 failed with error -22 [ 358.549120][ T4418] usb 6-1: USB disconnect, device number 6 [ 358.711569][ T9205] loop5: detected capacity change from 0 to 2048 [ 358.800048][ T9210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1516'. [ 358.963435][ T9205] UDF-fs: bad mount option "anchor=000P0000000000000001" or missing value [ 359.436575][ T9214] fuse: Unknown parameter '0x0000000000000003' [ 360.295226][ T9228] xt_bpf: check failed: parse error [ 360.977780][ T4186] bridge0: port 3(syz_tun) entered disabled state [ 361.415472][ T4186] device syz_tun left promiscuous mode [ 361.433093][ T4186] bridge0: port 3(syz_tun) entered disabled state [ 361.581063][ T9244] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1527'. [ 362.192521][ T9249] fuse: Unknown parameter '0x0000000000000003' [ 362.257293][ T6367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.529437][ T6367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.917101][ T6367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.949487][ T9272] loop7: detected capacity change from 0 to 2048 [ 362.998662][ T9272] UDF-fs: bad mount option "anchor=000P0000000000000001" or missing value [ 363.029779][ T6367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.104263][ T9274] rxe_eth0 speed is unknown, defaulting to 1000 [ 363.903540][ T9286] loop1: detected capacity change from 0 to 1024 [ 363.988225][ T9286] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 364.268925][ T9286] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 364.344786][ T9286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.746790][ T9295] loop5: detected capacity change from 0 to 2048 [ 364.987360][ T9295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.012193][ T4418] Bluetooth: hci1: command 0x0409 tx timeout [ 365.307254][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 365.377893][ T9274] chnl_net:caif_netlink_parms(): no params data found [ 365.407831][ T9307] No such timeout policy "syz1" [ 365.587633][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.633087][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.672790][ T9274] device bridge_slave_0 entered promiscuous mode [ 365.682886][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.690103][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.699856][ T9274] device bridge_slave_1 entered promiscuous mode [ 365.726854][ T9315] fuse: Unknown parameter '0x0000000000000003' [ 365.843822][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.947277][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.069357][ T9274] team0: Port device team_slave_0 added [ 366.122590][ T9274] team0: Port device team_slave_1 added [ 366.181233][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.182968][ T9325] loop1: detected capacity change from 0 to 256 [ 366.212257][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.250027][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.549112][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.579601][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.700565][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.848739][ T6367] device hsr_slave_0 left promiscuous mode [ 366.887056][ T6367] device hsr_slave_1 left promiscuous mode [ 366.932514][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.940019][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.012792][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.020280][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.064938][ T6367] device bridge_slave_1 left promiscuous mode [ 367.071217][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.140688][ T6367] device bridge_slave_0 left promiscuous mode [ 367.152878][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.214328][ T6367] device veth1_macvtap left promiscuous mode [ 367.220412][ T6367] device veth0_macvtap left promiscuous mode [ 367.262483][ T6367] device veth1_vlan left promiscuous mode [ 367.268404][ T6367] device veth0_vlan left promiscuous mode [ 367.482492][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 368.871190][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 368.933408][ T9358] fuse: Unknown parameter '0x0000000000000003' [ 368.981382][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 369.055421][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.128168][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.368649][ T6367] bond0 (unregistering): Released all slaves [ 369.433594][ T9364] loop5: detected capacity change from 0 to 512 [ 369.446965][ T9274] device hsr_slave_0 entered promiscuous mode [ 369.450071][ T9366] loop1: detected capacity change from 0 to 1024 [ 369.503143][ T9274] device hsr_slave_1 entered promiscuous mode [ 369.549410][ T9274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.562393][ T4415] Bluetooth: hci1: command 0x040f tx timeout [ 369.577094][ T9274] Cannot create hsr debugfs directory [ 369.631030][ T9368] loop7: detected capacity change from 0 to 2048 [ 369.671850][ T9371] loop6: detected capacity change from 0 to 1024 [ 369.731512][ T9371] EXT4-fs (loop6): inline encryption not supported [ 369.740712][ T9368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.783797][ T9364] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 369.792797][ T9371] EXT4-fs (loop6): Ignoring removed bh option [ 369.822438][ T9364] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.913961][ T9371] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 369.998606][ T9364] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback. [ 370.668893][ T9274] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 370.838146][ T9274] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 370.931505][ T9274] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 370.984524][ T9274] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 371.043022][ T9392] loop1: detected capacity change from 0 to 512 [ 371.214972][ T9392] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 371.233903][ T9399] loop6: detected capacity change from 0 to 512 [ 371.309549][ T9392] EXT4-fs (loop1): 1 truncate cleaned up [ 371.356972][ T9399] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.389843][ T9392] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 371.391736][ T9274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.424579][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.642297][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 371.770467][ T9399] Quota error (device loop6): find_tree_dqentry: Getting block too big (196613 >= 6) [ 371.827408][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.111147][ T9274] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.309338][ T9399] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 372.332336][ T9399] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1562: Failed to acquire dquot type 1 [ 372.415784][ T9399] EXT4-fs (loop6): 1 truncate cleaned up [ 372.442420][ T9399] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 372.496459][ T9274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.569421][ T9274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.598092][ T9399] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1562: bg 0: block 248: padding at end of block bitmap is not set [ 372.598238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.661255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.894906][ T26] audit: type=1800 audit(1792058415.690:71): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1563" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 372.946340][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.953504][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.989251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.014319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.047389][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.054560][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.098647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.145656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.183238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.223492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.267112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.276078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.284926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.293704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.319196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.355328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.375065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.433139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.462432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.503673][ T9416] loop5: detected capacity change from 0 to 4096 [ 373.549080][ T9416] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 374.201558][ T9439] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 374.292574][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.369397][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.415438][ T9416] EXT4-fs (loop5): Test dummy encryption mode enabled [ 374.433659][ T9274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.443493][ T9416] EXT4-fs (loop5): Ignoring removed orlov option [ 374.506726][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1570'. [ 374.527036][ T9416] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 374.866096][ T9416] EXT4-fs (loop5): shut down requested (1) [ 374.913459][ T9448] loop1: detected capacity change from 0 to 164 [ 375.303077][ T9463] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 376.407785][ T9480] loop7: detected capacity change from 0 to 128 [ 376.483156][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.507623][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.539930][ T9480] FAT-fs (loop7): bogus logical sector size 0 [ 376.603086][ T9480] FAT-fs (loop7): Can't find a valid FAT filesystem [ 376.656485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.692975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.725342][ T9274] device veth0_vlan entered promiscuous mode [ 376.740653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.759261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.804310][ T9274] device veth1_vlan entered promiscuous mode [ 376.968009][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 376.993170][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 377.029977][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.071685][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.103378][ T9274] device veth0_macvtap entered promiscuous mode [ 377.162038][ T9274] device veth1_macvtap entered promiscuous mode [ 377.244886][ T9500] loop5: detected capacity change from 0 to 1024 [ 377.255928][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.290853][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.338481][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.392166][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.415138][ T26] audit: type=1800 audit(1792058420.400:72): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1577" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=2 res=0 errno=0 [ 377.472166][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.493254][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.503473][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.523352][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.553549][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.597645][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.618758][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.660787][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.690614][ T9505] loop5: detected capacity change from 0 to 164 [ 377.735806][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.773587][ T9503] smpboot: CPU 1 is now offline [ 377.836569][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.867802][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.881328][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.901042][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.942903][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.988765][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.026581][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.069594][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.110624][ T9274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.151491][ T9274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.209825][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.263940][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 378.285105][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 378.498299][ T9274] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.554769][ T9274] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.686260][ T9518] loop6: detected capacity change from 0 to 256 [ 378.697736][ T9274] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.736751][ T9274] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.776001][ T9518] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 378.823769][ T9506] x86: Booting SMP configuration: [ 378.969562][ T9518] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 378.993418][ T9506] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 379.014648][ T9518] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 379.035952][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 379.051082][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 379.253857][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.261719][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.319457][ T9534] input: syz0 as /devices/virtual/input/input12 [ 379.354626][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.389045][ T5676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.413856][ T5676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.452007][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 379.607350][ T9541] loop1: detected capacity change from 0 to 164 [ 379.714416][ T9548] loop8: detected capacity change from 0 to 1024 [ 379.932203][ T4265] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 380.112376][ T4417] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 380.182392][ T4265] usb 7-1: Using ep0 maxpacket: 16 [ 380.302668][ T4265] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.324331][ T4265] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.351264][ T4265] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.372227][ T4265] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 380.404747][ T4265] usb 7-1: config 0 interface 0 has no altsetting 0 [ 380.420642][ T4265] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 380.440174][ T4265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.462844][ T4265] usb 7-1: config 0 descriptor?? [ 380.482532][ T4417] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.499707][ T4417] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.559880][ T4417] usb 2-1: config 0 interface 0 has no altsetting 0 [ 380.580588][ T4417] usb 2-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 380.610020][ T4417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.641918][ T4417] usb 2-1: config 0 descriptor?? [ 381.007128][ T9579] loop7: detected capacity change from 0 to 1024 [ 381.018509][ T4265] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 381.208856][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.220179][ T4417] hid-penmount 0003:14E1:6000.0007: ignoring exceeding usage max [ 381.253758][ T4417] hid-penmount 0003:14E1:6000.0007: collection stack underflow [ 381.270487][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.285259][ T4417] hid-penmount 0003:14E1:6000.0007: item 0 4 0 12 parsing failed [ 381.303054][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.316523][ T4417] hid-penmount: probe of 0003:14E1:6000.0007 failed with error -22 [ 381.328250][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.513089][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1600'. [ 381.541319][ T4417] usb 2-1: USB disconnect, device number 14 [ 381.547704][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.559193][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.572200][ T4416] Bluetooth: hci0: command 0x1407 tx timeout [ 381.577824][ T4265] usb 7-1: USB disconnect, device number 4 [ 381.585239][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.602222][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.645603][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.670556][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.697563][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.728167][ T9603] input: syz0 as /devices/virtual/input/input13 [ 381.747179][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.771278][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.800581][ T9579] hfsplus: request for non-existent node 33554434 in B*Tree [ 381.823295][ T26] audit: type=1800 audit(1792058424.810:73): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1595" name="file1" dev="loop7" ino=19 res=0 errno=0 [ 382.029572][ T9610] loop7: detected capacity change from 0 to 164 [ 383.757177][ T9672] input: syz0 as /devices/virtual/input/input14 [ 383.849501][ T9676] loop8: detected capacity change from 0 to 2048 [ 383.904538][ T9676] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 383.941741][ T9676] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 383.969149][ T9676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.237240][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1615'. [ 386.086598][ T9719] input: syz0 as /devices/virtual/input/input15 [ 386.220288][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1632'. [ 387.332258][ T4265] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 388.227333][ T9737] loop8: detected capacity change from 0 to 164 [ 389.292423][ T4265] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 391.096647][ T4265] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 65240, setting to 64 [ 391.165499][ T4265] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 391.225402][ T9762] loop8: detected capacity change from 0 to 128 [ 391.288797][ T9762] EXT4-fs (loop8): Test dummy encryption mode enabled [ 391.366502][ T9762] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 391.391422][ T9762] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.416453][ T4265] usb 6-1: string descriptor 0 read error: -71 [ 391.441374][ T4265] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.460981][ T4265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.543301][ T4265] usb 6-1: can't set config #1, error -71 [ 391.578823][ T4265] usb 6-1: USB disconnect, device number 7 [ 391.602998][ T9781] ------------[ cut here ]------------ [ 391.655684][ T9781] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 391.699440][ T9781] WARNING: CPU: 0 PID: 9781 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 391.762571][ T9781] Modules linked in: [ 391.777479][ T9781] CPU: 0 PID: 9781 Comm: syz.1.1643 Not tainted syzkaller #0 [ 391.803625][ T9762] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 391.808295][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.873986][ T9781] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 391.901757][ T9781] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9 [ 391.967988][ T9781] RSP: 0018:ffffc9000356f3a0 EFLAGS: 00010246 [ 391.988480][ T9781] RAX: 8640d5e9bc6a5400 RBX: 0000000002000000 RCX: 0000000000080000 [ 392.013296][ T9781] RDX: ffffc90003b22000 RSI: 00000000000049c2 RDI: 00000000000049c3 [ 392.031856][ T9781] RBP: 0000000000000004 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 392.065564][ T9781] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: ffff88805e294000 [ 392.088915][ T9781] R13: ffff88805e295290 R14: ffff88802c030e00 R15: ffff88805e296268 [ 392.106092][ T9781] FS: 00007fbc0ac6d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 392.127305][ T9781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.141930][ T9781] CR2: 000000110c43212d CR3: 0000000025977000 CR4: 00000000003506f0 [ 392.158100][ T9781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.180904][ T9781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.200183][ T9781] Call Trace: [ 392.208331][ T9781] [ 392.214796][ T9781] ieee80211_set_mcast_rate+0x3b/0x50 [ 392.227143][ T9781] ? ieee80211_leave_ibss+0x20/0x20 [ 392.238215][ T9781] nl80211_set_mcast_rate+0x346/0x530 [ 392.254801][ T9781] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 392.260731][ T9781] ? nl80211_pre_doit+0x274/0x540 [ 392.276619][ T9781] genl_rcv_msg+0xd0b/0xfa0 [ 392.291414][ T9781] ? genl_bind+0x370/0x370 [ 392.301538][ T9781] ? verify_lock_unused+0x140/0x140 [ 392.306895][ T9781] ? verify_lock_unused+0x140/0x140 [ 392.322240][ T9781] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 392.332372][ T9781] netlink_rcv_skb+0x1e9/0x430 [ 392.342495][ T9781] ? genl_bind+0x370/0x370 [ 392.352640][ T9781] ? netlink_ack+0xb10/0xb10 [ 392.357361][ T9781] ? down_read+0x1aa/0x2e0 [ 392.372016][ T9781] genl_rcv+0x24/0x40 [ 392.376201][ T9781] netlink_unicast+0x78f/0x940 [ 392.392659][ T9781] netlink_sendmsg+0x8ba/0xbe0 [ 392.413998][ T9781] ? netlink_getsockopt+0x570/0x570 [ 392.419491][ T9781] ? aa_sock_msg_perm+0x94/0x150 [ 392.432224][ T9781] ? apparmor_socket_sendmsg+0x88/0x230 [ 392.437879][ T9781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 392.460557][ T9781] ? security_socket_sendmsg+0x7c/0xa0 [ 392.466141][ T9781] ? netlink_getsockopt+0x570/0x570 [ 392.481543][ T9781] ____sys_sendmsg+0x5be/0x8f0 [ 392.486461][ T9781] ? __sys_sendmsg_sock+0x30/0x30 [ 392.512203][ T9781] ? import_iovec+0x6f/0xa0 [ 392.516776][ T9781] ___sys_sendmsg+0x236/0x2e0 [ 392.531701][ T9781] ? __sys_sendmsg+0x290/0x290 [ 392.536625][ T9781] ? sock_do_ioctl+0x29d/0x320 [ 392.541460][ T9781] __se_sys_sendmsg+0x1b7/0x2a0 [ 392.562170][ T9781] ? __x64_sys_sendmsg+0x80/0x80 [ 392.567205][ T9781] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 392.582352][ T9781] ? lockdep_hardirqs_on+0x94/0x140 [ 392.587647][ T9781] do_syscall_64+0x4c/0xa0 [ 392.606958][ T9781] ? clear_bhb_loop+0x30/0x80 [ 392.611712][ T9781] ? clear_bhb_loop+0x30/0x80 [ 392.627425][ T9781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.637535][ T9781] RIP: 0033:0x7fbc0ca15559 [ 392.642009][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.692217][ T9781] RSP: 002b:00007fbc0ac6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.701834][ T9781] RAX: ffffffffffffffda RBX: 00007fbc0cc9cfa0 RCX: 00007fbc0ca15559 [ 392.730538][ T9781] RDX: 0000000000000004 RSI: 0000200000000b00 RDI: 0000000000000003 [ 392.749040][ T9781] RBP: 00007fbc0caac8b0 R08: 0000000000000000 R09: 0000000000000000 [ 392.761206][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.779639][ T9781] R13: 00007fbc0cc9d038 R14: 00007fbc0cc9cfa0 R15: 00007ffd710acb78 [ 392.798615][ T9781] [ 392.801720][ T9781] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 392.809030][ T9781] CPU: 0 PID: 9781 Comm: syz.1.1643 Not tainted syzkaller #0 [ 392.816440][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.826526][ T9781] Call Trace: [ 392.829837][ T9781] [ 392.832796][ T9781] dump_stack_lvl+0x188/0x250 [ 392.837527][ T9781] ? show_regs_print_info+0x20/0x20 [ 392.842763][ T9781] ? load_image+0x410/0x410 [ 392.847326][ T9781] panic+0x2f8/0x850 [ 392.851266][ T9781] ? bpf_jit_dump+0xd0/0xd0 [ 392.855850][ T9781] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 392.862329][ T9781] __warn+0x248/0x2b0 [ 392.866344][ T9781] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 392.872801][ T9781] report_bug+0x1b9/0x2e0 [ 392.877175][ T9781] handle_bug+0x3a/0x70 [ 392.881360][ T9781] exc_invalid_op+0x16/0x40 [ 392.885876][ T9781] asm_exc_invalid_op+0x16/0x20 [ 392.890733][ T9781] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 392.897763][ T9781] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9 [ 392.917399][ T9781] RSP: 0018:ffffc9000356f3a0 EFLAGS: 00010246 [ 392.923518][ T9781] RAX: 8640d5e9bc6a5400 RBX: 0000000002000000 RCX: 0000000000080000 [ 392.931727][ T9781] RDX: ffffc90003b22000 RSI: 00000000000049c2 RDI: 00000000000049c3 [ 392.939709][ T9781] RBP: 0000000000000004 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 392.947683][ T9781] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: ffff88805e294000 [ 392.955665][ T9781] R13: ffff88805e295290 R14: ffff88802c030e00 R15: ffff88805e296268 [ 392.963696][ T9781] ieee80211_set_mcast_rate+0x3b/0x50 [ 392.969105][ T9781] ? ieee80211_leave_ibss+0x20/0x20 [ 392.974351][ T9781] nl80211_set_mcast_rate+0x346/0x530 [ 392.979753][ T9781] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 392.985591][ T9781] ? nl80211_pre_doit+0x274/0x540 [ 392.990627][ T9781] genl_rcv_msg+0xd0b/0xfa0 [ 392.995161][ T9781] ? genl_bind+0x370/0x370 [ 392.999602][ T9781] ? verify_lock_unused+0x140/0x140 [ 393.004819][ T9781] ? verify_lock_unused+0x140/0x140 [ 393.010069][ T9781] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 393.015938][ T9781] netlink_rcv_skb+0x1e9/0x430 [ 393.020736][ T9781] ? genl_bind+0x370/0x370 [ 393.025193][ T9781] ? netlink_ack+0xb10/0xb10 [ 393.029802][ T9781] ? down_read+0x1aa/0x2e0 [ 393.034243][ T9781] genl_rcv+0x24/0x40 [ 393.038229][ T9781] netlink_unicast+0x78f/0x940 [ 393.043012][ T9781] netlink_sendmsg+0x8ba/0xbe0 [ 393.047784][ T9781] ? netlink_getsockopt+0x570/0x570 [ 393.052993][ T9781] ? aa_sock_msg_perm+0x94/0x150 [ 393.057969][ T9781] ? apparmor_socket_sendmsg+0x88/0x230 [ 393.063544][ T9781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 393.068863][ T9781] ? security_socket_sendmsg+0x7c/0xa0 [ 393.074353][ T9781] ? netlink_getsockopt+0x570/0x570 [ 393.079562][ T9781] ____sys_sendmsg+0x5be/0x8f0 [ 393.084359][ T9781] ? __sys_sendmsg_sock+0x30/0x30 [ 393.089409][ T9781] ? import_iovec+0x6f/0xa0 [ 393.093937][ T9781] ___sys_sendmsg+0x236/0x2e0 [ 393.098653][ T9781] ? __sys_sendmsg+0x290/0x290 [ 393.103481][ T9781] ? sock_do_ioctl+0x29d/0x320 [ 393.108312][ T9781] __se_sys_sendmsg+0x1b7/0x2a0 [ 393.113203][ T9781] ? __x64_sys_sendmsg+0x80/0x80 [ 393.118174][ T9781] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 393.124209][ T9781] ? lockdep_hardirqs_on+0x94/0x140 [ 393.129443][ T9781] do_syscall_64+0x4c/0xa0 [ 393.133879][ T9781] ? clear_bhb_loop+0x30/0x80 [ 393.138573][ T9781] ? clear_bhb_loop+0x30/0x80 [ 393.143257][ T9781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.149165][ T9781] RIP: 0033:0x7fbc0ca15559 [ 393.153597][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.173254][ T9781] RSP: 002b:00007fbc0ac6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.181717][ T9781] RAX: ffffffffffffffda RBX: 00007fbc0cc9cfa0 RCX: 00007fbc0ca15559 [ 393.189701][ T9781] RDX: 0000000000000004 RSI: 0000200000000b00 RDI: 0000000000000003 [ 393.197685][ T9781] RBP: 00007fbc0caac8b0 R08: 0000000000000000 R09: 0000000000000000 [ 393.205668][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.213706][ T9781] R13: 00007fbc0cc9d038 R14: 00007fbc0cc9cfa0 R15: 00007ffd710acb78 [ 393.221766][ T9781] [ 393.225168][ T9781] Kernel Offset: disabled [ 393.229832][ T9781] Rebooting in 86400 seconds..