last executing test programs: 29.600940828s ago: executing program 0 (id=766): ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") inotify_init() socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x141d6, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121c, &(0x7f0000003680)="$eJzs3M+LG2UYB/Bn19ptd90faq22IL7oRS9Ddw9e9LLIFqQBpe0KrSBM3VkNOyYhExYiYvXk1b9DBBHEiyDe9LIX/wPB2148VhBHNtG2kVTJdruB8vlc8sA73zfPJJnAhPfN/quff7CzXWXbeS9mZ2ZithORbqVIMRv/+CReeuXHn569cu36pfVGY+NyShfXr66+nFJaeu77tz/68vkfegtvfbP03Vzsrbyz/9var3tn987t/3n1/WaVmlVqtXspTzfa7V5+oyzSVrPayVJ6syzyqkjNVlV0R8a3y3an0095a2txvtMtqirlrX7aKfqp1069bj/l7+XNVsqyLC3OB5M7cbva/OJWXdcRdf1onIy6ruvTMR8L8VgsxlIsx0o8Hk/Ek3Emnoqz8XQ8E1//8lX/IAEAAAAAAAAAAAAAAAAAAAAcnUn3/58bHDXtrgEAAAAAAAAAAAAAAAAAAODhcuXa9UvrjcbG5ZRORZSf7W7ubg4fh+Pr29GMMoq4EMvxRwx2/w8N64uvNzYupIGV+LS8+Xf+5u7mI6P51cHfCYzNrw7zaTQ/F/N359diOc6Mz6+NzZ+KF1+4K5/Fcvz8brSjjK04yN7Jf7ya0mtvNP6VPz84DgAAAB4GWbpt7P17lt1rfJif4PeBkfvrg+z5E1M9dSKi6n+4k5dl0T3iImaG8x/9zP9dLMTxPddxFyen28bvdV1P/0U4VHE6Iu7z83zPK2UuIg4988x9N/b/xSEv8yl/MXEs7rzp0+4EAAAAAAAAAACASTyQJYffji77nfY5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqwAAAP//JVDLZg==") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724", @ANYRES8=r0], 0x0) 27.326321355s ago: executing program 0 (id=791): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x7, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x1c, r1, 0x1, 0x10, 0x6, @random="26d47aeb4ed2"}, 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 27.123533701s ago: executing program 0 (id=793): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000240)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffeb40e00009d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x1, 0x0, 0x41ff7484, 0x0}, {0x0, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x400, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 27.105475592s ago: executing program 0 (id=794): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2020) 26.504647199s ago: executing program 0 (id=798): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.893621758s ago: executing program 0 (id=802): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getgroups(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x108c46e, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8], 0x81, 0x1504, &(0x7f0000002a80)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20400, 0xe8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 25.699283273s ago: executing program 32 (id=802): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getgroups(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x108c46e, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8], 0x81, 0x1504, &(0x7f0000002a80)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20400, 0xe8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 25.315612084s ago: executing program 3 (id=808): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0xfffc, {0x0, 0x1}, {0x3a, 0x2}, @const={0xfffd, {0x1}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 25.281914636s ago: executing program 3 (id=809): socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040410e41424000010203010902790003017fa006080b0012012030000904000000010130000a24011015000a0000000b240d030700000200020409"], 0x0) 23.375341662s ago: executing program 3 (id=818): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207070000001f82513b5994"], 0x0}, 0x0) 21.183560077s ago: executing program 3 (id=831): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2020) 20.04835679s ago: executing program 3 (id=840): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) truncate(&(0x7f0000000040)='./file0\x00', 0x7fff) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x40242, 0x1) close(r0) 18.467278337s ago: executing program 3 (id=848): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x9a}, {0x2000, 0xdddd0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x3, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x9, 0x1, 0x9, 0x2, 0xd, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x6}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.181804685s ago: executing program 33 (id=848): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x9a}, {0x2000, 0xdddd0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x3, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x9, 0x1, 0x9, 0x2, 0xd, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x6}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.757390261s ago: executing program 6 (id=930): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x3, 0xff, 0x81, 0x57e, 0xfffffffffbfffffd, 0x4002004c4, 0xfffffffffffffffa, 0x3, 0x8, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffffffffff001], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.382057362s ago: executing program 6 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 5.253189486s ago: executing program 6 (id=938): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d", 0x13) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10301, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000002f00)=""/4089, 0xff9}, {&(0x7f0000002780)=""/257, 0x101}, {&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x5}, 0x2000fffd}], 0x1, 0x160, 0x0) 5.10956511s ago: executing program 6 (id=940): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2020) 4.515904567s ago: executing program 4 (id=945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.373985542s ago: executing program 6 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4000330030284000080211000000080211000000ffffffffffff400001803c00010001002d1a004017010000800000000008000600100000000800010000000808009f000700000008009f00020000000800260071090000080027000200"], 0x94}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) 3.762160459s ago: executing program 6 (id=952): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) truncate(&(0x7f0000000040)='./file0\x00', 0x7fff) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r0) 3.589530115s ago: executing program 34 (id=952): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) truncate(&(0x7f0000000040)='./file0\x00', 0x7fff) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r0) 3.557628966s ago: executing program 4 (id=954): r0 = userfaultfd(0x801) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 3.435640689s ago: executing program 4 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x54000, 0x41000, 0x8, 0x6f, 0x3, 0x80, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xd, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3}, {0xdddd1000, 0x10000, 0x4, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xb7, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x3, 0x9, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xfb, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xfb, 0x70}, {0x5000, 0x1000, 0x0, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x104]}) 3.252984615s ago: executing program 4 (id=957): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2020) 3.09965971s ago: executing program 1 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 3.032527012s ago: executing program 1 (id=960): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc4, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x6, 0x0, 0x800000001}, {0xb, 0xaff2, 0x8, 0x8, 0x33, 0xfd, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x3}, {0x0, 0x6, 0x5, 0x10, 0x21, 0x10, 0x7, 0xbb, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x3, 0xff, 0x81, 0x57e, 0xfffffffffbfffffd, 0x4002004c4, 0xfffffffffffffffa, 0x3, 0x8, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffffffffff001], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.763767929s ago: executing program 1 (id=961): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7", 0x1d) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10301, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000002f00)=""/4089, 0xff9}, {&(0x7f0000002780)=""/257, 0x101}, {&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x5}, 0x2000fffd}], 0x1, 0x160, 0x0) 2.647630313s ago: executing program 1 (id=962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4000330030284000080211000000080211000000ffffffffffff400001803c00010001002d1a004017010000800000000008000600100000000800010000000808009f000700000008009f00020000000800260071090000080027000200"], 0x94}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) 2.608623724s ago: executing program 4 (id=963): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a", 0x2) 2.560924035s ago: executing program 1 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7b87f2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.310453042s ago: executing program 1 (id=965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009606000b09007a1506a8442a000081a78b0a52528d070c0000000b5d7b080082"], 0x0}, 0x0) 1.847638266s ago: executing program 4 (id=967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) sendmmsg$sock(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="4812", 0x2}], 0x1}}], 0x1, 0x80) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 1.69848736s ago: executing program 35 (id=967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) sendmmsg$sock(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="4812", 0x2}], 0x1}}], 0x1, 0x80) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 1.557004684s ago: executing program 5 (id=971): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7", 0x1d) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10301, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000002f00)=""/4089, 0xff9}, {&(0x7f0000002780)=""/257, 0x101}, {&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x5}, 0x2000fffd}], 0x1, 0x160, 0x0) 1.477002137s ago: executing program 5 (id=972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x4, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000ee850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) 1.316696691s ago: executing program 2 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7b87f2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.255656553s ago: executing program 5 (id=975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x6) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.010168531s ago: executing program 5 (id=976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 424.020068ms ago: executing program 5 (id=977): socket(0x10, 0x80002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 281.998942ms ago: executing program 2 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0xee01, 0x1000) 139.664547ms ago: executing program 2 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 98.851258ms ago: executing program 5 (id=980): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207070000001f82513b5994"], 0x0}, 0x0) 67.841579ms ago: executing program 2 (id=981): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7", 0x1d) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10301, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000002f00)=""/4089, 0xff9}, {&(0x7f0000002780)=""/257, 0x101}, {&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x5}, 0x2000fffd}], 0x1, 0x160, 0x0) 36.29848ms ago: executing program 2 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="4000330030284000080211000000080211000000ffffffffffff400001803c00010001002d1a004017010000800000000008000600100000000800010000000808009f000700000008009f00020000000800260071090000080027000200"], 0x94}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) 0s ago: executing program 2 (id=983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 109.714161][ T4199] usb 4-1: 0:7 : does not exist [ 109.742885][ T4199] usb 4-1: 0:8 : does not exist [ 109.758460][ T4199] usb 4-1: 0:9 : does not exist [ 109.760510][ T5477] fuse: Bad value for 'fd' [ 109.868251][ T4199] usb 4-1: 0:10 : does not exist [ 109.873328][ T4199] usb 4-1: 0:11 : does not exist [ 109.883647][ T5482] loop4: detected capacity change from 0 to 16 [ 109.886808][ T4199] usb 4-1: 0:12 : does not exist [ 109.894815][ T4199] usb 4-1: 0:13 : does not exist [ 109.902838][ T5483] loop2: detected capacity change from 0 to 256 [ 109.909165][ T4199] usb 4-1: 0:14 : does not exist [ 109.914233][ T4199] usb 4-1: 0:15 : does not exist [ 109.919626][ T4199] usb 4-1: 0:16 : does not exist [ 109.924591][ T4199] usb 4-1: 0:17 : does not exist [ 109.948029][ T4199] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 109.958023][ T4199] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 109.979113][ T4199] usb 4-1: USB disconnect, device number 10 [ 110.237231][ T4237] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.272173][ T5495] loop3: detected capacity change from 0 to 1024 [ 110.290288][ T5483] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 110.306605][ T5482] erofs: (device loop4): mounted with root inode @ nid 36. [ 110.397594][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 110.424168][ T5495] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.477172][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 110.489426][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.637120][ T25] audit: type=1800 audit(1778828175.895:4): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.432" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 110.707399][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.727148][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.917375][ T4237] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 110.937604][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.946507][ T4237] usb 1-1: Product: syz [ 110.970874][ T4237] usb 1-1: Manufacturer: syz [ 110.975508][ T4237] usb 1-1: SerialNumber: syz [ 111.007746][ T4237] usb 1-1: config 0 descriptor?? [ 111.059452][ T4237] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 111.084520][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.207134][ T4199] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.215043][ T5525] loop4: detected capacity change from 0 to 16 [ 111.315197][ T5525] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.438957][ T5528] loop2: detected capacity change from 0 to 256 [ 111.745788][ T5528] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 112.072945][ T5528] loop2: detected capacity change from 0 to 128 [ 112.124629][ T5537] loop1: detected capacity change from 0 to 1024 [ 112.148875][ T5528] FAT-fs (loop2): Unrecognized mount option "shortY" or missing value [ 112.179229][ T5537] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 112.196454][ T5537] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.216660][ T25] audit: type=1800 audit(1778828177.475:5): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.449" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 112.217294][ T5537] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.449: lblock 0 mapped to illegal pblock 0 (length 6) [ 112.252150][ T4199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.257678][ T5537] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.449: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 112.262297][ T4199] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 112.262345][ T4199] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 112.309318][ T5528] loop2: detected capacity change from 0 to 256 [ 112.467640][ T4199] usb 4-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 112.476718][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.513328][ T4199] usb 4-1: Product: syz [ 112.523059][ T4199] usb 4-1: Manufacturer: syz [ 112.530508][ T4199] usb 4-1: SerialNumber: syz [ 112.814377][ T5552] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 112.836232][ T5552] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.977301][ T4199] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 113.007250][ T4199] usb 4-1: 0:2 : does not exist [ 113.012974][ T4199] usb 4-1: 0:3 : does not exist [ 113.022268][ T4199] usb 4-1: 0:4 : does not exist [ 113.028342][ T4199] usb 4-1: 0:5 : does not exist [ 113.033640][ T4199] usb 4-1: 0:6 : does not exist [ 113.038971][ T4199] usb 4-1: 0:7 : does not exist [ 113.043926][ T4199] usb 4-1: 0:8 : does not exist [ 113.049197][ T4199] usb 4-1: 0:9 : does not exist [ 113.055040][ T4199] usb 4-1: 0:10 : does not exist [ 113.060678][ T4199] usb 4-1: 0:11 : does not exist [ 113.065686][ T4199] usb 4-1: 0:12 : does not exist [ 113.131087][ T4199] usb 4-1: 0:13 : does not exist [ 113.136083][ T4199] usb 4-1: 0:14 : does not exist [ 113.141101][ T4199] usb 4-1: 0:15 : does not exist [ 113.146066][ T4199] usb 4-1: 0:16 : does not exist [ 113.151110][ T4199] usb 4-1: 0:17 : does not exist [ 113.164387][ T1107] usb 1-1: USB disconnect, device number 9 [ 113.172145][ T4199] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 113.177677][ T4233] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 113.184116][ T4199] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 113.210683][ T4199] usb 4-1: USB disconnect, device number 11 [ 113.452107][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.468379][ T4267] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.615332][ T5572] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 113.618872][ T4233] usb 5-1: config 220 has an invalid descriptor of length 252, skipping remainder of the config [ 113.650789][ T5572] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.669744][ T5578] fuse: Bad value for 'fd' [ 113.683648][ T5572] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.463: lblock 0 mapped to illegal pblock 0 (length 6) [ 113.721848][ T4233] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 113.737234][ T4267] usb 2-1: Using ep0 maxpacket: 8 [ 113.742282][ T5572] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.463: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 113.770382][ T4233] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 113.786124][ T4233] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 113.802336][ T4233] usb 5-1: config 220 interface 0 has no altsetting 0 [ 113.809510][ T4233] usb 5-1: config 220 interface 1 has no altsetting 0 [ 113.820072][ T5572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 113.854268][ T5572] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.463: mark_inode_dirty error [ 113.861318][ T5583] netlink: 120 bytes leftover after parsing attributes in process `syz.2.467'. [ 113.872439][ T5572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 113.884743][ T4199] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.902312][ T5572] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.463: mark_inode_dirty error [ 113.924239][ T5572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 113.934510][ T4267] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.946853][ T5572] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.463: mark_inode_dirty error [ 113.967182][ T4233] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 113.984866][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.984891][ T5572] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 113.994478][ T4233] usb 5-1: Product: syz [ 114.014722][ T4233] usb 5-1: Manufacturer: syz [ 114.019631][ T5572] EXT4-fs (loop3): This should not happen!! Data will be lost [ 114.019631][ T5572] [ 114.035030][ T4233] usb 5-1: SerialNumber: syz [ 114.058066][ T4267] usb 2-1: config 4 has an invalid interface number: 206 but max is 1 [ 114.066262][ T4267] usb 2-1: config 4 has an invalid interface number: 194 but max is 1 [ 114.086999][ T4199] usb 1-1: device descriptor read/64, error -71 [ 114.094971][ T4267] usb 2-1: config 4 has no interface number 0 [ 114.102451][ T4267] usb 2-1: config 4 has no interface number 1 [ 114.109516][ T4267] usb 2-1: config 4 interface 206 has no altsetting 0 [ 114.118449][ T4267] usb 2-1: config 4 interface 194 has no altsetting 0 [ 114.297395][ T4267] usb 2-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=ca.17 [ 114.306520][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.314854][ T4267] usb 2-1: Product: syz [ 114.319113][ T4267] usb 2-1: Manufacturer: syz [ 114.323708][ T4267] usb 2-1: SerialNumber: syz [ 114.367143][ T4199] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.397805][ T4233] usb 5-1: selecting invalid altsetting 0 [ 114.405781][ T4233] usb 5-1: selecting invalid altsetting 0 [ 114.414659][ T4233] usbtest: probe of 5-1:220.1 failed with error -22 [ 114.424813][ T4233] usb 5-1: USB disconnect, device number 10 [ 114.477072][ T4266] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 114.577112][ T4199] usb 1-1: device descriptor read/64, error -71 [ 114.705294][ T4199] usb usb1-port1: attempt power cycle [ 114.712112][ T4267] usb 2-1: USB disconnect, device number 6 [ 114.718593][ T4266] usb 4-1: Using ep0 maxpacket: 32 [ 114.840429][ T4266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.850753][ T4266] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.077058][ T4266] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 115.079132][ T5599] set_capacity_and_notify: 2 callbacks suppressed [ 115.079145][ T5599] loop2: detected capacity change from 0 to 256 [ 115.091296][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.099173][ T5599] 9pnet: Insufficient options for proto=fd [ 115.224950][ T4266] usb 4-1: Product: syz [ 115.345852][ T4266] usb 4-1: Manufacturer: syz [ 115.431849][ T4266] usb 4-1: SerialNumber: syz [ 115.623598][ T4266] usb 4-1: config 0 descriptor?? [ 115.760362][ T4199] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 115.943985][ T5608] netlink: 120 bytes leftover after parsing attributes in process `syz.4.478'. [ 115.953739][ T4199] usb 1-1: device descriptor read/8, error -71 [ 115.982451][ T4266] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 116.237022][ T4199] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 116.349166][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.378340][ T4199] usb 1-1: device descriptor read/8, error -71 [ 116.508059][ T4199] usb usb1-port1: unable to enumerate USB device [ 116.778032][ T5627] 9pnet: Insufficient options for proto=fd [ 116.988690][ T4266] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.346979][ T4235] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 117.377137][ T4266] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.438282][ T4266] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.577161][ T4266] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.602215][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 117.617031][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 117.668766][ T4266] usb 3-1: SerialNumber: syz [ 117.726498][ T5635] loop1: detected capacity change from 0 to 256 [ 117.767937][ T5635] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 117.826475][ T4199] usb 4-1: USB disconnect, device number 12 [ 117.857024][ T4235] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.893831][ T5639] loop3: detected capacity change from 0 to 1024 [ 117.956892][ T4235] usb 1-1: config 4 has an invalid interface number: 206 but max is 1 [ 117.975136][ T4235] usb 1-1: config 4 has an invalid interface number: 194 but max is 1 [ 117.984486][ T4235] usb 1-1: config 4 has no interface number 0 [ 117.987026][ T5641] netlink: 120 bytes leftover after parsing attributes in process `syz.1.490'. [ 117.999735][ T4266] usb 3-1: 0:2 : does not exist [ 118.061377][ T4235] usb 1-1: config 4 has no interface number 1 [ 118.068672][ T4266] usb 3-1: USB disconnect, device number 7 [ 118.087204][ T4235] usb 1-1: config 4 interface 206 has no altsetting 0 [ 118.133896][ T4235] usb 1-1: config 4 interface 194 has no altsetting 0 [ 118.294849][ T5658] loop1: detected capacity change from 0 to 1024 [ 118.306829][ T4235] usb 1-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=ca.17 [ 118.316283][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.325014][ T4235] usb 1-1: Product: syz [ 118.329746][ T4235] usb 1-1: Manufacturer: syz [ 118.334391][ T4235] usb 1-1: SerialNumber: syz [ 118.339718][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.392644][ T5658] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.426848][ T1107] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.726929][ T1107] usb 5-1: device descriptor read/64, error -71 [ 118.897078][ T4267] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.027426][ T1107] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 119.216808][ T4267] usb 3-1: Using ep0 maxpacket: 32 [ 119.337075][ T4267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.347518][ T1107] usb 5-1: device descriptor read/64, error -71 [ 119.370231][ T5670] loop3: detected capacity change from 0 to 1024 [ 119.381957][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.476234][ T4235] usb 1-1: USB disconnect, device number 14 [ 119.477259][ T1107] usb usb5-port1: attempt power cycle [ 120.237050][ T4267] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 120.246119][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.255256][ T4267] usb 3-1: Product: syz [ 120.259468][ T4267] usb 3-1: Manufacturer: syz [ 120.264072][ T4267] usb 3-1: SerialNumber: syz [ 120.271136][ T4267] usb 3-1: config 0 descriptor?? [ 120.317767][ T5678] netlink: 120 bytes leftover after parsing attributes in process `syz.0.504'. [ 120.342765][ T4267] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 120.400521][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.696668][ T5697] loop1: detected capacity change from 0 to 1024 [ 120.703508][ T5699] loop3: detected capacity change from 0 to 8 [ 120.937363][ T4233] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 121.216828][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 121.303493][ T1107] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 121.324827][ T5699] SQUASHFS error: Failed to read block 0x2d7: -5 [ 121.356993][ T5702] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 121.364407][ T5699] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 121.376992][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.396780][ T1107] usb 5-1: device descriptor read/8, error -71 [ 121.476687][ T4233] usb 1-1: config 4 has an invalid interface number: 206 but max is 1 [ 121.490234][ T4233] usb 1-1: config 4 has an invalid interface number: 194 but max is 1 [ 121.504248][ T4233] usb 1-1: config 4 has no interface number 0 [ 121.549527][ T4233] usb 1-1: config 4 has no interface number 1 [ 121.599089][ T4233] usb 1-1: config 4 interface 206 has no altsetting 0 [ 121.606187][ T4233] usb 1-1: config 4 interface 194 has no altsetting 0 [ 122.640863][ T4236] usb 3-1: USB disconnect, device number 8 [ 122.720667][ T5719] netlink: 120 bytes leftover after parsing attributes in process `syz.1.518'. [ 122.846633][ T4233] usb 1-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=ca.17 [ 122.851110][ T5727] loop1: detected capacity change from 0 to 512 [ 122.855745][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.886344][ T4233] usb 1-1: Product: syz [ 122.891364][ T4233] usb 1-1: Manufacturer: syz [ 122.906444][ T4233] usb 1-1: SerialNumber: syz [ 122.928228][ T5727] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nouid32,,errors=continue. Quota mode: writeback. [ 122.947663][ T5727] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.972915][ T5727] process 'syz.1.522' launched './file1' with NULL argv: empty string added [ 123.127113][ T5739] loop1: detected capacity change from 0 to 1024 [ 123.287110][ T4233] usb 1-1: USB disconnect, device number 15 [ 123.298379][ T5741] loop1: detected capacity change from 0 to 128 [ 123.345097][ T5741] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.356644][ T5741] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.386432][ T1107] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 123.671411][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.883216][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.894280][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.913529][ T5765] loop0: detected capacity change from 0 to 1024 [ 123.936594][ T4233] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 123.966873][ T4177] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.216720][ T4177] usb 2-1: Using ep0 maxpacket: 32 [ 124.222389][ T1107] usb 5-1: string descriptor 0 read error: -22 [ 124.234389][ T1107] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 124.367433][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.377193][ T4177] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.477472][ T4177] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.722971][ T5774] loop0: detected capacity change from 0 to 128 [ 124.746508][ T4177] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 124.755693][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.767525][ T4177] usb 2-1: Product: syz [ 124.771723][ T4177] usb 2-1: Manufacturer: syz [ 124.780589][ T4177] usb 2-1: SerialNumber: syz [ 124.794107][ T4177] usb 2-1: config 0 descriptor?? [ 124.802270][ T5774] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.817802][ T4233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.818488][ T5774] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.834215][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.864079][ T4177] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 124.889729][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.926702][ T4233] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.943726][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 124.952440][ T4233] usb 4-1: SerialNumber: syz [ 125.239783][ T4233] usb 4-1: 0:2 : does not exist [ 125.244690][ T4233] usb 4-1: unit 4 not found! [ 125.936103][ T4628] usb 5-1: USB disconnect, device number 14 [ 125.948974][ T4233] usb 4-1: USB disconnect, device number 13 [ 126.020069][ T5794] loop2: detected capacity change from 0 to 256 [ 126.091417][ T5794] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.111617][ T5801] loop3: detected capacity change from 0 to 1024 [ 126.139669][ T5794] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 126.182123][ T5794] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 126.187601][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.434675][ T25] audit: type=1804 audit(1778828191.686:6): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.543" name="/newroot/120/bus/bus" dev="loop2" ino=1048594 res=1 errno=0 [ 127.244415][ T4267] usb 2-1: USB disconnect, device number 7 [ 127.257166][ T25] audit: type=1804 audit(1778828191.836:7): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.543" name="/newroot/120/bus/bus" dev="loop2" ino=1048594 res=1 errno=0 [ 127.283523][ T5811] loop0: detected capacity change from 0 to 128 [ 127.405446][ T5821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.552'. [ 127.507148][ T5811] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.535320][ T5811] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.555195][ T5828] loop3: detected capacity change from 0 to 256 [ 127.580824][ T5828] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 128.396144][ T4233] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.600327][ T5847] loop4: detected capacity change from 0 to 8 [ 128.726524][ T4628] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.826517][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.861881][ T4233] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.966327][ T4628] usb 2-1: Using ep0 maxpacket: 32 [ 129.012895][ T5847] SQUASHFS error: zlib decompression failed, data probably corrupt [ 129.138767][ T5847] SQUASHFS error: Failed to read block 0x9b: -5 [ 129.146843][ T4628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.174099][ T4233] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.252322][ T4628] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.271634][ T5847] SQUASHFS error: Unable to read metadata cache entry [99] [ 129.278949][ T5847] SQUASHFS error: Unable to read inode 0x127 [ 129.285491][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 129.322427][ T4233] usb 3-1: SerialNumber: syz [ 129.364837][ T5854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.565'. [ 129.486394][ T4628] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 129.509642][ T4628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.525711][ T4628] usb 2-1: Product: syz [ 129.528557][ T5858] loop3: detected capacity change from 0 to 128 [ 129.530592][ T4628] usb 2-1: Manufacturer: syz [ 129.548191][ T4628] usb 2-1: SerialNumber: syz [ 129.556323][ T4628] usb 2-1: config 0 descriptor?? [ 129.583976][ T5864] loop4: detected capacity change from 0 to 256 [ 129.602630][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.611065][ T4628] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 129.613498][ T5858] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.627488][ T4233] usb 3-1: 0:2 : does not exist [ 129.654878][ T4233] usb 3-1: USB disconnect, device number 9 [ 129.686624][ T5864] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 129.800482][ T5864] loop4: detected capacity change from 0 to 128 [ 129.805921][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.938847][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.972531][ T5864] FAT-fs (loop4): Unrecognized mount option "shortY" or missing value [ 131.679399][ T5893] netlink: 48 bytes leftover after parsing attributes in process `syz.0.576'. [ 131.754804][ T4236] usb 2-1: USB disconnect, device number 8 [ 132.506086][ T4266] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.620094][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.626620][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.766057][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 132.886614][ T4266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.999921][ T4266] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.071758][ T5939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.590'. [ 133.164871][ T4234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.260132][ T5952] fuse: Bad value for 'group_id' [ 133.276263][ T4266] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 133.292955][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.309818][ T5949] loop3: detected capacity change from 0 to 512 [ 133.329342][ T4266] usb 3-1: Product: syz [ 133.333611][ T4266] usb 3-1: Manufacturer: syz [ 133.344199][ T4266] usb 3-1: SerialNumber: syz [ 133.358869][ T4266] usb 3-1: config 0 descriptor?? [ 133.396138][ T5949] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.405604][ T5949] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 133.439088][ T5949] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 133.443123][ T4266] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 133.464380][ T5949] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 133.486106][ T4177] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.502319][ T5949] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 133.521939][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.566252][ T4234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.576754][ T4234] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.703742][ T5949] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 133.758761][ T4234] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.768598][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 133.776758][ T4234] usb 2-1: SerialNumber: syz [ 134.466739][ T4177] usb 5-1: device descriptor read/64, error -71 [ 134.540699][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 134.552736][ T4234] usb 2-1: 0:2 : does not exist [ 134.557866][ T4234] usb 2-1: unit 4 not found! [ 134.578061][ T4234] usb 2-1: USB disconnect, device number 9 [ 134.667006][ T5986] loop1: detected capacity change from 0 to 8 [ 134.755570][ T5986] SQUASHFS error: zlib decompression failed, data probably corrupt [ 134.765833][ T4177] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 134.790266][ T5994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.601'. [ 134.815978][ T5986] SQUASHFS error: Failed to read block 0x9b: -5 [ 134.832490][ T5986] SQUASHFS error: Unable to read metadata cache entry [99] [ 134.856062][ T5986] SQUASHFS error: Unable to read inode 0x127 [ 134.876762][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.956337][ T4177] usb 5-1: device descriptor read/64, error -71 [ 135.038901][ T25] audit: type=1326 audit(1778828200.306:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.0.603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1c3790e59 code=0x0 [ 135.086120][ T4177] usb usb5-port1: attempt power cycle [ 135.137119][ T6013] binder: 6002:6013 unknown command 0 [ 135.142543][ T6013] binder: 6002:6013 ioctl c0306201 2000000001c0 returned -22 [ 135.170498][ T6014] fuse: Bad value for 'group_id' [ 135.372586][ T6022] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 135.383795][ T6022] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 135.554972][ T4177] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 135.571712][ T4236] usb 3-1: USB disconnect, device number 10 [ 135.587256][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 135.695994][ T4177] usb 5-1: device descriptor read/8, error -71 [ 135.880543][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.613'. [ 135.985811][ T4177] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 136.090565][ T4177] usb 5-1: device descriptor read/8, error -71 [ 136.099733][ T6070] fuse: Bad value for 'group_id' [ 136.221014][ T4177] usb usb5-port1: unable to enumerate USB device [ 136.249394][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 136.252411][ T6073] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 136.273917][ T6073] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 136.385752][ T4266] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 136.505082][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 136.626315][ T4266] usb 1-1: Using ep0 maxpacket: 32 [ 136.682735][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 136.751443][ T4266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.778865][ T4266] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.877781][ T6117] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 136.885836][ T6117] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 136.928957][ T4177] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.976951][ T4266] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 136.995966][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.004018][ T4266] usb 1-1: Product: syz [ 137.023730][ T4266] usb 1-1: Manufacturer: syz [ 137.035813][ T4266] usb 1-1: SerialNumber: syz [ 137.054119][ T4266] usb 1-1: config 0 descriptor?? [ 137.107260][ T4266] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 137.136480][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.147351][ T4177] usb 3-1: device descriptor read/64, error -71 [ 137.407355][ T4267] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 137.457080][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 138.114487][ T4177] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.195608][ T4236] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 138.256364][ T4267] usb 2-1: Using ep0 maxpacket: 16 [ 138.335664][ T4177] usb 3-1: device descriptor read/64, error -71 [ 138.405679][ T4267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.415958][ T4267] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 138.428908][ T4267] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.438042][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.448480][ T4267] usb 2-1: config 0 descriptor?? [ 138.465889][ T4177] usb usb3-port1: attempt power cycle [ 138.487739][ T4267] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 138.525783][ T4199] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.585689][ T4236] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.595916][ T4236] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.755742][ T4236] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 138.764962][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.772993][ T4236] usb 5-1: Product: syz [ 138.777320][ T4199] usb 4-1: Using ep0 maxpacket: 32 [ 138.782490][ T4236] usb 5-1: Manufacturer: syz [ 138.787133][ T4236] usb 5-1: SerialNumber: syz [ 138.895678][ T4199] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 138.906081][ T4177] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.995766][ T4177] usb 3-1: device descriptor read/8, error -71 [ 139.068304][ T4236] usb 5-1: unit 5 not found! [ 139.073064][ T4199] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 139.083770][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.093249][ T4199] usb 4-1: Product: syz [ 139.100988][ T4236] usb 5-1: USB disconnect, device number 19 [ 139.107700][ T4199] usb 4-1: Manufacturer: syz [ 139.112313][ T4199] usb 4-1: SerialNumber: syz [ 139.168075][ T4199] asix: probe of 4-1:2.0 failed with error -22 [ 139.199327][ T4235] usb 1-1: USB disconnect, device number 16 [ 139.265663][ T4177] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 139.326192][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.355671][ T4177] usb 3-1: device descriptor read/8, error -71 [ 139.476604][ T4177] usb usb3-port1: unable to enumerate USB device [ 139.580611][ T6148] loop4: detected capacity change from 0 to 1024 [ 139.656592][ T6148] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 139.676869][ T6148] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.715506][ T4235] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 139.766838][ T6148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 139.798999][ T6148] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.648: mark_inode_dirty error [ 139.811228][ T6148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 139.821648][ T6148] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.648: mark_inode_dirty error [ 139.833571][ T6148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 139.843996][ T6148] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.648: mark_inode_dirty error [ 139.856149][ T6148] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 139.868592][ T6148] EXT4-fs (loop4): This should not happen!! Data will be lost [ 139.868592][ T6148] [ 139.990326][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.652'. [ 140.094927][ T4266] usb 2-1: USB disconnect, device number 10 [ 140.165603][ T4235] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.245721][ T4235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.255926][ T4235] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 140.264910][ T4235] usb 1-1: config 1 interface 1 has no altsetting 0 [ 140.345671][ T4233] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 140.545674][ T4235] usb 1-1: string descriptor 0 read error: -22 [ 140.551966][ T4235] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 140.561198][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.585653][ T4266] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 140.615640][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 140.631452][ T4235] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 140.672430][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.672919][ T6180] fuse: Bad value for 'fd' [ 140.741373][ T6182] loop2: detected capacity change from 0 to 1024 [ 140.755899][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.766547][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.785512][ T4266] usb 2-1: device descriptor read/64, error -71 [ 140.812299][ T6182] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 140.841907][ T6182] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.890402][ T6182] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 140.905594][ T6182] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.661: mark_inode_dirty error [ 140.921973][ T6182] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 140.931839][ T6182] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.661: mark_inode_dirty error [ 140.945131][ T6182] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 140.956232][ T6182] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.661: mark_inode_dirty error [ 140.965580][ T4233] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 140.976965][ T6182] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 140.981685][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.989918][ T6182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.989918][ T6182] [ 141.002372][ T4233] usb 5-1: Product: syz [ 141.011149][ T4233] usb 5-1: Manufacturer: syz [ 141.021006][ T4233] usb 5-1: SerialNumber: syz [ 141.027343][ T4233] usb 5-1: config 0 descriptor?? [ 141.070349][ T4266] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 141.083075][ T4233] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 141.134365][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.158606][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.663'. [ 141.230441][ T6193] loop2: detected capacity change from 0 to 256 [ 141.237712][ T4233] usb 4-1: USB disconnect, device number 14 [ 141.263894][ T6193] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 141.325472][ T4266] usb 2-1: device descriptor read/64, error -71 [ 141.403762][ T6193] loop2: detected capacity change from 0 to 256 [ 141.465713][ T4266] usb usb2-port1: attempt power cycle [ 141.935684][ T4266] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.106354][ T4266] usb 2-1: device descriptor read/8, error -71 [ 142.295069][ T4628] usb 1-1: USB disconnect, device number 17 [ 142.314814][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 142.416602][ T4266] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.516098][ T4235] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 142.535697][ T4266] usb 2-1: device descriptor read/8, error -71 [ 142.555409][ T4881] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 142.665481][ T4266] usb usb2-port1: unable to enumerate USB device [ 142.765389][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 142.895563][ T4628] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 142.935571][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.945481][ T4881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.955765][ T4881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.966747][ T4881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.976765][ T4881] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 142.985911][ T4881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.996287][ T4881] usb 4-1: config 0 descriptor?? [ 143.015488][ T4235] usb 3-1: config 4 has an invalid interface number: 194 but max is 0 [ 143.023976][ T4235] usb 3-1: config 4 has no interface number 0 [ 143.030414][ T4235] usb 3-1: config 4 interface 194 has no altsetting 0 [ 143.193621][ T4266] usb 5-1: USB disconnect, device number 20 [ 143.225698][ T4235] usb 3-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=ca.17 [ 143.234806][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.251002][ T4235] usb 3-1: Product: syz [ 143.255861][ T4235] usb 3-1: Manufacturer: syz [ 143.261477][ T4235] usb 3-1: SerialNumber: syz [ 143.266375][ T4628] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 143.279167][ T4628] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 143.303110][ T6228] loop4: detected capacity change from 0 to 256 [ 143.311852][ T6228] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 143.410913][ T6228] loop4: detected capacity change from 0 to 128 [ 143.428476][ T6228] FAT-fs (loop4): Unrecognized mount option "shortY" or missing value [ 143.445579][ T4628] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 143.454963][ T4628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.458890][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 143.468282][ T4881] wacom 0003:056A:0010.0004: unknown main item tag 0x0 [ 143.493375][ T4881] wacom 0003:056A:0010.0004: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 143.506201][ T4628] usb 1-1: Product: syz [ 143.510394][ T4628] usb 1-1: Manufacturer: syz [ 143.515027][ T4628] usb 1-1: SerialNumber: syz [ 143.522268][ T4881] wacom 0003:056A:0010.0004: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 143.536402][ T6228] loop4: detected capacity change from 0 to 256 [ 143.553663][ T4881] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0004/input/input7 [ 143.626867][ T4235] usb 3-1: USB disconnect, device number 15 [ 143.740108][ T6211] loop3: detected capacity change from 0 to 736 [ 143.915556][ T4628] usb 1-1: unit 5 not found! [ 143.952050][ T4628] usb 1-1: USB disconnect, device number 18 [ 143.978112][ T4266] usb 4-1: USB disconnect, device number 15 [ 144.058107][ T4881] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 144.206089][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.315590][ T4881] usb 2-1: Using ep0 maxpacket: 32 [ 144.420085][ T6260] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.423651][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.696'. [ 144.440177][ T4881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.452978][ T4881] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.478342][ T6265] fuse: Unknown parameter 'grou00000000000000000000' [ 144.584341][ T6273] loop0: detected capacity change from 0 to 512 [ 144.602178][ T6273] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.635704][ T4881] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 144.644966][ T6273] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 144.668113][ T4881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.674487][ T6274] loop2: detected capacity change from 0 to 1024 [ 144.698923][ T4881] usb 2-1: Product: syz [ 144.703124][ T4881] usb 2-1: Manufacturer: syz [ 144.706823][ T6273] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 144.711444][ T4881] usb 2-1: SerialNumber: syz [ 144.729495][ T4881] usb 2-1: config 0 descriptor?? [ 144.737604][ T6273] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 144.757583][ T6273] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 144.839042][ T4881] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 144.876116][ T6273] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 146.210297][ T4236] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 146.356878][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.500418][ T4236] usb 4-1: Using ep0 maxpacket: 16 [ 146.547403][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'. [ 146.612054][ T6301] loop0: detected capacity change from 0 to 1024 [ 146.653154][ T6301] EXT4-fs (loop0): Ignoring removed orlov option [ 146.655422][ T4236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.692223][ T4236] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 146.726807][ T6301] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,grpid,data_err=ignore,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,i_version,norecovery,,errors=continue. Quota mode: none. [ 146.732876][ T4236] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.748589][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.797702][ T6309] fuse: Unknown parameter 'grou00000000000000000000' [ 146.851146][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.855337][ T4266] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 146.893379][ T4236] usb 4-1: config 0 descriptor?? [ 146.947443][ T4236] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 146.995452][ T6314] loop2: detected capacity change from 0 to 256 [ 147.026871][ T6316] loop0: detected capacity change from 0 to 256 [ 147.075199][ T6314] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.255591][ T6318] loop2: detected capacity change from 0 to 512 [ 147.285317][ T4266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.304895][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.316930][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.326843][ T4266] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 147.337077][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.350400][ T4628] usb 2-1: USB disconnect, device number 15 [ 147.370873][ T4266] usb 5-1: config 0 descriptor?? [ 147.437298][ T6318] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.718: iget: bad i_size value: 360287970189639690 [ 147.491150][ T6318] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.718: couldn't read orphan inode 15 (err -117) [ 147.504225][ T6318] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.517124][ T6318] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.229951][ T4199] usb 4-1: USB disconnect, device number 16 [ 148.283265][ T6328] loop4: detected capacity change from 0 to 736 [ 148.328013][ T4266] wacom 0003:056A:0010.0005: unknown main item tag 0x0 [ 148.338868][ T4266] wacom 0003:056A:0010.0005: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 148.355088][ T4881] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 148.383884][ T4266] wacom 0003:056A:0010.0005: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 148.427056][ T4266] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0005/input/input10 [ 148.440425][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 148.576065][ T4266] usb 5-1: USB disconnect, device number 21 [ 148.586409][ T6343] fuse: Unknown parameter 'grou00000000000000000000' [ 148.723246][ T6350] loop1: detected capacity change from 0 to 256 [ 148.736451][ T6350] 9pnet: Insufficient options for proto=fd [ 148.751466][ T6345] fido_id[6345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 148.766164][ T4881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.781750][ T4881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.960505][ T6354] pit: kvm: requested 192762 ns i8254 timer period limited to 200000 ns [ 148.975686][ T6354] pit: kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 148.984586][ T6354] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 149.000452][ T6354] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 149.012625][ T6354] pit: kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 149.031648][ T6354] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 149.041184][ T6354] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 149.051472][ T6354] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 149.060135][ T4881] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 149.069286][ T4881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.071880][ T6354] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 149.077566][ T4881] usb 1-1: Product: syz [ 149.090255][ T4881] usb 1-1: Manufacturer: syz [ 149.091982][ T6354] pit: kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 149.095058][ T4235] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 149.111377][ T4881] usb 1-1: SerialNumber: syz [ 149.385207][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 149.505357][ T4235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.578373][ T4235] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.645571][ T4881] usb 1-1: unit 5 not found! [ 149.683714][ T4881] usb 1-1: USB disconnect, device number 19 [ 149.835220][ T4235] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 149.870435][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.892408][ T4235] usb 3-1: Product: syz [ 149.910436][ T4235] usb 3-1: Manufacturer: syz [ 149.920362][ T6366] netlink: 120 bytes leftover after parsing attributes in process `syz.4.735'. [ 149.920979][ T4235] usb 3-1: SerialNumber: syz [ 149.933079][ T6368] loop1: detected capacity change from 0 to 1024 [ 149.941072][ T4235] usb 3-1: config 0 descriptor?? [ 149.988384][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.037786][ T4235] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 150.057734][ T6377] fuse: Unknown parameter 'group_i00000000000000000000' [ 150.097398][ T25] audit: type=1326 audit(1778828215.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.3.738" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b4915e59 code=0x0 [ 150.144991][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.326779][ T6386] loop4: detected capacity change from 0 to 1024 [ 150.375257][ T6386] EXT4-fs (loop4): Ignoring removed oldalloc option [ 150.396866][ T6386] EXT4-fs (loop4): Ignoring removed bh option [ 150.416951][ T6386] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.440285][ T6386] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 150.440285][ T6386] [ 150.652811][ T6393] loop4: detected capacity change from 0 to 256 [ 150.664345][ T6393] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 150.675961][ T4235] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 150.786359][ T6393] loop4: detected capacity change from 0 to 128 [ 150.815900][ T6393] FAT-fs (loop4): Unrecognized mount option "shortY" or missing value [ 151.055155][ T4235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.082742][ T4235] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.172009][ T6404] netlink: 120 bytes leftover after parsing attributes in process `syz.4.750'. [ 151.185038][ T4235] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.208097][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 151.232959][ T4235] usb 1-1: SerialNumber: syz [ 151.244670][ T6407] fuse: Unknown parameter 'group_i00000000000000000000' [ 151.264883][ T4266] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 151.537879][ T4235] usb 1-1: 0:2 : does not exist [ 151.559793][ T4235] usb 1-1: USB disconnect, device number 20 [ 151.599541][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.655086][ T4266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.681162][ T4266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.719449][ T4266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.753575][ T4266] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 151.773672][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.817014][ T4266] usb 4-1: config 0 descriptor?? [ 152.214969][ T4267] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 152.276839][ T6432] netlink: 120 bytes leftover after parsing attributes in process `syz.1.761'. [ 152.291709][ T6434] fuse: Unknown parameter 'group_i00000000000000000000' [ 152.317934][ T4266] wacom 0003:056A:0010.0006: unknown main item tag 0x0 [ 152.344843][ T4266] wacom 0003:056A:0010.0006: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 152.376828][ T4266] wacom 0003:056A:0010.0006: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 152.436889][ T4266] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0006/input/input13 [ 152.495015][ T4267] usb 5-1: Using ep0 maxpacket: 8 [ 152.564683][ T4199] usb 3-1: USB disconnect, device number 16 [ 152.602119][ T4177] usb 4-1: USB disconnect, device number 17 [ 152.625154][ T4267] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.695130][ T4267] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 152.706930][ T4267] usb 5-1: can't read configurations, error -71 [ 152.730581][ T6442] fido_id[6442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 152.788204][ T6447] loop2: detected capacity change from 0 to 128 [ 152.814808][ T4236] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 152.834230][ T6444] loop0: detected capacity change from 0 to 8192 [ 153.305060][ T4236] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.362823][ T6462] loop3: detected capacity change from 0 to 256 [ 153.425073][ T4236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.444921][ T4236] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 153.464254][ T4236] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 153.469846][ T4266] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 153.477124][ T4236] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 153.514464][ T4236] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 153.536780][ T4236] usb 2-1: config 1 interface 1 has no altsetting 0 [ 153.744870][ T4266] usb 1-1: Using ep0 maxpacket: 8 [ 153.784464][ T6480] loop3: detected capacity change from 0 to 1024 [ 153.835113][ T4236] usb 2-1: string descriptor 0 read error: -22 [ 153.841387][ T4236] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 153.852814][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.860893][ T6480] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 153.861010][ T6480] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.888619][ T4266] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 153.897438][ T4266] usb 1-1: config 0 has no interface number 0 [ 153.913006][ T6480] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.783: lblock 0 mapped to illegal pblock 0 (length 6) [ 153.926760][ T4267] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 153.932921][ T6480] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.783: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 153.954934][ T4177] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 153.961089][ T6480] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.783: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.977600][ T6480] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 153.990350][ T6480] EXT4-fs (loop3): This should not happen!! Data will be lost [ 153.990350][ T6480] [ 154.094891][ T4266] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 154.111966][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.120698][ T4266] usb 1-1: Product: syz [ 154.124999][ T4266] usb 1-1: Manufacturer: syz [ 154.129610][ T4266] usb 1-1: SerialNumber: syz [ 154.133240][ T6486] loop3: detected capacity change from 0 to 764 [ 154.140206][ T4266] usb 1-1: config 0 descriptor?? [ 154.194819][ T4267] usb 5-1: Using ep0 maxpacket: 32 [ 154.214936][ T4177] usb 3-1: Using ep0 maxpacket: 8 [ 154.324986][ T4267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.335221][ T4267] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.348284][ T4177] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.414916][ T4177] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 154.422490][ T4177] usb 3-1: can't read configurations, error -71 [ 154.427945][ T4266] usb 1-1: USB disconnect, device number 21 [ 154.544844][ T4267] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 154.554028][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.562109][ T4267] usb 5-1: Product: syz [ 154.567342][ T4267] usb 5-1: Manufacturer: syz [ 154.573050][ T4267] usb 5-1: SerialNumber: syz [ 154.591197][ T4267] usb 5-1: config 0 descriptor?? [ 154.642437][ T4267] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 154.666063][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 154.719808][ T6491] fuse: Bad value for 'group_id' [ 154.773121][ T4266] usb 2-1: USB disconnect, device number 16 [ 154.929093][ T6500] loop3: detected capacity change from 0 to 256 [ 155.149346][ T6511] loop0: detected capacity change from 0 to 512 [ 155.177476][ T6511] EXT4-fs (loop0): Ignoring removed nobh option [ 155.206310][ T6511] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 155.234538][ T6511] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.794: attempt to clear invalid blocks 1 len 1 [ 155.312283][ T6511] EXT4-fs (loop0): Remounting filesystem read-only [ 155.327029][ T6511] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 155.342396][ T4177] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 155.353254][ T6516] loop1: detected capacity change from 0 to 1024 [ 155.381177][ T6518] loop3: detected capacity change from 0 to 1024 [ 155.398837][ T6511] EXT4-fs (loop0): Remounting filesystem read-only [ 155.406198][ T6511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.794: invalid indirect mapped block 1819239214 (level 0) [ 155.426504][ T6511] EXT4-fs (loop0): Remounting filesystem read-only [ 155.435083][ T6511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.794: invalid indirect mapped block 1819239214 (level 1) [ 155.461555][ T6511] EXT4-fs (loop0): Remounting filesystem read-only [ 155.480603][ T6511] EXT4-fs (loop0): 1 truncate cleaned up [ 155.489634][ T6511] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 155.518290][ T6518] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 155.552946][ T6518] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.689165][ T6518] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.795: lblock 0 mapped to illegal pblock 0 (length 6) [ 155.704502][ T4189] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 155.742527][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 155.742644][ T6518] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 155.755046][ T4177] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.767062][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.778540][ T4189] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 155.800653][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.807750][ T6524] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.795: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.822395][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 155.829505][ T6524] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 155.842479][ T6524] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.842479][ T6524] [ 155.874709][ T4177] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.891283][ T4177] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.901955][ T4177] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 155.914095][ T4177] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 155.929340][ T4177] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.948359][ T4177] usb 3-1: config 1 interface 1 has no altsetting 0 [ 156.017295][ T4266] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 156.117791][ T6528] fuse: Unknown parameter 'group_id00000000000000000000' [ 156.194735][ T4177] usb 3-1: string descriptor 0 read error: -22 [ 156.203054][ T4177] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 156.212920][ T4177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.290215][ T4177] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 156.337029][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.386637][ T1432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.455325][ T4266] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.474257][ T4266] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 156.495982][ T4266] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 156.521105][ T1432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.522378][ T4266] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.568906][ T4266] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 156.580800][ T1432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.591306][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.624442][ T4266] usb 2-1: config 0 descriptor?? [ 156.632355][ T4881] usb 5-1: USB disconnect, device number 23 [ 156.644764][ T6523] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 156.698834][ T1432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.816903][ T6543] loop3: detected capacity change from 0 to 1024 [ 156.849392][ T6543] hfsplus: unable to parse mount options [ 156.984696][ T4266] usbhid 2-1:0.0: can't add hid device: -71 [ 156.990697][ T4266] usbhid: probe of 2-1:0.0 failed with error -71 [ 157.018060][ T4266] usb 2-1: USB disconnect, device number 17 [ 157.260246][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 157.330878][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.335735][ T1107] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 157.338448][ T4628] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 157.353481][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.362341][ T6545] device bridge_slave_0 entered promiscuous mode [ 157.379901][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.388429][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.396791][ T6545] device bridge_slave_1 entered promiscuous mode [ 157.437761][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.455238][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.470204][ T6573] loop1: detected capacity change from 0 to 128 [ 157.486026][ T6545] team0: Port device team_slave_0 added [ 157.504361][ T6545] team0: Port device team_slave_1 added [ 157.526357][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.533351][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.573947][ T6573] FAT-fs (loop1): Directory bread(block 32) failed [ 157.586994][ T6573] FAT-fs (loop1): Directory bread(block 33) failed [ 157.594823][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.611158][ T6573] FAT-fs (loop1): Directory bread(block 34) failed [ 157.618042][ T6573] FAT-fs (loop1): Directory bread(block 35) failed [ 157.624534][ T4628] usb 5-1: Using ep0 maxpacket: 16 [ 157.631001][ T6573] FAT-fs (loop1): Directory bread(block 36) failed [ 157.637770][ T6573] FAT-fs (loop1): Directory bread(block 37) failed [ 157.653206][ T6573] FAT-fs (loop1): Directory bread(block 38) failed [ 157.661038][ T6573] FAT-fs (loop1): Directory bread(block 39) failed [ 157.666834][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.673708][ T6573] FAT-fs (loop1): Directory bread(block 40) failed [ 157.676204][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.681483][ T6573] FAT-fs (loop1): Directory bread(block 41) failed [ 157.706977][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.708057][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.760798][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.771522][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.774844][ T4628] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 157.793734][ T4628] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.820540][ T4628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.835376][ T6573] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 157.841379][ T4628] usb 5-1: config 0 descriptor?? [ 157.854166][ T6545] device hsr_slave_0 entered promiscuous mode [ 157.854894][ T6573] FAT-fs (loop1): Filesystem has been set read-only [ 157.864276][ T4266] usb 3-1: USB disconnect, device number 18 [ 157.894845][ T6545] device hsr_slave_1 entered promiscuous mode [ 157.906933][ T4628] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 157.940583][ T6545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.954749][ T1107] usb 4-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 157.956106][ T6545] Cannot create hsr debugfs directory [ 157.963798][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.963821][ T1107] usb 4-1: Product: syz [ 158.001852][ T1107] usb 4-1: Manufacturer: syz [ 158.006821][ T1107] usb 4-1: SerialNumber: syz [ 158.374807][ T1107] usb 4-1: 0:1 : does not exist [ 158.391837][ T1107] usb 4-1: 0:2 : does not exist [ 158.399831][ T1107] usb 4-1: 0:3 : does not exist [ 158.411400][ T1107] usb 4-1: 0:4 : does not exist [ 158.416828][ T1107] usb 4-1: 0:5 : does not exist [ 158.421780][ T1107] usb 4-1: 0:6 : does not exist [ 158.433235][ T1107] usb 4-1: 0:7 : does not exist [ 158.438618][ T1107] usb 4-1: 0:8 : does not exist [ 158.443555][ T1107] usb 4-1: 0:9 : does not exist [ 158.454627][ T4236] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 158.463542][ T1107] usb 4-1: 0:10 : does not exist [ 158.474552][ T1107] usb 4-1: 0:11 : does not exist [ 158.482591][ T1107] usb 4-1: 0:12 : does not exist [ 158.491417][ T1107] usb 4-1: 0:13 : does not exist [ 158.499854][ T1107] usb 4-1: 0:14 : does not exist [ 158.508910][ T1107] usb 4-1: 0:15 : does not exist [ 158.513982][ T1107] usb 4-1: 0:16 : does not exist [ 158.523711][ T1107] usb 4-1: 0:17 : does not exist [ 158.533010][ T1107] usb 4-1: BAAD GENERIC IO: no channels? [ 158.555002][ T6545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.579969][ T1107] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 158.596814][ T1107] usb 4-1: USB disconnect, device number 18 [ 158.611650][ T6545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.646936][ T6545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.703287][ T6545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.704528][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 158.790842][ T6606] loop1: detected capacity change from 0 to 256 [ 158.815789][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.834545][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.846087][ T6606] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 158.863194][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.916386][ T1432] device hsr_slave_0 left promiscuous mode [ 158.935784][ T1432] device hsr_slave_1 left promiscuous mode [ 158.943640][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.944518][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 158.957469][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.980824][ T6606] loop1: detected capacity change from 0 to 128 [ 158.992403][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.000883][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.009163][ T1432] device bridge_slave_1 left promiscuous mode [ 159.019040][ T1432] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.035965][ T6606] FAT-fs (loop1): Unrecognized mount option "shortY" or missing value [ 159.054707][ T4236] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 159.063775][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.069779][ T1432] device bridge_slave_0 left promiscuous mode [ 159.090035][ T4236] usb 3-1: Product: syz [ 159.098940][ T1432] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.108774][ T4236] usb 3-1: Manufacturer: syz [ 159.113576][ T4236] usb 3-1: SerialNumber: syz [ 159.134089][ T4236] usb 3-1: config 0 descriptor?? [ 159.142380][ T1432] device veth1_macvtap left promiscuous mode [ 159.178356][ T1432] device veth0_macvtap left promiscuous mode [ 159.206807][ T1432] device veth1_vlan left promiscuous mode [ 159.215126][ T4236] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 159.218871][ T1432] device veth0_vlan left promiscuous mode [ 159.264465][ T4628] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 159.281262][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.543917][ T6628] kvm: pic: single mode not supported [ 159.544092][ T6628] kvm: pic: level sensitive irq not supported [ 159.552342][ T6628] kvm: pic: single mode not supported [ 159.560757][ T6628] kvm: pic: level sensitive irq not supported [ 159.568727][ T6628] kvm: pic: level sensitive irq not supported [ 159.667730][ T4628] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.704162][ T4628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.724463][ T4628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.750610][ T4628] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 159.777627][ T4628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.791876][ T4628] usb 4-1: config 0 descriptor?? [ 159.932129][ T1432] team0 (unregistering): Port device team_slave_1 removed [ 159.991248][ T1432] team0 (unregistering): Port device team_slave_0 removed [ 160.043789][ T4177] usb 5-1: USB disconnect, device number 24 [ 160.069049][ T1432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.152901][ T1432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.279760][ T4628] wacom 0003:056A:0010.0007: unknown main item tag 0x0 [ 160.293651][ T4628] wacom 0003:056A:0010.0007: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 160.315071][ T4628] wacom 0003:056A:0010.0007: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 160.340923][ T4628] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0007/input/input16 [ 160.364428][ T1432] bond0 (unregistering): Released all slaves [ 160.479209][ T4267] usb 4-1: USB disconnect, device number 19 [ 160.523795][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.597142][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.633516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.637204][ T6649] fido_id[6649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 160.649387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.690305][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.717239][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.742828][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.750018][ T5236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.767840][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.798939][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.815329][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.822538][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.861046][ T6654] loop1: detected capacity change from 0 to 256 [ 160.882471][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.896463][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.921476][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.957216][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.959568][ T25] audit: type=1800 audit(1778828226.227:10): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.829" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 160.982871][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.014496][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 161.068057][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.097216][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.134967][ T6660] loop3: detected capacity change from 0 to 512 [ 161.142344][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.175242][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.194851][ T6660] EXT4-fs (loop3): Ignoring removed nobh option [ 161.207300][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.253182][ T6545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.272782][ T6660] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 161.280565][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.309340][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.317884][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.333347][ T6660] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.831: attempt to clear invalid blocks 1 len 1 [ 161.368533][ T6660] EXT4-fs (loop3): Remounting filesystem read-only [ 161.478894][ T6660] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 161.589149][ T6660] EXT4-fs (loop3): Remounting filesystem read-only [ 161.593094][ T6681] loop1: detected capacity change from 0 to 512 [ 161.618472][ T6660] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.831: invalid indirect mapped block 1819239214 (level 0) [ 161.673571][ T6660] EXT4-fs (loop3): Remounting filesystem read-only [ 161.697412][ T6660] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.831: invalid indirect mapped block 1819239214 (level 1) [ 161.723178][ T6681] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.752797][ T6681] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 161.763043][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.781099][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.814384][ T6660] EXT4-fs (loop3): Remounting filesystem read-only [ 161.816701][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.835510][ T6681] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 161.853734][ T6660] EXT4-fs (loop3): 1 truncate cleaned up [ 161.860527][ T6681] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 161.896357][ T6681] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 161.896967][ T6660] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 161.976145][ T4235] usb 3-1: USB disconnect, device number 19 [ 162.046237][ T6681] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 162.195120][ T4196] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 162.252915][ T4196] EXT4-fs (loop3): Remounting filesystem read-only [ 162.264128][ T4196] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 162.306407][ T4196] EXT4-fs (loop3): Remounting filesystem read-only [ 162.314566][ T6667] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 163.120397][ T4881] Bluetooth: hci1: command 0x040f tx timeout [ 163.460221][ T6722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.844'. [ 163.550256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.573260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.632993][ T6545] device veth0_vlan entered promiscuous mode [ 163.664874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.668586][ T4266] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 163.684297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.699263][ T6545] device veth1_vlan entered promiscuous mode [ 163.745481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.753951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.804622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.815134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.856519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.872851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.874544][ T4628] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 163.920884][ T6545] device veth0_macvtap entered promiscuous mode [ 163.966151][ T6545] device veth1_macvtap entered promiscuous mode [ 164.027238][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.070700][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.084171][ T4266] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 164.105468][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.124966][ T4266] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 164.174217][ T4628] usb 3-1: Using ep0 maxpacket: 32 [ 164.184135][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.193977][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.256219][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.301259][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.324374][ T4628] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.339410][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.374426][ T4266] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 164.384542][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.397032][ T4628] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.402878][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.420327][ T4266] usb 2-1: Product: syz [ 164.428827][ T4266] usb 2-1: Manufacturer: syz [ 164.448336][ T4266] usb 2-1: SerialNumber: syz [ 164.484707][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.498025][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.517273][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.531242][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.551152][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.594115][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.603966][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.620094][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.630230][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.646603][ T4628] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 164.649418][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.660111][ T4628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.689082][ T6545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.694164][ T4628] usb 3-1: Product: syz [ 164.703712][ T4628] usb 3-1: Manufacturer: syz [ 164.720624][ T4628] usb 3-1: SerialNumber: syz [ 164.729166][ T6545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.733496][ T4628] usb 3-1: config 0 descriptor?? [ 164.752011][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.795058][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.814438][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.838168][ T6545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.848777][ T6545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.857631][ T6545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.867033][ T6545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.916869][ T4266] usb 2-1: USB disconnect, device number 18 [ 164.923910][ T4628] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 165.021239][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 165.224578][ T4421] Bluetooth: hci1: command 0x0419 tx timeout [ 165.250361][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.261816][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.343483][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.354944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.434470][ T6754] chnl_net:caif_netlink_parms(): no params data found [ 165.484377][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.492231][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.533682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.578919][ T6777] netlink: 48 bytes leftover after parsing attributes in process `syz.4.856'. [ 165.854950][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.862110][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.874525][ T6754] device bridge_slave_0 entered promiscuous mode [ 165.882909][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.890683][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.201394][ T6754] device bridge_slave_1 entered promiscuous mode [ 166.544586][ T4235] Bluetooth: hci4: command 0x0409 tx timeout [ 166.671415][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.771875][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.897504][ T6754] team0: Port device team_slave_0 added [ 166.919839][ T6754] team0: Port device team_slave_1 added [ 167.001034][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.025439][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.051369][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.084191][ T4266] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 167.187438][ T6754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.208626][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.222171][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.248203][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.273999][ T6754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.288018][ T4266] usb 2-1: device descriptor read/64, error -71 [ 167.304791][ T6825] netlink: 48 bytes leftover after parsing attributes in process `syz.5.867'. [ 167.361726][ T1432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.452506][ T6754] device hsr_slave_0 entered promiscuous mode [ 167.460875][ T6754] device hsr_slave_1 entered promiscuous mode [ 167.500954][ T6831] loop5: detected capacity change from 0 to 1024 [ 167.501452][ T1432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.565995][ T6831] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 167.577560][ T6831] EXT4-fs (loop5): Ignoring removed orlov option [ 167.582635][ T1432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.585196][ T4266] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 167.677343][ T6831] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,nojournal_checksum,nombcache,inode_readahead_blks=0x0000000000010000,debug_want_extra_isize=0x0000000000000080,orlov,data_err=abort,sb=0x0000000000000080,grpjquota=,,errors=continue. Quota mode: none. [ 167.685234][ T4236] usb 3-1: USB disconnect, device number 20 [ 167.703708][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.760110][ T6831] EXT4-fs error (device loop5): __ext4_new_inode:1292: comm syz.5.869: failed to insert inode 15: doubly allocated? [ 167.798157][ T4266] usb 2-1: device descriptor read/64, error -71 [ 167.807124][ T6831] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 167.836720][ T1432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.934279][ T4266] usb usb2-port1: attempt power cycle [ 168.053182][ T6849] loop5: detected capacity change from 0 to 1024 [ 168.061740][ T6842] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 168.094818][ T6842] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 168.118977][ T6852] fuse: Unknown parameter 'grou00000000000000000000' [ 168.199505][ T6754] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.271590][ T6754] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.352497][ T6754] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.374255][ T4266] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 168.392215][ T6862] loop2: detected capacity change from 0 to 512 [ 168.406659][ T6754] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 168.467764][ T6865] netlink: 68 bytes leftover after parsing attributes in process `syz.5.878'. [ 168.485551][ T6862] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.504118][ T4266] usb 2-1: device descriptor read/8, error -71 [ 168.615108][ T4628] Bluetooth: hci4: command 0x041b tx timeout [ 168.785076][ T4266] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 168.785981][ T6754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.896647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.911048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.918461][ T4266] usb 2-1: device descriptor read/8, error -71 [ 168.946571][ T6754] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.971810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.987674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.996490][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.003648][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.046225][ T4266] usb usb2-port1: unable to enumerate USB device [ 169.076063][ T6892] fuse: Unknown parameter 'grou00000000000000000000' [ 169.084268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.096360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.103893][ T4236] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 169.109226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.129213][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.136377][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.145017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.154486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.181360][ T6897] loop4: detected capacity change from 0 to 2048 [ 169.244607][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.269455][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.312510][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.325381][ T6897] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.344039][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 169.382187][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.503577][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.511538][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.537752][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.564966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.577189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.603726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.805804][ T4236] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 169.902989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.930016][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.041458][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.058507][ T4236] usb 3-1: Product: syz [ 170.104344][ T4236] usb 3-1: Manufacturer: syz [ 170.108981][ T4236] usb 3-1: SerialNumber: syz [ 170.164550][ T4236] usb 3-1: config 0 descriptor?? [ 170.177221][ T6916] netlink: 68 bytes leftover after parsing attributes in process `syz.1.888'. [ 170.203269][ T4337] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 170.266504][ T4337] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 170.285028][ T4337] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.285028][ T4337] [ 170.295732][ T4337] EXT4-fs (loop4): Total free blocks count 0 [ 170.301737][ T4337] EXT4-fs (loop4): Free/Dirty block details [ 170.308374][ T4337] EXT4-fs (loop4): free_blocks=4096 [ 170.309254][ T4236] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 170.313664][ T4337] EXT4-fs (loop4): dirty_blocks=160 [ 170.326622][ T4337] EXT4-fs (loop4): Block reservation details [ 170.333350][ T4337] EXT4-fs (loop4): i_reserved_data_blocks=10 [ 170.402652][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.044360][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 171.115475][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.123015][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.175940][ T1432] device hsr_slave_0 left promiscuous mode [ 171.191372][ T1432] device hsr_slave_1 left promiscuous mode [ 171.212654][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.247097][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.260211][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.273364][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.288129][ T1432] device bridge_slave_1 left promiscuous mode [ 171.297529][ T1432] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.311817][ T1432] device bridge_slave_0 left promiscuous mode [ 171.321209][ T1432] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.347032][ T1432] device veth1_macvtap left promiscuous mode [ 171.353354][ T1432] device veth0_macvtap left promiscuous mode [ 171.368033][ T1432] device veth1_vlan left promiscuous mode [ 171.379009][ T1432] device veth0_vlan left promiscuous mode [ 171.443777][ T4236] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 172.354592][ T4199] usb 3-1: USB disconnect, device number 21 [ 172.403689][ T4236] usb 5-1: Using ep0 maxpacket: 16 [ 172.501999][ T1432] team0 (unregistering): Port device team_slave_1 removed [ 172.507436][ T6973] netlink: 68 bytes leftover after parsing attributes in process `syz.5.900'. [ 172.526831][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.543282][ T4236] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.562473][ T4236] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.563770][ T1432] team0 (unregistering): Port device team_slave_0 removed [ 172.571966][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.602499][ T4236] usb 5-1: config 0 descriptor?? [ 172.611118][ T1432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.637260][ T1432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.648660][ T4236] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 172.756076][ T1432] bond0 (unregistering): Released all slaves [ 172.857296][ T6754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.096037][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 173.646716][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.670073][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.730073][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.749903][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.802290][ T6754] device veth0_vlan entered promiscuous mode [ 173.811097][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.820191][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.834855][ T6754] device veth1_vlan entered promiscuous mode [ 173.864892][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.875231][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.894217][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.913869][ T4421] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 173.914625][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.937796][ T6754] device veth0_macvtap entered promiscuous mode [ 173.955421][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.967627][ T6754] device veth1_macvtap entered promiscuous mode [ 174.073803][ T4628] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 174.087166][ T7026] netlink: 120 bytes leftover after parsing attributes in process `syz.5.912'. [ 174.104556][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.120867][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.131233][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.148221][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.158521][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.173568][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.185698][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.188769][ T4235] usb 5-1: USB disconnect, device number 25 [ 174.196823][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.217474][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.232298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.269668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.302283][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.329175][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.339807][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.351545][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.353628][ T4628] usb 3-1: Using ep0 maxpacket: 32 [ 174.371911][ T4421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.373131][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.399318][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.410544][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.450476][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.471050][ T4421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.472439][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.491867][ T4421] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.498916][ T6754] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.516752][ T6754] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.523526][ T4421] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 174.528889][ T6754] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.536699][ T4628] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.536740][ T4628] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.546674][ T4421] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 174.582331][ T4421] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.591168][ T6754] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.592175][ T4421] usb 2-1: config 1 interface 1 has no altsetting 0 [ 174.637479][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.667445][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.734191][ T4628] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 174.747536][ T4628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.775021][ T4628] usb 3-1: Product: syz [ 174.789081][ T4628] usb 3-1: Manufacturer: syz [ 174.798506][ T4628] usb 3-1: SerialNumber: syz [ 174.851957][ T4628] usb 3-1: config 0 descriptor?? [ 174.870670][ T5236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.879139][ T4421] usb 2-1: string descriptor 0 read error: -22 [ 174.889426][ T4421] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 174.902667][ T5236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.924076][ T4421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.933922][ T4628] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 174.945157][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.959692][ T7041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.007279][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.038643][ T4421] usb 2-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 175.048536][ T7041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.099114][ T4421] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 175.137296][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.169031][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.213000][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.275208][ T4421] Bluetooth: hci4: command 0x0405 tx timeout [ 175.344002][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.496220][ T7058] loop6: detected capacity change from 0 to 512 [ 175.619533][ T7065] binder: 7064:7065 ioctl c018620c 200000000000 returned -22 [ 175.639707][ T7058] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.663552][ T4421] Bluetooth: hci3: command 0x0406 tx timeout [ 175.670463][ T4421] Bluetooth: hci0: command 0x0406 tx timeout [ 175.696890][ T7058] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 175.726576][ T7069] netlink: 120 bytes leftover after parsing attributes in process `syz.4.923'. [ 175.745622][ T4421] Bluetooth: hci2: command 0x0406 tx timeout [ 175.827811][ T7058] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 175.845107][ T7058] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 175.855657][ T7058] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 175.889963][ T7058] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 176.612385][ T7091] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 176.617538][ T4266] usb 2-1: USB disconnect, device number 23 [ 176.662626][ T7091] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 176.814824][ T7105] loop5: detected capacity change from 0 to 4096 [ 176.864748][ T7112] netlink: 120 bytes leftover after parsing attributes in process `syz.4.935'. [ 176.962852][ T7105] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.188385][ T7130] loop6: detected capacity change from 0 to 512 [ 177.233572][ T7130] EXT4-fs (loop6): Ignoring removed nobh option [ 177.243585][ T4266] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 177.266749][ T7130] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 177.366983][ T7130] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.940: attempt to clear invalid blocks 1 len 1 [ 177.424139][ T7130] EXT4-fs (loop6): Remounting filesystem read-only [ 177.443601][ T7130] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 177.512959][ T7130] EXT4-fs (loop6): Remounting filesystem read-only [ 177.533616][ T7130] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.940: invalid indirect mapped block 1819239214 (level 0) [ 177.562787][ T1107] usb 3-1: USB disconnect, device number 22 [ 177.604285][ T7130] EXT4-fs (loop6): Remounting filesystem read-only [ 177.623440][ T7130] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.940: invalid indirect mapped block 1819239214 (level 1) [ 177.648578][ T4266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.668860][ T7130] EXT4-fs (loop6): Remounting filesystem read-only [ 177.678534][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.695740][ T7130] EXT4-fs (loop6): 1 truncate cleaned up [ 177.700944][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.725618][ T7130] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 177.733935][ T4266] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 177.745034][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.745680][ T4267] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.761469][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.797392][ T4266] usb 2-1: config 0 descriptor?? [ 177.862246][ T6754] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 177.895924][ T6754] EXT4-fs (loop6): Remounting filesystem read-only [ 177.925405][ T6754] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 177.945351][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.000371][ T6754] EXT4-fs (loop6): Remounting filesystem read-only [ 178.215061][ T4267] usb 6-1: unable to get BOS descriptor or descriptor too short [ 178.293576][ T4267] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.328297][ T4267] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.337496][ T4267] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 178.353777][ T4267] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 178.367214][ T4266] usbhid 2-1:0.0: can't add hid device: -71 [ 178.371197][ T4267] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.373201][ T4266] usbhid: probe of 2-1:0.0 failed with error -71 [ 178.392153][ T4267] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.410984][ T4266] usb 2-1: USB disconnect, device number 24 [ 178.434630][ T4267] usb 6-1: config 1 interface 1 has no altsetting 0 [ 178.516920][ T5236] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.593489][ T4628] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 178.626295][ T5236] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.708392][ T4267] usb 6-1: string descriptor 0 read error: -22 [ 178.722373][ T4267] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 178.763370][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.793161][ T5236] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.826576][ T4267] usb 6-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 178.874358][ T4267] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 178.967543][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.012316][ T5236] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.023302][ T4628] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 179.060042][ T7199] fuse: Unknown parameter 'use00000000000000000000' [ 179.068469][ T7196] loop4: detected capacity change from 0 to 512 [ 179.074864][ T4628] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 179.165589][ T7196] EXT4-fs (loop4): Ignoring removed nobh option [ 179.222266][ T7196] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 179.270796][ T7196] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.957: attempt to clear invalid blocks 1 len 1 [ 179.284873][ T4628] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 179.310743][ T4628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.343162][ T4628] usb 3-1: Product: syz [ 179.358501][ T4628] usb 3-1: Manufacturer: syz [ 179.369047][ T4628] usb 3-1: SerialNumber: syz [ 179.397637][ T7196] EXT4-fs (loop4): Remounting filesystem read-only [ 179.404902][ T7196] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 179.433637][ T7196] EXT4-fs (loop4): Remounting filesystem read-only [ 179.450493][ T7196] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.957: invalid indirect mapped block 1819239214 (level 0) [ 179.485747][ T7196] EXT4-fs (loop4): Remounting filesystem read-only [ 179.492320][ T7196] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.957: invalid indirect mapped block 1819239214 (level 1) [ 179.511036][ T7196] EXT4-fs (loop4): Remounting filesystem read-only [ 179.534333][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 179.541875][ T7196] EXT4-fs (loop4): 1 truncate cleaned up [ 179.561887][ T7196] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 179.602809][ T4188] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 179.645013][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 179.654312][ T4188] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 179.697406][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 179.752675][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.760182][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.768544][ T7197] device bridge_slave_0 entered promiscuous mode [ 179.778406][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.785625][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.795710][ T7197] device bridge_slave_1 entered promiscuous mode [ 179.803488][ T4628] usb 3-1: unit 5 not found! [ 179.808253][ T4628] usb 3-1: unit 4 not found! [ 179.836474][ T7222] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 179.848910][ T7222] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 179.883414][ T4628] usb 3-1: USB disconnect, device number 23 [ 179.967111][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.980045][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.012780][ T7197] team0: Port device team_slave_0 added [ 180.023610][ T7197] team0: Port device team_slave_1 added [ 180.050330][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.057712][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.083598][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.103216][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.129818][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.144287][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.145595][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.176518][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.253272][ T1107] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 180.304362][ T7197] device hsr_slave_0 entered promiscuous mode [ 180.311395][ T7197] device hsr_slave_1 entered promiscuous mode [ 180.361669][ T7197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.376578][ T7197] Cannot create hsr debugfs directory [ 180.481563][ T4267] usb 6-1: USB disconnect, device number 2 [ 180.503345][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 180.623508][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.663255][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.698125][ T1107] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.711684][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.721778][ T1107] usb 2-1: config 0 descriptor?? [ 180.776266][ T1107] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 180.866554][ T5236] device hsr_slave_0 left promiscuous mode [ 180.883950][ T5236] device hsr_slave_1 left promiscuous mode [ 180.921826][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.967537][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.975992][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.989035][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.997197][ T5236] device bridge_slave_1 left promiscuous mode [ 181.003925][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.015197][ T5236] device bridge_slave_0 left promiscuous mode [ 181.021661][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.034929][ T5236] device veth1_macvtap left promiscuous mode [ 181.041155][ T5236] device veth0_macvtap left promiscuous mode [ 181.047815][ T5236] device veth1_vlan left promiscuous mode [ 181.054113][ T5236] device veth0_vlan left promiscuous mode [ 181.099790][ T7262] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 181.173392][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 181.384208][ T5236] team0 (unregistering): Port device team_slave_1 removed [ 181.395586][ T7266] loop5: detected capacity change from 0 to 4096 [ 181.410042][ T5236] team0 (unregistering): Port device team_slave_0 removed [ 181.439544][ T5236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.497641][ T5236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.498058][ T7266] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.598550][ T5236] bond0 (unregistering): Released all slaves [ 181.631155][ T25] audit: type=1800 audit(1778828246.899:11): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.976" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 181.880676][ T7197] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.941371][ T7197] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.024322][ T7197] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.040816][ T7197] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.274109][ T7294] ------------[ cut here ]------------ [ 182.280092][ T7294] WARNING: CPU: 1 PID: 7294 at arch/x86/kvm/x86.c:10372 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 182.285413][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 182.291263][ T7294] Modules linked in: [ 182.301590][ T7294] CPU: 1 PID: 7294 Comm: syz.2.983 Not tainted syzkaller #0 [ 182.309398][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 182.320001][ T7294] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 182.332735][ T7294] Code: e8 a1 18 af 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 86 18 af 00 e9 c8 ed ff ff e8 dc f9 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 182.383118][ T7294] RSP: 0018:ffffc900046dfc30 EFLAGS: 00010283 [ 182.389241][ T7294] RAX: ffffffff810f3ab4 RBX: ffff88806187c000 RCX: 0000000000080000 [ 182.496297][ T7294] RDX: ffffc90005789000 RSI: 000000000000041e RDI: 000000000000041f [ 182.550229][ T7294] RBP: 0000000000000000 R08: ffffffff8d89f02f R09: 1ffffffff1b13e05 [ 182.583314][ T7294] R10: dffffc0000000000 R11: fffffbfff1b13e06 R12: ffff88806632d001 [ 182.603160][ T7294] R13: 1ffff1100c30f81e R14: ffff88806187c0f0 R15: ffff88806632d000 [ 182.611178][ T7294] FS: 00007f5907a386c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 182.668655][ T7294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.693249][ T7294] CR2: 00007f5e299b7368 CR3: 0000000064542000 CR4: 00000000003526e0 [ 182.701276][ T7294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.768495][ T7294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.803281][ T7294] Call Trace: [ 182.806604][ T7294] [ 182.809549][ T7294] ? __lock_acquire+0x7d10/0x7d10 [ 182.861623][ T7294] kvm_vcpu_ioctl+0x8f7/0xc10 [ 182.873107][ T7294] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 182.908987][ T7294] ? bpf_lsm_file_ioctl+0x5/0x10 [ 182.928970][ T7294] ? security_file_ioctl+0x7c/0xa0 [ 182.934425][ T7294] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 182.940162][ T7294] __se_sys_ioctl+0xfa/0x170 [ 182.953383][ T7294] do_syscall_64+0x4c/0xa0 [ 182.957920][ T7294] ? clear_bhb_loop+0x30/0x80 [ 182.962626][ T7294] ? clear_bhb_loop+0x30/0x80 [ 182.974015][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.980162][ T7294] RIP: 0033:0x7f59097dee59 [ 182.992047][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.033935][ T7294] RSP: 002b:00007f5907a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.042405][ T7294] RAX: ffffffffffffffda RBX: 00007f5909a57fa0 RCX: 00007f59097dee59 [ 183.070810][ T7294] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 183.111966][ T7294] RBP: 00007f5909874d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.121443][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.134726][ T7294] R13: 00007f5909a58038 R14: 00007f5909a57fa0 R15: 00007ffc46eb4188 [ 183.142755][ T7294] [ 183.150452][ T7294] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.157759][ T7294] CPU: 1 PID: 7294 Comm: syz.2.983 Not tainted syzkaller #0 [ 183.165052][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.175258][ T7294] Call Trace: [ 183.178546][ T7294] [ 183.181490][ T7294] dump_stack_lvl+0x188/0x250 [ 183.186193][ T7294] ? show_regs_print_info+0x20/0x20 [ 183.191417][ T7294] ? load_image+0x400/0x400 [ 183.195957][ T7294] panic+0x2e5/0x810 [ 183.199885][ T7294] ? bpf_jit_dump+0xd0/0xd0 [ 183.204419][ T7294] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 183.210247][ T7294] __warn+0x248/0x2b0 [ 183.214253][ T7294] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 183.220082][ T7294] report_bug+0x1b7/0x2e0 [ 183.224448][ T7294] handle_bug+0x3a/0x70 [ 183.228630][ T7294] exc_invalid_op+0x16/0x40 [ 183.233145][ T7294] asm_exc_invalid_op+0x16/0x20 [ 183.237998][ T7294] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 183.244429][ T7294] Code: e8 a1 18 af 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 86 18 af 00 e9 c8 ed ff ff e8 dc f9 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 183.264054][ T7294] RSP: 0018:ffffc900046dfc30 EFLAGS: 00010283 [ 183.270136][ T7294] RAX: ffffffff810f3ab4 RBX: ffff88806187c000 RCX: 0000000000080000 [ 183.278121][ T7294] RDX: ffffc90005789000 RSI: 000000000000041e RDI: 000000000000041f [ 183.286101][ T7294] RBP: 0000000000000000 R08: ffffffff8d89f02f R09: 1ffffffff1b13e05 [ 183.294078][ T7294] R10: dffffc0000000000 R11: fffffbfff1b13e06 R12: ffff88806632d001 [ 183.302066][ T7294] R13: 1ffff1100c30f81e R14: ffff88806187c0f0 R15: ffff88806632d000 [ 183.310063][ T7294] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 183.315901][ T7294] ? __lock_acquire+0x7d10/0x7d10 [ 183.320953][ T7294] kvm_vcpu_ioctl+0x8f7/0xc10 [ 183.325639][ T7294] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 183.331318][ T7294] ? bpf_lsm_file_ioctl+0x5/0x10 [ 183.336261][ T7294] ? security_file_ioctl+0x7c/0xa0 [ 183.341386][ T7294] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 183.347022][ T7294] __se_sys_ioctl+0xfa/0x170 [ 183.351617][ T7294] do_syscall_64+0x4c/0xa0 [ 183.356036][ T7294] ? clear_bhb_loop+0x30/0x80 [ 183.360713][ T7294] ? clear_bhb_loop+0x30/0x80 [ 183.365394][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.371293][ T7294] RIP: 0033:0x7f59097dee59 [ 183.375710][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.395330][ T7294] RSP: 002b:00007f5907a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.403755][ T7294] RAX: ffffffffffffffda RBX: 00007f5909a57fa0 RCX: 00007f59097dee59 [ 183.411735][ T7294] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 183.419728][ T7294] RBP: 00007f5909874d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.427716][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.435737][ T7294] R13: 00007f5909a58038 R14: 00007f5909a57fa0 R15: 00007ffc46eb4188 [ 183.443736][ T7294] [ 183.447000][ T7294] Kernel Offset: disabled [ 183.451477][ T7294] Rebooting in 86400 seconds..