last executing test programs: 1m41.783270788s ago: executing program 32 (id=53): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101142, 0x1) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) 1m40.881604996s ago: executing program 33 (id=69): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f9, &(0x7f0000000e80)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x14) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46c00) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 1m28.834181839s ago: executing program 34 (id=273): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000040)='(m', 0x2) 1m22.145930154s ago: executing program 35 (id=381): r0 = socket(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) 1m20.15711654s ago: executing program 36 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4d76106a}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1002, 0x2}, 0xfffffffffffffe87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv_slave_1\x00', 0x10) bind$packet(r3, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0xfd, 0x6, @remote}, 0x14) 1m18.364734556s ago: executing program 37 (id=442): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xffff, 0x3, 0x1, 0x141, 0x4}}) 1m16.859605812s ago: executing program 38 (id=476): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x2, 0x5, 0x6}) 23.798425474s ago: executing program 9 (id=1491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 23.280022132s ago: executing program 39 (id=1505): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) 22.937866912s ago: executing program 9 (id=1509): ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) dup3(r2, r0, 0x0) 22.937116892s ago: executing program 9 (id=1511): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72dadefca0f578a05844b9b965ce0977e362ab036480ca216572c4403da2fad44ac3cd82f3c5f630f05b68c41aa12ee72cd0446c61f707075de251560d6f7d1b4344a9ed9dfc77eecb1955ab694fdeb60337a6264997dab1f9a89a722639ced4c7451d70ee13ce2249a7cbc0d79caa54f8f4b6d947a0ae7cad8d80507acbf5fdc14ac57aa3471d78c29ee5adcce001f51417dab0f1110b321dab2245ecf5ccebc1f8bc3bc9e3f1c9b09c1f681a377cf87df172a8d99f00d6d60cd7be19f6da9d0c4fba5ed704576c6434109930e60b529fc0cf2798732a92bb386f5a673b1db74789c0f1e80b7c099775bae987834a3858bc293443dd8b8bacadde386fce30f10c439e8dd16b68e5ef15cfa9920a4831942900b35836749ec55fd525e6d17858c61cb4aab2105ffffc7371c68855f3f42421e09a5b6b8e3c904534897085f97a9ae1d84d125e690d1eadff0f0c286ee4b1ac743f7ef0808874bf1d9070929ca9c7ec970e2bb944a664c7a37ce658311b5984f3a902686ab45948865a7a3a588eb919554e89c15986fc50f592bd503554dbb18e8796e47cfa5f7395fbefc05ac4c1cc9135e4f58811dee05034f56601a44b439aeea9f8490a3b6b42bc54d4e5a046333f92dc46fd21e4b84eeb99f8a30bf7a7b570da734ef3ea236c8536ab0ff4ef3aa766e6ce190a3dd72562f0f7c93d4566a91bd1ec6ff236b1f46f1e37c02f1bf0448740c5752b2377372e1f0756c2b26f3adcd6666b5f5143adc57cc28959b5e3c27318617dbb840c08d44b7dcb2c0fb7461814338704c6b4dca8bb55f6a726489962c8c402c7dc871f9229a7771b516bd76373bcc00d5e70d06d1df1fae0be90a91435f690d8cc2d78835f790a7f0c72f0fc8ff6dbaa182807e11ee12c7cdf2607e66ff8985b0fc10ca1fba921845ffe85b64590c8b7694ea603013b6b7999849e2b830dd34814b41eff4bcd775dfc67f2dacdbfa681b97852766ec33ac9e969b38801771a92b1072b1a58fe28dd95fd0c86338ac3abae6408c9b78ef66456bc2258b8f8ec1091cfd1396637a0240ccaea9977f10137b55f1d1258bce38b3501a273ffc3b5208f561a0fa79b2f3d208e981e26409c4b37fa365024f9a563116ccd11e02dd3d09361dcdeab88152919840a5be743f338f4f4676f0f693413b6d0a82e24903c1f79819d642c068d4e64507ddc405450ae75bac08f615a99835feff9a8cedba1b0222d1a637865238f0abf43014aa9955538a2535f54d7d2d09cc01ca20ceef5d71e8aee8f3712d5519dc0c16252fd3428a0444b7c27f523bc65374b9815af9ee764695db32b6f1f1c260dc41c1c0395470831458e91e7763e4993761e9311650a485df539cf9fdf934ddc13b6f16c2c74da3861a655b18de2f6ea4b96488c11bffba4f7c519ede2d216e443b83d35f34b8427cbc0f9c0fc61f09dffcf8eff02df18069412785a602fcecff04c6b48cdf18cd2126ee48c3c7671602075642462800386e6cf49c7059c0ac6dda8852e20bdf300e71289bb7d0563c1eaf02a014d310f1a575767d8a6797a5feb7a1a938373d06ef0bc9bec35a93ea9d7bda2b67f7326ace9e097b71c4bf39acccf0f393af3f3d0f2962602bed872cd335c63c7641a6240769edc2004e187e3d931d594f3bb8cfa33aae52db9fc9a3622892755c510b0bfd675249e1175283d9bbe55d6bcfc5835d67aa52650ddacd021f913acdc627480b5a4089c6783b0399005146fbb7e33503f131bfc1bbeba54c382ae8ac73c36e7d95c507735ede07ca1912611437a0da1a7f90184667c57b510c7c6107e0700a226168d701ef9c8e378cc8e3481bc586b7d02d5b2234a988258f2c485db7ef8b8ed6b6d0d69d1737de654ff28cf10e40c4f9e5d3f2c5b582d1f95a1713fb28dc5394d4a2ae089cf4e5a62e22b3803912d2caf134a63dc7a1dd2ea3dd0b413c9ea7e9857cb2a5637d7c7fdfd3e01b76e5cfd0dda3c1b2db8c0acacfde209ce54cfae9e1e3b2bd85d7c281aa05700590fc9b085071034bab23011fdc212b46c3d295e5fb0727b1e4c171363dd77043acb714f38cfbd22706521e66a9af786df2a72984fe0c8b55b9df0d26ca2a8021504c7e00a7bda6c0444cddc9cf40a46d90922df7625f04eb97f7bb71680e3b367808264005174339b252c15b741c5f8a8e36a54d36820a18c891bd22cca5c5886394631b8fe04ae678d3f020cdef43fc9194da54ca2b5467127ac384a5ef0fab6b6595e421cfbef60bcbf132fe011e7cab5dcd2688b4011423f9ce55cca94bdc3d95885320e478bd127ce1de862e50a5009253fa409737931ac6b693d330bc140e6dc58622493429bb6574c2c2260be053d542c47d5dfd826f4956931db1da0fdcf3ce2385a9b408f99486d521bed8810736620185eae8aae199dab2c91458584db2ee5fa4ce61bb9c723d5b5195deb2ae7b451e6f0ec09150a31f1f5a4d5ea7aaf1d08bf519ea12828d04d353407c265567b66bc2b7fbcf4e71dfeb131e7c6d3d43dccc4a3dfede8efa204df6c45f3642757f7889f62e95cd8c0eb6a8dfec250debae5f9f9b9fd4d5dab14e5d9a7becc07eeea3a5465875fa11d44177b9a7373195861c049bd7401c6ea2ee6d4252d309d90b6aeb951e8d0dd5d513a40248cf46b5dd5d3edf1bc68f74f64ac6d489bbe66ff6f13a32c4054b59f9bac1de3a163bb862815572dbe12b4055d2ec30f89b9f8d347c66f8e65b5199dac4c54f171a3118df28986013b3153132a0aa31acf2dc3088a2d623a250fddf3aa4f7e53f1193d9f163362c18a05cbeb88e9fd45594e6f59c63dc6773c53908e21d3f41b145987e5c22c230b1ac1d6b6deeed8aea43f4a5ebc27fa7c77fea551eaed8d3560d12e06006dcd5f396e25f91bc0c4e55403fc339d7d371efd3a000305e2567080bfd57690c746c2d34e7dbe2a856114ddecc27709c5c2af149a3e2f17b68edcbcc394e7f96615c169cc2c7eba3821c2737c95f9ce86b19776f37c7d01afc9878daeb202910822eded0dfcf214920038cd6f5fc0313ef38e7e4584c97c2e08c6ced40498b86d185194cd93b7ac7aa05dadbab060d3caca9e9ee5beec4fbc1fbdc54013571663c15eef21752dcc8c5d3bbb2680e4f67eca98437bce3970f59e60dea986483b9874ee0c4cdefbdc0d3488a4fb3f7d441fa7dcf337703529bcf4be863f2ac8bbebd10813f2abddba4333b22152aeb42c970cfb310e573fe8b90c79ab737b2c9716c23b0c114612a406db1546d4384f1f5e1b570d530cd025ad06496a3032e22ee96353d8c45dd5b81f3f429b6874275d80b350d7de806eb4ce5a4c8e8d09cb365b6463d83d6b8b654cbd5141123efaa324e6d2b551e92b30ec1fe79548b962be72669e7f6695815c6df5bdebb405a98b306a0c49c5cde75da290c288ab2a44ba2bf7f1dcdbf098ae55d6c693d5c3eed20dd29fb136ead8ce271413d0c71311211c883e9f64d0edd324e24ced63d1c905cfb5a92ecc7ec6680cb1e930278455b7e36f86013bcb32e5de3e391f44a8f55bdfc5b442c1ec7aa8faf0d6ec608167929c4d65efa73cce63eccb7e787e13718e2b7a36bd2c8f57290e35a45632dfa13db399472d842281498bd4dba66e7c0659fa51e84bea05f162225acc2f83734e838120a65cd93e95b922f36097da89f820f4619fa669527fa8ac3a539b234d3653818bce11ae955e5c8d7cff8bd8ecc6f231d7db627d8e5578f2811e236f193f6870831f41da4a05ecf4d274eb927c56dff69063d87f699b63b3dd757dc12b9671d1f33e5bc684f86cbeb66eaf4b2334097ddb0c8c1a0b084f3d31928a27bdbc55e7ce3c6bddb4a510f0ea889065c1e298d2b3ff321be2d19c9dac6ffaa06562d128bda2b72abf935968457e598fe8b593aa72eecc85044861eda40d0e23dc616273315a81d67898f449579e919cc155325d3aeb4bae948c8a82a990be8cd529d54f896957335a5ce4864af1cbd617d61f084bddc3fbbd9277e8ecb2842db7b89fcde85d3429e6e1fe97aafec76e01b86e2a5e14ddcc0f6751aee179a0c2a245e4f1fc749252460dc3db5f5ba64ad77ace607cbddd68ed7d1768062872070483dcb56ce4eca890325c5407c7f25bbf389e84c891734dab70b3f33d3ca41d75aa4043496928365522baa2f578def1e989162521cb1cdb3538c7c70b44fbb916598f6ee0b349f7a670540d8e73a5c92260e03bba848d5508e59130d87fd04ac77f54ff713366c79c3f3f915b98240049f0933c35066885121c35ea2bce2a84d4a2e08b9c4ecabd1db39d37b437e3d112af6e3513e2906cae47c0095c2765a4aee271bb9cda501b9b67b06dcf96f48f55dbf98bf9b836d6f9c26895707a194f2cceb98e8e4d188f2da271b5220bf72d22139764822b1e20a48edbef6d975f49d69354bb904ebc1a9b72541d2c5af7b33430715e28baa122a96f1bf87fb68e85eb152d68a7a941ffea3709eb44ad97ee0d5e7d2e9db7cef19af354b620364b66a942babf2b246bb1e36593a653d5162e16959ea1e3f0d27bb6fdcff5f6919b2b283d0aa1f33379b23992c543c6961de77f088a67494231d74d1f62d52bb2e3bf088bd1645bfb5fd85bf5d963a4c3114ca1a776e56349b3d06200f31c07d8594f96bbc2867a90cdec7d7fdbec58db194db8de1fbb982869d5c56df0cfca3e5fa08e67973d717fbf4511bf37aa91ed8d268747b425bbcef632ec37045cdcca3659f22704b62eb0e3f56a532bae14c90a0104c0792c7d5ad21cd78e9015c2302fd38f8487c8bf040197b899d7338dfe33209e08f18fa6dbfc50a626f5fdaeebe6cddc0980fac780edfb7e8df665ea4a8da55b0a1d79456ba5ff926220f69ec9da4ea7ac2c658cd1e1b4d3988affb5e8a54c1e186d19d309f17a1935137420f397b973fa879a157643188879d82e509cdb73a6f79d875fd09c673051fbcb6c399d226a5cbef74b36ebc20aa973699d1e0da2f7a70f9af5ce490a480fe8179f49e187f6e1ebc04e8b8008f21da3e895e5ca43d9ade0e451976b02244446e63153942fa7484c006fe11f0f45197a7f436f0782016ea251c1ffd5c82ba2ef0f29623755a6db472559219693722bc95ff501cb804a856339bc9635f511a03d577c3f4ddea4e54b157a4717f0d075c5444da6024183feb99baa5070b0de78a2345bf3a3e20210c48d69f7f797b85793c494a27b3ba8d5957ab3fd57e7bee72366e0039ab9741598abc75dfad2a20317420195f7fc623e11ae91abf18543af88f89614327be073d3fd6790238ced6e523fce18a6cceae458af54b798ec87a37258e5df22c688d35f4531a0d0879f393d40780328ab80e88b5bae1a2885b55e5f93a0e884b7e4b2663abe61802c6fdbb63becb677f81c9583cfb020063605c112997a3111f280e34fd318cb49a595ea880d7d4e3b143832af9643a0b96c2ea7efa531262f100dd3d3fd4c21d731be040594d33baed8fd1cc0aa6f0cf2f8936548d0384f50613b0c0cdeca8a83b375ec8c9632958d06bcc4a0e33de31cdd5dc0449082ac4690a81a3b2b1b6a96826f16223321e81a2a2ab7367f5c5f2ae4cfbdb4708ecbfc6d62ad8cc32b97f2c13ae9953730ea049f79ed411606997ad1603219da7330698781e907d0b29242aa1f1ae216f6ca35d184d1027ad963e0cab2e26b002ab5e583d66bdf203041b216797e095ca372857ed0a54da4b0d69f62e9bf2fdb0a5352cf58ad4e172c8fcefc1e3f5d157c4635a3cf51cb3a43afdb9a618350d62f8470ebf2a32f99", 0xffc}, {&(0x7f0000000540)="633656a4", 0x4}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x40) 22.29348332s ago: executing program 5 (id=1527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000ac0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xffffffffffffffd2, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fda={0x66646185, 0x3, 0x1, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/141, 0x8d, 0x0, 0x12}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={@ptr={0x70742a85, 0x1, &(0x7f0000000a00)=""/183, 0x0, 0x1, 0x34}, @fda={0x66646185, 0x8}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000000140)}}, @clear_death={0x400c630f, 0x2}, @acquire_done, @free_buffer={0x40086303, r4}, @acquire_done], 0x0, 0x0, 0x0}) 22.23438075s ago: executing program 5 (id=1528): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}}], 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x2) mkdir(0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(r9, &(0x7f0000000240)={0x2020}, 0x2020) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1, 0x1, 0x2}, 0x14) 22.23388774s ago: executing program 5 (id=1529): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}}], 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x2) mkdir(0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(r9, &(0x7f0000000240)={0x2020}, 0x2020) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1, 0x1, 0x2}, 0x14) 22.15965027s ago: executing program 5 (id=1530): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r1, &(0x7f0000000100)='\x00', 0x1c) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x8, 0x100, 0x100, 0x40}) splice(r1, &(0x7f0000000180)=0xffffffffffffffff, r0, 0x0, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x5, 0xed}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='rxrpc_conn\x00', r0, 0x0, 0x5}, 0x18) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x5, 0x3, 0x9, 0x6, 0x10001, 0xf0, 0xb, 0x4, 0x6, 0x3, 0x0, 0xbc, 0xe, 0x7fffffff, 0x3, 0x3, 0x3ff, 0x6dc, 0x350, 0x4, 0xa, 0xfffffff7}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 22.05902123s ago: executing program 9 (id=1531): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000a80)=ANY=[], 0x1, 0x24a, &(0x7f0000001140)="$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") chdir(&(0x7f0000004340)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x204010, &(0x7f0000000000), 0x0, 0x65e, &(0x7f00000013c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000007c0)='./bus\x00', 0x36) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 21.954586639s ago: executing program 9 (id=1532): ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) dup3(r2, r0, 0x0) 21.796390749s ago: executing program 9 (id=1533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x20, 0xc, 0xff, 0x4, 0x0, 0x5, 0x1200}, [@RTA_FLOW={0x8, 0xb, 0x9}]}, 0x24}}, 0x0) 21.742532759s ago: executing program 40 (id=1533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x20, 0xc, 0xff, 0x4, 0x0, 0x5, 0x1200}, [@RTA_FLOW={0x8, 0xb, 0x9}]}, 0x24}}, 0x0) 21.335157568s ago: executing program 5 (id=1535): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r2, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 21.188456698s ago: executing program 5 (id=1537): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) unshare(0x20040400) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 21.167830148s ago: executing program 41 (id=1537): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) unshare(0x20040400) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 18.697708912s ago: executing program 7 (id=1575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.349089192s ago: executing program 7 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(r0) 18.245271131s ago: executing program 7 (id=1585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002c00)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb3c001e"], 0x60}}, 0x0) 18.129042091s ago: executing program 7 (id=1587): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$eJzsmL9rFEEUx78zt7e5FRFtUtgoGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b25TM4N63W+TzF8Z9978+a9233FgSCI/5avX359fnp+bvEUgP2YwoR+/r0CMKY0N/w/vbh/8nnzwss3H1+/WzvwcHvneTJEiOEHtb/kdwC8na8gyTPl0b+lmNKbRfBcXwHHCa2vgcHX+hY4rmodgeGG1ncN3ZH+vn9nJY782514SYpZuQRyCeXS2Hm//ibDkt4LIQQz7OsbvXYrjqOuIRxt28VUSuTJ2pNW/6pw0Z/naBr3k128/uTxptxnvZk1+heAI9BFNMCwoJ/PYSLrjWqJUf9hZ3B+xap/12qlqzQUFVlTovlzLM0yxaGZcuHTspxztukgylwDw1FVDEyyk8POR8fbBCAVTvG7eFb/oCVyXbKqGCGeeQDG/ivbolQVmZjsb7+3Td+KwgUrTsH2/v7U9nrn7EMs3zEPvTb/l46NutiHLTU/xCuG48Z8coz5UU9W79XXN3ozK6ut5Wg5WgvDxhkGPDod1tNBpFZr7g3ms5fOp33G+dURvi538aCVJN1ArS5z4SFJumG6D43PZmGr8+OmDktwEcAxtZFj081PrFg5mKt8eOor1bTtRBAEQRAEQRAEQRAEQRAEUYojYOm/oAWEl1PvPwEAAP//p1NjTA==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 18.008647921s ago: executing program 7 (id=1589): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe000202b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="62202a3a2a20726d004da24ddc66bb4c2ae0f3b50d655c2262f8fc0c65f18cd60f17f267c4a6e73a31030a895f1a8dae70daae514cd9635e7134cdd2e0604949b9a78d22d9f5dd17df9b1b678684426353cf0c52bbaa5d82c36f4a85c1ad80"], 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f, 0x300}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001100)=0x12) 17.91285936s ago: executing program 7 (id=1591): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001800)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x10) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0xcb0a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'vlan0\x00'}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x182000, &(0x7f0000002a00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@dax_always}, {@nombcache}, {@auto_da_alloc}, {@bsdgroups}, {@resuid={'resuid', 0x3d, r6}}, {@test_dummy_encryption_v1}, {@data_err_ignore}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x532, &(0x7f0000002b40)="$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") 17.881995021s ago: executing program 42 (id=1591): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001800)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x10) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0xcb0a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'vlan0\x00'}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x182000, &(0x7f0000002a00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@dax_always}, {@nombcache}, {@auto_da_alloc}, {@bsdgroups}, {@resuid={'resuid', 0x3d, r6}}, {@test_dummy_encryption_v1}, {@data_err_ignore}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x532, &(0x7f0000002b40)="$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") 11.734566187s ago: executing program 0 (id=1668): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 11.734342216s ago: executing program 0 (id=1669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000308010300000000000000000300000006000240080000000500030006000000140004800800014000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) 11.733751366s ago: executing program 0 (id=1671): r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/udp6\x00') preadv(r0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/237, 0xed}], 0x1, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000006}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x0, &(0x7f0000000140)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x8, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 11.266484625s ago: executing program 2 (id=1678): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.227731625s ago: executing program 2 (id=1681): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe000202b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="62202a3a2a20726d004da24ddc66bb4c2ae0f3b50d655c2262f8fc0c65f18cd60f17f267c4a6e73a31030a895f1a8dae70daae514cd9635e7134cdd2e0604949b9a78d22d9f5dd17df9b1b678684426353cf0c52bbaa5d82c36f4a85c1ad80"], 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d8200000400f6eb2bda00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001100)=0x12) 10.754159694s ago: executing program 0 (id=1683): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 10.724502974s ago: executing program 0 (id=1685): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000010, &(0x7f0000000200), 0x1, 0x513, &(0x7f00000010c0)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240), 0x1f, 0x100000, 0x0, 0x0) 10.343501893s ago: executing program 2 (id=1690): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$eJzsmL9rFEEUx78zt7e5FRFtUtgoGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b25TM4N63W+TzF8Z9978+a9233FgSCI/5avX359fnp+bvEUgP2YwoR+/r0CMKY0N/w/vbh/8nnzwss3H1+/WzvwcHvneTJEiOEHtb/kdwC8na8gyTPl0b+lmNKbRfBcXwHHCa2vgcHX+hY4rmodgeGG1ncN3ZH+vn9nJY782514SYpZuQRyCeXS2Hm//ibDkt4LIQQz7OsbvXYrjqOuIRxt28VUSuTJ2pNW/6pw0Z/naBr3k128/uTxptxnvZk1+heAI9BFNMCwoJ/PYSLrjWqJUf9hZ3B+xap/12qlqzQUFVlTovlzLM0yxaGZcuHTspxztukgylwDw1FVDEyyk8POR8fbBCAVTvG7eFb/oCVyXbKqGCGeeQDG/ivbolQVmZjsb7+3Td+KwgUrTsH2/v7U9nrn7EMs3zEPvTb/l46NutiHLTU/xCuG48Z8coz5UU9W79XXN3ozK6ut5Wg5WgvDxhkGPDod1tNBpFZr7g3ms5fOp33G+dURvi538aCVJN1ArS5z4SFJumG6D43PZmGr8+OmDktwEcAxtZFj081PrFg5mKt8eOor1bTtRBAEQRAEQRAEQRAEQRAEUYojYOm/oAWEl1PvPwEAAP//p1NjTA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10.120104873s ago: executing program 0 (id=1696): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 9.997626073s ago: executing program 43 (id=1696): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 9.624336162s ago: executing program 2 (id=1700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x63) inotify_init() ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, 0x0) 9.440287891s ago: executing program 2 (id=1701): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe000202b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="62202a3a2a20726d004da24ddc66bb4c2ae0f3b50d655c2262f8fc0c65f18cd60f17f267c4a6e73a31030a895f1a8dae70daae514cd9635e7134cdd2e0604949b9a78d22d9f5dd17df9b1b678684426353cf0c52bbaa5d82c36f4a85c1ad80"], 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d8200000400f6eb2bda00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001100)=0x12) 8.891245901s ago: executing program 2 (id=1709): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x800080, &(0x7f0000000180)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_journal}]}, 0x0, 0x471, &(0x7f0000000340)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00'], 0x6) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) lseek(0xffffffffffffffff, 0xfe, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) 8.84975073s ago: executing program 44 (id=1709): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x800080, &(0x7f0000000180)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_journal}]}, 0x0, 0x471, &(0x7f0000000340)="$eJzs3M1vFOUfAPDvTLsFfsCvFfGFF7WKxsaXlgIKBw9qNPGAiYke9Ni0hVQKNbQmQIiCMXgwxph4Nx79FzxpYozxZOJV74aEGC6ApzWzM1N2l+3Slt0usp9PMvA8M8/M83x35tl9Zp7dBtC3RrN/kohtEfFHRAzn2cYCo/l/16+en75x9fx0EtXq238ntXLXrp6fLouW+20tMmNpRPppEnta1Lt49tyJqfn52dNFfmLp5AcTi2fPPT93cur47PHZUweOHDl0cPLwiwde6EicWZuu7f5oYe+uN9776s2jX2Trhsr4m+LokNF2G5+qVjtcXW9tr0sngz1sCGsyEBHZ6arU+v9wJc/lhuP1T3raOKCrqtVqdevKmy9UgXtYEo15XR76RflBn93/lkvzIODl7g0/eu7KK/kNUBb39WLJtwxGWpSpNN3fFqrDHah/NCLevfDPN9kS3XkOAQDQ4Ids/PNcq/FfGg/Wlft/MTc0EhH3RcSOiLg/InZGxAMRtbIPRcTDa6y/mCQZKPO3jn/Sy+sObhWy8d9LxdxW4/ivHP3FyECR216Lv5Icm5uf3V+8JmNR2ZTlJ9vU8eNrv3+50rb68V+2ZPWXY8GiHZcHNzXuMzO1NHUnMde7cnF5uqYp/mR5JiCJiF0RsXuddcw9893elbbdPv42OjDPVP024un8/F+IpvhLSfv5yYnNMT+7f6K8Km7162+X3lqp/juKvwOuXIz4X8vrfzn+kaR+vnZx7XVc+vOzFe9pVnn9j9Tvk13/Q8k7tfRQse7M1NLS6cmIoeRo3uj69Qdu7lvmy/JZ/GP7Wvf/HXHzldgTEdlF/EhEPBoRjxVtfzwinoiIfY1hfX64LvPLq0++v/74uyuLf2ZN5/9mYiia17RODJz4+fuGSkduif9G+/N/qJYaK9as5v1vNe1a39UMAAAA/z1pRGyLJB1fTqfp+Hj+ffmdEen8wuLSs8cWPjw1k/9GYCQqafmka7jueehkcVuf5y9GRP7VgnL7weK58dcDW2r58emF+ZleBw99busK/T/z10CvWwd0nd9rQf/S/6F/6f/Qv/R/6F8t+v+WXrQD2HitPv8/7kE7gI3X1P9N+0Efcf8P/Uv/h/6l/0NfWtwSt/+RfNtEeaR17t4uMXgmP3Tnj7wBiajcFc3IE5s7f+RI74K47tHE3E+xyr+t0b1ED9+UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOujfAAAA//+3VNwx") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00'], 0x6) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) lseek(0xffffffffffffffff, 0xfe, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) 3.041127248s ago: executing program 3 (id=1776): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.929708767s ago: executing program 3 (id=1777): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="83931e57", 0x4}], 0x1}}], 0x1, 0x40044) 2.551211846s ago: executing program 3 (id=1779): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe000202b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="62202a3a2a20726d004da24ddc66bb4c2ae0f3b50d655c2262f8fc0c65f18cd60f17f267c4a6e73a31030a895f1a8dae70daae514cd9635e7134cdd2e0604949b9a78d22d9f5dd17df9b1b678684426353cf0c52bbaa5d82c36f4a85c1ad80"], 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f, 0x300}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d8200000400f6eb2bda00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001100)=0x12) 1.888714915s ago: executing program 3 (id=1787): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.554138204s ago: executing program 6 (id=1794): unshare(0x20040400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 1.533206014s ago: executing program 3 (id=1795): syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004106cd40cd060b011bd5000000010902120001000080000904"], 0x0) 1.490465864s ago: executing program 4 (id=1797): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe000202b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="62202a3a2a20726d004da24ddc66bb4c2ae0f3b50d655c2262f8fc0c65f18cd60f17f267c4a6e73a31030a895f1a8dae70daae514cd9635e7134cdd2e0604949b9a78d22d9f5dd17df9b1b678684426353cf0c52bbaa5d82c36f4a85c1ad80"], 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f, 0x300}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d8200000400f6eb2bda00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001100)=0x12) 1.039257093s ago: executing program 6 (id=1798): r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/udp6\x00') preadv(r0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/237, 0xed}], 0x1, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000006}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x0, &(0x7f0000000140)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x8, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x61]}}, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 968.652803ms ago: executing program 4 (id=1799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 939.565553ms ago: executing program 8 (id=1800): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x10}, 0x8005, 0x0, 0x3, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 864.262333ms ago: executing program 8 (id=1802): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129401, 0x0) io_setup(0x2, 0x0) dup3(r0, r1, 0x0) 841.931632ms ago: executing program 1 (id=1803): mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000080)=0x300000) 792.743862ms ago: executing program 4 (id=1804): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_open_procfs(0x0, 0x0) r1 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 786.159952ms ago: executing program 1 (id=1805): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x55fa5000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 785.260582ms ago: executing program 8 (id=1806): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0b03060020fc020002004788800809103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 750.852652ms ago: executing program 1 (id=1807): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@delalloc}]}, 0x1, 0x4cf, &(0x7f0000000c80)="$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") chdir(&(0x7f0000000540)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 750.381202ms ago: executing program 8 (id=1808): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2ba0090, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020) 698.476122ms ago: executing program 4 (id=1809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00005ff000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) syz_clone3(&(0x7f0000000040)={0x206361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 681.137882ms ago: executing program 4 (id=1810): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe000202b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="62202a3a2a20726d004da24ddc66bb4c2ae0f3b50d655c2262f8fc0c65f18cd60f17f267c4a6e73a31030a895f1a8dae70daae514cd9635e7134cdd2e0604949b9a78d22d9f5dd17df9b1b678684426353cf0c52bbaa5d82c36f4a85c1ad80"], 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f, 0x300}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d8200000400f6eb2bda00"}) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000001100)=0x12) 454.724861ms ago: executing program 1 (id=1811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) 428.862542ms ago: executing program 8 (id=1812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@empty, 0x4d0, 0x32}, @in=@dev, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e23, @in=@multicast1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 319.888831ms ago: executing program 6 (id=1813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000400)={{0x2, @multicast2, 0x0, 0x3, 'lblc\x00', 0x2, 0x20, 0x11}, {@broadcast, 0x4e21, 0x2000, 0x8, 0x80000001, 0x6}}, 0x44) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 202.005251ms ago: executing program 6 (id=1814): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 201.745511ms ago: executing program 6 (id=1815): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x55fa5000) 201.636371ms ago: executing program 6 (id=1816): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1a}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x4, {0x4, 0x22, 'J}'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 200.481821ms ago: executing program 4 (id=1817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000080000000000000a00000000a3"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x86) 192.233331ms ago: executing program 8 (id=1818): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@test_dummy_encryption_v1}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x40087602, 0x0) 129.983631ms ago: executing program 45 (id=1818): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@test_dummy_encryption_v1}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x40087602, 0x0) 127.914601ms ago: executing program 3 (id=1820): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) sendfile(r0, r1, &(0x7f0000000100)=0xd00, 0x10001) 127.642771ms ago: executing program 1 (id=1821): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x20081e, &(0x7f0000000900)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0x0, 0x4ef, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmmsg$inet(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) pipe(&(0x7f0000002480)) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d00000000009500000000000000fd4e5f89ac779605e98dae5ad2edbe5e6376152932f00a91ea2e2d578cafd1861792914a5ae12e489c6a5da79791e8f9d42bcf3c5a0b8709cc3c6b233fad9da894c1ed4f187d35fb3c6d2edba4806b84319b240bb647066d892c6431eeaa2a878d9d3174245cc3e9182de7c4190a4ee33cc18e4d3f2a97fae1e91047fac9125b5dfd2e2766c158b411982015bef06e2998ea9c25f9458448b298ff753f3a57c2b100dab8a70a2672d94a4acf6718557746ae34d1a0fdbeb6badecdb3261c84b285ac"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002940)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 0s ago: executing program 1 (id=1822): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x1e, "b6c5e4b2fce164122eaa9cc8b01f0027f2cc60083fb94086c8f788f3631e"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc}, 0x0, &(0x7f0000000240)={0x20, 0x81, 0x3, "175a41"}, &(0x7f0000000280)={0x20, 0x82, 0x2, "f91d"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "9f8e63"}, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a440000102030109021b000101ff20cd090400fd440701013d0905010220"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="00031b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000040)='(m', 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000038ff4f40d31319320400010203010902"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): [ 79.095161][ T1580] EXT4-fs (loop2): unmounting filesystem. [ 79.144603][ T3059] usblp0: removed [ 79.155472][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 79.186867][ T24] usb 1-1: USB disconnect, device number 16 [ 79.207081][ T24] usblp0: removed [ 79.214426][ T3210] loop6: detected capacity change from 0 to 8192 [ 79.233350][ T3207] kvm [3204]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800 [ 79.241025][ T3210] syz.6.1116: attempt to access beyond end of device [ 79.241025][ T3210] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.254900][ T3217] loop9: detected capacity change from 0 to 2048 [ 79.260306][ T3210] Buffer I/O error on dev loop6, logical block 57847, async page read [ 79.273948][ T3207] kvm [3204]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800 [ 79.283271][ T3210] syz.6.1116: attempt to access beyond end of device [ 79.283271][ T3210] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.296684][ T3210] Buffer I/O error on dev loop6, logical block 57847, async page read [ 79.311283][ T3219] loop3: detected capacity change from 0 to 256 [ 79.317465][ T3210] syz.6.1116: attempt to access beyond end of device [ 79.317465][ T3210] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.343355][ T3210] Buffer I/O error on dev loop6, logical block 57847, async page read [ 79.346582][ T3217] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 79.396913][ T3210] syz.6.1116: attempt to access beyond end of device [ 79.396913][ T3210] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.412404][ T3217] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 79.427544][ T3217] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 79.439793][ T3217] EXT4-fs (loop9): This should not happen!! Data will be lost [ 79.439793][ T3217] [ 79.449210][ T3217] EXT4-fs (loop9): Total free blocks count 0 [ 79.458003][ T3228] netlink: 'syz.2.1121': attribute type 32 has an invalid length. [ 79.465931][ T3217] EXT4-fs (loop9): Free/Dirty block details [ 79.472002][ T3228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1121'. [ 79.480876][ T3217] EXT4-fs (loop9): free_blocks=2415919504 [ 79.486504][ T3217] EXT4-fs (loop9): dirty_blocks=32 [ 79.491696][ T3217] EXT4-fs (loop9): Block reservation details [ 79.497804][ T3210] Buffer I/O error on dev loop6, logical block 57847, async page read [ 79.504125][ T3217] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 79.548602][ T10] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.601002][ T3238] loop3: detected capacity change from 0 to 512 [ 79.627962][ T3238] EXT4-fs: Ignoring removed oldalloc option [ 79.638984][ T3238] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.661809][ T3238] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1125: bg 0: block 64: padding at end of block bitmap is not set [ 79.677322][ T3238] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.1125: Failed to acquire dquot type 0 [ 79.691779][ T3238] EXT4-fs (loop3): 1 truncate cleaned up [ 79.697705][ T3238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.734698][ T293] EXT4-fs (loop3): unmounting filesystem. [ 79.770410][ T3252] loop0: detected capacity change from 0 to 8192 [ 79.807281][ T3259] loop2: detected capacity change from 0 to 256 [ 79.817614][ T3252] loop0: p1 < > p2 < p5 > p4 [ 79.829084][ T3252] loop0: p4 size 65536 extends beyond EOD, truncated [ 79.842321][ T3252] loop0: p5 size 65536 extends beyond EOD, truncated [ 79.906091][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 79.909411][ T3256] kvm [3255]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800 [ 79.934849][ T357] udevd[357]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 79.935168][ T1140] udevd[1140]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 79.946860][ T361] udevd[361]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 79.958233][ T3266] loop2: detected capacity change from 0 to 2048 [ 79.968103][ T330] udevd[330]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 79.994216][ T3266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.032686][ T3266] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 80.048746][ T3266] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 80.055878][ T3274] loop3: detected capacity change from 0 to 1024 [ 80.060976][ T3266] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.060976][ T3266] [ 80.060994][ T3266] EXT4-fs (loop2): Total free blocks count 0 [ 80.061008][ T3266] EXT4-fs (loop2): Free/Dirty block details [ 80.061020][ T3266] EXT4-fs (loop2): free_blocks=2415919504 [ 80.061033][ T3266] EXT4-fs (loop2): dirty_blocks=32 [ 80.061045][ T3266] EXT4-fs (loop2): Block reservation details [ 80.061056][ T3266] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 80.111168][ T495] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.111980][ T3274] EXT4-fs: Ignoring removed i_version option [ 80.129517][ T3274] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.137583][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 80.146976][ T24] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 80.158912][ T3283] loop2: detected capacity change from 0 to 16 [ 80.164501][ T24] usb 10-1: config 0 has no interface number 0 [ 80.169931][ T3274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.171456][ T3283] erofs: (device loop2): mounted with root inode @ nid 36. [ 80.188193][ T24] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 80.200539][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.209446][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 80.221199][ T3283] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 80.233444][ T24] usb 10-1: Product: syz [ 80.239877][ T293] EXT4-fs (loop3): unmounting filesystem. [ 80.244339][ T24] usb 10-1: Manufacturer: syz [ 80.250528][ T24] usb 10-1: SerialNumber: syz [ 80.260470][ T24] usb 10-1: config 0 descriptor?? [ 80.276340][ T24] smsc95xx v2.0.0 [ 80.305976][ T3293] loop6: detected capacity change from 0 to 256 [ 80.376066][ T408] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 80.557334][ T408] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 80.568144][ T408] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 80.581638][ T408] usb 1-1: config 1 interface 0 has no altsetting 0 [ 80.589678][ T408] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 80.598584][ T408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.606394][ T408] usb 1-1: Product: syz [ 80.610358][ T408] usb 1-1: Manufacturer: syz [ 80.614781][ T408] usb 1-1: SerialNumber: syz [ 80.676088][ T39] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 80.856054][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 80.862080][ T39] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 80.870183][ T39] usb 3-1: config 0 has no interface number 0 [ 80.876116][ T39] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 80.885723][ T39] usb 3-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 80.896685][ T39] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 80.907947][ T39] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 80.916806][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.924598][ T39] usb 3-1: Product: syz [ 80.928598][ T39] usb 3-1: Manufacturer: syz [ 80.933018][ T39] usb 3-1: SerialNumber: syz [ 80.938360][ T39] usb 3-1: config 0 descriptor?? [ 80.943354][ T3298] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 80.950365][ T3298] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 81.225528][ T408] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 81.430832][ T3327] loop3: detected capacity change from 0 to 256 [ 81.629671][ T3278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.640373][ T3278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.652767][ C1] usblp0: nonzero write bulk status received: -71 [ 81.660778][ T39] usb 1-1: USB disconnect, device number 17 [ 81.733375][ T3357] loop3: detected capacity change from 0 to 2048 [ 81.747763][ T3357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.800981][ T293] EXT4-fs (loop3): unmounting filesystem. [ 81.888992][ T3371] loop3: detected capacity change from 0 to 256 [ 82.226069][ T39] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 82.426065][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 82.432058][ T39] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 82.442795][ T39] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 82.452466][ T39] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 82.465477][ T39] usb 1-1: config 1 interface 0 has no altsetting 0 [ 82.474321][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 82.483237][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.491082][ T39] usb 1-1: Product: syz [ 82.494991][ T39] usb 1-1: Manufacturer: syz [ 82.499998][ T39] usb 1-1: SerialNumber: syz [ 82.508936][ T3278] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.643389][ T24] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 82.666357][ T24] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.675746][ T24] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 82.688758][ T24] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 82.710300][ T24] usb 10-1: USB disconnect, device number 4 [ 82.717002][ T3275] usblp0: removed [ 82.722861][ T39] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 82.738477][ T39] usb 1-1: USB disconnect, device number 18 [ 82.746612][ T39] usblp0: removed [ 82.779126][ T3386] loop6: detected capacity change from 0 to 512 [ 82.790740][ T3386] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.805362][ T3386] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 82.825181][ T522] EXT4-fs (loop6): unmounting filesystem. [ 82.982048][ T3403] loop3: detected capacity change from 0 to 256 [ 83.039211][ T3406] loop6: detected capacity change from 0 to 512 [ 83.045948][ T3406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.057279][ T3406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.068339][ T3406] EXT4-fs (loop6): 1 truncate cleaned up [ 83.073832][ T3406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 83.084277][ T3406] syz.6.1185 (pid 3406) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 83.100910][ T522] EXT4-fs (loop6): unmounting filesystem. [ 83.113996][ T3409] loop6: detected capacity change from 0 to 256 [ 83.122993][ T3409] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 83.139020][ T3409] exFAT-fs (loop6): error, invalid dentry access beyond EOF (clu : 11, eidx : 128) [ 83.148358][ T3409] exFAT-fs (loop6): Filesystem has been set read-only [ 83.209477][ T3419] loop6: detected capacity change from 0 to 512 [ 83.221309][ T3419] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.229014][ T3419] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 83.256814][ T3419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 83.276156][ T3419] System zones: 1-12 [ 83.280810][ T3419] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1190: corrupted in-inode xattr [ 83.309307][ T3419] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1190: couldn't read orphan inode 15 (err -117) [ 83.330466][ T3419] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 83.338861][ T3426] loop0: detected capacity change from 0 to 512 [ 83.349245][ T3426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.377459][ T522] EXT4-fs (loop6): unmounting filesystem. [ 83.398997][ T3426] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.421152][ T408] usb 3-1: USB disconnect, device number 7 [ 83.468046][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 83.468063][ T28] audit: type=1400 audit(1737043571.661:319): avc: denied { lock } for pid=3425 comm="syz.0.1193" path="/104/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.500068][ T3425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 83.638456][ T3441] loop2: detected capacity change from 0 to 256 [ 83.799381][ T3452] loop9: detected capacity change from 0 to 128 [ 83.844098][ T330] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.848007][ T3452] loop9: detected capacity change from 0 to 512 [ 83.859162][ T330] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.865881][ T3452] EXT4-fs: Ignoring removed nobh option [ 83.873858][ T330] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.895741][ T3452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.939484][ T3452] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.974316][ T3465] loop2: detected capacity change from 0 to 256 [ 83.999592][ T3465] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 84.015363][ T3466] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1203: bg 0: block 224: padding at end of block bitmap is not set [ 84.044625][ T3465] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 84.055340][ T3466] EXT4-fs (loop9): Remounting filesystem read-only [ 84.060950][ T3465] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006) [ 84.070826][ T39] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 84.072352][ T3465] exFAT-fs (loop2): Filesystem has been set read-only [ 84.106583][ T3465] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006) [ 84.119707][ T3469] loop9: detected capacity change from 0 to 1024 [ 84.197699][ T3479] loop3: detected capacity change from 0 to 4096 [ 84.238706][ T3481] loop9: detected capacity change from 0 to 256 [ 84.267125][ T39] usb 7-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 84.279467][ T39] usb 7-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 84.292501][ T39] usb 7-1: config 1 interface 0 has no altsetting 0 [ 84.311995][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 84.343962][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.351937][ T39] usb 7-1: Product: syz [ 84.355969][ T39] usb 7-1: Manufacturer: syz [ 84.370206][ T39] usb 7-1: SerialNumber: syz [ 85.115179][ T39] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 85.258749][ T3523] loop0: detected capacity change from 0 to 256 [ 85.287717][ T3525] input: syz1 as /devices/virtual/input/input8 [ 85.294296][ T28] audit: type=1400 audit(1737043573.481:320): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=917 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.318153][ T28] audit: type=1400 audit(1737043573.481:321): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=917 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.342335][ T317] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 85.352732][ T28] audit: type=1400 audit(1737043573.481:322): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=917 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.459446][ T3453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.469468][ T3453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.477535][ C1] usblp0: nonzero write bulk status received: -71 [ 85.477668][ T408] usb 7-1: USB disconnect, device number 12 [ 85.567095][ T317] usb 4-1: config 4 has an invalid interface number: 60 but max is 0 [ 85.576781][ T317] usb 4-1: config 4 has no interface number 0 [ 85.584691][ T317] usb 4-1: config 4 interface 60 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 85.595907][ T317] usb 4-1: config 4 interface 60 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.609184][ T317] usb 4-1: config 4 interface 60 has no altsetting 0 [ 85.618456][ T317] usb 4-1: New USB device found, idVendor=0789, idProduct=016b, bcdDevice=8f.23 [ 85.627375][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.635126][ T317] usb 4-1: Product: syz [ 85.639146][ T317] usb 4-1: Manufacturer: syz [ 85.643544][ T317] usb 4-1: SerialNumber: syz [ 85.774656][ T28] audit: type=1400 audit(1737043573.961:323): avc: denied { setopt } for pid=3542 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.809179][ T3545] loop2: detected capacity change from 0 to 512 [ 85.815616][ T3545] EXT4-fs: Ignoring removed oldalloc option [ 85.827178][ T3545] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.846157][ T39] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 85.862218][ T317] usb 4-1: USB disconnect, device number 16 [ 85.867431][ T3545] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1236: bg 0: block 64: padding at end of block bitmap is not set [ 85.882335][ T3545] Quota error (device loop2): write_blk: dquota write failed [ 85.892763][ T3545] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 85.902673][ T3545] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1236: Failed to acquire dquot type 0 [ 85.914148][ T3545] EXT4-fs (loop2): 1 truncate cleaned up [ 85.924626][ T3545] Quota error (device loop2): write_blk: dquota write failed [ 85.931982][ T3545] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 85.941739][ T3545] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1236: Failed to acquire dquot type 0 [ 86.029065][ T3556] loop0: detected capacity change from 0 to 512 [ 86.046093][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 86.047969][ T3556] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.052692][ T39] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.070731][ T39] usb 10-1: config 0 has no interface number 0 [ 86.077784][ T39] usb 10-1: config 0 interface 184 has no altsetting 0 [ 86.079136][ T28] audit: type=1400 audit(1737043574.271:324): avc: denied { rename } for pid=3555 comm="syz.0.1239" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.084612][ T3556] EXT4-fs error (device loop0): ext4_get_first_dir_block:3583: inode #12: comm syz.0.1239: Attempting to read directory block (0) that is past i_size (3) [ 86.106384][ T408] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 86.126299][ T39] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.137643][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.145542][ T39] usb 10-1: Product: syz [ 86.149742][ T39] usb 10-1: Manufacturer: syz [ 86.154227][ T39] usb 10-1: SerialNumber: syz [ 86.159377][ T39] usb 10-1: config 0 descriptor?? [ 86.165058][ T39] smsc75xx v1.0.0 [ 86.177586][ T3560] loop0: detected capacity change from 0 to 512 [ 86.184445][ T3560] EXT4-fs (loop0): Test dummy encryption mode enabled [ 86.191138][ T3560] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.200807][ T3560] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 86.210331][ T3560] EXT4-fs (loop0): group descriptors corrupted! [ 86.306137][ T408] usb 7-1: Using ep0 maxpacket: 32 [ 86.312215][ T408] usb 7-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 86.323241][ T408] usb 7-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 86.333276][ T408] usb 7-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 86.346920][ T408] usb 7-1: config 1 interface 0 has no altsetting 0 [ 86.355163][ T408] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.364436][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.373863][ T408] usb 7-1: Product: syz [ 86.378044][ T408] usb 7-1: Manufacturer: syz [ 86.382657][ T408] usb 7-1: SerialNumber: syz [ 86.388615][ T3453] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 86.476043][ T317] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 86.596252][ T3451] usblp0: removed [ 86.601793][ T408] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 86.613920][ T408] usb 7-1: USB disconnect, device number 13 [ 86.620729][ T408] usblp0: removed [ 86.657213][ T317] usb 4-1: config 4 has an invalid interface number: 60 but max is 0 [ 86.665101][ T317] usb 4-1: config 4 has no interface number 0 [ 86.671111][ T317] usb 4-1: config 4 interface 60 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 86.682016][ T317] usb 4-1: config 4 interface 60 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.694781][ T317] usb 4-1: config 4 interface 60 has no altsetting 0 [ 86.702771][ T317] usb 4-1: New USB device found, idVendor=0789, idProduct=016b, bcdDevice=8f.23 [ 86.711663][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.719507][ T317] usb 4-1: Product: syz [ 86.723414][ T317] usb 4-1: Manufacturer: syz [ 86.727855][ T317] usb 4-1: SerialNumber: syz [ 86.778604][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 86.789494][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.120555][ T3586] loop0: detected capacity change from 0 to 512 [ 87.134193][ T3586] EXT4-fs: Ignoring removed oldalloc option [ 87.141357][ T3586] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.158761][ T3586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1249: bg 0: block 64: padding at end of block bitmap is not set [ 87.173367][ T3586] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.1249: Failed to acquire dquot type 0 [ 87.199272][ T3586] EXT4-fs (loop0): 1 truncate cleaned up [ 87.223857][ T3586] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.1249: Failed to acquire dquot type 0 [ 87.364758][ T317] usb 4-1: USB disconnect, device number 17 [ 87.409662][ T3596] loop0: detected capacity change from 0 to 512 [ 87.417747][ T3596] EXT4-fs (loop0): Test dummy encryption mode enabled [ 87.424351][ T3596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.434099][ T3596] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 87.443608][ T3596] EXT4-fs (loop0): group descriptors corrupted! [ 87.500014][ T3598] loop6: detected capacity change from 0 to 256 [ 87.508323][ T3598] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 196) [ 87.526537][ T522] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 196) [ 87.816034][ T353] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 88.012610][ T353] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.023471][ T353] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.033775][ T353] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 88.053112][ T3629] loop6: detected capacity change from 0 to 512 [ 88.066321][ T3629] EXT4-fs (loop6): Test dummy encryption mode enabled [ 88.069472][ T353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.086462][ T3629] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 88.089452][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.108988][ T353] usb 1-1: Product: syz [ 88.109385][ T3629] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 88.113054][ T353] usb 1-1: Manufacturer: syz [ 88.122758][ T3629] EXT4-fs (loop6): group descriptors corrupted! [ 88.126833][ T353] usb 1-1: SerialNumber: syz [ 88.398440][ T3604] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 88.589661][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 88.614132][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 88.648233][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 88.679835][ T39] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 88.712006][ T39] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 88.726459][ T317] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 88.850040][ T39] usb 10-1: USB disconnect, device number 5 [ 88.918486][ T317] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 88.929331][ T317] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 88.942343][ T317] usb 3-1: config 1 interface 0 has no altsetting 0 [ 88.950198][ T317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.959352][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.967154][ T317] usb 3-1: Product: syz [ 88.971135][ T317] usb 3-1: Manufacturer: syz [ 88.975559][ T317] usb 3-1: SerialNumber: syz [ 89.027892][ T3604] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.186061][ T332] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 89.235895][ T353] cdc_ncm 1-1:1.0: bind() failure [ 89.241649][ T353] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 89.248177][ T353] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 89.256720][ T353] usb 1-1: USB disconnect, device number 19 [ 89.367137][ T332] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 89.375255][ T332] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 89.383531][ T332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.393463][ T332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.402275][ T332] usb 4-1: config 0 has no interface number 0 [ 89.408307][ T332] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 89.417961][ T332] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.428729][ T332] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.436039][ T19] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 89.438348][ T332] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.458736][ T332] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 89.467587][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.476033][ T332] usb 4-1: config 0 descriptor?? [ 89.481750][ T332] usb 4-1: MIDIStreaming interface descriptor not found [ 89.585393][ T317] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 89.598800][ T317] usb 3-1: USB disconnect, device number 8 [ 89.605532][ T317] usblp0: removed [ 89.637079][ T19] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.647399][ T19] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 47235, setting to 64 [ 89.658575][ T19] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.673464][ T19] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.682579][ T19] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.690626][ T19] usb 10-1: Product: syz [ 89.691356][ T332] usb 4-1: USB disconnect, device number 18 [ 89.694721][ T19] usb 10-1: Manufacturer: syz [ 89.705089][ T19] usb 10-1: SerialNumber: syz [ 89.771031][ T3661] loop6: detected capacity change from 0 to 512 [ 89.779192][ T3661] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 89.790116][ T3661] EXT4-fs (loop6): 1 truncate cleaned up [ 89.891489][ T3668] loop6: detected capacity change from 0 to 1024 [ 90.136053][ T353] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 90.216071][ T317] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.317216][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.335196][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.345051][ T353] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 90.353924][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.366285][ T353] usb 1-1: config 0 descriptor?? [ 90.416056][ T317] usb 3-1: Using ep0 maxpacket: 32 [ 90.422086][ T317] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 90.446030][ T317] usb 3-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 90.455958][ T317] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 90.469008][ T317] usb 3-1: config 1 interface 0 has no altsetting 0 [ 90.486810][ T317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 90.496036][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.503880][ T317] usb 3-1: Product: syz [ 90.507891][ T317] usb 3-1: Manufacturer: syz [ 90.512302][ T317] usb 3-1: SerialNumber: syz [ 90.517823][ T3627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.725524][ T19] cdc_ncm 10-1:1.0: bind() failure [ 90.733238][ T317] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 90.744227][ T19] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 90.751368][ T317] usb 3-1: USB disconnect, device number 9 [ 90.757092][ T19] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 90.766658][ T317] usblp0: removed [ 90.770714][ T19] usb 10-1: USB disconnect, device number 6 [ 90.777839][ T353] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 90.785088][ T353] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 90.792448][ T353] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 90.807649][ T353] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 90.815203][ T353] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 90.825882][ T353] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 90.841563][ T3688] loop6: detected capacity change from 0 to 256 [ 90.984964][ T3697] loop6: detected capacity change from 0 to 512 [ 91.116507][ T3697] EXT4-fs (loop6): Test dummy encryption mode enabled [ 91.123337][ T3697] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.135403][ T3697] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 91.146259][ T3697] EXT4-fs (loop6): group descriptors corrupted! [ 91.381093][ T353] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 5: -71 [ 91.394152][ T353] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense calibration info: -71 [ 91.404161][ T353] playstation 0003:054C:0DF2.000C: Failed to get calibration data from DualSense [ 91.413709][ T353] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 91.426672][ T353] playstation: probe of 0003:054C:0DF2.000C failed with error -71 [ 91.445049][ T353] usb 1-1: USB disconnect, device number 20 [ 91.706117][ T317] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 92.140086][ T3745] loop9: detected capacity change from 0 to 1024 [ 92.301953][ T3758] binder: BINDER_SET_CONTEXT_MGR already set [ 92.307919][ T3758] binder: 3757:3758 ioctl 4018620d 200002c0 returned -16 [ 92.401075][ T3761] loop2: detected capacity change from 0 to 512 [ 92.420463][ T3761] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.437528][ T3761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.457131][ T3761] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 92.468599][ T3761] EXT4-fs (loop2): group descriptors corrupted! [ 92.510562][ T3770] loop6: detected capacity change from 0 to 512 [ 92.564593][ T3770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 92.604760][ T3770] EXT4-fs (loop6): 1 truncate cleaned up [ 92.706599][ T3784] loop9: detected capacity change from 0 to 256 [ 92.726174][ T317] usb 3-1: device not accepting address 10, error -71 [ 92.826122][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 93.008012][ T24] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 93.048938][ T24] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 93.097379][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 93.140838][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.193301][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.227333][ T24] usb 4-1: Product: syz [ 93.245174][ T24] usb 4-1: Manufacturer: syz [ 93.264023][ T24] usb 4-1: SerialNumber: syz [ 93.390221][ T3816] loop0: detected capacity change from 0 to 512 [ 93.415676][ T3816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.446724][ T3816] EXT4-fs (loop0): 1 truncate cleaned up [ 93.752447][ T3836] loop0: detected capacity change from 0 to 512 [ 93.764847][ T3836] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.772647][ T3836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.793055][ T3836] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 93.806352][ T3836] EXT4-fs (loop0): group descriptors corrupted! [ 93.906365][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 94.010550][ T24] usb 4-1: USB disconnect, device number 19 [ 94.062859][ T24] usblp0: removed [ 94.516092][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 94.716036][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 94.722128][ T24] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 94.746180][ T24] usb 4-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 94.755907][ T24] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 94.778609][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 94.797104][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.805972][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.815454][ T24] usb 4-1: Product: syz [ 94.819641][ T332] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 94.839162][ T24] usb 4-1: Manufacturer: syz [ 94.843573][ T24] usb 4-1: SerialNumber: syz [ 94.860781][ T3776] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.026093][ T332] usb 10-1: Using ep0 maxpacket: 32 [ 95.033602][ T332] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.094093][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 95.110634][ T332] usb 10-1: config 0 has no interface number 0 [ 95.136416][ T24] usb 4-1: USB disconnect, device number 20 [ 95.145353][ T332] usb 10-1: config 0 interface 184 has no altsetting 0 [ 95.164809][ T24] usblp0: removed [ 95.173228][ T332] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.204816][ T332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.229143][ T332] usb 10-1: Product: syz [ 95.241888][ T332] usb 10-1: Manufacturer: syz [ 95.255978][ T332] usb 10-1: SerialNumber: syz [ 95.274674][ T332] usb 10-1: config 0 descriptor?? [ 95.292425][ T332] smsc75xx v1.0.0 [ 95.427985][ T3900] loop2: detected capacity change from 0 to 512 [ 95.434716][ T3900] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.441745][ T3900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.451606][ T3900] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 95.461245][ T3900] EXT4-fs (loop2): group descriptors corrupted! [ 95.686047][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 95.816050][ T412] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 95.866044][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 95.872031][ T24] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 95.882790][ T24] usb 4-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 95.892442][ T24] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 95.905366][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 95.911739][ T332] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 95.922426][ T332] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.932654][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.941759][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.949686][ T24] usb 4-1: Product: syz [ 95.953642][ T24] usb 4-1: Manufacturer: syz [ 95.958091][ T24] usb 4-1: SerialNumber: syz [ 95.963260][ T3776] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.997131][ T412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.007900][ T412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.017386][ T412] usb 1-1: New USB device found, idVendor=056a, idProduct=00e2, bcdDevice= 0.00 [ 96.026254][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.034857][ T412] usb 1-1: config 0 descriptor?? [ 96.174814][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 96.189394][ T24] usb 4-1: USB disconnect, device number 21 [ 96.196341][ T24] usblp0: removed [ 96.688258][ T412] wacom 0003:056A:00E2.000D: item fetching failed at offset 3/5 [ 96.695935][ T412] wacom 0003:056A:00E2.000D: parse failed [ 96.701994][ T412] wacom: probe of 0003:056A:00E2.000D failed with error -22 [ 96.813799][ T412] usb 1-1: USB disconnect, device number 21 [ 96.929877][ T332] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 96.940816][ T332] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 96.950348][ T332] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 96.959732][ T332] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 96.968599][ T332] usb 10-1: USB disconnect, device number 7 [ 97.415892][ T3945] loop0: detected capacity change from 0 to 512 [ 97.426150][ T3945] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.449156][ T3945] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.459081][ T3945] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 97.468702][ T3945] EXT4-fs (loop0): group descriptors corrupted! [ 98.017546][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 98.017561][ T28] audit: type=1400 audit(1737043586.211:325): avc: denied { append } for pid=3969 comm="syz.0.1382" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.111929][ T3967] kvm [3966]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 98.122549][ T3967] kvm [3966]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 98.135109][ T3967] kvm [3966]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000 [ 98.191986][ T3962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1379'. [ 98.279233][ T3981] binder_alloc: 3980: binder_alloc_buf, no vma [ 98.811777][ T412] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 98.839868][ T4000] loop6: detected capacity change from 0 to 512 [ 98.879932][ T4000] EXT4-fs (loop6): Test dummy encryption mode enabled [ 98.898230][ T4000] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.910118][ T4000] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 98.927623][ T4000] EXT4-fs (loop6): group descriptors corrupted! [ 98.998318][ T412] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 99.009118][ T412] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 99.026661][ T412] usb 4-1: config 1 interface 0 has no altsetting 0 [ 99.037724][ T412] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.048325][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.056301][ T412] usb 4-1: Product: syz [ 99.060363][ T412] usb 4-1: Manufacturer: syz [ 99.064720][ T412] usb 4-1: SerialNumber: syz [ 99.099479][ T4010] kvm [4009]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 99.110211][ T4010] kvm [4009]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 99.122049][ T4010] kvm [4009]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000 [ 99.132343][ T4010] kvm [4009]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xb200000000 [ 99.167787][ T39] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 99.356091][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 99.363250][ T39] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.411951][ T39] usb 3-1: config 0 has no interface number 0 [ 99.436759][ T39] usb 3-1: config 0 interface 184 has no altsetting 0 [ 99.464890][ T39] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.501414][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.534065][ T39] usb 3-1: Product: syz [ 99.551798][ T39] usb 3-1: Manufacturer: syz [ 99.569375][ T39] usb 3-1: SerialNumber: syz [ 99.590692][ T39] usb 3-1: config 0 descriptor?? [ 99.612935][ T39] smsc75xx v1.0.0 [ 99.742906][ T4027] binder_alloc: 4026: binder_alloc_buf, no vma [ 99.864188][ T412] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 99.882437][ T412] usb 4-1: USB disconnect, device number 22 [ 99.894378][ T412] usblp0: removed [ 100.111276][ T4043] loop6: detected capacity change from 0 to 512 [ 100.120592][ T4043] EXT4-fs (loop6): Test dummy encryption mode enabled [ 100.130413][ T4043] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 100.142348][ T4043] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 100.153552][ T4043] EXT4-fs (loop6): group descriptors corrupted! [ 100.213728][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 100.224493][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.301846][ T4054] loop6: detected capacity change from 0 to 512 [ 100.319322][ T4054] EXT4-fs mount: 24 callbacks suppressed [ 100.319337][ T4054] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 100.334151][ T4054] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.368029][ T522] EXT4-fs (loop6): unmounting filesystem. [ 101.115497][ T412] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 101.279212][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 101.297610][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 101.320812][ T39] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 101.339914][ T39] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 101.354478][ T39] usb 3-1: USB disconnect, device number 12 [ 101.495604][ T4089] loop9: detected capacity change from 0 to 512 [ 101.519129][ T4089] EXT4-fs (loop9): Test dummy encryption mode enabled [ 101.525855][ T4089] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 101.535624][ T4089] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 101.545206][ T4089] EXT4-fs (loop9): group descriptors corrupted! [ 101.624202][ T4099] binder_alloc: 4098: binder_alloc_buf, no vma [ 101.949062][ T39] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 102.045736][ T4107] kvm [4106]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 102.137188][ T39] usb 10-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 102.176288][ T39] usb 10-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 102.326356][ T39] usb 10-1: config 1 interface 0 has no altsetting 0 [ 102.496389][ T39] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.570800][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.618162][ T39] usb 10-1: Product: syz [ 102.628516][ T39] usb 10-1: Manufacturer: syz [ 102.642477][ T39] usb 10-1: SerialNumber: syz [ 102.888565][ T4135] loop6: detected capacity change from 0 to 512 [ 102.916641][ T4135] EXT4-fs (loop6): Test dummy encryption mode enabled [ 102.926883][ T4135] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 102.937027][ T4135] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 102.946669][ T4135] EXT4-fs (loop6): group descriptors corrupted! [ 102.965381][ T4139] loop2: detected capacity change from 0 to 128 [ 102.976398][ T4139] EXT4-fs (loop2): Test dummy encryption mode enabled [ 102.985905][ T4139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.999861][ T4139] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.020966][ T1580] EXT4-fs (loop2): unmounting filesystem. [ 103.041949][ T4147] binder: 4146:4147 unknown command 0 [ 103.047324][ T4147] binder: 4146:4147 ioctl c0306201 20000300 returned -22 [ 103.298255][ T39] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 103.864619][ C1] usblp0: nonzero write bulk status received: -71 [ 103.872079][ T332] usb 10-1: USB disconnect, device number 8 [ 104.137339][ T4177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1450'. [ 104.222787][ T4186] loop6: detected capacity change from 0 to 512 [ 104.226123][ T332] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 104.239657][ T4186] EXT4-fs (loop6): Test dummy encryption mode enabled [ 104.255221][ T4186] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 104.271787][ T4186] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 104.283128][ T4186] EXT4-fs (loop6): group descriptors corrupted! [ 104.418305][ T332] usb 10-1: config 0 has no interfaces? [ 104.425936][ T332] usb 10-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice= 0.04 [ 104.466958][ T332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.474957][ T332] usb 10-1: Product: syz [ 104.499907][ T332] usb 10-1: Manufacturer: syz [ 104.511386][ T332] usb 10-1: SerialNumber: syz [ 104.620405][ T332] usb 10-1: config 0 descriptor?? [ 104.865644][ T4105] usblp0: removed [ 105.072757][ T4105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.094180][ T4105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.141470][ T353] usb 10-1: USB disconnect, device number 9 [ 105.178524][ T28] audit: type=1400 audit(1737043593.371:326): avc: denied { write } for pid=4224 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.199138][ T28] audit: type=1400 audit(1737043593.381:327): avc: denied { nlmsg_write } for pid=4224 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.286901][ T28] audit: type=1400 audit(1737043593.471:328): avc: denied { create } for pid=4233 comm="syz.2.1471" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.312722][ T28] audit: type=1400 audit(1737043593.481:329): avc: denied { read } for pid=4233 comm="syz.2.1471" name="file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.335891][ T28] audit: type=1400 audit(1737043593.481:330): avc: denied { open } for pid=4233 comm="syz.2.1471" path="/214/file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.359172][ T28] audit: type=1400 audit(1737043593.501:331): avc: denied { unlink } for pid=1580 comm="syz-executor" name="file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.417511][ T4243] binder: BINDER_SET_CONTEXT_MGR already set [ 105.425458][ T4243] binder: 4242:4243 ioctl 4018620d 200002c0 returned -16 [ 105.840331][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1482'. [ 105.889651][ T4268] loop0: detected capacity change from 0 to 512 [ 105.925185][ T4268] EXT4-fs (loop0): Test dummy encryption mode enabled [ 105.948296][ T4268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.960949][ T4268] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 105.970566][ T4268] EXT4-fs (loop0): group descriptors corrupted! [ 106.237014][ T4291] loop2: detected capacity change from 0 to 512 [ 106.251251][ T4291] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 106.340206][ T4301] loop6: detected capacity change from 0 to 1024 [ 106.346907][ T4301] EXT4-fs: Ignoring removed orlov option [ 106.352638][ T4301] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.364529][ T4301] EXT4-fs (loop6): Test dummy encryption mode enabled [ 106.390401][ T4301] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 106.431547][ T522] EXT4-fs (loop6): unmounting filesystem. [ 106.466024][ T412] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 106.478906][ T4311] loop6: detected capacity change from 0 to 1024 [ 106.510317][ T4314] loop2: detected capacity change from 0 to 512 [ 106.520216][ T330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.528024][ T4314] EXT4-fs (loop2): Test dummy encryption mode enabled [ 106.545835][ T4306] kvm [4305]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 106.548954][ T4314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.568151][ T4314] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 106.578679][ T4314] EXT4-fs (loop2): group descriptors corrupted! [ 106.667167][ T412] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 106.689888][ T412] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 106.725716][ T412] usb 4-1: config 1 interface 0 has no altsetting 0 [ 106.744886][ T412] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 106.761427][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.783157][ T412] usb 4-1: Product: syz [ 106.791490][ T412] usb 4-1: Manufacturer: syz [ 106.799752][ T412] usb 4-1: SerialNumber: syz [ 106.804525][ T28] audit: type=1400 audit(1737043594.991:332): avc: denied { mounton } for pid=4320 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.872259][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.879296][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.886630][ T4320] device bridge_slave_0 entered promiscuous mode [ 106.893638][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.900561][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.907836][ T4320] device bridge_slave_1 entered promiscuous mode [ 106.929773][ T4326] loop2: detected capacity change from 0 to 1024 [ 106.936301][ T4326] EXT4-fs: Ignoring removed nobh option [ 106.967188][ T4326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.010115][ T1580] EXT4-fs (loop2): unmounting filesystem. [ 107.046641][ T4332] loop2: detected capacity change from 0 to 512 [ 107.053077][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.059946][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.067061][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.073899][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.095368][ T4332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.107903][ T4332] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.107948][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.142268][ T4332] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz.2.1510: path /225/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 107.163423][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.173743][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.193055][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.206830][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.224567][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.231459][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.248722][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.261375][ T1580] EXT4-fs (loop2): unmounting filesystem. [ 107.266257][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.277226][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.284075][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.300062][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.309408][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.317978][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.322201][ T4342] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1513' sets config #2 [ 107.325965][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.371255][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.379706][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.392747][ T4320] device veth0_vlan entered promiscuous mode [ 107.399308][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.408073][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.424772][ T4320] device veth1_macvtap entered promiscuous mode [ 107.433324][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.442386][ T412] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 107.453359][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.464261][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.480943][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.494236][ T28] audit: type=1400 audit(1737043595.681:333): avc: denied { wake_alarm } for pid=4354 comm="syz.2.1519" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.497461][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.534607][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.547743][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.555980][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.564811][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.580509][ T4363] loop2: detected capacity change from 0 to 16 [ 107.592039][ T4363] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.759819][ T4370] kvm [4369]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 107.789267][ T4383] loop5: detected capacity change from 0 to 16 [ 107.810526][ T4383] erofs: (device loop5): mounted with root inode @ nid 36. [ 107.816122][ T39] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 107.837041][ T28] audit: type=1326 audit(1737043596.031:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.5.1530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a3f585d29 code=0x0 [ 107.931446][ T4386] loop9: detected capacity change from 0 to 128 [ 107.958678][ T28] audit: type=1400 audit(1737043596.151:335): avc: denied { mounton } for pid=4385 comm="syz.9.1531" path="/205/file0/file0/bus" dev="loop9" ino=1048735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 107.984230][ T4386] FAT-fs (loop9): error, clusters badly computed (2 != 1) [ 107.992065][ T4386] FAT-fs (loop9): Filesystem has been set read-only [ 107.998757][ C1] usblp0: nonzero write bulk status received: -71 [ 108.001304][ T19] usb 4-1: USB disconnect, device number 24 [ 108.006137][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 108.022839][ T39] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.033974][ T1392] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a) [ 108.043772][ T39] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.053936][ T1392] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a) [ 108.064405][ T39] usb 1-1: config 0 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.084420][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.094723][ T39] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 108.103797][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.113728][ T39] usb 1-1: config 0 descriptor?? [ 108.406029][ T19] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 108.414544][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.421579][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.428835][ T4389] device bridge_slave_0 entered promiscuous mode [ 108.436287][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.443543][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.450976][ T4389] device bridge_slave_1 entered promiscuous mode [ 108.521911][ T39] sony 0003:054C:0374.000E: unknown main item tag 0x1 [ 108.531071][ T39] sony 0003:054C:0374.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:0374] on usb-dummy_hcd.0-1/input0 [ 108.542856][ T39] sony 0003:054C:0374.000E: failed to claim input [ 108.560440][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.567311][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.574357][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.581186][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.590068][ T19] usb 4-1: config 0 has no interfaces? [ 108.597308][ T19] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice= 0.04 [ 108.606198][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.609436][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.613982][ T19] usb 4-1: Product: syz [ 108.626467][ T19] usb 4-1: Manufacturer: syz [ 108.630778][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.631114][ T19] usb 4-1: SerialNumber: syz [ 108.643358][ T19] usb 4-1: config 0 descriptor?? [ 108.648240][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.664041][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.672104][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.678957][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.686469][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.694814][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.701681][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.720498][ T549] device veth1_macvtap left promiscuous mode [ 108.728820][ T353] usb 1-1: USB disconnect, device number 22 [ 108.743626][ T549] device veth0_vlan left promiscuous mode [ 108.752363][ T4395] loop2: detected capacity change from 0 to 512 [ 108.766224][ T4395] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.772483][ T4395] EXT4-fs: Ignoring removed orlov option [ 108.786056][ T4395] EXT4-fs: Ignoring removed nobh option [ 108.791694][ T4395] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 108.850580][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.862113][ T4286] usblp0: removed [ 108.874475][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.889401][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.914893][ T4389] device veth0_vlan entered promiscuous mode [ 108.930999][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.951702][ T4389] device veth1_macvtap entered promiscuous mode [ 108.959583][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.967408][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.974682][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.998889][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.012443][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.039046][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.045937][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.053131][ T4402] device bridge_slave_0 entered promiscuous mode [ 109.060323][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.068937][ T4286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.078098][ T4286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.088109][ T39] usb 4-1: USB disconnect, device number 25 [ 109.094313][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.102144][ T4402] device bridge_slave_1 entered promiscuous mode [ 109.120775][ T4412] loop2: detected capacity change from 0 to 256 [ 109.129326][ T4412] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 109.252849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.260802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.286661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.312550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.323250][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.330108][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.472509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.543151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.564533][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.571407][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.594007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.629692][ T4432] binder: BINDER_SET_CONTEXT_MGR already set [ 109.635919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.650232][ T4432] binder: 4431:4432 ioctl 4018620d 200002c0 returned -16 [ 109.663337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.754078][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1551'. [ 109.779260][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.791964][ T4402] device veth0_vlan entered promiscuous mode [ 109.801911][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.806189][ T39] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 109.809902][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.824040][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.837867][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.847868][ T4402] device veth1_macvtap entered promiscuous mode [ 109.858923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.870729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.007115][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 110.018349][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.031056][ T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.039915][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.057806][ T39] usb 1-1: config 0 descriptor?? [ 110.077831][ T4455] loop3: detected capacity change from 0 to 512 [ 110.116478][ T4455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.125308][ T4455] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.162746][ T293] EXT4-fs (loop3): unmounting filesystem. [ 110.187717][ T4465] binder: BINDER_SET_CONTEXT_MGR already set [ 110.193565][ T4465] binder: 4464:4465 ioctl 4018620d 200002c0 returned -16 [ 110.225892][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 110.225919][ T28] audit: type=1400 audit(1737043598.411:341): avc: denied { setattr } for pid=4466 comm="syz.7.1562" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.347428][ T549] device bridge_slave_1 left promiscuous mode [ 110.353444][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.360758][ T549] device bridge_slave_0 left promiscuous mode [ 110.366780][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.374651][ T549] device veth1_macvtap left promiscuous mode [ 110.381132][ T549] device veth0_vlan left promiscuous mode [ 110.474498][ T39] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 110.483268][ T39] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.749187][ T332] usb 1-1: USB disconnect, device number 23 [ 110.822977][ T4496] binder: BINDER_SET_CONTEXT_MGR already set [ 110.839267][ T4496] binder: 4495:4496 ioctl 4018620d 200002c0 returned -16 [ 110.998369][ T412] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 111.310754][ T4510] loop8: detected capacity change from 0 to 256 [ 111.346375][ T4510] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 111.469691][ T4515] loop8: detected capacity change from 0 to 512 [ 111.501318][ T4515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.527988][ T4515] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 111.555535][ T4515] EXT4-fs (loop8): 1 truncate cleaned up [ 111.562802][ T4515] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 111.591102][ T4402] EXT4-fs (loop8): unmounting filesystem. [ 111.644191][ T4525] loop8: detected capacity change from 0 to 512 [ 111.657065][ T412] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 111.676104][ T412] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 111.689256][ T412] usb 3-1: config 1 interface 0 has no altsetting 0 [ 111.691732][ T4528] tmpfs: Bad value for 'size' [ 111.697780][ T4525] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 111.710639][ T4525] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 111.720199][ T4525] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1582: Failed to acquire dquot type 0 [ 111.733464][ T412] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.736264][ T4525] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 111.742377][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.760322][ T412] usb 3-1: Product: syz [ 111.760389][ T4533] netlink: 'syz.7.1585': attribute type 30 has an invalid length. [ 111.764262][ T412] usb 3-1: Manufacturer: syz [ 111.764279][ T412] usb 3-1: SerialNumber: syz [ 111.764701][ T4525] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 111.776237][ T332] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 111.797571][ T4525] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1582: Failed to acquire dquot type 0 [ 111.811133][ T4525] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 111.812741][ T4535] loop3: detected capacity change from 0 to 512 [ 111.821313][ T4525] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 111.821333][ T4525] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1582: Failed to acquire dquot type 0 [ 111.821548][ T4525] EXT4-fs (loop8): 1 orphan inode deleted [ 111.841675][ T4535] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.851246][ T4525] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 111.868946][ T4525] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.869506][ T4535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.879692][ T4537] loop7: detected capacity change from 0 to 16 [ 111.889462][ T4535] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 111.900836][ T4525] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 111.908210][ T4535] EXT4-fs (loop3): group descriptors corrupted! [ 111.914326][ T4525] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 111.929704][ T4525] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.1582: Failed to acquire dquot type 0 [ 111.933756][ T4537] erofs: (device loop7): mounted with root inode @ nid 36. [ 111.955935][ T4402] EXT4-fs (loop8): unmounting filesystem. [ 112.006097][ T332] usb 1-1: Using ep0 maxpacket: 8 [ 112.018696][ T332] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.027425][ T332] usb 1-1: config 179 has no interface number 0 [ 112.033528][ T332] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.044432][ T332] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.069068][ T332] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.080223][ T332] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.091534][ T332] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.107559][ T332] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.116791][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.128774][ T4517] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.242905][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.250160][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.257765][ T4550] device bridge_slave_0 entered promiscuous mode [ 112.265022][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.272398][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.280114][ T4550] device bridge_slave_1 entered promiscuous mode [ 112.354311][ T332] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 112.398407][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.405372][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.412449][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.419239][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.432565][ T412] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 112.455447][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.465585][ T4560] loop3: detected capacity change from 0 to 1024 [ 112.474535][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.485405][ T4560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.500765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.509044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.520565][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.529583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.538041][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.544888][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.554473][ T408] usb 1-1: USB disconnect, device number 24 [ 112.554543][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.568436][ T408] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 112.570831][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 112.597247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.616382][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.623263][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.641475][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.662617][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.670413][ T4562] kvm [4561]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 112.687541][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.699369][ T4550] device veth0_vlan entered promiscuous mode [ 112.706117][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.718530][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.725950][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.747971][ T4550] device veth1_macvtap entered promiscuous mode [ 112.754901][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.765321][ T293] EXT4-fs (loop3): unmounting filesystem. [ 112.777280][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.807428][ T549] device bridge_slave_1 left promiscuous mode [ 112.813406][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.837275][ T4572] loop1: detected capacity change from 0 to 512 [ 112.840762][ T549] device bridge_slave_0 left promiscuous mode [ 112.849492][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.852235][ T4574] loop3: detected capacity change from 0 to 512 [ 112.867270][ T4572] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.876877][ T549] device veth1_macvtap left promiscuous mode [ 112.882755][ T549] device veth0_vlan left promiscuous mode [ 112.896269][ T4574] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.908601][ T4572] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.912990][ T4574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.920013][ T4572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e11c, mo2=0002] [ 112.944319][ T4574] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 112.954407][ T4574] EXT4-fs (loop3): group descriptors corrupted! [ 112.969654][ T332] usb 3-1: USB disconnect, device number 13 [ 112.996169][ T4572] System zones: 0-1, 15-15, 18-18, 34-34 [ 113.012499][ T4572] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.048924][ T4572] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 113.095719][ T4572] EXT4-fs warning (device loop1): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.110529][ T4572] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 113.120981][ T4572] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1592: bg 0: block 40: padding at end of block bitmap is not set [ 113.138892][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.147001][ T4572] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 113.157968][ T4572] EXT4-fs (loop1): 1 truncate cleaned up [ 113.163439][ T4572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.196792][ T4572] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.1592: bad symlink. [ 113.228283][ T4550] EXT4-fs (loop1): unmounting filesystem. [ 113.252019][ T4587] loop1: detected capacity change from 0 to 512 [ 113.271040][ T4587] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.280255][ T4587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.298697][ T4550] EXT4-fs (loop1): unmounting filesystem. [ 113.336101][ T332] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 113.346638][ T408] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 113.354356][ T4593] loop1: detected capacity change from 0 to 512 [ 113.368682][ T4593] EXT4-fs: Ignoring removed nobh option [ 113.374226][ T4593] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.384757][ T4593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.390426][ T4598] loop3: detected capacity change from 0 to 512 [ 113.412524][ T4598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.421811][ T4598] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.440107][ T4550] EXT4-fs (loop1): unmounting filesystem. [ 113.468666][ T293] EXT4-fs (loop3): unmounting filesystem. [ 113.502116][ T4609] loop8: detected capacity change from 0 to 1024 [ 113.504061][ T4608] loop3: detected capacity change from 0 to 512 [ 113.515027][ T4608] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.522153][ T4608] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.527480][ T332] usb 3-1: config 0 has no interfaces? [ 113.533771][ T4608] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33411!=33349) [ 113.542055][ T332] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice= 0.04 [ 113.555341][ T408] usb 1-1: Using ep0 maxpacket: 16 [ 113.555641][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.560552][ T330] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.568905][ T332] usb 3-1: Product: syz [ 113.577735][ T4608] EXT4-fs (loop3): group descriptors corrupted! [ 113.581839][ T332] usb 3-1: Manufacturer: syz [ 113.587802][ T408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.592036][ T332] usb 3-1: SerialNumber: syz [ 113.602722][ T408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.610043][ T332] usb 3-1: config 0 descriptor?? [ 113.614227][ T408] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 113.626069][ T408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.637321][ T408] usb 1-1: config 0 descriptor?? [ 113.874370][ T4578] loop0: detected capacity change from 0 to 512 [ 113.921485][ T4478] usblp0: removed [ 113.944033][ T4578] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1602: casefold flag without casefold feature [ 113.973318][ T4578] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1602: couldn't read orphan inode 15 (err -117) [ 113.985529][ T4578] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.142198][ T4478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.152020][ T4478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.159957][ T412] usb 3-1: USB disconnect, device number 14 [ 114.203790][ T408] hid (null): invalid report_size -913711882 [ 114.209766][ T408] hid (null): unknown global tag 0xe [ 114.214902][ T408] hid (null): invalid report_count 769399894 [ 114.229435][ T408] hid (null): unknown global tag 0xc [ 114.244815][ T408] hid (null): unknown global tag 0xe [ 114.256886][ T408] hid-generic 0003:060B:500A.0010: unexpected long global item [ 114.264435][ T408] hid-generic: probe of 0003:060B:500A.0010 failed with error -22 [ 114.700839][ T4644] kvm [4642]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 114.716979][ T408] usb 1-1: USB disconnect, device number 25 [ 114.753281][ T4649] loop1: detected capacity change from 0 to 512 [ 114.787660][ T4649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.809907][ T4649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.820285][ T4649] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.857988][ T4550] EXT4-fs (loop1): unmounting filesystem. [ 114.893728][ T4655] loop1: detected capacity change from 0 to 512 [ 114.923286][ T4655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.932212][ T4655] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.948065][ T4655] incfs_lookup_dentry err:-117 [ 114.952804][ T4655] incfs: Can't find or create .index dir in ./file0 [ 114.959578][ T4655] incfs: mount failed -117 [ 114.964598][ T4655] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz.1.1624: path /7/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 115.060444][ T4550] EXT4-fs (loop1): unmounting filesystem. [ 115.164308][ T4658] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1626'. [ 115.447099][ T1700] EXT4-fs (loop0): unmounting filesystem. [ 115.503825][ T4674] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.558805][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 115.558823][ T28] audit: type=1400 audit(1737043603.721:352): avc: denied { getopt } for pid=4675 comm="syz.8.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.825694][ T4687] loop0: detected capacity change from 0 to 1024 [ 115.832383][ T4687] EXT4-fs: Ignoring removed orlov option [ 115.839290][ T4687] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.850644][ T4687] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.958463][ T4687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.092739][ T1700] EXT4-fs (loop0): unmounting filesystem. [ 116.109367][ T4694] loop2: detected capacity change from 0 to 1024 [ 116.128875][ T4694] EXT4-fs: Ignoring removed nobh option [ 116.141261][ T4694] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.183145][ T4694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.439895][ T1580] EXT4-fs (loop2): unmounting filesystem. [ 116.677776][ T4713] loop8: detected capacity change from 0 to 8192 [ 116.777851][ T28] audit: type=1400 audit(1737043604.951:353): avc: denied { mount } for pid=4718 comm="syz.1.1648" name="/" dev="configfs" ino=14053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.832550][ T4725] loop2: detected capacity change from 0 to 512 [ 116.907064][ T4725] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.963861][ T28] audit: type=1400 audit(1737043604.961:354): avc: denied { write } for pid=4718 comm="syz.1.1648" name="/" dev="configfs" ino=14053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.986589][ T4728] loop3: detected capacity change from 0 to 16 [ 116.992651][ T4725] ext4: Unknown parameter 'noacl' [ 116.998033][ T4728] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.016281][ T293] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 117.026283][ T293] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 117.034658][ T293] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 117.093174][ T4732] input: syz0 as /devices/virtual/input/input11 [ 117.113927][ T4737] loop8: detected capacity change from 0 to 512 [ 117.150215][ T4737] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 117.159118][ T4737] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.196489][ T28] audit: type=1400 audit(1737043605.391:355): avc: denied { create } for pid=4736 comm="syz.8.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 117.250602][ T4402] EXT4-fs (loop8): unmounting filesystem. [ 117.307278][ T4742] kvm [4740]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 117.353620][ T4757] loop3: detected capacity change from 0 to 16 [ 117.379333][ T4757] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.592383][ T293] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 117.696631][ T293] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 117.721614][ T293] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 117.756980][ T4773] input: syz0 as /devices/virtual/input/input12 [ 118.554987][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1673'. [ 118.671567][ T4799] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 118.681496][ T4800] loop8: detected capacity change from 0 to 16 [ 118.694155][ T4800] erofs: (device loop8): mounted with root inode @ nid 36. [ 118.703628][ T4799] EXT4-fs (loop2): unable to read superblock [ 118.767915][ T4805] loop1: detected capacity change from 0 to 1024 [ 119.016374][ T4805] EXT4-fs: Ignoring removed i_version option [ 119.029713][ T4805] EXT4-fs: Ignoring removed oldalloc option [ 119.055485][ T4805] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.135856][ T4818] loop0: detected capacity change from 0 to 16 [ 119.155035][ T4805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.179845][ T4818] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.244130][ T4550] EXT4-fs (loop1): unmounting filesystem. [ 119.258354][ T1700] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 119.440526][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.520762][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.586744][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.608207][ T4836] loop1: detected capacity change from 0 to 512 [ 119.650125][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.672624][ T4836] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1689: casefold flag without casefold feature [ 119.695759][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.718732][ T4836] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1689: couldn't read orphan inode 15 (err -117) [ 119.734733][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.745151][ T4836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.754585][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.762990][ T1700] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 119.792339][ T4550] EXT4-fs (loop1): unmounting filesystem. [ 119.810006][ T4846] loop8: detected capacity change from 0 to 256 [ 119.832760][ T4846] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.873047][ T28] audit: type=1400 audit(1737043608.061:356): avc: denied { rename } for pid=4845 comm="syz.8.1695" name="file1" dev="loop8" ino=1048764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.901913][ T4846] exFAT-fs (loop8): hint_cluster is invalid (17) [ 119.977492][ T4851] loop2: detected capacity change from 0 to 16 [ 120.006442][ T4851] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.350192][ T4860] loop2: detected capacity change from 0 to 512 [ 120.357088][ T4857] loop8: detected capacity change from 0 to 2048 [ 120.391503][ T4860] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.402050][ T4857] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 120.428687][ T4857] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 120.442823][ T28] audit: type=1400 audit(1737043608.621:357): avc: denied { rename } for pid=4856 comm="syz.8.1699" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.466424][ T4860] EXT4-fs (loop2): 1 truncate cleaned up [ 120.471926][ T4860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.490793][ T28] audit: type=1400 audit(1737043608.681:358): avc: denied { append } for pid=4859 comm="syz.2.1700" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.496943][ T1580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /257/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.517404][ T28] audit: type=1400 audit(1737043608.681:359): avc: denied { ioctl } for pid=4859 comm="syz.2.1700" path="/257/file2/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.540508][ T1580] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.581976][ T1580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /257/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.582712][ T4402] EXT4-fs (loop8): unmounting filesystem. [ 120.603844][ T1580] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.629067][ T1580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /257/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.660860][ T1580] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.683750][ T1580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /257/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.706229][ T1580] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.726516][ T318] device veth1_macvtap left promiscuous mode [ 120.732354][ T318] device veth0_vlan left promiscuous mode [ 120.741516][ T4874] loop8: detected capacity change from 0 to 512 [ 120.765248][ T1580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /257/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.790471][ T1580] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.815102][ T4874] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 120.830432][ T4874] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.845535][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.854415][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.867861][ T4858] device bridge_slave_0 entered promiscuous mode [ 120.874863][ T4402] EXT4-fs (loop8): unmounting filesystem. [ 120.887640][ T4858] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.894518][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.902032][ T4858] device bridge_slave_1 entered promiscuous mode [ 120.916652][ T4880] loop8: detected capacity change from 0 to 128 [ 120.932965][ T4880] incfs: iterate_incfs_dir / -22 [ 120.938122][ T4880] incfs: iterate_incfs_dir / -22 [ 120.962124][ T1580] EXT4-fs (loop2): unmounting filesystem. [ 120.970148][ T4884] loop8: detected capacity change from 0 to 256 [ 121.060814][ T4858] device veth0_vlan entered promiscuous mode [ 121.069119][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.076082][ T412] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.085175][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.093555][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.102108][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.110441][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.118782][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.127562][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.135590][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.144410][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.153802][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.163217][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.170086][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.179730][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.191443][ T4887] loop3: detected capacity change from 0 to 512 [ 121.198999][ T4887] EXT4-fs warning (device loop3): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 121.221159][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.238074][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.244942][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.252367][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.252380][ T408] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 121.266204][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.279573][ T330] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.279827][ T412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 121.287196][ T4858] device veth1_macvtap entered promiscuous mode [ 121.307082][ T412] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.327108][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.329566][ T412] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.353953][ T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.360824][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.385783][ T412] usb 2-1: config 0 descriptor?? [ 121.474427][ T4893] loop4: detected capacity change from 0 to 128 [ 121.496060][ T408] usb 9-1: Using ep0 maxpacket: 8 [ 121.512489][ T408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 121.523623][ T408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.533851][ T408] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.543469][ T408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 121.554853][ T408] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 121.565052][ T408] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 121.574271][ T408] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.584574][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.584853][ T408] usb 9-1: config 0 descriptor?? [ 121.596870][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.606986][ T4889] device bridge_slave_0 entered promiscuous mode [ 121.611564][ T4884] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 121.636251][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.650714][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.669128][ T4889] device bridge_slave_1 entered promiscuous mode [ 121.902249][ T412] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 121.918576][ T4902] loop4: detected capacity change from 0 to 512 [ 121.924897][ T4902] EXT4-fs: Ignoring removed i_version option [ 121.931558][ T412] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 121.965320][ T4899] kvm [4898]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x4001 [ 121.974483][ T408] usb 9-1: USB disconnect, device number 2 [ 121.989315][ T4899] kvm [4898]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x2 [ 121.998180][ T4899] kvm [4898]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 122.006926][ T4902] EXT4-fs error (device loop4): ext4_get_journal_inode:5721: comm syz.4.1711: inode #196608: comm syz.4.1711: iget: illegal inode # [ 122.020510][ T4899] kvm [4898]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4001 [ 122.033476][ T4899] kvm [4898]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 122.038086][ T4902] EXT4-fs (loop4): no journal found [ 122.041469][ T4899] kvm [4898]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x4081 [ 122.056092][ T4902] EXT4-fs (loop4): can't get journal size [ 122.062324][ T4899] kvm [4898]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4001 [ 122.067327][ T4902] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 122.070496][ T4899] kvm [4898]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x2 [ 122.081398][ T4902] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 122.092015][ T4899] kvm [4898]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 122.094846][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.111484][ T4899] kvm [4898]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4081 [ 122.121275][ T4899] kvm [4898]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4001 [ 122.132826][ T353] usb 2-1: USB disconnect, device number 8 [ 122.146149][ T4910] loop3: detected capacity change from 0 to 1024 [ 122.175871][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.183975][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.194938][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.204783][ T4910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.228681][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.241815][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.248703][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.257448][ T293] EXT4-fs (loop3): unmounting filesystem. [ 122.268554][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.276706][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.376407][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.392585][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.399469][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.407038][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.422254][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.430174][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.438003][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.688753][ T4919] loop8: detected capacity change from 0 to 512 [ 122.741388][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.751730][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.753722][ T4919] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 122.765699][ T4889] device veth0_vlan entered promiscuous mode [ 122.775830][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.783561][ T4919] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.784174][ T4858] EXT4-fs (loop4): unmounting filesystem. [ 122.787272][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.801260][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.814921][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.836749][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.845461][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.853688][ T4402] EXT4-fs (loop8): unmounting filesystem. [ 122.861303][ T4889] device veth1_macvtap entered promiscuous mode [ 122.898125][ T318] device veth1_macvtap left promiscuous mode [ 122.917306][ T318] device veth0_vlan left promiscuous mode [ 122.979685][ T4932] loop8: detected capacity change from 0 to 1024 [ 122.991577][ T4932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.997338][ T4928] loop6: detected capacity change from 0 to 2048 [ 122.998246][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.040544][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.058053][ T4932] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.104014][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.113756][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.276166][ T412] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 123.287168][ T4932] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 123.291166][ T4928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 123.306192][ T4928] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.332073][ T4402] EXT4-fs (loop8): unmounting filesystem. [ 123.464810][ T4889] EXT4-fs (loop6): unmounting filesystem. [ 123.477942][ T412] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 123.525822][ T412] usb 2-1: config 0 has no interface number 0 [ 123.549399][ T412] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 123.589983][ T412] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 30768, setting to 64 [ 123.620109][ T412] usb 2-1: config 0 interface 11 has no altsetting 0 [ 123.647930][ T412] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 123.664358][ T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.798224][ T412] usb 2-1: config 0 descriptor?? [ 123.911185][ T4924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.958695][ T4950] loop4: detected capacity change from 0 to 512 [ 124.091657][ T4954] loop3: detected capacity change from 0 to 128 [ 124.117905][ T4953] loop6: detected capacity change from 0 to 1024 [ 124.170577][ T4950] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1725: invalid indirect mapped block 256 (level 2) [ 124.500721][ T412] usb 2-1: USB disconnect, device number 9 [ 124.513217][ T4954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.535169][ T4954] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.546131][ T4950] EXT4-fs (loop4): 2 truncates cleaned up [ 124.551678][ T4950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.581779][ T4953] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 124.611908][ T4950] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1725: bg 0: block 5: invalid block bitmap [ 124.619737][ T4953] EXT4-fs (loop6): shut down requested (0) [ 124.633846][ T4950] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3355443200 > max in inode 15 [ 124.644927][ T4950] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3355443201 > max in inode 15 [ 124.648006][ T4889] EXT4-fs (loop6): unmounting filesystem. [ 124.665232][ T293] EXT4-fs (loop3): unmounting filesystem. [ 124.672259][ T4858] EXT4-fs (loop4): unmounting filesystem. [ 124.730312][ T4967] loop3: detected capacity change from 0 to 512 [ 124.767972][ T4972] loop6: detected capacity change from 0 to 512 [ 124.777066][ T4972] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.792888][ T4967] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.822030][ T4972] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 124.848096][ T4960] kvm [4959]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 124.923264][ T4991] loop6: detected capacity change from 0 to 1024 [ 124.944141][ T4991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.971261][ T28] audit: type=1400 audit(1737043613.161:360): avc: denied { remove_name } for pid=4990 comm="syz.6.1738" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 124.974996][ T4996] loop3: detected capacity change from 0 to 512 [ 125.020679][ T28] audit: type=1400 audit(1737043613.181:361): avc: denied { reparent } for pid=4990 comm="syz.6.1738" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 125.051820][ T4998] loop1: detected capacity change from 0 to 512 [ 125.066141][ T412] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.077951][ T4998] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.086610][ T4996] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #3: comm syz.3.1741: corrupted inode contents [ 125.100628][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.136442][ T4996] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #3: comm syz.3.1741: mark_inode_dirty error [ 125.156764][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.163482][ T4996] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #3: comm syz.3.1741: corrupted inode contents [ 125.200309][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.207549][ T4996] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1741: mark_inode_dirty error [ 125.220467][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.240291][ T4996] Quota error (device loop3): write_blk: dquota write failed [ 125.248440][ T4996] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 125.258469][ T412] usb 5-1: Using ep0 maxpacket: 16 [ 125.263847][ T4996] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.1741: Failed to acquire dquot type 0 [ 125.281361][ T412] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.286058][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.301423][ T412] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= c.82 [ 125.317108][ T4996] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.1741: corrupted inode contents [ 125.320365][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.329388][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.343801][ T4996] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #16: comm syz.3.1741: mark_inode_dirty error [ 125.357345][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.358802][ T412] usb 5-1: config 0 descriptor?? [ 125.363758][ T4996] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.1741: corrupted inode contents [ 125.381760][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.381867][ T412] net1080: probe of 5-1:0.0 failed with error -22 [ 125.388310][ T4996] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1741: mark_inode_dirty error [ 125.388470][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.412244][ T4996] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.1741: corrupted inode contents [ 125.435735][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.447866][ T4996] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 125.456944][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.463313][ T4996] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.1741: corrupted inode contents [ 125.475930][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.482359][ T4996] EXT4-fs error (device loop3): ext4_truncate:4313: inode #16: comm syz.3.1741: mark_inode_dirty error [ 125.496325][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.502996][ T4996] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 125.512088][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 125.518751][ T4996] EXT4-fs (loop3): 1 truncate cleaned up [ 125.524283][ T4996] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.623023][ T24] usb 5-1: USB disconnect, device number 4 [ 125.631985][ T5030] loop1: detected capacity change from 0 to 512 [ 125.638740][ T5031] loop3: detected capacity change from 0 to 256 [ 125.659614][ T5031] FAT-fs (loop3): Directory bread(block 64) failed [ 125.665579][ T5030] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.666065][ T5031] FAT-fs (loop3): Directory bread(block 65) failed [ 125.682709][ T5031] FAT-fs (loop3): Directory bread(block 66) failed [ 125.689359][ T5031] FAT-fs (loop3): Directory bread(block 67) failed [ 125.695768][ T5031] FAT-fs (loop3): Directory bread(block 68) failed [ 125.702746][ T5031] FAT-fs (loop3): Directory bread(block 69) failed [ 125.709140][ T5031] FAT-fs (loop3): Directory bread(block 70) failed [ 125.715422][ T5031] FAT-fs (loop3): Directory bread(block 71) failed [ 125.721835][ T5031] FAT-fs (loop3): Directory bread(block 72) failed [ 125.733902][ T5031] FAT-fs (loop3): Directory bread(block 73) failed [ 125.738744][ T5038] loop1: detected capacity change from 0 to 2048 [ 125.782575][ T5044] loop1: detected capacity change from 0 to 128 [ 125.916084][ T59] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 126.012186][ T5056] kvm [5055]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 126.167143][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.176667][ T5068] loop6: detected capacity change from 0 to 512 [ 126.184950][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.195460][ T5068] ext4: Unknown parameter 'dont_hash' [ 126.217494][ T59] usb 9-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 126.250650][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.427199][ T5074] loop6: detected capacity change from 0 to 256 [ 126.473469][ T5074] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 126.479310][ T59] usb 9-1: config 0 descriptor?? [ 126.588349][ T5068] loop6: detected capacity change from 0 to 512 [ 126.652123][ T5083] netlink: 'syz.4.1771': attribute type 16 has an invalid length. [ 126.663576][ T5083] netlink: 'syz.4.1771': attribute type 17 has an invalid length. [ 126.675130][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.682402][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.713544][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 126.726930][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.759487][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 126.781265][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.792637][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.800764][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.809103][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.817436][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.901936][ T59] hid-generic 0003:18D1:5030.0012: unknown main item tag 0xd [ 126.913640][ T59] hid-generic 0003:18D1:5030.0012: item fetching failed at offset 2/5 [ 126.930655][ T59] hid-generic: probe of 0003:18D1:5030.0012 failed with error -22 [ 127.136763][ T59] usb 9-1: USB disconnect, device number 3 [ 127.753191][ T5113] loop6: detected capacity change from 0 to 512 [ 127.784471][ T5113] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #3: comm syz.6.1782: corrupted inode contents [ 127.796617][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 127.803957][ T5113] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #3: comm syz.6.1782: mark_inode_dirty error [ 127.815194][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 127.821836][ T5113] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #3: comm syz.6.1782: corrupted inode contents [ 127.846031][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 127.854537][ T5113] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.1782: mark_inode_dirty error [ 127.866604][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 127.866692][ T5121] loop8: detected capacity change from 0 to 128 [ 127.875630][ T5113] Quota error (device loop6): write_blk: dquota write failed [ 127.887423][ T5113] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 127.897412][ T5113] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.1782: Failed to acquire dquot type 0 [ 127.901702][ T5121] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.910176][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 127.925565][ T5113] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.1782: corrupted inode contents [ 127.937899][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 127.944258][ T5113] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #16: comm syz.6.1782: mark_inode_dirty error [ 127.945737][ T5121] fscrypt (loop8, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 127.971384][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 127.978051][ T5113] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.1782: corrupted inode contents [ 127.990319][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 128.001151][ T5113] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.1782: mark_inode_dirty error [ 128.017861][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 128.024204][ T5113] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.1782: corrupted inode contents [ 128.046597][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 128.054010][ T5113] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 128.073210][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 128.100303][ T5113] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.1782: corrupted inode contents [ 128.140699][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 128.156232][ T5113] EXT4-fs error (device loop6): ext4_truncate:4313: inode #16: comm syz.6.1782: mark_inode_dirty error [ 128.170489][ T5137] loop1: detected capacity change from 0 to 128 [ 128.181024][ T5128] kvm [5127]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6200000000 [ 128.194956][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 128.200816][ T5137] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.213138][ T5113] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 128.232193][ T5113] EXT4-fs (loop6): Remounting filesystem read-only [ 128.246570][ T5113] EXT4-fs (loop6): 1 truncate cleaned up [ 128.256355][ T5113] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.328381][ T5140] loop1: detected capacity change from 0 to 2048 [ 128.421300][ T495] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.446021][ T495] EXT4-fs error (device loop6): ext4_release_dquot:6811: comm kworker/u4:5: Failed to release dquot type 1 [ 128.471598][ T495] EXT4-fs (loop6): Remounting filesystem read-only [ 128.736264][ T39] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 128.927095][ T39] usb 4-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=d5.1b [ 128.942461][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.963658][ T39] usb 4-1: config 0 descriptor?? [ 129.084973][ T5173] loop1: detected capacity change from 0 to 512 [ 129.099472][ T5173] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.175398][ T317] usb 4-1: USB disconnect, device number 26 [ 129.223971][ T5188] loop1: detected capacity change from 0 to 512 [ 129.236296][ T5190] loop8: detected capacity change from 0 to 512 [ 129.243618][ T5190] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 129.253142][ T5188] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1807: invalid indirect mapped block 256 (level 2) [ 129.268864][ T5190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 129.269248][ T5188] EXT4-fs (loop1): 2 truncates cleaned up [ 129.278169][ T5190] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.1808: corrupted in-inode xattr [ 129.290886][ T5188] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.1.1807: path /49/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 129.304459][ T5190] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1808: couldn't read orphan inode 15 (err -117) [ 129.797456][ T5210] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 129.862801][ T5213] loop3: detected capacity change from 0 to 2048 [ 129.880242][ T5215] loop1: detected capacity change from 0 to 512 [ 129.907287][ T5215] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.955888][ T5213] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.986090][ T5213] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 129.998366][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 130.007105][ T5213] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.007105][ T5213] [ 130.025454][ T5213] EXT4-fs (loop3): Total free blocks count 0 [ 130.031485][ T5213] EXT4-fs (loop3): Free/Dirty block details [ 130.036121][ T39] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 130.037664][ T5213] EXT4-fs (loop3): free_blocks=2415919104 [ 130.050347][ T5213] EXT4-fs (loop3): dirty_blocks=48 SYZFAIL: proc stdout read failed (errno 5: Input/output error) [ 130.055638][ T5213] EXT4-fs (loop3): Block reservation details [ 130.063318][ T5213] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 130.326054][ T412] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 130.347367][ T39] usb 7-1: device descriptor read/all, error -71 [ 130.406958][ T549] device bridge_slave_1 left promiscuous mode [ 130.412902][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.420115][ T549] device bridge_slave_0 left promiscuous mode [ 130.426120][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.433612][ T549] device veth1_macvtap left promiscuous mode [ 130.439537][ T549] device veth0_vlan left promiscuous mode [ 131.247018][ T549] device bridge_slave_1 left promiscuous mode [ 131.253024][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.260256][ T549] device bridge_slave_0 left promiscuous mode [ 131.266255][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.273655][ T549] device bridge_slave_1 left promiscuous mode [ 131.279685][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.286888][ T549] device bridge_slave_0 left promiscuous mode [ 131.292797][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.300468][ T549] device bridge_slave_1 left promiscuous mode [ 131.306622][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.313773][ T549] device bridge_slave_0 left promiscuous mode [ 131.319780][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.327897][ T549] device veth1_macvtap left promiscuous mode [ 131.333704][ T549] device veth0_vlan left promiscuous mode [ 131.339506][ T549] device veth1_macvtap left promiscuous mode [ 131.345330][ T549] device veth0_vlan left promiscuous mode [ 131.351253][ T549] device veth1_macvtap left promiscuous mode [ 131.357150][ T549] device veth0_vlan left promiscuous mode