last executing test programs: 3m15.866112829s ago: executing program 3 (id=179): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) 3m15.733247166s ago: executing program 4 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)={0x74, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x47, 0xe, {{{}, {}, @device_b, @broadcast, @random="4d8e505a6882"}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x2, 0x4, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @val={0x76, 0x6, {0x3, 0x4, 0x16, 0x3}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) 3m15.535038917s ago: executing program 4 (id=183): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3m15.330609439s ago: executing program 4 (id=186): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x2, 0x1, 0x4, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 3m15.199674046s ago: executing program 4 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 3m15.018013026s ago: executing program 4 (id=191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) 3m14.823851297s ago: executing program 3 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newtfilter={0xda4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xd70, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff2}}, @TCA_MATCHALL_ACT={0xd5c, 0x2, [@m_mpls={0xd0, 0x1, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x77, 0x8, 0x2, 0xfffffff3}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe2753}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x56, 0x6, "8a433d3d95c190171525059071c82e106c7306f88c6a1237891c960e10a76cd23c8efea3faaa86644682fddb5adf2dc2b0a2a7ca8695d27f940e16dbc69d3386afb3bd29d467d74d1618092542145d9d5869"}, {0xc}, {0xc, 0x8, {0x0, 0xdeaaa9a01f70c4f7}}}}, @m_ife={0xc88, 0xc, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x0, 0x5, 0x8}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x419f2924}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x9, 0x3, 0x0, 0xd}, 0x1}}]}, {0xc04, 0x6, "233c36e815d98ff547529695de25d13beb2d0fcaabd122a135d13317915ad9a1690aeb9c693f7780f08f653d8a106bcbc22cc274c70217d1b43321d0c74b75f164614bf773762a7567524f83792385d4f1ce8b55164ba31cba3064d23ca0f98a9cf24d6acad0f894878110e0ea3fbf5d7dcc221f203b0bcd9c673bc05c361db956026fd85a905c64b66f2f0eb408810131ea9f933f5b665cb7e5fc2a71bc21548142b265c728ef9d02bce849916e7d5e33d70c316df76d7740809e1ee676d786515f2842363e5da08b2132788609010c865199aa028296530f58b179b0034cc29f3025e7168d661d21e410229601f1c975b56cbc75ab9ce39587d128ee400ec9607bf359b81abe298f861d93787f0da9770c39cc92de5b8dc84ad5d9d0fecfbd6471d51b6b70eab998648b724c121c85f9b27bef8f0b4ceb9c0cc2f761b20036922f63959260032fd9c489687ce4212173330f1b057ec9b5b8a590e444093b9bf9f65efd1e455b1090c028f13c4ed783a733015d1136a3342385250a8a70a305e07aa87cff4efebb6f4431c1562fb5b2c86cde35758d160c18739803768b56981a3a10e2a89cf9bec68c6ec4b56d7405a18476ac8e9c123d750740ce1cd2dba0fc915ac90e06ef0d1febb040d2bbe9c40d9a0c284305ffab66977041c7c1ee3eda672d2162f5994bc64689d094a54cd4a9f22cac836006c4c478c6ac3e97846fe91438248de8843d4e22da39515e187976e21d273d7aeac0dd4bd44206da60bdd3d723349feffff36b91a101a1c5c8846f6da6152ca340033b807b4031c72bb0ffa0794a339b7d185a76c6700cde08e440e149aa3b4b064269fd26e419e1a1445ea91c24f4957411084e3a6e09164527c809c10ace41e791e1c4d8b94c15ef418d92cf6b9d88b793c388c3b01bf53b6531a2ef707f161fb2ee9014f80dcc201913136351aca0027e5e67f61127fb604866a690262d4bb9b4ee2a5eaa64aef811f8eeee407c863199bf86e82a0ddc2f596d1eb17b0419d48c745aac0c77f0743fc77d7366b8a069b51b96a6254a48c31f297afb6c7dc8515030c270fa8cb5facd165b57f4d573fe0880acc1571bbcf5b846f646a61cfa5fc5beec40c0af29e469d89f2454659a1a75e10fc45a4c07e7e70f6d8226b736430f4c1c0b5104ed8868b49455bca393c162e74ba311422290a0666c5deff6cf7f139f2b9eb4b11ba8685f343a01c5fa7595c887919e64278b19519775af0250233c5bdd280a6cd9d4a9989e242c7bb9fb7ff56c3725cb689ae9f309815f77e97353a0868024631b2bce95953781d08246f87778f991dc2eed944d222e69d07555ba23ee4b3a1b6296593fc5a3ae6c895c4a75161c9af93b319f45f94cff7720bb541fe591729bb0e20fd4169bb0c902d543d0a61c023c2ca23daca5b2e8f3cfac8129b39a1cb1a0e1dd5a395ca308768617dc9e87266801bb9b518d08e690e8b17310c17ade29f75df249a1bf54ad0b077fb06e2d137c99eef204e5c768596446800d52508b1b3a46c14e3c8ee41b50820955d5ed9ff751c1315ae141d91da95785daadf7e2a9c7927ab49f91ead77b0dce357a64f012c9951e4a7d5b787bafba52e19cc99879c5e55ef075cc159f02438ecefddec9cf355d43173fb451d0bbbc360071ad68ecf7199a8a6c53b5fbf401cdc966f68d036bff6cb0de3f72cdd7c5aff69d5c13727e734b3d6a4723fe44865d095e5d5551618a5f6200cf72ef531a3d0e4dd068b0e97cbf311464ea882eb47fdde295ac68d71613b2c3861ac6e8b5c3d4e59e29ce5d46b55010f75e88f64d0ae81fc5c11711e84784ea608aefc22b75423b49ebd56013b48940cd856dc28271faf8ec88ba5950ca10fb1cc36e81987cda5c7ba403f1d9b56f774b8008c21a6117b3779bd4de5a6f3b4aa80cac6ca1b2ccc6d07955f11ed88db2d5164c1bb2d8319c05139e9e7fd970fb45ade53740cbbb763b1419f7326dbe6ed1c01395259c62a6f6159f60acf4cb729b834ce2128fabd94ee3b7579e12d76cfc58e4911da481a483f08b7d978006e75b49847a08a1f8681ba8a8abd35fa1ebe0056d436c8e36883cc13afe97c5e3b3194a732180e23b3168ca2e250a22fd862c4a2bead310aa46729cd04bd26fc8b374dcd3fb8154055d06f8c894a5aca9e945579d0de02c3ccd767b58bcf194d87e79c7d4ddb071f9345ae024ae6a280c2798cc134b0ca08c5fd6432707ff58add63f44a52916a1568b6b87399c6924e1ababe5c643c46822f65fb7d1a52e855b22603f50b4434315b1cf293bb5bcb4a898edb18333847d5153ec387b118d7065959966fefe8fc39aac7b2f0afc90c97b304ff2b9edb6f039e889b7ad07e9375385d72a25591632eeb3311250e622fb305a57b6d4ceec6865987846347989f8f4184619023c16f85179862cb71ef84c1f97d233c491483e1b5d582d713dca1edcfc635bb427954e2b0020b6861f5d883aafc9b84db6af4edf1afb38ff8c682262b2d8fc06e720d48158af5f93eae55ddc1c686fd0d5c94bbbfceb0a63c801568ae85c122e62bcd7ca99e0e9f9cc072fff20a1770c5b3bbacf568aac41ae0dcd28dc9987202e891aed5cc7862ca3c6316d12c0c87359a8f383eb37d45f4fb01be867c672ce7b07994ec1202e15185b7f955281e8359dbf2c63da72e73a24fd409f0922dd73aea9c7b99a3fc1998ec516b0321a0628806f8abc863436885bc6a1c498f4be73516a914db58d8da986bd59af9f06dfec3fbb2ee6664e06f0aa555d45d96704237580b82e3612cd38535116abca2f9235b4154895578c25cb36f769476444b76b055d04b556717224a3ab888daebd76f1d9c3f8f42215c016331428fbd533169b5f465b272efdb3909e9f408f5e0abd8e248ba17804483adc2b6aeb443866edead977c2b4d6a494b63727a2416aedc9559bf0f35f075a1be79191ebe3196a14988c3d76ec3821b8d14cd10a545527c572f33e346160f998d2ff138fe5e1ee94c4f4aead518ae4006804fb5a052dbe637fafa74466c43c78ea06ad34fd0f1a55c6e60fb861bdbb9795a54c096737d635287f4e35268fdd66c898e772edf077bf2f3f22c515280e6ed3f280a74c6f7eba0238ba8c87ac6d5f33d70c187b0fde56943083d0dfb68f8abcac5ffef5338aea38a7f3d20c1b6e8edec5c4b7ab44302e90c578aff5108697215cff73999757fea522f596ec3f0e1e7a0edbff0e64d8e3d0080cb1ab263466a6382e4583528b07e487c8acf49f75322c19969359d5780cf9a51cdd1afe300059d5778983166c2b7f3318931f0c0415d28056049fa4c6a2f1ebe91bf37fbde13a4419cb9aacd2b7cb48db1d90e87021453a6f33bd2c512dac92c7bf8c10bf8c82b75cf0ac4d51bf6a8d4069aa3c9448c86a5a8643623fedc53c8672dd46ae3644f235ac549f8626b001a1de0feb69fd46a27275e601bff664b29a3b91ed160a098fca5485aeb9ea18d732a5b04dfc6dbd840e680f13e24c3609d1084ea7da82778f56a26afcf714f4535de6ab529dcaaeb9edfe071810fe98e16eac6d4bdd071da3dc75eac64a59afff4f34352a460ff2e8fdc40b8d55cb4f0fb3434c7accb7a537688a9e1543c5228c36f318fa2d2511fb96741eea57ae7c6540f7e2066dad867e2f415d8867aec10fedb135a724fb36513ebfeec8ced731dc37cdea907f29b97d09e3b35c1bb87cb5e3dd3d0940d3154e6d15a0cec26d1712a4024b8e9b00bfe47afe92c7e9e051383440c3d54a9bb8eda3a028133a3b99e14ff4404ed04a7ff00c9cf1312c9588b62fe579386296c8d5dd18c6bfb41fb3ee778d1631a43b4a17adc6ca0dc631eaa2e7fb9b8b86e8091d1faf3674427ddfc785842f944d6572b9de1395ce7661fbde4d37cc8b20c48824c354b18552befb030cbea467e9326ffbc35436dd4d397ee616953c4bb1a6a00416c96661857a98d1c4655c4498190272904a3489485703099c3aefb9d9ff8fb14fe4997c6bd8f6a65c16a9a784e9d170f98ca7a9d48f566f374c1250954c724a35db858eb7f8743abee2c1bc3e455736c4d85645c673fa2673240cf8aff938947d18478c3febc089678f04726fe60c4394f1682bd5a7f5dfbe98a2c1c1c71a5577d4d30bd4e3856e164e3ff4d5a4702f7726b7943fba6fb1756e014464a2cbd6f4ab40b7d31e8072d22365361a9cdae2a078c5987680688e0b08758752e976b94b6af31c3b73c4b261740b5b1809a0650dccfd8733ad0a1f312fc0c3dc15cfcd402176d5bb3c9d82502b7e7bc165b7bed118f338ab03bf9ce21ca90e6530d5e270aa56f5d4b1eb1922a8835255bb356b589c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0xda4}}, 0x0) 3m14.559095602s ago: executing program 4 (id=195): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m14.524875604s ago: executing program 3 (id=197): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000001b40)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 3m14.213326271s ago: executing program 32 (id=195): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m13.902348438s ago: executing program 3 (id=205): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrKpupOkcdvgQ1UQfSqoFZ+ENSaTEDLJLMmk3YTFpvgqCCJa8EWffBH8AwTpi+8iFOq7qChSs/qg0PbKnbnTTWZnkhRncpfk94Oz9557Zu73ncnOybkzN/cGcGE9GRHTETEWEc9ExFSxPS1K7HdK/rh7B3eX8pJElr30dhJJsa27r8vF8lrxtImI+MZXI76bPBh3e3dvfbHRqG8V9ZnWRvJOlu3dWNtYXK2v1jfn5+eeW3h+4ebC7FD6WY2IF77815/88JdfeeG3n33lT7f+Pv29PK3/Ztmr0dOPYep0vdJ+LbrGI2JrFMFKMt7uYcfNknMBAOB4+Xz/wxHxyfb8fyrG2rM5AAAA4DzJvjAZ7yQRGQAAAHBupRExGUlaK873nSzOWL0WER+Nq2mjud36zEpzZ3M5b4uoRiVdWWvUZ2Oife5ANSpJXp8rzrHt1p/tqc9HxKMR8eOpK+16banZWC77ww8AAAC4IK71HP//eypNa7Wicb/k5AAAAIDhqZadAAAAADByjv8BAADg/Ktmfe7Q9aB09JkAAAAAI/C1F1/MS9a9//Xyy7s7682XbyzXt9drGztLtaXm1u3aarO52r5m38ZJ+2s0m7c/F5s7d2Za9e3WzPbu3q2N5s5m69bakVtgAwAAAGfo0U+88cckIvY/f6VdcpeKtkpENnb4weNlZAiMygc6p+cvo8sDOHuHf79fKTEP4OyZ0sPFVSk7AaB0J/0B0MCTd34//FwAAIDRuP6xwd//v71SamrAiBXf/yenugAIcK6MlZ0AUJrO93/vZR1lZwOcpcpxMwAHBXDupcP5/v+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSVbWGvXZiPhQRLw1Vbmc1+faz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3s8HLiX/mWovI+KVn7300zuLrdbWXL79n+9vb71ebH+2jE8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNO9g7tL97Isyw7uLp1l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjh56XRMTYEOLvvxYRj/WLn+RpRbXI4kj8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK0+/uavZwbGfy3i8fH+4083fpLvr0/8p07Zx+98c29vUFv2i4jr/ca/5GismdbG7Znt3b0baxuLq/XV+ub8/NxzC88v3FyYnVlZa9SLf/vG+NHHf/Pe/dq7D/T/6jHjb7v/A17/p0/Z/3ffvHPwkc5qz08mKvHzLJt+qv/P/7F88en+8fP/E58qfg/k7flrmL7+rb7xn/jVH54YlFve/+UB/Z/o6f/lnv5Pn7L/z3z9+38+5UMBgDOwvbu3vtho1LesHF6J6kORxsO7ks87S08jiSTylbeONC2Wn1hn5dXiPbbY6L7bhrTn3xUHR6NMvqTxCAAAGJ37k/7elqSchAAAAAAAAAAAAAAAAAAAAOACOvEyYIOa0oi4v+XbPzjmamS9MffL6SoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLH+FwAA//8tudaU") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x10fff9, 0x10fff9) 3m13.279876234s ago: executing program 3 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x5000, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m12.45584338s ago: executing program 3 (id=216): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='gretap0\x00', 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='ip6gre0\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 3m12.142476307s ago: executing program 33 (id=216): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='gretap0\x00', 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='ip6gre0\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 2m25.415644115s ago: executing program 0 (id=538): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xfffffffd, 0x5, 0x9, "3000000502000000000000000400", 0x0, 0x0, 0x4a, 0x8, 0x0, 0x4, 0xe}) capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) 2m25.176014068s ago: executing program 0 (id=542): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) 2m24.95414396s ago: executing program 0 (id=544): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000740)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x20048001) 2m23.991249014s ago: executing program 0 (id=555): dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 2m23.310036653s ago: executing program 0 (id=561): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440)='7', 0x1, 0xb4, &(0x7f0000000000)={0x11, 0x3, r2, 0x1, 0x10, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000140)=0x81, 0x4) read(r0, &(0x7f0000000000)=""/149, 0xaa) 2m22.715970126s ago: executing program 0 (id=567): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008}) 2m22.46372351s ago: executing program 34 (id=567): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008}) 2m2.28310339s ago: executing program 6 (id=750): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r2, 0xfffffffffffffffd, 0xbb) 2m2.027872154s ago: executing program 6 (id=752): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101442, 0x0) pwrite64(r1, &(0x7f0000000100)='=', 0x1, 0x4fed3) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ftruncate(r0, 0xfff) 2m1.279590637s ago: executing program 6 (id=758): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m1.074281188s ago: executing program 6 (id=759): syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file2\x00', 0x8080, &(0x7f0000009600), 0x1, 0x95b5, &(0x7f0000012bc0)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m59.979572709s ago: executing program 6 (id=771): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x1}}, {@nolazytime}, {@delalloc}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x549, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x7}, [], {0x4, 0x4}, [], {0x10, 0x5}, {0x20, 0x2}}, 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1m58.624051885s ago: executing program 6 (id=782): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchmodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x17f) 1m58.171190801s ago: executing program 35 (id=782): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchmodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x17f) 1m49.475991168s ago: executing program 5 (id=842): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xd6}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71b", 0x7a}], 0x2}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2}, 0x10040) 1m49.240357001s ago: executing program 5 (id=845): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 1m49.124257657s ago: executing program 5 (id=846): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 1m48.978252996s ago: executing program 5 (id=847): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@norecovery}, {@order_relaxed}, {}, {@order_relaxed}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000000f40)="$eJzs3U9sHNX9APA3a6+dxE68Bn5g4EdIoRWBgh2SVE1vQaAeEZfeQSGhEYbShh6I+BN6QFRCFAlxqjhQcaFUSpFaCVSpQj21PbXqrSfUC62qVArqpUiJq9jvrXdfPN312J717n4+0tfPb97sfL/jtayZ8eybAIytxurX48cXihDe+eTtR156svj1tWV3ttc4tPq1iL1WCKHZ0S+y7X0WF1y5/OKpjdoiHF39mvrh0Uvt186EEC6EQ+HT0AofLi1/8cG7Dx/+6LU9N795/umXd2j32/L9AACAUXTxj8t/vffvf7h//suLB0+G6fbydHzeiv2ZeNx/JB4op+PlRujuFx3RaSpbbyJGI1tvIltvMsszWZKvmW2nWbLeVI98Ex3LNtpPAAAAGEbpvLYVisZiV7/RWFxcO++/5rO5qWLx2bPLZ84NqFAAAACgsn+/snrTrRBCCCGEEEIIIUY4VuYGfQUCAAAAGDed84Xt2WiFC9s7U1d7a63r82+0/qWHGhu/HrZBr9+/7f79l3+48r//qr84AABUN6pHk2m/0nF0mscgn0dwInvdZo//G9l2JjdZZ9m8gsMy32BZnfnPdbcqq3+z7+OglNWfz4e5W5XVn8/TuVuV1T9dcx1VldW/4bXXXais/r0111FVWf37aq6jqrL6Z2quo6qy+mdrrqOqsvr311xHVWX1H6i5jqrK6h+W22rL6m/VXEdVZfXP11xHVWX139Dfy/+xnbVUUVb/jTXXUVVZ/TfVXMeg3BHb9HM4mI13nj/n53TDco4HAAAA4+4/5v8TQgghhBBCCCFGPl4Z9AUIAAAAYODS5wLSp95XojQ+0WN8ssd4s8f4VI/x6R7jAAAAQAi/ef3MrW8V65/z3+p8eGneqDT/0mbnMcrnI9xs/q3Oe7bV/MMybxkAAADjpfj2p1fve+S95+e/vHjwZMfZ79V4vpvmAZ2M1wY+jv10X8Bs1i/SOfTJ7jyNkvXy6wP7y7b32BZ3FAAAAMZYOn9vhaKx2HHe3QqNxuLi+vn4QmgWZ84unz4S++n5LL+fa05fW/5gX9mG5alkAAAAMFrWz/c3Pv9Pz/FdCFPF4rNnl8+cW+vPtpc3G53XBebWlxed1wVa2fKjJcuPxX56fud35/auLl889b3lJ7d75wEAAGBMnHvh/NNPLC+f/oFvfDOe3+zbHWXstm8G/ZcJAADYbp9//nbzh8dmf7v2+f/1+e/S5/8PxX4rzu33p7hCuk8gfQ7gus/rP96dZ65svee612tl603EmM7q3tOxndAx32B63XxZvlb3dqZK8s1k+WazfPk8BZPZ+infgWx5/gmItN5ctjyfh3Eyy1Fk+e8KAAAAUG7p+WeeWzr3wvkHzj7zxFOnnzr97LGjJ7514sSRB7/54NLqff1LnXf3AwAAAMNo/abfQVcCAAAAAAAAAAAAAAAAAAAA46uOx4kNeh8BAABg3P3rlRDCBSFESaw9AnPwdQghhBCbi/Sw5EHXIeqNiV1Qg4jRWD/pGngtQqzFykr+pHkAAACAnXXl8ounOtvrXCi2NV97a6215mrMm9rZB/4yfy3Sapce6r5esm9bq2Hc1f37L/9w5X//1e3Nn/412P/fv0b3Bk5Wy3vP0s8XOvPfNtln/nz/H6uW/3CW/57QX/6V97L8j1fLf2+Wf1+f+a/b/+eq5b8v5l+I/cN395u/+/2fjm3aj7195v96tv9Phn7zZ/vf6jNh5v6YHwDGUWPQBeyQdJSQjqNnYj/tbzzcDPndD5s9/m9k25nccuXd203HQbfEfjpems3yJputfybb3v71oeZm6swNy10lZfVv1/u408rq7+vN2wXK6p+quY6qyuqfrrmOqsrq31NzHVWV1d/veeigldU/LNeVy+qfqbmOqsrqn625jqrK6t9fcx1VldV/oOY6qiqrf67mOqoqq7/iZbXaldU/X3MdVZXVf0PNdVRVVv+NNddRVVn9N9Vcx6DcHtuy8+F0/jkXx1K/lfWnN/hZjuq1BQAAABg2/zT/nxBCCCGEEEIIsRPx/W8MvoZ2rKwM+goEg7Szn2YGYLfy93+8ef/Hm/d/vHn/+V/SPfxF1k8meoxP9hhv9hifysbz39fpHuM3ZttdidL4TT3G/6/H+IEe47f0GF/oMX5rj/Hbeozf3mMcAACA8XBzbJ0fAgAAwOh66Rcfv/Grex6/PP/lxYMnw9R1884fif3p+L/112M/n/c+acb/+f8o9n8W29/F9m/Z+u4/AQAAgJ2XnhPj//8AAAAwutJzSp3/AwAAwOiaj63zfwAAABhdN8TW+T8AAACMsGLPxotjm64L3BXbfuf1AwB2v/+P7R2xPRjbO2P7ldim44C7Y/vVmuoDALbPT7/z4xNvFevz/R/Lxq/E5am9zoW1KwVFo3sm/72x3Rfbr/VZT/48gH7zJwf6zLNT+ee2mB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGB2N1a/Hjy8UIbzzyduP/GTqjT9fW3Zne41Dq1+L2GuFEJrt16XR9f4v44pXLr94qrO9GtsiHA1FKNrLw6OX2plmQggXwqHwaWiFD5eWv/jg3YcPf/TanpvfPP/0yzv4I+jaPwAAABhF/w0AAP//8RcdlQ==") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_mount_image$exfat(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1380443, 0x0, 0x3, 0x0, &(0x7f0000000000)) 1m48.139592322s ago: executing program 5 (id=853): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 1m36.95230804s ago: executing program 5 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x80000001, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78}) 1m36.540738712s ago: executing program 36 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x80000001, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78}) 17.010939367s ago: executing program 9 (id=1491): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 16.489687847s ago: executing program 9 (id=1496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 16.162339075s ago: executing program 9 (id=1498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYBLOB="70394a6152d778f79edb12fcb619bedee7bfb06ab69e485f1b2eda5535869acbc66b18c54918584a97a21e5f9e4c3d2ea74a03d20b06476d3bfa1b996187c32d007717b0cf28c403104ce7d7684a3c8722e534855fb70d2dc3a28e46653b34f9fd34100dfab242f24ad1fa247885f17ae27c4fdf32da59f749dccdf2ae3ecbcb1b337eefb62a51d30ed857e7183f897ad1a6f706d9492d38fdd611c99eed8596af618f1b433d2e045341c271d8afe196cfaa9702b9d93aac8ead84b057a9c0f6cd439e070c01c820a3aa56db4d34b7f4a1", @ANYRESHEX=0x0], 0x1, 0x2b0, &(0x7f0000000440)="$eJzs3M9qE1EUx/FjUps0pU0EERTUg250M7TxATRIC2JAqU1RF8LUTjRkTMpMqETEZiNufY7i0p2gvkA34sa9uyIIbroQR5jJtPlXjW2aju33A+Xe5Nwfc5um4UxgZuPu6yflomsUzZrEkpqJiTRkUyQjMQkda44xfz4qrRpyefzHl7N37t2/mcvnZ+ZUZ3PzV7KqOnn+/dPnby58rI0vvJ18l5D1zION79mv66fWT2/8mn9ccrXkaqVaU1MXq9WauWhbulRyy4bqbdsyXUtLFddy2upFu7q8XFezsjSRWnYs11WzUteyVddaVWtOXc1HZqmihmHoREqOtpE+1hTW5ubM3I5lLz7QHWHfjfV60nFyjd7FwtoQ9gQAACKmo/+X9v4/6PV37v/zC8E44P5fZFj9f3LgL2jENdoe/aX/x6HgODkz1fz/bUf/DwAAAAAAAAAAAAAAAAAAAADA/2DT89Ke56XDMfxJNC+OCR8f9D6xP3b59796QNvFgLVcuJcUsV+tFFYKwRjUc0UpiS2WTElafvrvh6ZgPnsjPzOlvox8sFeb+dWVQlwSYT6U6ZU/d2I6yGt7/rikWo+flbSc7H38bM/8qFy62JI3JC2fHkpVbFny39fb+RfTqtdv5TvyY/46AAAAAAAOA0O3dJ2/+3V/QVK660G+7fuBmLScoHd9P9Bxfj0iZ/q5RSUAAAAAANgzt/6sbNq25exikhCRPcQP6yQukdhGx+SaiERgG8OaJEUkeEZ3E/+2Fe8r5fWxZkREepdEovCKdU4O+pMJAAAAwKBtN/3/EPr8ch93BAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0dPv/cDC9V2lsPCHeMvh4kP/BQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAI+R0AAP//gS0dPw==") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x4800000000000000, 0xeeef0000, 0xb, 0x3, 0xb}) 15.7281871s ago: executing program 9 (id=1500): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@barrier}]}, 0x2, 0x25d, &(0x7f00000006c0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4000000004]}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x10, 0x1, "0740cb66b1ebf21a10b1ed97a334fd95a2b2c09260392517ce6fda78d8ecabc8f297e577b96d53483ab32f1af88dd5460eb25497f556908990f841e9c9d96376", "93d63a8a568b811e9db476529c5d1b790a1ca244875606f522c920a55981148dd26b96bfe2411ef45f8380c3a903e77a7a59fb7d7678c4c7eed624c012842d08", "a5dd8634a411fe5ae78b56f8ccbcc3a3838b42ed049f8659a40fd1cce2817272", [0xddf9, 0x4]}) 15.223773078s ago: executing program 9 (id=1501): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000280)="606ad7f7fdf4000d06ab1c45ce97aeb9fbb5f2da595e5e729b1b63b0f255d7330c2cffa3813934fcbdf448f52f87c4b223b337a3dc911fd886408b77765e04b862cef183413238d5ec06b24844167fea857dc1ad88ca60d08999e78bb23d89b8f72371f0c194b0400c43fdc45104e257d4343f7d6e77e0102ca5626e44f816cf08fe603aa42955037ce83809f703e43a19c591e2e7eea0dfa3b60e71e21e7e62558f538f24761eb295891c09e1f5f12d3260b1f66323d62ecfbac0cbd9204023685a087b9b8a6a384f973e90478aefec291bd5bd07d092359dfb8312342d03b9c9b962370757605778a0849a", 0xec}, {0x0}], 0x2) 14.386740714s ago: executing program 9 (id=1506): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 14.008672395s ago: executing program 37 (id=1506): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 4.694071157s ago: executing program 1 (id=1559): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) unshare(0x20000400) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) 3.809013717s ago: executing program 8 (id=1563): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.690773614s ago: executing program 1 (id=1564): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002800)="ef0ba6063426720100", 0x9}], 0x1}}], 0x579, 0x20000010) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 3.57489703s ago: executing program 8 (id=1566): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x802, 0x8, 0x1b, 0x402, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.508806474s ago: executing program 7 (id=1576): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r2, 0x8000000000000001, 0x1) 2.963666174s ago: executing program 1 (id=1568): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) lseek(r0, 0x9, 0x0) 2.963402884s ago: executing program 8 (id=1569): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) preadv(r1, 0x0, 0x0, 0x2, 0x3) 2.962886544s ago: executing program 7 (id=1578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) 2.820618382s ago: executing program 2 (id=1570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x82}}]}, 0xc4}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) 2.729901307s ago: executing program 7 (id=1571): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="c1b0ad27d26172a2282808a63b3666a169a53df2d890fb5a415426c6ff9bb87f8efb6ea14cfe80e636e7de7e2b18b78f80a1e4c84f02ecfed07902492c1d761451483d0b9c75d1bce9e4a0d1f8a9bb1a22b951653bbce82561c6ac0fc2eaeb3fcd942b78b746455913dbea328ce1088f52d7cb35aefac657784f2cdd576c15bb8db65205430d6a1cd094d749955b73eacfddece7cb849c1554eebb88d05d597b840ebac50de06d2efcc88cb3bbdaf6388332964078936c035bd3e3f56e545ba683f4523df2d6034d5086890db8e3922638a6196fe0a1a026ef632f8c6c6ac3e66228e9c15abaa010f956968240f31f97ef8da03d671ad3d48e135c880c8e096e0f39cdaf38d0203a20362c985b38cefac182d22fb4b709c8c1b5dea4eb5e6dde7af7793b120ba2eadcb892c53de7ce0ab712ef33721121fcf841fa1d35f7a2e9ff1b054adf64e6e2261e015c9a0dd0b8d8fd363ae1bd8ffc28d41b681ece5c4568cf6adf2815b618e8308dbd1c2e664c178a4504e0a362291ac5dfa1115709d42fe8bfc92f109d60c12d43fc204a8f3458b199adab770d51eacae9eeaa4cd1569f05dde2f71e2819dc64c2c62441e4cf281acc54f88741ed1329343e0dbfb356ab7fd3732a93b2a15fac46ef120745cd49b7e65421595fd81fabaee29a28bab508c95fa74d8884c4edd6bdea3c71e8d230c8e666aeaadf6f4c67846ad43a3f458123508c77df0b13c25b3414220600e35dd2d44bbd78d7902f767dfcfb6001674106a6a952f3a47e78758893cae3bfff8d053842642c3f9eb512e12ef09313b2a823e1c31dd45b236824b057992101016204d48e1d3f7f42503b20f549371f92688624089b5460b724307b569f8570c5eba6c243702370f76c0ef78d59d5aef447852c9102618a9811f8440abac9e78a7613b00ecc1b0f6dd9c477701a975fe07c95bc35237d33f7368b9be2986566f310f16a189fe0438ae0887384b10f80b2635493839b3de154c8fe5bc020164e062d77b4826df0eb2af18c8a9e5b28c3d2849bbd29628c76306cf7f4433e0d128a93f5b12a2bea9ed9b3a85e8e4896ec6ce0ea8ef4471cd9db37d91b3f45cb72c2781864c820e4e267e6a650a3687eac83d7b010c621c1c52717b98335df8e87390e5a76874bf31993e1a801f4fe8dc9222877c693fc043d38f54b9422210f2a023f496149def0a9e936c4adbce6a290113b2fb40c5e3e79a0797cd37c2e1731e0143bb5d8bfa51c226d02d567b50c63ebbc64e1d44e120e4cb0fed4347528df660736b99ea3235e83da0c167a015cb3e7a57c5e9072b2fd358cdb20127deb4f37deb2d09ef2b2795ccb52f3bab0f5abcfc37bd0932e55f92cba6e468fb3175b983ca8597327fe67fc1aa89f6d1829ea7eeeec41e3920a51ac583489abe8eb5c1c841d4969a06fde61fa56e59f8f0f64b19071d8a84853047a3d766e82cf2c651586ac3f877c8909ed056b1828fff9211e414b8b8f5cd38542132d9562abae4bf63bbd0532208199e4d2c59b1e5d9a438f026d01c40fd0b8076a9e933e65e65ff9ea0fde753edc738aa079b6695c6055ac2690d6d928e9046c446bd9d0c3e685eee30f7a718436cfa917f678cfdc2f7f72e7bbe508cc64239597f5969f4a750cf1f0f5a646018eb1c35f912cc4c888da888ae8fad773fe47c6a78a63af9b035e15eb790a7ccff2f44d70acd069499d7db8bd02bb6bf252699d8d46a8923f21ba967585be41b79e4d653ab2fba065610ca31e683a5cd5b29678f45eb2593700b361919efb0dffa1782b70d0a4a34247cbd9b240536ce6d46615ec96387e05f60375a2fb8977898cdee503b1fa20924fdec96a1930dac55dddd2eb612c383e4eff4e95f6cdf88047fe76ce9dcbf18a6f81d091f8e767be97b105dbc709d92c6f25d785b4972cafaea96bafc82cdbd4525340e37903259117b8ab63bbb9fb34cf23cdc48b59f7bd0b50ea12950e424e706a5d9ef4d69b334a5de6629b2b585d64688dcd5d4230fbe6f8043e99e9942d13973568b789a34a3ec7a70ff4b34ed4f28a1ad2eb31d8c81ce77d8b554749522c149944a08669ba48926dca4429fe817a7d91f373db7a100f74d6a062ad5e9ea20c77fb575a0c54c5eafd640ee770c844c813d9d807dd80333571840bd8b4b6eae859ddef2f6dbffcd7040691e2228f927faa8c82de451e60303267df50e973b0c6c7f0738eb8cc82b899534a41ae37ede81b72c38d57d82c59f87a8acf456229cced3bd6da6003d1f456ab5849b4dce78b05eddb6188d69cf8ac5bc16799e99021b5485d5ce080b328e7e11e4bfc083a68d9ec22007fae9b04bd167ce4b8f455ed6419501ab6ca434d6418a8f8baf09a66a51ba426f61ccc2f30acfeb988f3a1f36bface215200b3ed62a3d2d74f7b8c0c8244472cc77fbec96721c55d10ae299fb1aba8c45ac1cc882ce964250b30d81bf8a8be110b9f8af1aa644313052e00ed644dd87ca7df34a50ccc3602f7d3ab93fd6ca19d5b9a06894a8f91d3aff8a3cd52fcd3af7adcc7f9ddfce8bb74b714ffd4d2e76cfe60b44a47b1d7fb2bbf0c4a3dac47edd09888fdbe781071900a2e473b4daeb545561ae8f34b4eeaa60f44900684ac1f620a6fa54e562de40645158a5d8c36e3d9027bfc65274ffc8bfca8c03d464047485c3db1e54294406d90ed05c3b0d2d4e66d5e992b99dc3ede4be703d2f31dfdc5dc8c6ef01f43b42306f4a4825be7499afdc8ba1c02e3998329726af89e030be58ecdd20bf8b5d7e5f81878791f92fbd000aa1f9c2bd0aeaba2cecdeffb476dbedf37692d23dac191dfd2f7633d04a0826512b79bc1f8a6737b9b36baec7f5a4555fc7054458f9c7169968ebac29009778dd739e3a5b6cb2f0a6ae0fcb4f545e89a61ad993e42dfa7a283bd9f3d2eac7797c345843244320da0ccad437458512747f321158cdad67ca63d9e3eb187c2fee00d5f9e20266e103317a54293a7ba090b40174d0232bfb2ebd8576adf8c8a9f963fe12a592fe19af02d6f684dbba4a2d6d98003f60a728b1e7b524cbf248666a88d6f19c4937db31e56b4f5373f8aa16926f7ec75da8a76cc340376958175d6f23585e97bee88164cd2e2df5835474c6cf21f65754b98766ab47857d3008be18186792ecc604fc17519cec1d67c727c84299201ba77ccb7e60aa7b912fcc61b5ae4f580a90892b6e7cc3610b357ba6ac5b377cf43bab2970ee240525e12767611842d1d52fe188f125d018889e3e2092b7a39ddb57c0546bb17ec2443e1bdc5a763c9ce5f9b528ed14134694802886d4420f02ee9574f62e6bcc456028663f0b1399d86599fe0047d93a2eb162d2fa13385192bd4221e41bcc61511e43103550f958ba6dfd5e1b855b82a543e8e0766678f1cdd1214a399aeef014150baba0556212132dbf135319868b9ff93adf51eefa64be829362388e2659101a3ec85e0bb5119423b60819aba5c3b8823b5e37f469783db165ff4cd2cd7306f163c0e4ac8695747b571d7941e2bf1be981a48e71f336bbcc20ccddfae7bdc7f94ab62dfda1d552bdef955189eeadc9bd710c2a3a8c9d414c45d2b99ab8b4e92f8fcf2b83380d079b3dd3ddb0978dadf5569f70444e48f26d32ae410a88bd7201a84b4e3b44a1764ad6428a8148907e86bb0a09cfc1191eda8202d3160c8a4716de885ee80fbbbb2278fcbcbfd1c76b1d55ccbb9ed228de215f5104a9a0b4d647b1fa4bc786c68bee29f5229ab9cc3ca0729199eb7bd2ec9e9be7d833b13586882ea069e2aac144f22442244655c33759aa1e101f87836ad0cb16ddc6e36a66a8755acd52b4e446c0e974756a087a725a95ef59121d39f1c75fa136d7212c71a14ad5579be27c1dd0af8f9e4fb9b407e2bbbdee423486c4d5127fcf5107177b1e21e81f1758f4c304f40c0eb35627113be1e4dcb06d209ca06696f214ca260721c4ce7b4d82db24f024c74786c8d6ba7c73f495eab53e545c44b53a78f82d0aedfe04b798bbe125c8622eb5a2a764cae9c8d01380d464bd2dc7a1b0eb2bc431ae432ccfa81f2913af53bd714fe97d958c928534aa2f7caff6cd926daad3e6ed4c44bd3dd3e1a3fe0e12e8423a79c93d7475e29d036b2491e3ae7e50e4098c107abc4eec102808c8d643c4d4ec5707ca06a0b584bbf1bdbfda771a708002ab235fbfe91923b95fe8f4decb6ea6f1022bd98b6f7df5b457a198f2dd8031db5998c56acb30526ac7a7ef157b269259d6606a91b13bc09db05d4f1ae91a8d4fddd9038e5c03506447a483f8759945ec9700b5ed83c7097c177756773c8a250c76415ff43ff091d2015452b8803297e882a832700cb2d4c5c09c9aff61aa04f9cfc81e3d68911c7029a9ab79bdf72d2814068c828c86aadf77bd56953019ad507f5e059ff6ddb5562722acb3193baf88f571a2aa6d575c35506569720d4829f4d29d155bbe186cb72707eddaab43052871ec43dbc5018c1ce41120bc53f2cae7ebcae5bfb42dd1a4d17f782638ffa9747802cb74c61ebd2936d35ae926dae166ae2ea88effad9467bcd028d733da52576db8892c7b77fb5c97814845e3651f5bd759edd3c72704cc3035cb9e15684a0e17fa0b5704a6ac35576643d6fdbee7c7d05e9f0b0ba3e691e2a281913f2f705077277311ae7b8ae3cf287faac63c8cb0534f8610aae68bfdc2e860dafca682af8ec0d73f5d521dcbd3c8b403ef5763c46a23f307c798a550d3a14c1a9db153c8f1b273cc2bbad5a3450ebc2b391f0e44a3223864a193df9fa27ca15293e36fd461bb4ffa6ca73ae5f2d79933b53e05c59017367125aaea376a509a20c9840100af4f1119f1a8cdab0b835c9315144b22335fda48835dbd7d32ac735f71f69a3fb2c593b5c344f23661ff3729e7142b6da61645f8446e2de64cd637186a66c45efc3ab13db3a9cd0117a3adbb44deae4944a9fd466a4f69af5a959430981deed8994bdfd060da92395e23e449eef961d61e82a65a4314ceb4fe3daa08bbda05ef91d70f549fb7959441cd19ac01cf221b83d6e75c3ad224eadcc3f74b097d2d9edc2ccae58ea09ad3af5bdb3e6b3e81ec38542b927fbfcce573b2ee2f2a71b14a24c4b5a443983665be22bc25251af121920540dfcf8c1f2d57d8f721b48efb9555690fbc3bab0fe71708f3edecc8ffd615b1af7feb0e893c3a458019764d16887dc2973333fa70aac3f5400bcace8dd0c8cd8c79bb1e28e744b6fd1a9a424c5f38cfe256df3e3d252a8941a3691f57098dc8658a93889b29690eb2406586ad10df48c0a34f90a37e5ba6583450946b96fc01867f462050f419058e490e5a0720258885b247f65c4db08b41f8236305daa37f0b83fe327f73a8d65a1d49986de9d8ea076c69003df5984926d0e39d30a41e4a660ef2242f42747a944d7664169fd41d0352d4362ebc6c2519dab028d904e8ca00921c936cdb197ae9f096a53c99d643ab30492be5144bb799dbde12499198c3cfb1483a2a29083fb3fb54957b68590526ef4b5a7fde45c773cd5e414f4ee4db79ba92c7a8c2cf77d3e0847f788ea6fcf10cd208ca5d04ee496f70ea0170bc60da6edbd95b444c100fddbd2e878f934c89b82480b16df600d236299886ff71612493eaaedddfa1dbebe596c8e3b8b4cdc2d231ce7e8df0f242677e6b5c3d2815b9e65e29c80ddee5c711c861950ae60d1b882803cb6c776598936d498c3a800fd1091005638efa23dab3eecd92c8a03734dec8f078e172d000313164f613f02ee24bda86e67adbcf618137a7ec3cdecf7829a8bf2546f62235d92c14ad5b39c1536d923dd579520055b1f89ef17240b89a616caeccbaff0db4d8fa087b5b2c7cadfe4507e0d351f5b045a5e401db68a8186f78edce6be621dbc5ba76b0ff3f406161b170354ca24d128d3a8bd02b7bafc1085b3dab482eaab63f1f165bb0d2d28f70bc9eee4e1fe31d73d12224363562152df7123f1977083534f8ae502984d41c593433be1936ed3296c5153dec58811d603efa95e4d895b9c8ae96af097a644dbdd0bb0aa8d3711bb8b494f3da0fcf48ede0ced49c031ee191e056426dd86276d69640fb1013747022d5b998b4fa7256a0474d2a9e183bd733d335d7208105b1c8676419d1f0252065c7de75c55cb0d221dc8e0532112403c215933ee84e654ebe4a09b34e4c747b34232344c2d3bf83ab53ee7b85f4a3f88914fe79a4f15c4c98a3ec126591591b0e6167e2544523e9070e830d792c78c693d2e6981015dea70a83982042d67a7f5229d106851c32933597e03ca171bc27c2a61380b8e58c41dd9bb808b4b308ab5ce45ba022048e02d89ca1a329f5a9cefb861ab3cd0a05236d58113b47592b0389ca6416b92ebbb367a3a41203d0baba90e8046412b7c23bb027e7cd656cbc864e38272545f66b712fb6ab080f972cd09c92c615a04ada2e24c74c1320ac02fc9ec077e5d5ba621aab5747bee120f5aaa9cb6ca91a162f06415f152cdc79f4117e0cc6fe9bfe53e7e396d5f21ad4328caec1141baddb16a7305ba49bd427e835dc23baae24e559ed66c215662ab3d517d87daf6dc4d2b4c8a3a0c77d65a9df67e756b7b719dc262b15891ccd9545919a5c63577be273276fc39df50dd9388e09fe3bcf1366df9df85fc9b8ef26651c439b76d73c40566fa035736d598ea1d77e1051a785d1717fedae7c687307b277e195555fa6ccaea28c57e07d84f51fb5ef64df87f62c651264ac4b268d116924f0ce008b6355f9901d74d7e8f0b440f337e51cb83fefc278da96edc32fec1012eb955493d8081885ec3dbe94e927f2b490b1bec6fc4b125008153706559a38e147e54d20917ab9d6bb5edf0550f5de539c7fbef949019b339f454be50a056223ccb014bbc078f04c01c8aea18ec58befeb4143c4fe2b6d23f487ff30309ef30986876c2073b7cd3589af3407ed921654683739551fe0cb65959181033b2d2de8482f9dfe9279a2febdba75f7523ae92cd89345494c41a3371f0d4c501f817aa751dc2e4c42597cf72baad04076cebbaa100fea0b0423eee35e32aa60831edb4c772dbe08918a9ede0450dd76430d47b3ebe097b99adaedf6b17dd649c25b77a81c0b1c1cf8447b69638be8872a9f17007f988cc5a555048a727078b5de08ad71156c0446764ef687e2f4bb6fcfe104c5dc862b5e78df61beeec1b1a026dc7283f65035cd5026624daec53c7b025953d9c0266d3e6f02f11931a088e47484230c00c3d6f3b72d095a66b1f87204e739f1b6d4716bb863b6b125e26c7c8e07596538f59b48cbd41250eca1efa85a9e185bc2d8a20787cb66be568f59ddc34a3b207a874d7aa4351da7df89a2ff1ff22bb9d69c177195686bcdc2f04724c8764696f7ef4a75a4e0dd875f07431883da3f9f9cbbc9950e57cfa7bb00b2b8ce162c807cc4d88dabdb91549d2d9a91b74ad5e518a2efae1b0e582423a5fb29e9aa792a2703505b578fd8c73f4f77c485916ede77a9f36be6a12391de7fdf73fdf1db6766ef38c23902be933c49ee8917858e8ee29559a2c2dec20e4a5ad650c52f97d1648f12733ef65466ce94b1268fbec2aef918c4d20886a373b6d3b5fa8b9dcca9c35033e2165803b55a34d87e012cb402ce79ae6de18a4cf57a89ad8dc698bf321a4cb0af1a4d5cdea3da832e3b44f3a47798fda07fc229ac89dde9d4f57b2f8305999400e69d2c5c8caa1bc98ccc833ccbae1682c6993f131a03466303cbc294ba22add02036f73149b2db98688d6462041be3d274d5217c7a6891694af9e2a626f8ec4d4ccb8d4946ef18904ad47a84c7a619e87e773126f61e30d5ced5232e14b6abfb4d44ad05ee999d4d54d2c751cd7c5c9cacfac6f7d47b9f97560038b0baa5e635b553a84f3cbeb04632a9abeb6740ea4ce627f60cd5e6aa71a7e2c205bc90adeb3d61bcd66f17d1296e0cd383b1fc38ad4e2cfd05d4a4ee7371f756eeaa0525bd1673f0070f9f5ae099a29e4c325015d9372ae27635d2eab686be9dd96ec2c014acd8123fea35f97d7ecb5e9bc8359b397e8c0c3b90658aa9fabdc8f9f4bd565dd6e20fc871b658fc3e5944efa972d80303d7a66dfd159e904dbfd894009291ddafdfe3a5c502755b5a3dbd89792b8e5633d6f81d23b63f599fc1f29d679f64afa697260e1e6a10ec075355b58ed9007408a379d3c890bcdbea8604e51c0520be1d8c1f10b0a91d40d7ea9ef9ca2c283153b902700635ce65c3ab69cf3107e2017d8a72160f1794136185afd57c743af49d84fb535fef777e6c6f2a18a04fce9618778c832a608861bc7dd7eab315644f998595d07c5a41bac3e7270a871257802d26f42c454c797414e0d5de88ad611c5e3a05ce76df1348e26509f52b7b125eebe5ce1ec0245bf2e715f2abe2626a42f37ed65c8ac086be9d169cc31adab8da3fc2e2dad0519c0a68cd6cb202c99f5ee48a65c6ac27b0d489faf3083fed64ee5b078d0092d5939fcd01b2a71dbf007367fcc56e2f62904be4097fd7c639caa8a390a59be7a6e46aae93667a26654fe461c043bfec083f065726e66b5f12d9e7013500068de45a49a87dc2d0933287e7575c9f3914071c110c9a8f492c67fc48784aea5c22d1ce26f3281d6deb14da66d69ef6ec8e9080ef0d543bc6ce58b177c01ade4232688fb252d6f3e1ceba283d1d59ae82a15b464746df9bec915f00a184469b846a19a7968d9b38e476e3aef47ae41ed8a7d4d3cf744da190747ee3266ff689428d372545f28e40713615b7f886e1f294056a95f3e50e1afa211ca3a2f4a04535646bf9f4cb709a5ecf437807072cc8b77fbed51e01bfac16c73876a5d2d4916555f7084a772847356855c69c193d8db2d37d8c1a5e6adb2169ddd3bd5b7a2cbf9418d00f174295381d51733924bfdc46017250df28679d6b378cc316c67198b57634f46d5f9c169fde3715ddbeb792fd2c1c74a7f97101d373351037c73af2643b8952665eca13f874aace302f60681e12523b6de8f5c5750d4fb480fe0cad1546af7c88426319baafceccca2b49fe96d2ff446a4867cc0ff6ef7845c93c6a6f2bbeac1e31d5d95618c990646a86b691ba387f6b31f75a69fc68e52c7efd0a1de03be8455514231e04bf7370ab6b49d931f4b581b52ca6e0b104bbd07013651d048dcc5271bce8de0f855c4d289a70b19fa616cddbe27b217116d3a52dfb590df3f932e9fee79e34b42844d4efe8a31844694ffaaf811d72b07ab4a281d75c4dd73f7fc82f9beb49e9ef70c72c31c6b7802ad77d25b405a002d63ba30c078aac97ad8cb9ac85299024c6dba7912c3844ed27097e6852a4567d332560e54bb835d2bfbc31a9bc181f8273b878349c9921c6cbd5466fdea1da224f5361c0c50c5fb4f6ccd9f15f6febea4d24265131cc991d85a5d3bf28ce78dd79a5ddff2b507c8b3d38ece81b386f428ed6cf9258657e7647dfa8a8b0aef5ce051208bf44e2d973885f72835f55458ed6cfcbcb75d998be711af59990eae176c637439b79ad8c41b1b71858a90e65aae941d92a2e9616784ad513321da97a2d1036d083c41eeacb374ca45904d6f205101b5e894cd3f0e2d7b8a737a07802a3a74eb4db792b204f69bf3278fff2538878634b84746b51a87d3364c64a860c568d82757761773b137a1f92fdb012c4f38add32dfd4cf0a6b6ccb8e7958abf0d8ab7cbe7c32919e3bf5618096af980cac33df3eae62fe9bb36eda0aac74dd81fd562113e2515c3d4aa6daec990506bf3b958888119d0b1dc215d5e5418eba9778bd53faa7e9f732ce01f3056fd5b89cafe357648592287c990fd5326df9eebb9452b69e0a94cca107d8ae2e72bca993a08c3531791762f52baef6486848d462854357cdd8788b20383b095d58a35b9ab04380629d8a10707b862bff7024b90555233f0b05848dc1c5145906e90b63b243bd7491673a55d9234a928e9bb37ed35afa3c9a4b936ac42ccb1d1dcb5abe7cc21717fa1025525d24f4eb745f1fe0b3584448e35ef9916fef74cfa511bf189591b2cabb0ff81306d13a37eb8578d183ebc7200b3e28d2c2f39e56ba76078d60192d806c972f4ad6077be01111b412587760e65105faa0d5cb2326f99687ceb7617e2d4d45b918dc581223f0909eb519856748849fac49a2bb4edf727a7b2edf6e4454f526d02ed459d7805b68142c25dfc5544ca04dc7fb3c45418eee7609712f5cdaeb3aa3c6936cdd1f1e0d1486dbe2f3ee05f6856727ebe888e797d834beafb969a90f950198b5ee0ec876172c290466118f8dee069bbdb463040ab8840b842bf2d1637b03040994ccf1b8180131c755c623e65a03c96172bd15ddf0f90dba2ac60800252c193547b0b6beb63c3542f95aa373bda1941edc0d441d6d758bac9a1d7301f51009aab487f1b2cb3935a5c8935e8f2ee2ee3e2dee90f06c6ae693f715b9480219c59abc458e6aee1a210767d26bd5c24f8a4fc6be59011417aac0eaac7ad5715c5942fe87fd341c842544f3e394bebce42c5667a511a0a363a89462aa18595ea6b51f86dd48db166c078adaf2d127b87e6ac9cb6826fb0010d869bf03f2afaee97b6a064fedf3cc0806d75060cd4c86d1014a47b9b81303d3c2716b8c0fa30193393dc1ddda76426fad6c03a41192f6c7cfaaa8e37e9e3eb3cc0c6bdaa721b66a9fab82e6c0fdf964286e4aca0d66201c0adca7c33fae61bba1be0c874f3b495f3f7857cb156ea2538e4101f89e708b4554444e95096a0a40fc78c35be82d843e2d2a3adb8d78d662cabedba523079fb6d52df3bb710d268d7cf32a6a0a88d4f80628c0ac8a447f3fc5e0d091514ca2c64680b7da00d9196adc481f61e281381f748f3b3b0d78f1c77fef19ce0b7466e14bde12a3a9bc5cb225d81fbef39cc1b3c5668e533a8a82375f6fb46dd8413c119a4366314350587685250b3799f0629e75e6a9ec79db0d589849401019fd5074a4ae910fd665c2736974f4ada686655329136e385a46c82d6929b9e01babecb45e780d444855a521ddf1c0f8dae1c1db21a72af45b82ca64939150a87af4e9b1a6d4ed11d547076a93853935f4a12cb388d7fbc5c054353d9ea5ac028dc4a2613b28014f52eda3610347babb083372240b4253071b20862355629a52e9d6342febd19d4ed645fcd1e6f6a1ad089e0a93c079eaf573890e5844d2c94e40549cae5988d5e68a7b4d7ce9f0a6d8917678cc0b9e416e88c7155eadd5a2b2d5a032dc2e409c7f587aee7d641a0c9cdff084708c0066045674e59267ee7b6e3e127fbfe1f3451f4396f568cb46856da5ea6af1bc5698e49c216a897dfd07771d5c4ffcee4ca502fd8df2b81972e5cae58b59b9c7a3368e43f2f9e7c86d68995c536a91b990c87fe90dba70b1cbd3d2396a4291c3d555561f5ec1acbca8f4922083603c94fd0f41ef5b9392ce42a5535829de651bad14cb05914f0e31e3e606728b823dfdc091a3d8d427f7aefa21bbb59f67dbaf0d05ebb5a55d50dd06fbcc5dfefb41cea425c19559d4423fb13d3174a040c3cb7ec86e4cdfaa253031c0af1328ba1570684d2aa3d534a016416a18800", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0xde2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.526874089s ago: executing program 7 (id=1572): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "cf"}, @global=@item_4={0x3, 0x1, 0x3, "367c35f0"}]}}, 0x0}, 0x0) 2.450475173s ago: executing program 2 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000380), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 2.296343582s ago: executing program 2 (id=1574): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) preadv(r3, &(0x7f0000001540)=[{&(0x7f00000026c0)=""/4110, 0x100e}], 0x1, 0x0, 0x10) 2.070432645s ago: executing program 2 (id=1575): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000004200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x2, 0x0, 0x2, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) 2.001234538s ago: executing program 1 (id=1577): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.982216109s ago: executing program 8 (id=1579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x14484, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0, 0x2ff, &(0x7f0000000540)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 1.79624758s ago: executing program 2 (id=1580): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.577878002s ago: executing program 8 (id=1581): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 976.503026ms ago: executing program 1 (id=1582): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) fallocate(r0, 0x0, 0x8, 0x1101f0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendfile(r1, r2, 0x0, 0x1000000201001) 515.353751ms ago: executing program 7 (id=1583): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[], 0x8b, 0x2cb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000002c0)='./bus\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) 488.229163ms ago: executing program 1 (id=1584): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000000)=""/138, 0x4a, 0x8a, 0x1}, 0x28) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2600000003"], 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0x0) 487.487803ms ago: executing program 8 (id=1585): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)={[{@autodefrag}, {@clear_cache}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x2d]}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x146) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000000)={0x50d017, 0x0, '\x00', 0x1, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x1e4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000003480)={{r1}, 0x0, 0x2, @inherit={0x48, 0x0}, @subvolid=0x3}) 120.021333ms ago: executing program 7 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 0s ago: executing program 2 (id=1587): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc02, &(0x7f0000000600)=ANY=[], 0x4, 0x1514, &(0x7f0000001bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): device bridge_slave_1 entered promiscuous mode [ 192.665777][ T7404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.691423][ T7404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.752439][ T4337] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 192.794798][ T4337] airspy 3-1:0.0: Registered as swradio24 [ 192.842450][ T4337] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 192.850357][ T7404] team0: Port device team_slave_0 added [ 192.879851][ T4337] usb 3-1: USB disconnect, device number 16 [ 192.895166][ T7440] input: syz0 as /devices/virtual/input/input20 [ 192.907924][ T4389] Process accounting resumed [ 192.911200][ T7404] team0: Port device team_slave_1 added [ 193.029949][ T7404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.059765][ T7404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.170838][ T7404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.201905][ T7404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.213117][ T4606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.221436][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.221956][ T4283] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 193.239707][ T4283] Bluetooth: hci4: Injecting HCI hardware error event [ 193.248745][ T4283] Bluetooth: hci4: hardware error 0x00 [ 193.305821][ T7450] loop7: detected capacity change from 0 to 512 [ 193.316600][ T7404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.350506][ T7450] EXT4-fs: Ignoring removed nobh option [ 193.455991][ T7450] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 193.464761][ T7404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.466091][ T7450] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.557746][ T7460] loop2: detected capacity change from 0 to 1024 [ 193.588975][ C0] Unknown status report in ack skb [ 193.675843][ T7460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 193.752734][ T7404] device hsr_slave_0 entered promiscuous mode [ 193.765319][ T26] audit: type=1800 audit(1769478842.235:52): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.946" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 193.786023][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 193.804133][ T6329] EXT4-fs (loop7): unmounting filesystem. [ 193.822465][ T7404] device hsr_slave_1 entered promiscuous mode [ 193.845972][ T7404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.916435][ T7404] Cannot create hsr debugfs directory [ 193.962323][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 194.254638][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257252][ T4606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.260993][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.286314][ T3598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.298370][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.344055][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.355110][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.366592][ T3598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.553380][ T7404] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 194.563783][ T7479] loop7: detected capacity change from 0 to 8192 [ 194.586272][ T7404] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 194.623590][ T7404] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 194.634385][ T7404] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 194.639892][ T7479] loop7: p1 p3 p4 [ 194.644866][ T7479] loop7: partition table partially beyond EOD, truncated [ 194.687944][ T7479] loop7: p1 start 393217 is beyond EOD, truncated [ 194.708810][ T7479] loop7: p3 size 395700 extends beyond EOD, truncated [ 194.734426][ T7479] loop7: p4 start 117571584 is beyond EOD, truncated [ 195.011071][ T7404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.054844][ T7404] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.093255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.106308][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 195.121907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.184813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.212013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.236342][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.243626][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.272657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.289087][ T4283] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 195.294149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.316081][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.323292][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.369162][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.398466][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.453266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.472056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.488050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.489095][ T7497] loop1: detected capacity change from 0 to 32768 [ 195.503993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.523517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.553425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.583552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.601500][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.622442][ T7404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.643368][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.656849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.672126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.675707][ T7514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 195.683470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.719481][ T7497] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 195.850635][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 195.919975][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 196.243933][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.298739][ T4272] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 196.370636][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.488980][ T4272] usb 8-1: Using ep0 maxpacket: 8 [ 196.495929][ T4272] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 196.549929][ T4272] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.594664][ T4272] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.638692][ T4272] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.685820][ T4272] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.743464][ T4272] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.807519][ T4272] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.062410][ T4272] usb 8-1: GET_CAPABILITIES returned 0 [ 197.067010][ T7531] loop1: detected capacity change from 0 to 131072 [ 197.069573][ T4272] usbtmc 8-1:16.0: can't read capabilities [ 197.108287][ T7531] F2FS-fs (loop1): invalid crc value [ 197.118463][ T7404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.136161][ T7531] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.189763][ T7531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 197.198419][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.221598][ T7546] loop2: detected capacity change from 0 to 128 [ 197.317413][ T7546] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 197.424917][ T7546] hpfs: filesystem error: improperly stopped [ 197.449831][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.454585][ T7523] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 197.465054][ T22] usb 8-1: USB disconnect, device number 5 [ 197.491529][ T7546] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 197.538978][ T7546] hpfs: You really don't want any checks? You are crazy... [ 197.547899][ T7546] hpfs: hpfs_map_sector(): read error [ 197.567910][ T7546] hpfs: code page support is disabled [ 197.581032][ T7546] hpfs: hpfs_map_4sectors(): unaligned read [ 197.597722][ T7546] hpfs: hpfs_map_4sectors(): unaligned read [ 197.608955][ T7546] hpfs: filesystem error: unable to find root dir [ 197.702183][ T7546] hpfs: hpfs_map_4sectors(): unaligned read [ 197.720187][ T7546] hpfs: hpfs_map_sector(): read error [ 197.821452][ T4344] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 197.928767][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 198.028240][ T4344] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 198.048629][ T4344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.090683][ T4344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.122433][ T4344] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.196510][ T4344] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.216959][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.229958][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.238571][ T4344] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.283970][ T4344] usb 9-1: Manufacturer: syz [ 198.300702][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.316881][ T4344] usb 9-1: config 0 descriptor?? [ 198.323561][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.348705][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.379626][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.406006][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.457187][ T7404] device veth0_vlan entered promiscuous mode [ 198.501382][ T7404] device veth1_vlan entered promiscuous mode [ 198.596880][ T7404] device veth0_macvtap entered promiscuous mode [ 198.612631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.622267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.644606][ T7404] device veth1_macvtap entered promiscuous mode [ 198.654074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.663460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.710098][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.711367][ T7584] loop1: detected capacity change from 0 to 256 [ 198.737457][ T4344] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 198.746180][ T4344] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 198.748601][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.757348][ T4344] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 198.775871][ T4272] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 198.794267][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.811734][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.813445][ T7584] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 198.862511][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.893849][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.958657][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.960259][ T4272] usb 8-1: config 0 interface 0 has no altsetting 0 [ 198.978563][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.997962][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.006833][ T4272] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 199.028679][ T4272] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.047449][ T7584] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 199.068099][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.075834][ T4272] usb 8-1: config 0 descriptor?? [ 199.094095][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.110588][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.110741][ T26] audit: type=1326 audit(1769478847.585:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.2.981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ace39aeb9 code=0x0 [ 199.122261][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.199064][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.242472][ T7404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.261350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.278444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.324598][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.352261][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.369034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.392919][ T4344] usb 9-1: USB disconnect, device number 3 [ 199.414456][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.441076][ T4606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.442754][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.460885][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.470912][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.489501][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.499528][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.579091][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.592128][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.603569][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.631850][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.644887][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.656448][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.668982][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.679679][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.702311][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.718776][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.734368][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.763870][ T7404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.776606][ T7404] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.812030][ T7404] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.823502][ T7404] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.833897][ T7404] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.876910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.890213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.009298][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 200.122658][ T4272] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 200.135375][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.169910][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.251947][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.264742][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.282985][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.364513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.416068][ T7] usb 8-1: USB disconnect, device number 6 [ 200.511979][ T7619] device batadv_slave_1 entered promiscuous mode [ 200.542819][ T7619] device veth1_virt_wifi entered promiscuous mode [ 200.563084][ T7618] device veth1_virt_wifi left promiscuous mode [ 200.579179][ T7618] device batadv_slave_1 left promiscuous mode [ 201.180648][ T7636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.994'. [ 201.331385][ T7621] loop9: detected capacity change from 0 to 32768 [ 201.361430][ T7621] XFS: attr2 mount option is deprecated. [ 201.479427][ T7645] loop7: detected capacity change from 0 to 8192 [ 201.496517][ T7621] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 201.543266][ T7659] loop1: detected capacity change from 0 to 1024 [ 201.566143][ T7621] XFS (loop9): Mounting V5 Filesystem [ 201.634261][ T7659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.650813][ T7659] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.744308][ T7621] XFS (loop9): Ending clean mount [ 201.753054][ T7667] syz.2.1002 sent an empty control message without MSG_MORE. [ 201.800354][ T7668] EXT4-fs error (device loop1): ext4_free_blocks:6221: comm syz.1.1001: Freeing blocks not in datazone - block = 0, count = 16 [ 201.837918][ T7621] XFS (loop9): Quotacheck needed: Please wait. [ 201.911272][ T7659] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1001: bg 0: block 112: padding at end of block bitmap is not set [ 202.004514][ T7621] XFS (loop9): Quotacheck: Done. [ 202.046816][ T7659] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 202.074485][ T26] audit: type=1804 audit(1769478850.545:54): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.922" name="/newroot/0/file0/file1" dev="loop9" ino=6150 res=1 errno=0 [ 202.098679][ T7659] EXT4-fs (loop1): This should not happen!! Data will be lost [ 202.098679][ T7659] [ 202.128691][ T7659] EXT4-fs (loop1): Total free blocks count 0 [ 202.134826][ T7659] EXT4-fs (loop1): Free/Dirty block details [ 202.238397][ T7404] XFS (loop9): Unmounting Filesystem [ 202.240865][ T7659] EXT4-fs (loop1): free_blocks=0 [ 202.250076][ T7659] EXT4-fs (loop1): dirty_blocks=16 [ 202.255339][ T7659] EXT4-fs (loop1): Block reservation details [ 202.262619][ T7659] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 202.283999][ T7672] loop2: detected capacity change from 0 to 8192 [ 202.365333][ T7672] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.484240][ T7672] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 202.496560][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 202.570029][ T7672] REISERFS (device loop2): using ordered data mode [ 202.618786][ T3598] net_ratelimit: 5 callbacks suppressed [ 202.618803][ T3598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.641562][ T7672] reiserfs: using flush barriers [ 202.649190][ T4606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.657228][ T7672] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.723997][ T7672] REISERFS (device loop2): checking transaction log (loop2) [ 202.726436][ T7685] loop1: detected capacity change from 0 to 128 [ 202.759060][ T7672] REISERFS (device loop2): Using r5 hash to sort names [ 202.788449][ T7672] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 202.845979][ T7691] loop8: detected capacity change from 0 to 16 [ 202.884333][ T7689] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1007'. [ 202.923271][ T7691] erofs: (device loop8): mounted with root inode @ nid 36. [ 202.939039][ T7689] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 202.967793][ T7685] syz.1.1009: attempt to access beyond end of device [ 202.967793][ T7685] loop1: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 203.064790][ T7693] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3669, free_space(entry_count) 2 [ 203.168668][ T7693] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 203.199562][ T7693] REISERFS (device loop2): Remounting filesystem read-only [ 203.206832][ T7693] REISERFS error (device loop2): vs-5350 reiserfs_delete_solid_item: i/o failure occurred trying to delete [-1 2 0x1 IND] [ 203.409767][ T7693] REISERFS warning (device loop2): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 203.688989][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.222624][ T7704] loop9: detected capacity change from 0 to 32768 [ 204.267564][ T7704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.1014 (7704) [ 204.323947][ T7704] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.343010][ T7704] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 204.355325][ T7704] BTRFS info (device loop9): force clearing of disk cache [ 204.365821][ T7704] BTRFS info (device loop9): enabling auto defrag [ 204.388710][ T7704] BTRFS info (device loop9): enabling ssd optimizations [ 204.421362][ T7704] BTRFS info (device loop9): max_inline at 0 [ 204.443727][ T7704] BTRFS info (device loop9): enabling disk space caching [ 204.462327][ T7704] BTRFS info (device loop9): disk space caching is enabled [ 204.719610][ T7704] BTRFS info (device loop9): rebuilding free space tree [ 204.731041][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.766019][ T7704] BTRFS info (device loop9): disabling free space tree [ 204.802826][ T7704] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.865692][ T7704] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.071882][ T7772] netlink: 'syz.8.1028': attribute type 1 has an invalid length. [ 205.108203][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1028'. [ 205.129085][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.137985][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.149382][ T4606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.187104][ T7774] loop1: detected capacity change from 0 to 164 [ 205.321564][ T7774] rock: directory entry would overflow storage [ 205.331665][ T7774] rock: sig=0x66, size=4, remaining=3 [ 205.360794][ T7774] rock: directory entry would overflow storage [ 205.367935][ T7774] rock: sig=0x66, size=4, remaining=3 [ 205.473076][ T7404] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.769579][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.998584][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.050110][ T7777] loop7: detected capacity change from 0 to 32768 [ 206.087600][ T7777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1030 (7777) [ 206.165402][ T7777] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.169992][ T7804] 9pnet: p9_errstr2errno: server reported unknown error è [ 206.187058][ T7803] loop8: detected capacity change from 0 to 1024 [ 206.205074][ T7777] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 206.255404][ T7777] BTRFS info (device loop7): using free space tree [ 206.286535][ T7803] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 206.465730][ T7821] loop1: detected capacity change from 0 to 512 [ 206.500119][ T7821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 206.507810][ T7803] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.1038: inode #1684960047: comm syz.8.1038: iget: illegal inode # [ 206.510155][ T7821] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.638347][ T7803] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1038: error while reading EA inode 1684960047 err=-117 [ 206.652441][ T7803] EXT4-fs error (device loop8): ext4_xattr_block_set:2161: inode #15: comm syz.8.1038: bad block 113 [ 206.674048][ T7777] BTRFS info (device loop7): enabling ssd optimizations [ 206.810957][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 206.816944][ T26] audit: type=1800 audit(1769478855.285:55): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1030" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 206.821918][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1042'. [ 206.967756][ T6920] EXT4-fs (loop8): unmounting filesystem. [ 207.120323][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1042'. [ 207.162030][ T6329] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.533565][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'. [ 207.628484][ T7856] netlink: 'syz.2.1049': attribute type 10 has an invalid length. [ 207.848996][ T33] net_ratelimit: 1 callbacks suppressed [ 207.849014][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.991703][ T7856] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.024407][ T7865] loop1: detected capacity change from 0 to 1024 [ 208.189968][ T7865] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 208.257666][ T7865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.722114][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 208.889074][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.006850][ T7903] loop8: detected capacity change from 0 to 2048 [ 209.049283][ T4608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.110952][ T7903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.428636][ T4608] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.493908][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1070'. [ 209.568697][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 209.628860][ T4608] usb 2-1: Using ep0 maxpacket: 32 [ 209.638752][ T4608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.660024][ T4608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.684615][ T4608] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.697234][ T4608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.723615][ T4608] usb 2-1: config 0 descriptor?? [ 209.737788][ T4608] hub 2-1:0.0: USB hub found [ 209.772643][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 209.802316][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.825710][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 209.837130][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.841267][ T7938] loop9: detected capacity change from 0 to 512 [ 209.875887][ T7] usb 3-1: config 0 descriptor?? [ 209.914208][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 209.937933][ T7938] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 209.941092][ T4608] hub 2-1:0.0: 1 port detected [ 209.965715][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.024067][ T7943] loop7: detected capacity change from 0 to 1024 [ 210.034728][ T7938] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.084786][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.111080][ T7943] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 210.179971][ T26] audit: type=1800 audit(1769478858.655:56): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1075" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 210.236924][ T7943] EXT4-fs error (device loop7): ext4_xattr_set_entry:1616: inode #15: comm syz.7.1076: corrupted xattr entries [ 210.285589][ T7404] EXT4-fs (loop9): unmounting filesystem. [ 210.309045][ T7943] EXT4-fs error (device loop7): ext4_xattr_block_set:2161: inode #15: comm syz.7.1076: bad block 113 [ 210.335691][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.356424][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.497277][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.527585][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.550914][ T6329] EXT4-fs (loop7): unmounting filesystem. [ 210.638888][ T4608] hub 2-1:0.0: activate --> -90 [ 210.687246][ T7959] loop7: detected capacity change from 0 to 2048 [ 210.729802][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.763883][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.792261][ T7959] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 210.846046][ T7959] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.037763][ T4608] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 211.054240][ T33] usb 2-1: USB disconnect, device number 14 [ 211.078854][ T4272] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 211.130517][ T7] gspca_vc032x: reg_w err -71 [ 211.136175][ T7] vc032x: probe of 3-1:0.0 failed with error -71 [ 211.158775][ T7] usb 3-1: USB disconnect, device number 17 [ 211.223336][ T6329] EXT4-fs (loop7): unmounting filesystem. [ 211.288856][ T4272] usb 10-1: Using ep0 maxpacket: 16 [ 211.309903][ T4272] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.338937][ T4272] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.376904][ T4272] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.421730][ T4272] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.459577][ T4272] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.468926][ T4272] usb 10-1: Product: syz [ 211.483201][ T4272] usb 10-1: Manufacturer: syz [ 211.487928][ T4272] usb 10-1: SerialNumber: syz [ 211.813391][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1086'. [ 211.942802][ T4272] usb 10-1: 0:2 : does not exist [ 212.046528][ T8001] loop8: detected capacity change from 0 to 256 [ 212.091289][ T8001] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.147117][ T8001] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 212.206465][ T8001] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 212.496408][ T6920] Trying to write to read-only block-device loop8 [ 212.545453][ T6920] Trying to write to read-only block-device loop8 [ 212.608855][ T6920] Trying to write to read-only block-device loop8 [ 212.820004][ T4272] usb 10-1: USB disconnect, device number 2 [ 212.828178][ T8018] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1096'. [ 213.396465][ T8009] loop1: detected capacity change from 0 to 32768 [ 213.553943][ T8009] XFS (loop1): Mounting V5 Filesystem [ 213.670306][ T8009] XFS (loop1): Ending clean mount [ 213.920225][ T11] device hsr_slave_0 left promiscuous mode [ 213.930117][ T11] device hsr_slave_1 left promiscuous mode [ 213.970596][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.006494][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.042754][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.072180][ T4266] XFS (loop1): Unmounting Filesystem [ 214.076413][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.120285][ T11] device bridge_slave_1 left promiscuous mode [ 214.137924][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.165529][ T11] device bridge_slave_0 left promiscuous mode [ 214.193195][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.258059][ T11] device veth1_macvtap left promiscuous mode [ 214.277461][ T11] device veth0_macvtap left promiscuous mode [ 214.295311][ T8056] loop8: detected capacity change from 0 to 32768 [ 214.302199][ T11] device veth1_vlan left promiscuous mode [ 214.308121][ T11] device veth0_vlan left promiscuous mode [ 214.317851][ T8056] XFS: noikeep mount option is deprecated. [ 214.341641][ T8056] XFS: ikeep mount option is deprecated. [ 214.347422][ T8056] /dev/loop8: Can't open blockdev [ 215.780077][ T8099] loop1: detected capacity change from 0 to 64 [ 215.949124][ T8102] loop8: detected capacity change from 0 to 32768 [ 216.066256][ T4260] blk_print_req_error: 2 callbacks suppressed [ 216.066274][ T4260] I/O error, dev loop8, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.209042][ T11] team0 (unregistering): Port device team_slave_1 removed [ 216.305737][ T11] team0 (unregistering): Port device team_slave_0 removed [ 216.476024][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.551457][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.074143][ T11] bond0 (unregistering): Released all slaves [ 217.571645][ T8128] Invalid ELF header len 1 [ 217.708825][ T22] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 217.852875][ T4608] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 217.900397][ T22] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 217.928870][ T22] usb 10-1: config 0 has no interface number 0 [ 217.959005][ T22] usb 10-1: config 0 interface 41 has no altsetting 0 [ 218.000154][ T22] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 218.020247][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.048573][ T22] usb 10-1: Product: syz [ 218.050116][ T4608] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.052856][ T22] usb 10-1: Manufacturer: syz [ 218.052874][ T22] usb 10-1: SerialNumber: syz [ 218.079206][ T22] usb 10-1: config 0 descriptor?? [ 218.114864][ T4608] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.115253][ T8145] loop2: detected capacity change from 0 to 128 [ 218.151632][ T4608] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.168960][ T4608] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.187505][ T4608] usb 9-1: SerialNumber: syz [ 218.411993][ T4608] usb 9-1: 0:2 : does not exist [ 218.488457][ T4608] usb 9-1: USB disconnect, device number 4 [ 218.560184][ T46] kworker/u4:3: attempt to access beyond end of device [ 218.560184][ T46] loop2: rw=1, sector=129, nr_sectors = 1 limit=128 [ 218.596259][ T46] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 218.612239][ T46] kworker/u4:3: attempt to access beyond end of device [ 218.612239][ T46] loop2: rw=1, sector=130, nr_sectors = 1 limit=128 [ 218.633446][ T46] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 218.644496][ T8136] loop7: detected capacity change from 0 to 32768 [ 218.689563][ T46] kworker/u4:3: attempt to access beyond end of device [ 218.689563][ T46] loop2: rw=1, sector=131, nr_sectors = 1 limit=128 [ 218.713367][ T8136] [ 218.713367][ T8136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.713367][ T8136] [ 218.718567][ T46] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 218.754255][ T46] kworker/u4:3: attempt to access beyond end of device [ 218.754255][ T46] loop2: rw=1, sector=132, nr_sectors = 1 limit=128 [ 218.814617][ T46] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 218.845060][ T46] kworker/u4:3: attempt to access beyond end of device [ 218.845060][ T46] loop2: rw=1, sector=133, nr_sectors = 1 limit=128 [ 218.849703][ T8136] ERROR: (device loop7): diWrite: ixpxd invalid [ 218.849703][ T8136] [ 218.895459][ T46] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 218.895501][ T22] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 218.908909][ T46] kworker/u4:3: attempt to access beyond end of device [ 218.908909][ T46] loop2: rw=1, sector=134, nr_sectors = 1 limit=128 [ 218.961661][ T46] Buffer I/O error on dev loop2, logical block 134, lost async page write [ 218.962661][ T8136] ERROR: (device loop7): txCommit: [ 218.962661][ T8136] [ 219.017428][ T46] kworker/u4:3: attempt to access beyond end of device [ 219.017428][ T46] loop2: rw=1, sector=135, nr_sectors = 1 limit=128 [ 219.084655][ T46] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 219.124586][ T46] kworker/u4:3: attempt to access beyond end of device [ 219.124586][ T46] loop2: rw=1, sector=136, nr_sectors = 24 limit=128 [ 219.188333][ T22] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 219.255008][ T11] ERROR: (device loop7): diWrite: ixpxd invalid [ 219.255008][ T11] [ 219.268709][ T22] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 219.279471][ T11] ERROR: (device loop7): txCommit: [ 219.279471][ T11] [ 219.298663][ T22] CoreChips: probe of 10-1:0.41 failed with error -71 [ 219.325629][ T11] jfs_write_inode: jfs_commit_inode failed! [ 219.345235][ T22] usb 10-1: USB disconnect, device number 3 [ 219.347278][ T6329] [ 219.347278][ T6329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.347278][ T6329] [ 219.396301][ T6329] [ 219.396301][ T6329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.396301][ T6329] [ 220.086717][ T8148] loop1: detected capacity change from 0 to 65536 [ 220.237725][ T8148] XFS (loop1): Mounting V5 Filesystem [ 220.290699][ T22] kernel write not supported for file bpf-prog (pid: 22 comm: kworker/1:0) [ 220.430462][ T8148] XFS (loop1): Ending clean mount [ 220.477471][ T8148] XFS (loop1): Quotacheck needed: Please wait. [ 220.674372][ T8148] XFS (loop1): Quotacheck: Done. [ 220.791460][ T8222] netlink: 'syz.9.1150': attribute type 3 has an invalid length. [ 220.844237][ T8222] netlink: 'syz.9.1150': attribute type 8 has an invalid length. [ 220.870135][ T8222] netlink: 'syz.9.1150': attribute type 4 has an invalid length. [ 220.898285][ T8222] netlink: 'syz.9.1150': attribute type 7 has an invalid length. [ 220.916750][ T4266] XFS (loop1): Unmounting Filesystem [ 220.928442][ T8222] netlink: 199012 bytes leftover after parsing attributes in process `syz.9.1150'. [ 221.322277][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1155'. [ 221.327400][ T8232] loop2: detected capacity change from 0 to 2048 [ 221.413332][ T8232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.918447][ T8246] loop2: detected capacity change from 0 to 512 [ 221.986360][ T8246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.050835][ T8246] EXT4-fs (loop2): 1 truncate cleaned up [ 222.104646][ T8246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.606504][ T4272] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 222.748937][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 222.847668][ T4272] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.900319][ T4272] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 222.962323][ T4272] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.982410][ T4272] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 223.011572][ T4272] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 223.021619][ T8273] loop2: detected capacity change from 0 to 2048 [ 223.074354][ T4272] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.117705][ T8273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.119601][ T4272] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.204323][ T4272] usb 8-1: Product: syz [ 223.225772][ T4272] usb 8-1: Manufacturer: syz [ 223.258293][ T4272] cdc_wdm 8-1:1.0: skipping garbage [ 223.292479][ T4272] cdc_wdm 8-1:1.0: skipping garbage [ 223.314980][ T8280] device pim6reg1 entered promiscuous mode [ 223.337507][ T4272] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 223.373256][ T4272] cdc_wdm 8-1:1.0: Unknown control protocol [ 223.558829][ T4272] usb 8-1: USB disconnect, device number 7 [ 223.956948][ T26] audit: type=1326 audit(1769478872.425:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.9.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a1d9aeb9 code=0x7ffc0000 [ 224.044112][ T26] audit: type=1326 audit(1769478872.455:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.9.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f74a1d9aeb9 code=0x7ffc0000 [ 224.169285][ T26] audit: type=1326 audit(1769478872.465:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.9.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a1d9aeb9 code=0x7ffc0000 [ 224.216820][ T8276] loop8: detected capacity change from 0 to 40427 [ 224.310807][ T26] audit: type=1326 audit(1769478872.465:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.9.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a1d9aeb9 code=0x7ffc0000 [ 224.674893][ T4272] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 224.878767][ T4272] usb 8-1: Using ep0 maxpacket: 16 [ 224.885915][ T4272] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.937145][ T4272] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.980680][ T4272] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.992123][ T8318] loop9: detected capacity change from 0 to 4096 [ 225.011277][ T4272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.078111][ T4272] usb 8-1: Product: syz [ 225.089525][ T4272] usb 8-1: Manufacturer: syz [ 225.094278][ T4272] usb 8-1: SerialNumber: syz [ 225.352148][ T4272] usb 8-1: 0:2 : does not exist [ 225.370345][ T4272] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 225.473396][ T4272] usb 8-1: USB disconnect, device number 8 [ 225.664192][ T8342] ntfs3: loop9: mft corrupted [ 225.718166][ T8318] ntfs3: loop9: mft corrupted [ 225.795512][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.915213][ T8345] loop1: detected capacity change from 0 to 4096 [ 225.998716][ T8345] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 226.115896][ T8353] loop7: detected capacity change from 0 to 2048 [ 226.160316][ T8353] loop7: p3 < > p4 < > [ 226.164668][ T8353] loop7: partition table partially beyond EOD, truncated [ 226.189441][ T8353] loop7: p3 start 4284289 is beyond EOD, truncated [ 226.863889][ T8349] loop2: detected capacity change from 0 to 32768 [ 226.868003][ T8374] loop1: detected capacity change from 0 to 16 [ 226.897489][ T8349] XFS (loop2): Mounting V5 Filesystem [ 226.984282][ T8349] XFS (loop2): Ending clean mount [ 227.002641][ T8374] erofs: (device loop1): mounted with root inode @ nid 36. [ 227.134093][ T26] audit: type=1800 audit(1769478875.605:61): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1188" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 227.341929][ T4268] XFS (loop2): Unmounting Filesystem [ 227.608863][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 227.608898][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 228.179162][ T7] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 228.328455][ T8429] netlink: 'syz.2.1200': attribute type 12 has an invalid length. [ 228.358019][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 228.398716][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 228.406415][ T7] usb 8-1: config 4 has an invalid interface number: 51 but max is 0 [ 228.419154][ T8429] netlink: 'syz.2.1200': attribute type 12 has an invalid length. [ 228.442840][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 228.449164][ T7] usb 8-1: config 4 has no interface number 0 [ 228.490316][ T7] usb 8-1: config 4 interface 51 has no altsetting 0 [ 228.521248][ T7] usb 8-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 228.547393][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.578987][ T7] usb 8-1: Product: syz [ 228.589054][ T7] usb 8-1: Manufacturer: syz [ 228.598963][ T7] usb 8-1: SerialNumber: syz [ 228.628101][ T7] upd78f0730 8-1:4.51: upd78f0730 converter detected [ 228.664051][ T7] usb 8-1: upd78f0730 converter now attached to ttyUSB0 [ 228.877404][ T7] usb 8-1: USB disconnect, device number 9 [ 228.904676][ T7] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 228.928754][ T22] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 228.946056][ T7] upd78f0730 8-1:4.51: device disconnected [ 229.125746][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 229.133049][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.165935][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.191033][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 229.218099][ T22] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 229.245998][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.283015][ T22] usb 3-1: config 0 descriptor?? [ 229.354104][ T8448] loop9: detected capacity change from 0 to 32768 [ 229.551305][ T8448] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 229.709572][ T8459] nbd8: detected capacity change from 0 to 8 [ 229.713567][ T8461] input: syz0 as /devices/virtual/input/input22 [ 229.720432][ T22] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000E/input/input23 [ 229.776767][ T7404] ocfs2: Unmounting device (7,9) on (node local) [ 229.862823][ T8462] block nbd8: shutting down sockets [ 229.955583][ T8455] loop1: detected capacity change from 0 to 32768 [ 229.965091][ C1] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.974239][ C1] Buffer I/O error on dev nbd8, logical block 0, async page read [ 229.986551][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.996491][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 230.007756][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.016900][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 230.025247][ T4480] ldm_validate_partition_table(): Disk read failed. [ 230.032604][ T22] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 230.045132][ T4480] Dev nbd8: unable to read RDB block 0 [ 230.046816][ T8455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1218 (8455) [ 230.056050][ T22] usb 3-1: USB disconnect, device number 18 [ 230.096560][ T4480] nbd8: unable to read partition table [ 230.158176][ T8455] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.199677][ T4480] nbd8: partition table beyond EOD, truncated [ 230.201385][ T8455] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 230.256309][ T8475] loop7: detected capacity change from 0 to 1024 [ 230.273110][ T8455] BTRFS info (device loop1): turning on sync discard [ 230.337621][ T8455] BTRFS info (device loop1): setting nodatacow, compression disabled [ 230.408873][ T8455] BTRFS info (device loop1): turning off barriers [ 230.415662][ T8455] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 230.487973][ T8471] fido_id[8471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 230.538632][ T8455] BTRFS info (device loop1): trying to use backup root at mount time [ 230.553905][ T8455] BTRFS info (device loop1): metadata ratio 32769 [ 230.588894][ T8455] BTRFS info (device loop1): max_inline at 0 [ 230.595026][ T8455] BTRFS info (device loop1): using free space tree [ 230.656915][ T8482] loop8: detected capacity change from 0 to 512 [ 230.750377][ T8482] EXT4-fs: Ignoring removed orlov option [ 230.854536][ T8482] /dev/loop8: Can't open blockdev [ 230.984718][ T8487] loop9: detected capacity change from 0 to 4096 [ 231.048921][ T8487] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 231.094483][ T4347] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 231.139098][ T8455] BTRFS error (device loop1): failed to load root extent [ 231.148971][ T8455] BTRFS warning (device loop1): try to load backup roots slot 1 [ 231.182290][ T46] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 231.203390][ T8455] BTRFS warning (device loop1): couldn't read tree root [ 231.218011][ T8455] BTRFS warning (device loop1): try to load backup roots slot 2 [ 231.252020][ T8455] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 231.307739][ T8455] BTRFS warning (device loop1): couldn't read tree root [ 231.322454][ T8455] BTRFS warning (device loop1): try to load backup roots slot 3 [ 231.339514][ T4389] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 231.449237][ T8455] BTRFS info (device loop1): enabling ssd optimizations [ 231.457134][ T8455] BTRFS info (device loop1): rebuilding free space tree [ 231.521812][ T8455] BTRFS info (device loop1): checking UUID tree [ 231.540118][ T4389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.589867][ T4389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.622704][ T4389] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.669483][ T4389] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.738272][ T4389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.774380][ T4389] usb 9-1: config 0 descriptor?? [ 231.845681][ T8490] loop7: detected capacity change from 0 to 40427 [ 231.857278][ T8490] F2FS-fs (loop7): invalid crc value [ 231.881279][ T8490] F2FS-fs (loop7): Found nat_bits in checkpoint [ 231.993067][ T26] audit: type=1800 audit(1769478880.465:62): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1218" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 232.005857][ T8531] loop9: detected capacity change from 0 to 128 [ 232.057119][ T8490] F2FS-fs (loop7): Start checkpoint disabled! [ 232.096663][ T26] audit: type=1800 audit(1769478880.565:63): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1218" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 232.098619][ T8490] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 232.206749][ T4389] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 232.232543][ T4389] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 232.283876][ T4389] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 232.455095][ T4266] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.819096][ T4608] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 233.011952][ T4608] usb 10-1: Using ep0 maxpacket: 8 [ 233.018898][ T4608] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 233.071809][ T4608] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.117448][ T4608] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.179082][ T4608] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.212838][ T4608] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.271795][ T4608] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.340418][ T4608] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.533908][ T4347] kworker/u4:5: attempt to access beyond end of device [ 233.533908][ T4347] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 233.589056][ T4608] usb 10-1: GET_CAPABILITIES returned 0 [ 233.594693][ T4608] usbtmc 10-1:16.0: can't read capabilities [ 233.698726][ T22] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 233.857957][ T126] usb 10-1: USB disconnect, device number 4 [ 233.903105][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.928859][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.952450][ T22] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 233.966920][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.976907][ T22] usb 2-1: config 0 descriptor?? [ 234.159186][ T4337] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 234.352475][ T4337] usb 8-1: Using ep0 maxpacket: 8 [ 234.359925][ T4337] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 234.372360][ T33] usb 9-1: USB disconnect, device number 5 [ 234.391437][ T22] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 234.409129][ T22] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 234.418778][ T22] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 234.431038][ T4337] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 234.448841][ T22] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 234.456200][ T4337] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.465080][ T22] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 234.482638][ T4337] usb 8-1: Product: syz [ 234.486944][ T4337] usb 8-1: Manufacturer: syz [ 234.494952][ T22] elecom 0003:056E:00FC.0010: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 234.513074][ T4337] usb 8-1: SerialNumber: syz [ 234.526518][ T4337] usb 8-1: config 0 descriptor?? [ 234.543542][ T4337] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 234.594617][ T22] usb 2-1: USB disconnect, device number 15 [ 234.796074][ T8593] fido_id[8593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 234.851666][ T33] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 234.881442][ T8600] bridge0: port 3(syz_tun) entered blocking state [ 234.889124][ T8600] bridge0: port 3(syz_tun) entered disabled state [ 234.909359][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 234.996989][ T8600] device syz_tun left promiscuous mode [ 235.050094][ T33] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.071845][ T33] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.102921][ T33] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 235.168710][ T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.246583][ T33] usb 9-1: config 0 descriptor?? [ 235.352956][ T8610] nbd1: detected capacity change from 0 to 8 [ 235.400892][ T8614] block nbd1: shutting down sockets [ 235.445231][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.454372][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 235.467160][ T92] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.476380][ T92] Buffer I/O error on dev nbd1, logical block 0, async page read [ 235.484747][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.494217][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 235.505702][ T4258] ldm_validate_partition_table(): Disk read failed. [ 235.512550][ T4258] Dev nbd1: unable to read RDB block 0 [ 235.518346][ T4258] nbd1: unable to read partition table [ 235.524247][ T4258] nbd1: partition table beyond EOD, truncated [ 235.569452][ T4337] gspca_zc3xx: reg_w_i err -71 [ 235.690282][ T33] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 235.706068][ T33] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 235.738025][ T33] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0011/input/input25 [ 235.797871][ T33] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 235.969430][ T4272] usb 9-1: USB disconnect, device number 6 [ 236.141081][ T8621] fido_id[8621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 236.188663][ T4337] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 236.197447][ T4337] gspca_zc3xx: probe of 8-1:0.0 failed with error -71 [ 236.230614][ T4337] usb 8-1: USB disconnect, device number 10 [ 236.474844][ T8611] loop2: detected capacity change from 0 to 40427 [ 236.534053][ T8633] netlink: 51 bytes leftover after parsing attributes in process `syz.7.1251'. [ 236.534523][ T8611] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 236.638857][ T8611] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 236.704207][ T8611] F2FS-fs (loop2): invalid crc value [ 236.730751][ T8611] F2FS-fs (loop2): Found nat_bits in checkpoint [ 236.752571][ T8641] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1254'. [ 236.782699][ T8641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 236.871486][ T8611] F2FS-fs (loop2): Start checkpoint disabled! [ 236.899299][ T8611] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 237.109458][ T8611] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x107/0x640 [ 237.175534][ T8611] syz.2.1247: attempt to access beyond end of device [ 237.175534][ T8611] loop2: rw=2049, sector=53248, nr_sectors = 176 limit=40427 [ 237.395212][ T8660] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1260'. [ 238.238201][ T8656] loop1: detected capacity change from 0 to 40427 [ 238.311016][ T8656] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 238.376225][ T8656] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 238.411076][ T8681] loop8: detected capacity change from 0 to 4096 [ 238.453873][ T8656] F2FS-fs (loop1): invalid crc value [ 238.516084][ T8656] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.530886][ T8664] loop9: detected capacity change from 0 to 32768 [ 238.539483][ T8692] input: syz1 as /devices/virtual/input/input26 [ 238.582335][ T8664] (syz.9.1263,8664,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 238.638404][ T8664] (syz.9.1263,8664,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 238.712021][ T8656] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 238.741300][ T8656] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.676207][ T26] audit: type=1326 audit(1769478888.135:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.8.1278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404399aeb9 code=0x0 [ 240.378601][ T4608] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 240.480321][ T8723] loop9: detected capacity change from 0 to 40427 [ 240.523910][ T8723] F2FS-fs (loop9): invalid crc value [ 240.549451][ T8723] F2FS-fs (loop9): Found nat_bits in checkpoint [ 240.578946][ T4608] usb 2-1: Using ep0 maxpacket: 32 [ 240.594324][ T4608] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 240.621180][ T4608] usb 2-1: config 0 has no interface number 0 [ 240.657157][ T4608] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.681041][ T8723] F2FS-fs (loop9): Start checkpoint disabled! [ 240.698695][ T4608] usb 2-1: config 0 interface 85 has no altsetting 0 [ 240.708190][ T8723] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 240.725260][ T4608] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 240.737132][ T4608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.753231][ T4608] usb 2-1: Product: syz [ 240.757603][ T4608] usb 2-1: Manufacturer: syz [ 240.771868][ T4608] usb 2-1: SerialNumber: syz [ 240.795290][ T4608] usb 2-1: config 0 descriptor?? [ 240.896123][ T8733] loop2: detected capacity change from 0 to 40427 [ 240.924904][ T8733] F2FS-fs (loop2): invalid crc value [ 240.944389][ T8733] F2FS-fs (loop2): Found nat_bits in checkpoint [ 241.064701][ T8733] F2FS-fs (loop2): Start checkpoint disabled! [ 241.126436][ T8733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 241.422045][ T4608] appletouch 2-1:0.85: Geyser mode initialized. [ 241.435592][ T4608] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input27 [ 241.525735][ T32] kworker/u4:2: attempt to access beyond end of device [ 241.525735][ T32] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 241.558391][ T4353] kworker/u4:6: attempt to access beyond end of device [ 241.558391][ T4353] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 241.603594][ T4353] kworker/u4:6: attempt to access beyond end of device [ 241.603594][ T4353] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 241.662408][ T4272] usb 2-1: USB disconnect, device number 16 [ 241.662576][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 241.693016][ T8754] loop7: detected capacity change from 0 to 512 [ 241.720283][ T4272] appletouch 2-1:0.85: input: appletouch disconnected [ 241.794061][ T8754] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1290: inode has both inline data and extents flags [ 241.869165][ T8754] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1290: couldn't read orphan inode 15 (err -117) [ 241.889364][ T8754] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 242.022561][ T6329] EXT4-fs (loop7): unmounting filesystem. [ 242.448781][ T33] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 242.588711][ T22] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 242.655497][ T33] usb 10-1: Using ep0 maxpacket: 16 [ 242.662436][ T33] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.673799][ T33] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.683770][ T33] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.697029][ T33] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.698732][ T4272] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 242.706265][ T33] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.726889][ T33] usb 10-1: config 0 descriptor?? [ 242.780588][ T22] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 242.788994][ T22] usb 2-1: config 0 has no interface number 0 [ 242.797152][ T22] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 242.806507][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.815302][ T22] usb 2-1: Product: syz [ 242.820367][ T22] usb 2-1: Manufacturer: syz [ 242.825021][ T22] usb 2-1: SerialNumber: syz [ 242.832751][ T22] usb 2-1: config 0 descriptor?? [ 242.889275][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 242.889958][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 242.929862][ T4272] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 242.952084][ T4272] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.986130][ T4272] usb 8-1: config 0 descriptor?? [ 243.150372][ T33] HID 045e:07da: Invalid code 65791 type 1 [ 243.172844][ T33] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0012/input/input28 [ 243.187971][ T33] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 243.216440][ T4272] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 243.242230][ T4272] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 243.252298][ T22] usb 2-1: Firmware: major: 109, minor: 210, hardware type: UNKNOWN (205) [ 243.288781][ T4608] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 243.309589][ T8781] loop2: detected capacity change from 0 to 512 [ 243.328106][ T4272] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 243.349440][ T8781] EXT4-fs: quotafile must be on filesystem root [ 243.356994][ T4272] [drm] Initialized udl on minor 2 [ 243.454003][ T33] usb 10-1: USB disconnect, device number 5 [ 243.460673][ T4272] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 243.460685][ T22] usb 2-1: Read permanent extended address c2:b9:43:00:d6:2f:11:02 from device [ 243.480961][ T22] usb 2-1: atusb_probe: initialization failed, error = -524 [ 243.481633][ T4608] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.517571][ T4272] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 243.524758][ T22] atusb: probe of 2-1:0.128 failed with error -524 [ 243.548846][ T4608] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 243.580607][ T4608] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.599031][ T4608] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.607064][ T4608] usb 9-1: Product: syz [ 243.620385][ T4608] usb 9-1: Manufacturer: syz [ 243.625042][ T4608] usb 9-1: SerialNumber: syz [ 243.660319][ T4608] cdc_mbim 9-1:1.0: skipping garbage [ 243.727966][ T4344] usb 2-1: USB disconnect, device number 17 [ 243.785301][ T4272] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 243.794616][ T7] usb 8-1: USB disconnect, device number 11 [ 243.824478][ T4272] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 243.834246][ T4272] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 243.865327][ T8778] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 244.116192][ T8787] loop2: detected capacity change from 0 to 40427 [ 244.153941][ T8787] F2FS-fs (loop2): invalid crc value [ 244.183726][ T8787] F2FS-fs (loop2): Found nat_bits in checkpoint [ 244.302376][ T8787] F2FS-fs (loop2): Start checkpoint disabled! [ 244.329233][ T8787] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 244.492920][ T8778] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 244.513889][ T4608] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 244.558359][ T4608] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 244.721242][ T4608] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 244.735753][ T4608] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 244.817129][ T4608] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, ba:21:7b:2d:fd:12 [ 244.834413][ T8805] loop1: detected capacity change from 0 to 128 [ 244.932548][ T8805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 244.962925][ T8805] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.015634][ T4608] usb 9-1: USB disconnect, device number 7 [ 245.030505][ T4608] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 245.284217][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 245.439674][ T46] kworker/u4:3: attempt to access beyond end of device [ 245.439674][ T46] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 245.884723][ T8809] loop9: detected capacity change from 0 to 32768 [ 245.956912][ T8809] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 scanned by syz.9.1304 (8809) [ 246.019256][ T126] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 246.028296][ T8809] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 246.049586][ T8809] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm [ 246.078589][ T8809] BTRFS warning (device loop9): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 246.129210][ T8809] BTRFS info (device loop9): force clearing of disk cache [ 246.136404][ T8809] BTRFS info (device loop9): setting nodatasum [ 246.173362][ T8809] BTRFS info (device loop9): turning on sync discard [ 246.197708][ T8809] BTRFS info (device loop9): allowing degraded mounts [ 246.218256][ T8809] BTRFS info (device loop9): enabling disk space caching [ 246.249738][ T126] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.278801][ T8809] BTRFS info (device loop9): disk space caching is enabled [ 246.298581][ T126] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.334528][ T8817] loop1: detected capacity change from 0 to 32768 [ 246.342675][ T126] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.362519][ T126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.422508][ T8817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1306 (8817) [ 246.526781][ T8817] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.582512][ T126] usb 8-1: usb_control_msg returned -32 [ 246.588140][ T126] usbtmc 8-1:16.0: can't read capabilities [ 246.596363][ T8809] BTRFS info (device loop9): enabling ssd optimizations [ 246.605769][ T8809] BTRFS info (device loop9): rebuilding free space tree [ 246.616171][ T8817] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 246.666939][ T8817] BTRFS info (device loop1): using free space tree [ 246.685985][ T8809] BTRFS info (device loop9): disabling free space tree [ 246.708580][ T8809] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.738620][ T8809] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 246.749857][ T8825] loop8: detected capacity change from 0 to 32768 [ 246.777971][ T8825] /dev/loop8: Can't open blockdev [ 247.054352][ T8817] BTRFS info (device loop1): enabling ssd optimizations [ 247.100491][ T8883] loop2: detected capacity change from 0 to 512 [ 247.144646][ T7404] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 247.176592][ T26] audit: type=1800 audit(1769478895.645:65): pid=8817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1306" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 247.202531][ T8883] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1314: inode has both inline data and extents flags [ 247.252072][ T8883] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1314: couldn't read orphan inode 15 (err -117) [ 247.328702][ T8883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.513690][ T4260] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop9 scanned by udevd (4260) [ 247.912052][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 248.020362][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.617447][ T8901] loop9: detected capacity change from 0 to 40427 [ 248.618956][ T8906] vivid-000: disconnect [ 248.643627][ T8906] vivid-000: reconnect [ 248.651494][ T8901] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 248.660862][ T8901] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 248.688160][ T8901] F2FS-fs (loop9): invalid crc value [ 248.744136][ T8901] F2FS-fs (loop9): Found nat_bits in checkpoint [ 248.856392][ T7] usb 8-1: USB disconnect, device number 12 [ 248.867877][ T8901] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 248.891332][ T8901] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 249.070363][ T8553] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.268589][ T8553] usb 3-1: Using ep0 maxpacket: 32 [ 249.281142][ T8553] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.318568][ T8553] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.330613][ T8553] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.358673][ T8553] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.367111][ T8553] usb 3-1: Product: syz [ 249.378633][ T8553] usb 3-1: Manufacturer: syz [ 249.412003][ T8553] hub 3-1:4.0: USB hub found [ 249.616824][ T8553] hub 3-1:4.0: 2 ports detected [ 249.875285][ T8917] loop1: detected capacity change from 0 to 40427 [ 249.907758][ T8917] F2FS-fs (loop1): invalid crc value [ 249.923364][ T8939] loop9: detected capacity change from 0 to 1024 [ 249.937007][ T8917] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.953076][ T8939] EXT4-fs: Ignoring removed bh option [ 250.024873][ T8553] hub 3-1:4.0: set hub depth failed [ 250.049919][ T8553] usb 3-1: USB disconnect, device number 19 [ 250.078392][ T8928] loop7: detected capacity change from 0 to 32768 [ 250.088079][ T8939] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 250.117328][ T8917] F2FS-fs (loop1): Start checkpoint disabled! [ 250.144825][ T8917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 250.187294][ T8928] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1323 (8928) [ 250.251811][ T8939] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.1324: inode #65079: comm syz.9.1324: iget: illegal inode # [ 250.285869][ T8928] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.321969][ T8928] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 250.341336][ T8939] EXT4-fs (loop9): Remounting filesystem read-only [ 250.361600][ T8939] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1324: error while reading EA inode 65079 err=-117 [ 250.375060][ T8928] BTRFS info (device loop7): using free space tree [ 250.417426][ T8939] EXT4-fs (loop9): Remounting filesystem read-only [ 250.664305][ T7404] EXT4-fs (loop9): unmounting filesystem. [ 250.681351][ T8928] BTRFS info (device loop7): enabling ssd optimizations [ 251.096643][ T6329] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.209614][ T8989] loop9: detected capacity change from 0 to 128 [ 251.319996][ T8989] syz.9.1332: attempt to access beyond end of device [ 251.319996][ T8989] loop9: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 251.752705][ T46] kworker/u4:3: attempt to access beyond end of device [ 251.752705][ T46] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 252.556428][ T8999] loop7: detected capacity change from 0 to 131072 [ 252.577748][ T8999] F2FS-fs (loop7): invalid crc value [ 252.690269][ T8999] F2FS-fs (loop7): Found nat_bits in checkpoint [ 252.778823][ T8999] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 252.797638][ T8999] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 253.494953][ T9039] device veth0 entered promiscuous mode [ 253.508688][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 253.953612][ T9022] loop9: detected capacity change from 0 to 40427 [ 253.985863][ T9022] F2FS-fs (loop9): invalid crc value [ 254.049158][ T9022] F2FS-fs (loop9): Found nat_bits in checkpoint [ 254.220334][ T9022] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 254.267659][ T9022] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 254.322429][ T9057] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1349'. [ 254.447025][ T9022] syz.9.1340: attempt to access beyond end of device [ 254.447025][ T9022] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.805987][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1352'. [ 254.856391][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.156376][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.431741][ T8898] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 255.641283][ T8898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.689561][ T8898] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.699638][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705983][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.728777][ T8898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.754559][ T8898] usb 2-1: config 0 descriptor?? [ 255.921520][ T9078] loop7: detected capacity change from 0 to 40427 [ 255.959095][ T9078] F2FS-fs (loop7): invalid crc value [ 255.986384][ T8898] usbhid 2-1:0.0: can't add hid device: -71 [ 255.997445][ T9078] F2FS-fs (loop7): Found nat_bits in checkpoint [ 256.005338][ T8898] usbhid: probe of 2-1:0.0 failed with error -71 [ 256.035903][ T8898] usb 2-1: USB disconnect, device number 18 [ 256.132566][ T9078] F2FS-fs (loop7): Start checkpoint disabled! [ 256.158809][ T9078] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 256.494407][ T11] kworker/u4:1: attempt to access beyond end of device [ 256.494407][ T11] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 256.522852][ T11] kworker/u4:1: attempt to access beyond end of device [ 256.522852][ T11] loop7: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 256.618733][ T8898] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 256.838624][ T8898] usb 2-1: Using ep0 maxpacket: 32 [ 256.845685][ T8898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.870179][ T8898] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 256.902413][ T8898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.939152][ T8898] usb 2-1: config 0 descriptor?? [ 256.957662][ T8898] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 257.007242][ T8898] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 257.037587][ T9132] loop7: detected capacity change from 0 to 512 [ 257.204013][ T9132] EXT4-fs (loop7): 1 orphan inode deleted [ 257.214675][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 257.231334][ T46] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 257.248620][ T9132] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.271326][ T46] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 1 [ 257.318800][ T9132] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.393620][ T9144] loop2: detected capacity change from 0 to 1024 [ 257.442981][ T9144] EXT4-fs: Ignoring removed bh option [ 257.451326][ T11] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 257.495800][ T9144] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 257.524580][ T11] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 257.585437][ T6329] EXT4-fs (loop7): unmounting filesystem. [ 257.683524][ T9144] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1373: inode #65079: comm syz.2.1373: iget: illegal inode # [ 257.818735][ T9144] EXT4-fs (loop2): Remounting filesystem read-only [ 257.855748][ T9144] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1373: error while reading EA inode 65079 err=-117 [ 257.905627][ T9144] EXT4-fs (loop2): Remounting filesystem read-only [ 258.017846][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 258.458666][ T8553] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 258.593804][ T8898] usb 2-1: USB disconnect, device number 19 [ 258.622996][ T8898] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 258.660570][ T8553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.685286][ T8553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.717800][ T8553] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 258.735591][ T9190] input: syz1 as /devices/virtual/input/input29 [ 258.746961][ T8553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.795841][ T8553] usb 3-1: config 0 descriptor?? [ 258.957806][ T9173] loop9: detected capacity change from 0 to 40427 [ 258.987460][ T9173] F2FS-fs (loop9): invalid crc value [ 259.021487][ T9173] F2FS-fs (loop9): Found nat_bits in checkpoint [ 259.169741][ T9173] F2FS-fs (loop9): Start checkpoint disabled! [ 259.229922][ T9173] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 259.456375][ T8553] usb 3-1: string descriptor 0 read error: -22 [ 259.660972][ T8553] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0013/input/input30 [ 259.703395][ T4353] kworker/u4:6: attempt to access beyond end of device [ 259.703395][ T4353] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 259.747888][ T4353] kworker/u4:6: attempt to access beyond end of device [ 259.747888][ T4353] loop9: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 259.776369][ T8553] uclogic 0003:256C:006D.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 259.876122][ T8553] usb 3-1: USB disconnect, device number 20 [ 259.921854][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1393'. [ 259.966411][ T9218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.132268][ T9219] fido_id[9219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 260.230732][ T9218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.383146][ T9206] loop1: detected capacity change from 0 to 32768 [ 260.571146][ T9206] XFS (loop1): Mounting V5 Filesystem [ 260.698203][ T9206] XFS (loop1): Ending clean mount [ 260.724756][ T9206] XFS (loop1): Quotacheck needed: Please wait. [ 260.919299][ T9206] XFS (loop1): Quotacheck: Done. [ 261.012257][ T9250] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 261.096062][ T4266] XFS (loop1): Unmounting Filesystem [ 261.197830][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1402'. [ 261.638818][ T9263] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.905697][ T9263] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.916286][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dee0000: rx timeout, send abort [ 262.139728][ T9263] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.207987][ T9282] loop8: detected capacity change from 0 to 7 [ 262.243565][ T4260] Dev loop8: unable to read RDB block 7 [ 262.254039][ T4260] loop8: unable to read partition table [ 262.267912][ T9263] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.292515][ T4260] loop8: partition table beyond EOD, truncated [ 262.310894][ T9282] Dev loop8: unable to read RDB block 7 [ 262.331316][ T9282] loop8: unable to read partition table [ 262.337511][ T9282] loop8: partition table beyond EOD, truncated [ 262.358610][ T9282] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 262.418423][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dee0000: abort rx timeout. Force session deactivation [ 262.784716][ T9263] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.877821][ T9295] loop2: detected capacity change from 0 to 128 [ 262.919653][ T9263] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.959785][ T9295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 262.988940][ T9295] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.025138][ T9263] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.044004][ T9263] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.448100][ T9295] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 263.512812][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 263.747519][ T9329] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1424'. [ 263.758753][ T8558] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 263.880663][ T9333] loop8: detected capacity change from 0 to 256 [ 263.968708][ T8558] usb 10-1: Using ep0 maxpacket: 8 [ 263.975624][ T8558] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.010002][ T8558] usb 10-1: config 0 has no interface number 0 [ 264.028973][ T8558] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.074272][ T8558] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 264.094949][ T8558] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.150510][ T8558] usb 10-1: config 0 descriptor?? [ 264.166507][ T8558] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 264.186569][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1430'. [ 264.243051][ T9345] loop2: detected capacity change from 0 to 64 [ 264.446536][ T8558] usb 10-1: USB disconnect, device number 6 [ 264.552337][ T9345] syz.2.1432: attempt to access beyond end of device [ 264.552337][ T9345] loop2: rw=1, sector=76, nr_sectors = 3 limit=64 [ 264.674139][ T9355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 264.768700][ T8898] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 264.867818][ T9364] loop8: detected capacity change from 0 to 16 [ 264.892881][ T9364] /dev/loop8: Can't open blockdev [ 264.962833][ T8898] usb 2-1: Using ep0 maxpacket: 32 [ 265.009465][ T8898] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 265.035441][ T8898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.068709][ T8898] usb 2-1: Product: syz [ 265.080119][ T8898] usb 2-1: Manufacturer: syz [ 265.089302][ T8898] usb 2-1: SerialNumber: syz [ 265.108218][ T8898] usb 2-1: config 0 descriptor?? [ 265.247717][ T9370] loop8: detected capacity change from 0 to 4096 [ 265.296954][ T9373] netlink: 'syz.2.1444': attribute type 12 has an invalid length. [ 265.334671][ T8898] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 020 [ 265.348918][ T9373] netlink: 'syz.2.1444': attribute type 29 has an invalid length. [ 265.388103][ T9373] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1444'. [ 265.434431][ T9373] netlink: 'syz.2.1444': attribute type 1 has an invalid length. [ 266.681725][ T9398] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1453'. [ 266.711480][ T9398] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1453'. [ 266.765675][ T9400] loop7: detected capacity change from 0 to 1024 [ 266.794511][ T9386] loop2: detected capacity change from 0 to 32768 [ 266.810279][ T9400] EXT4-fs: Ignoring removed nobh option [ 266.834543][ T9400] EXT4-fs: Ignoring removed bh option [ 266.891552][ T9400] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 266.934695][ T9386] XFS (loop2): Mounting V5 Filesystem [ 266.966198][ T9400] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 267.033369][ T9400] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.1454: Allocating blocks 385-513 which overlap fs metadata [ 267.060848][ T9386] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 267.088696][ T4604] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 267.114135][ T9386] XFS (loop2): Starting recovery (logdev: internal) [ 267.167396][ T9386] XFS (loop2): Ending recovery (logdev: internal) [ 267.207503][ T9399] EXT4-fs (loop7): pa ffff8880739d87e0: logic 16, phys. 129, len 24 [ 267.217805][ T9399] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8 [ 267.258741][ T8898] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 267.274803][ T6329] EXT4-fs (loop7): unmounting filesystem. [ 267.283349][ T4604] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.294353][ T4604] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.336770][ T4604] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.361294][ T4268] XFS (loop2): Unmounting Filesystem [ 267.361943][ T4604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.384761][ T4604] usb 9-1: Product: syz [ 267.390555][ T4604] usb 9-1: Manufacturer: syz [ 267.395212][ T4604] usb 9-1: SerialNumber: syz [ 267.427192][ T9419] input: syz1 as /devices/virtual/input/input31 [ 267.467399][ T8898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.486421][ T8898] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.496202][ T8898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.534259][ T4337] usb 2-1: USB disconnect, device number 20 [ 267.548399][ T8898] usb 10-1: config 0 descriptor?? [ 267.624773][ T4604] usb 9-1: 0:2 : does not exist [ 267.637763][ T4604] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 267.697167][ T4604] usb 9-1: USB disconnect, device number 8 [ 267.801314][ T8898] usbhid 10-1:0.0: can't add hid device: -71 [ 267.807563][ T8898] usbhid: probe of 10-1:0.0 failed with error -71 [ 267.849599][ T8898] usb 10-1: USB disconnect, device number 7 [ 267.960134][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.031105][ T9436] sctp: [Deprecated]: syz.1.1463 (pid 9436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.031105][ T9436] Use struct sctp_sack_info instead [ 268.323504][ T9441] loop8: detected capacity change from 0 to 2048 [ 268.335599][ T9437] loop7: detected capacity change from 0 to 40427 [ 268.343410][ T9441] EXT4-fs: Ignoring removed bh option [ 268.350457][ T9441] /dev/loop8: Can't open blockdev [ 268.355545][ T9437] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 268.367444][ T9437] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 268.406566][ T9437] F2FS-fs (loop7): invalid crc value [ 268.447278][ T9437] F2FS-fs (loop7): Found nat_bits in checkpoint [ 268.468959][ T8898] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 268.585084][ T9448] loop8: detected capacity change from 0 to 1024 [ 268.603604][ T9448] /dev/loop8: Can't open blockdev [ 268.616472][ T9437] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 268.629568][ T9437] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 268.658691][ T8898] usb 10-1: Using ep0 maxpacket: 32 [ 268.681167][ T8898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.712857][ T8898] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 268.736741][ T8898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.776250][ T8898] usb 10-1: config 0 descriptor?? [ 268.788446][ T8898] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 268.849042][ T8898] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 268.986860][ T11] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 269.072727][ T11] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 269.213489][ T8898] usb 10-1: USB disconnect, device number 8 [ 269.238905][ T8898] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 269.353044][ T9465] loop8: detected capacity change from 0 to 128 [ 269.389663][ T9465] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 269.449117][ T9465] hpfs: filesystem error: improperly stopped [ 269.458293][ T9465] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 269.472097][ T9465] hpfs: You really don't want any checks? You are crazy... [ 269.503350][ T9465] hpfs: hpfs_map_sector(): read error [ 269.510188][ T9465] hpfs: code page support is disabled [ 269.530662][ T9465] hpfs: hpfs_map_4sectors(): unaligned read [ 269.536686][ T9465] hpfs: hpfs_map_4sectors(): unaligned read [ 269.578613][ T9465] hpfs: filesystem error: unable to find root dir [ 269.730929][ T26] audit: type=1326 audit(1769478918.205:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9468 comm="syz.7.1471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0b879aeb9 code=0x0 [ 270.185986][ T9494] loop1: detected capacity change from 0 to 2048 [ 270.244359][ T9494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 270.300165][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 270.425006][ T9506] loop9: detected capacity change from 0 to 128 [ 270.462140][ T9506] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 270.638647][ T9506] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.668832][ T8558] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 270.836858][ T7404] EXT4-fs (loop9): unmounting filesystem. [ 270.865369][ T8558] usb 2-1: Using ep0 maxpacket: 16 [ 270.881714][ T8558] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.922533][ T8558] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.945183][ T8558] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 270.969020][ T8558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.001154][ T8558] usb 2-1: config 0 descriptor?? [ 271.008615][ T8898] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 271.210127][ T8898] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 271.248610][ T8898] usb 8-1: config 0 interface 0 has no altsetting 0 [ 271.268662][ T8898] usb 8-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 271.304547][ T8898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.329743][ T8898] usb 8-1: config 0 descriptor?? [ 271.365854][ T9529] loop9: detected capacity change from 0 to 128 [ 271.397076][ T9529] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.416624][ T9529] FAT-fs (loop9): FAT read failed (blocknr 4128) [ 271.440092][ T8558] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 271.628838][ T7] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 271.682521][ T9535] loop9: detected capacity change from 0 to 128 [ 271.742915][ T9535] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 271.759083][ T8898] wacom 0003:056A:003F.0015: hidraw1: USB HID v0.06 Device [HID 056a:003f] on usb-dummy_hcd.7-1/input0 [ 271.772242][ T9535] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.819988][ T7] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.848814][ T7] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.927937][ T7] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.930519][ T8898] usb 2-1: USB disconnect, device number 21 [ 271.976478][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.982789][ T8558] usb 8-1: USB disconnect, device number 13 [ 272.052073][ T9538] fido_id[9538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 272.088867][ T9539] support for the xor transformation has been removed. [ 272.185140][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 1024 [ 272.208308][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 6144 [ 272.235918][ T7] usb 9-1: usb_control_msg returned -32 [ 272.251405][ T7] usbtmc 9-1:16.0: can't read capabilities [ 272.294495][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 8192 [ 272.310299][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 11264 [ 272.333415][ T7404] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 272.364085][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 1024 [ 272.386488][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 6144 [ 272.410615][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 8192 [ 272.433365][ T7404] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /92/file0/lost+found: directory fails checksum at offset 11264 [ 272.455432][ T7404] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 272.916617][ T7404] EXT4-fs (loop9): unmounting filesystem. [ 273.113196][ T6968] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.249391][ T6968] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.350759][ T6968] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.423857][ T9551] loop7: detected capacity change from 0 to 64 [ 273.438084][ T6968] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.648734][ T9551] syz.7.1508: attempt to access beyond end of device [ 273.648734][ T9551] loop7: rw=1, sector=76, nr_sectors = 3 limit=64 [ 273.906767][ T9558] loop1: detected capacity change from 0 to 1024 [ 273.971288][ T9558] EXT4-fs: inline encryption not supported [ 273.987980][ T9558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.124342][ T9558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 274.147626][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.161016][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.174635][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.185559][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.193590][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.205584][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.388627][ T4604] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 274.425522][ T8558] usb 9-1: USB disconnect, device number 9 [ 274.585887][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 274.592156][ T4604] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 274.592183][ T4604] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 274.592200][ T4604] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 274.592217][ T4604] usb 3-1: config 0 has no interface number 0 [ 274.592241][ T4604] usb 3-1: config 0 interface 199 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.650398][ T4604] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 274.668151][ T4604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.686872][ T4604] usb 3-1: SerialNumber: syz [ 274.725752][ T4604] usb 3-1: config 0 descriptor?? [ 274.799946][ T4604] usb 3-1: Found UVC 0.00 device (0002:0000) [ 274.821182][ T4604] usb 3-1: No valid video chain found. [ 274.946332][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 275.082766][ T8898] usb 3-1: USB disconnect, device number 21 [ 275.272022][ T9563] chnl_net:caif_netlink_parms(): no params data found [ 275.414518][ T9587] loop1: detected capacity change from 0 to 8192 [ 275.438903][ T9587] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.461239][ T9587] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 275.487695][ T9587] REISERFS (device loop1): using ordered data mode [ 275.520328][ T9587] reiserfs: using flush barriers [ 275.528459][ T9587] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.546031][ T9587] REISERFS (device loop1): checking transaction log (loop1) [ 275.557726][ T9587] REISERFS (device loop1): Using r5 hash to sort names [ 275.568263][ T9587] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 275.746248][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.753770][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.818598][ T9563] device bridge_slave_0 entered promiscuous mode [ 276.248715][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 276.308831][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.316373][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.383850][ T26] audit: type=1326 audit(1769478924.855:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 276.426663][ T9563] device bridge_slave_1 entered promiscuous mode [ 276.458631][ T26] audit: type=1326 audit(1769478924.895:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 276.573467][ T9621] loop1: detected capacity change from 0 to 256 [ 276.598065][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.607691][ T26] audit: type=1326 audit(1769478924.895:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 276.659760][ T26] audit: type=1326 audit(1769478924.905:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 276.691136][ T9621] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.734803][ T9621] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 276.748360][ T26] audit: type=1326 audit(1769478924.905:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 276.786250][ T9621] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 276.877931][ T26] audit: type=1326 audit(1769478924.905:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 276.998596][ T26] audit: type=1326 audit(1769478924.965:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 277.071143][ T26] audit: type=1326 audit(1769478924.965:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ace39aeb9 code=0x7ffc0000 [ 277.137076][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.268784][ T6968] device hsr_slave_0 left promiscuous mode [ 277.283814][ T6968] device hsr_slave_1 left promiscuous mode [ 277.356688][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.389647][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.403235][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.412627][ T9611] loop8: detected capacity change from 0 to 32768 [ 277.428880][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.446923][ T6968] device bridge_slave_1 left promiscuous mode [ 277.499700][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.524317][ T6968] device bridge_slave_0 left promiscuous mode [ 277.529262][ T9638] input: syz1 as /devices/virtual/input/input35 [ 277.564790][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.714013][ T6968] device veth1_macvtap left promiscuous mode [ 277.748592][ T6968] device veth0_macvtap left promiscuous mode [ 277.758065][ T6968] device veth1_vlan left promiscuous mode [ 277.823627][ T6968] device veth0_vlan left promiscuous mode [ 277.945900][ T9651] loop8: detected capacity change from 0 to 1024 [ 277.959397][ T9651] EXT4-fs: inline encryption not supported [ 278.004544][ T9651] /dev/loop8: Can't open blockdev [ 278.281468][ T9664] Bluetooth: hci0: too big key_count value 4354 [ 278.328616][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 278.811173][ T9668] loop2: detected capacity change from 0 to 32768 [ 278.909103][ T9668] read_mapping_page failed! [ 279.064873][ T9668] ERROR: (device loop2): txCommit: [ 279.064873][ T9668] [ 279.491118][ T9675] loop7: detected capacity change from 0 to 64 [ 279.697030][ T6329] hfs: request for non-existent node 131072 in B*Tree [ 279.886659][ T9682] loop7: detected capacity change from 0 to 4096 [ 279.928362][ T9682] NILFS (loop7): invalid segment: Checksum error in segment payload [ 279.949348][ T9682] NILFS (loop7): trying rollback from an earlier position [ 279.997737][ T9682] NILFS (loop7): recovery complete [ 280.021136][ T9685] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.039486][ T26] audit: type=1800 audit(1769478928.495:75): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1544" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 280.129031][ T6968] team0 (unregistering): Port device team_slave_1 removed [ 280.224723][ T6968] team0 (unregistering): Port device team_slave_0 removed [ 280.334411][ T6968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.418652][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 280.482081][ T6968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.095679][ T6968] bond0 (unregistering): Released all slaves [ 281.213434][ T9563] team0: Port device team_slave_0 added [ 281.239113][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 281.367116][ T9563] team0: Port device team_slave_1 added [ 281.488671][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.546073][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.596726][ T26] audit: type=1326 audit(1769478930.065:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.8.1550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404399aeb9 code=0x0 [ 281.640696][ T9703] loop6: detected capacity change from 0 to 7 [ 281.649665][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.666663][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.674170][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.701251][ T4260] Dev loop6: unable to read RDB block 7 [ 281.706948][ T4260] loop6: AHDI p3 p4 [ 281.713058][ T4260] loop6: partition table partially beyond EOD, truncated [ 281.721271][ T4260] loop6: p3 start 1886353253 is beyond EOD, truncated [ 281.729623][ T9703] Dev loop6: unable to read RDB block 7 [ 281.732150][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.738723][ T9703] loop6: AHDI p3 p4 [ 281.784252][ T9703] loop6: partition table partially beyond EOD, truncated [ 281.793131][ T9703] loop6: p3 start 1886353253 is beyond EOD, truncated [ 281.943835][ T9563] device hsr_slave_0 entered promiscuous mode [ 281.970491][ T9563] device hsr_slave_1 entered promiscuous mode [ 282.003495][ T9563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.037099][ T9563] Cannot create hsr debugfs directory [ 282.053240][ T4337] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 282.258865][ T4337] usb 8-1: Using ep0 maxpacket: 16 [ 282.273073][ T4337] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.300917][ T4337] usb 8-1: config 0 interface 0 has no altsetting 0 [ 282.320219][ T4337] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 282.359514][ T4337] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.409495][ T4337] usb 8-1: config 0 descriptor?? [ 282.488656][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 282.675381][ T9563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.854706][ T4337] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 282.902640][ T9563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.034871][ T9563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.242817][ T9563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.297047][ T8558] usb 8-1: USB disconnect, device number 14 [ 283.407479][ T9743] netlink: 'syz.8.1561': attribute type 29 has an invalid length. [ 283.422428][ T9743] netlink: 'syz.8.1561': attribute type 29 has an invalid length. [ 283.668340][ T9563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.690950][ T9563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.711800][ T9563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.735319][ T9563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.944452][ T9768] loop2: detected capacity change from 0 to 512 [ 284.026880][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.051785][ T9768] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1567: couldn't read orphan inode 26 (err -116) [ 284.081767][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.099779][ T9768] EXT4-fs (loop2): Remounting filesystem read-only [ 284.116829][ T9768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.117104][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.138762][ T9768] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.177055][ T9768] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #3: comm syz.2.1567: corrupted inode contents [ 284.212225][ T9563] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.233650][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.251399][ T9780] EXT4-fs (loop2): shut down requested (2) [ 284.253182][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.269263][ T9768] EXT4-fs (loop2): Remounting filesystem read-only [ 284.275910][ T9768] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #3: comm syz.2.1567: mark_inode_dirty error [ 284.299550][ T9768] EXT4-fs (loop2): Remounting filesystem read-only [ 284.315653][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.322974][ T4589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.335487][ T9768] Quota error (device loop2): write_blk: dquota write failed [ 284.345955][ T9768] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 284.368094][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.396174][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.440573][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.459204][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.466338][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.475073][ T9784] tls_set_device_offload_rx: netdev not found [ 284.528880][ T26] audit: type=1326 audit(1769478933.005:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6239f9aeb9 code=0x0 [ 284.565199][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.584774][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.596653][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 284.679898][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.727361][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.759171][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.769011][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.784719][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.800158][ T9798] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1570'. [ 284.805728][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.832715][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.852530][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.872825][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.900988][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.238618][ T8558] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 285.435367][ T8558] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.449566][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.457190][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.470190][ T8558] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.500837][ T8558] usb 8-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 285.503007][ T9563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.526813][ T8558] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.573748][ T9825] loop8: detected capacity change from 0 to 128 [ 285.587003][ T8558] usb 8-1: config 0 descriptor?? [ 285.958754][ T4608] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 286.053235][ T8558] logitech 0003:046D:CA04.0017: unbalanced collection at end of report description [ 286.076573][ T8558] logitech 0003:046D:CA04.0017: parse failed [ 286.100685][ T8558] logitech: probe of 0003:046D:CA04.0017 failed with error -22 [ 286.138654][ T4608] usb 3-1: Using ep0 maxpacket: 8 [ 286.145445][ T4608] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 286.168794][ T4608] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 286.196932][ T4608] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.225076][ T4608] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.269053][ T4608] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.297105][ T4608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.329503][ T7] usb 8-1: USB disconnect, device number 15 [ 286.476952][ T9845] loop1: detected capacity change from 0 to 1024 [ 286.530662][ T4608] usb 3-1: GET_CAPABILITIES returned 0 [ 286.536312][ T4608] usbtmc 3-1:16.0: can't read capabilities [ 286.558995][ T9845] EXT4-fs: Ignoring removed bh option [ 286.587531][ T9845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 286.606975][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.630512][ T26] audit: type=1800 audit(1769478935.105:78): pid=9845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1582" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 286.661648][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.679016][ T26] audit: type=1800 audit(1769478935.145:79): pid=9845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1582" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 286.702024][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.704052][ T26] audit: type=1800 audit(1769478935.145:80): pid=9845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1582" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 286.746683][ T4608] usb 3-1: USB disconnect, device number 22 [ 286.746992][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.774694][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.783281][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.812531][ T9563] device veth0_vlan entered promiscuous mode [ 286.865042][ T9563] device veth1_vlan entered promiscuous mode [ 286.910462][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 286.948464][ T9563] device veth0_macvtap entered promiscuous mode [ 286.966062][ T9850] loop7: detected capacity change from 0 to 64 [ 287.005129][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.016327][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.044148][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.077834][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.078534][ T9850] hfs: hfs: Invalid key length: 94 [ 287.094471][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.108087][ T9563] device veth1_macvtap entered promiscuous mode [ 287.148306][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.167795][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.189480][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.206594][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.230043][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.268585][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.278450][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.308602][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.328622][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.374946][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.419679][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.422973][ T9862] loop2: detected capacity change from 0 to 256 [ 287.466044][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.489364][ T4589] ------------[ cut here ]------------ [ 287.495087][ T4589] kernel BUG at fs/hfs/inode.c:449! [ 287.496590][ T9862] exFAT-fs (loop2): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 287.501417][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.526792][ T4589] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 287.533011][ T4589] CPU: 0 PID: 4589 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 287.540657][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.550789][ T4589] Workqueue: writeback wb_workfn (flush-7:7) [ 287.556894][ T4589] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 287.562469][ T4589] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 0e 87 ff e9 47 fe ff ff e8 76 23 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 287.582614][ T4589] RSP: 0018:ffffc900050af3a0 EFLAGS: 00010293 [ 287.588707][ T4589] RAX: ffffffff824c4efa RBX: ffff88807b6ce318 RCX: ffff888078cc0000 [ 287.597038][ T4589] RDX: 0000000000000000 RSI: ffffffff8cd25220 RDI: 0000000000000000 [ 287.600172][ T9852] loop8: detected capacity change from 0 to 32768 [ 287.605090][ T4589] RBP: ffffc900050af530 R08: ffff888078cc0000 R09: 0000000000000003 [ 287.605105][ T4589] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 287.605115][ T4589] R13: 1ffff92000a15e78 R14: 0000000000000000 R15: ffff88807b6ce2d8 [ 287.605126][ T4589] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 287.644459][ T4589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.651048][ T4589] CR2: 000055818be9a950 CR3: 0000000060c58000 CR4: 00000000003506f0 [ 287.659130][ T4589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.667113][ T4589] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.675108][ T4589] Call Trace: [ 287.678411][ T4589] [ 287.681348][ T4589] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 287.685804][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.686922][ T4589] ? __writeback_single_inode+0x4ae/0x1160 [ 287.686953][ T4589] ? __rwlock_init+0x140/0x140 [ 287.708238][ T4589] __writeback_single_inode+0x75b/0x1160 [ 287.712115][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.713883][ T4589] writeback_sb_inodes+0xb30/0x1850 [ 287.728994][ T4589] ? queue_io+0x5a0/0x5a0 [ 287.733752][ T4589] ? rcu_is_watching+0x11/0xa0 [ 287.738552][ T4589] wb_writeback+0x482/0xd50 [ 287.740600][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.743067][ T4589] ? percpu_ref_tryget+0x250/0x250 [ 287.758772][ T4589] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 287.761745][ T4260] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by udevd (4260) [ 287.764759][ T4589] ? _raw_spin_unlock_irq+0x1f/0x40 [ 287.764782][ T4589] wb_workfn+0x423/0xee0 [ 287.776702][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.781833][ T4589] ? inode_wait_for_writeback+0x220/0x220 [ 287.781863][ T4589] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 287.781883][ T4589] ? read_lock_is_recursive+0x10/0x10 [ 287.781900][ T4589] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 287.781915][ T4589] ? _raw_spin_unlock+0x40/0x40 [ 287.781930][ T4589] ? _raw_spin_unlock_irq+0x1f/0x40 [ 287.781946][ T4589] ? process_one_work+0x7b0/0x1160 [ 287.781963][ T4589] process_one_work+0x8a2/0x1160 [ 287.781986][ T4589] ? worker_detach_from_pool+0x240/0x240 [ 287.782005][ T4589] ? _raw_spin_lock_irq+0xb7/0xf0 [ 287.782027][ T4589] ? _raw_spin_lock_irqsave+0x100/0x100 [ 287.782047][ T4589] ? kthread_data+0x4b/0xc0 [ 287.782068][ T4589] worker_thread+0xaa2/0x1270 [ 287.782093][ T4589] ? __kthread_parkme+0x162/0x1c0 [ 287.782116][ T4589] kthread+0x29d/0x330 [ 287.782136][ T4589] ? worker_clr_flags+0x1a0/0x1a0 [ 287.782152][ T4589] ? kthread_blkcg+0xd0/0xd0 [ 287.782173][ T4589] ret_from_fork+0x1f/0x30 [ 287.782197][ T4589] [ 287.793651][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.796200][ T4589] Modules linked in: [ 287.925358][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.935633][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.946153][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.967015][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.977733][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.985864][ T4589] ---[ end trace 0000000000000000 ]--- [ 287.992232][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.001782][ T4589] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 288.007468][ T4589] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 0e 87 ff e9 47 fe ff ff e8 76 23 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 288.031268][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.040132][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.048778][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.056891][ T4589] RSP: 0018:ffffc900050af3a0 EFLAGS: 00010293 [ 288.066002][ T9563] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.075269][ T4589] RAX: ffffffff824c4efa RBX: ffff88807b6ce318 RCX: ffff888078cc0000 [ 288.083370][ T9563] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.094655][ T4589] RDX: 0000000000000000 RSI: ffffffff8cd25220 RDI: 0000000000000000 [ 288.103657][ T9563] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.112643][ T4589] RBP: ffffc900050af530 R08: ffff888078cc0000 R09: 0000000000000003 [ 288.120924][ T9563] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.129770][ T4589] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 288.137850][ T4589] R13: 1ffff92000a15e78 R14: 0000000000000000 R15: ffff88807b6ce2d8 [ 288.166380][ T9563] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 288.174606][ T4589] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 288.187760][ T4589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.206235][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.207054][ T9563] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 288.222598][ T4589] CR2: 00007f623a1e1198 CR3: 0000000078ca4000 CR4: 00000000003506e0 [ 288.222767][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.238794][ T4589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.247009][ T4589] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.268531][ T4589] Kernel panic - not syncing: Fatal exception [ 288.275148][ T4589] Kernel Offset: disabled [ 288.279558][ T4589] Rebooting in 86400 seconds..