last executing test programs: 13m26.006907615s ago: executing program 2 (id=3): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_addrs=@rc={0x1f, @none, 0x7}}) 13m24.693200959s ago: executing program 2 (id=8): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 13m23.912126504s ago: executing program 2 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbdf, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000002f80)=""/4077, 0xfed) 13m22.202237804s ago: executing program 2 (id=12): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13m17.818570618s ago: executing program 2 (id=30): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 13m15.727928364s ago: executing program 32 (id=30): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 8m12.078638463s ago: executing program 4 (id=1515): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xe138, 0x198, 0x198, 0x198, 0x250, 0x358, 0x358, 0x250, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'netdevsim0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 8m11.338168437s ago: executing program 4 (id=1520): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[], 0x8c) close(r1) 8m10.511247795s ago: executing program 4 (id=1525): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 8m9.587704737s ago: executing program 4 (id=1529): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0xa3b, 0x1) getdents64(r0, 0x0, 0x0) 8m8.503604036s ago: executing program 4 (id=1536): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x114}, 0x4000014) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 8m7.523942619s ago: executing program 4 (id=1541): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000000)=ANY=[], 0xf9, 0x2c0, &(0x7f0000000100)="$eJzs3U9rE08cx/HPbLZN+of+tr9WBOmpWvAkbT0oXgrSg3cvnkRtIhRDBVtBPUXP4gPw3qfgA/DoSTwLvXnyARQ8VGZ21kyS3SYtG7et7xc0bLLz3ZnJzDr73RAjAP+su5sH+zd/2D8j1VSTdEeKJDWkWNIlXW683Nnb3mu3mscdqOYi7J9RGmkGymzttPJCbZyL8BL7LNat8DWMR+O7OkszVbcCVXNnf45Iqvuz0+1vpC//Okr93UaWqFN1AypmDnWoV5qruh0AgOp0uut/5Nf5WX/9HkXSil/20/XfBEHn2GHVDRizz0P2B+u/y7KOjB3f/9yubr7nBjvWxImrv7cbPJlUOrN6LjDNsKzStSWaerrdbt3Yet5uRnqnDS9o0KJ7bKZTN3Owb1xOa7ffTg8cetnnpiPml1mGPFrpkEusognbh/Ww/UGRhXJrHM58MV/NQ5Poo5p/rv/iI2OHyY1U0jdSaftXi4/oejkpV6qgl/Oukiu+Bu/YXtZUkJEom1HzfQOYFLQz7omS6Y1Ke7dW3DsXtaC8qPVgzk3lRC32R3Vnc3F942Y+mAdmWT/1SZvB9X9k3+0VjXJm2jKupJ8Zx/YndiUT98b7taOzlFsyOm2PcArv9US3Nbf7+s2zx+1268VF2/A3KrRrz8QyDjihM9GvUjaySXBW2uM36na8SjhOtshU3y/bikpqz9adkQo3jTSwq/ifDm7LXxzdQT9hIJPgorDXXSbN/4J8ZdVdrNmHpPc6vR7GDv0AIDjiWkFu8L97nO7P4ApyA+NuPczkfLo4WGOQc/WksC7nunpdujZKjanEt/Ps2ThNkNnUNz3i/j8AAAAAAAAAAAAAAAAAAMB5U95XDhqFX7eouo8AAAAAAAAAAAAAAAAAAAAAAJx3Ob//W6/093/vK30Wa5b/Yx4Yr98BAAD//xUUb4I=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfea7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) 8m5.487789117s ago: executing program 33 (id=1541): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000000)=ANY=[], 0xf9, 0x2c0, &(0x7f0000000100)="$eJzs3U9rE08cx/HPbLZN+of+tr9WBOmpWvAkbT0oXgrSg3cvnkRtIhRDBVtBPUXP4gPw3qfgA/DoSTwLvXnyARQ8VGZ21kyS3SYtG7et7xc0bLLz3ZnJzDr73RAjAP+su5sH+zd/2D8j1VSTdEeKJDWkWNIlXW683Nnb3mu3mscdqOYi7J9RGmkGymzttPJCbZyL8BL7LNat8DWMR+O7OkszVbcCVXNnf45Iqvuz0+1vpC//Okr93UaWqFN1AypmDnWoV5qruh0AgOp0uut/5Nf5WX/9HkXSil/20/XfBEHn2GHVDRizz0P2B+u/y7KOjB3f/9yubr7nBjvWxImrv7cbPJlUOrN6LjDNsKzStSWaerrdbt3Yet5uRnqnDS9o0KJ7bKZTN3Owb1xOa7ffTg8cetnnpiPml1mGPFrpkEusognbh/Ww/UGRhXJrHM58MV/NQ5Poo5p/rv/iI2OHyY1U0jdSaftXi4/oejkpV6qgl/Oukiu+Bu/YXtZUkJEom1HzfQOYFLQz7omS6Y1Ke7dW3DsXtaC8qPVgzk3lRC32R3Vnc3F942Y+mAdmWT/1SZvB9X9k3+0VjXJm2jKupJ8Zx/YndiUT98b7taOzlFsyOm2PcArv9US3Nbf7+s2zx+1268VF2/A3KrRrz8QyDjihM9GvUjaySXBW2uM36na8SjhOtshU3y/bikpqz9adkQo3jTSwq/ifDm7LXxzdQT9hIJPgorDXXSbN/4J8ZdVdrNmHpPc6vR7GDv0AIDjiWkFu8L97nO7P4ApyA+NuPczkfLo4WGOQc/WksC7nunpdujZKjanEt/Ps2ThNkNnUNz3i/j8AAAAAAAAAAAAAAAAAAMB5U95XDhqFX7eouo8AAAAAAAAAAAAAAAAAAAAAAJx3Ob//W6/093/vK30Wa5b/Yx4Yr98BAAD//xUUb4I=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfea7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) 7m13.599244655s ago: executing program 5 (id=1740): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000010) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x2a9) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000400)) 7m12.549838122s ago: executing program 5 (id=1744): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_012={0x1, 0x0, 0x9, 'a'}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)={0x3, 0x100, 0x9}) 7m9.807981571s ago: executing program 5 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x30}}, 0x0) 7m8.698826981s ago: executing program 5 (id=1760): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0xa3b, 0x1) getdents64(r0, 0x0, 0x0) 7m7.929478784s ago: executing program 5 (id=1762): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000300)={0xa, 0x4e23, 0x1, @local, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000340)="01", 0x1}], 0x1}, 0x4001) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 7m6.363599333s ago: executing program 5 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 7m4.976874662s ago: executing program 34 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 4m34.490417755s ago: executing program 3 (id=2352): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 4m33.41957206s ago: executing program 3 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x5, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x8, 0x404, 0x7fff, 0x3, 0x3, 0x6, 0x1ff, 0x6, 0x0, 0x2, 0x74ba, 0x40, 0x35e, 0x6, 0xc, 0x6, 0x6, 0x5, 0x3, 0x3, 0x0, 0xc66, 0x7fff, 0xc9, 0xb, 0x1, 0x0, 0x0, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0xc, 0x8, 0x2, 0xd, 0x5, 0x400, 0xc, 0x0, 0xfff, 0x1, 0x7, 0x7, 0x2, 0xbce6, 0x1, 0x4, 0x9, 0x79, 0xfffff801, 0xc, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xa, 0x5f72, 0x80000000, 0x5, 0x3, 0x4b1, 0xc, 0xfffffffd, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0x5, 0x20009, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x40, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x6, 0x9, 0x3a9, 0xfc7, 0xd, 0x0, 0x80000001, 0x9, 0x6, 0x2, 0xffffb6d4, 0x8, 0x100, 0x7, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x7, 0x3, 0xcf800, 0x2b9c, 0x21000, 0xfffffff8, 0x3, 0x1, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf1, 0x3, 0x6ea, 0x4004, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0x5248, 0x6, 0xe08b, 0x5, 0x7ff, 0xce, 0x5, 0x0, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x200, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x80, 0x2, 0x200, 0x8, 0xb56, 0x10000005, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0x7, 0x9, 0xfffffff5, 0x0, 0x2, 0x7fff, 0x9a, 0x1, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x4, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x8001, 0x0, 0x1, 0xd2f3]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x0, 0x2, 0x1, 0x3, 0x9, 0x200, 0x4, 0x3, 0x2f00, 0xa, 0x10, 0x101, 0x3, 0x1, 0x9, 0x10, 0x0, 0x10, 0x4, 0x1, 0x200, 0x3, 0x3, 0x1, 0x80000000, 0x8, 0x100, 0x200, 0x5, 0x6, 0x1, 0xf, 0x5, 0x9, 0x0, 0xf, 0x401, 0xc1, 0x8, 0x80000000, 0x10001, 0x7fffffff, 0x10a, 0xb1, 0x9, 0x8, 0x8, 0x800, 0x188, 0x5, 0x10, 0x80000000, 0x9, 0xfffffafd, 0x2, 0x0, 0x3a, 0x7, 0x698b, 0x3, 0x1, 0x4, 0x358d, 0x0, 0x3, 0x9, 0x1000, 0xf2, 0xffffff7f, 0x9, 0xee73, 0x10000, 0x1, 0x5, 0x4, 0x9, 0x6, 0x3635, 0x0, 0xfff, 0x9, 0x32, 0xffff, 0x9, 0x2, 0x4, 0x80000000, 0x0, 0x401, 0x80, 0xc, 0x0, 0xfffffffe, 0x10001, 0xbab, 0x7, 0x2, 0x0, 0x4, 0xfffffffe, 0x0, 0x81, 0xcf8, 0x9f, 0x9, 0x6, 0x2, 0x2, 0x3, 0x3, 0xf52c, 0x2, 0x0, 0xfffffff9, 0xfffffff1, 0xc, 0xe, 0x1, 0x5, 0x9, 0xffff, 0x7fffffff, 0x148a0e17, 0x1, 0x43, 0xffffffff, 0x5, 0x7, 0xfff, 0x5, 0x7, 0x727, 0x0, 0x3, 0x5, 0x1000000, 0x5, 0x800, 0x2, 0x200, 0x8001, 0x0, 0x9, 0x6, 0x5, 0xffffffff, 0x0, 0x9, 0x6, 0x200, 0x1, 0xc97, 0x8, 0x101, 0xff02, 0x10001, 0x5, 0xc1, 0xfffffffa, 0x2, 0x2, 0x4, 0x2, 0x7f, 0x40, 0x80000001, 0x0, 0x0, 0x0, 0x7b29, 0x1, 0xa4, 0x200, 0xfff, 0xfffffffe, 0x0, 0x7f, 0x0, 0x5, 0x9, 0x4, 0x6ff6, 0xba, 0x80, 0x1859, 0xf42d, 0x7, 0x7364, 0x8, 0x0, 0xe, 0x6, 0xb0d3, 0x1000, 0x1000, 0x2, 0x2, 0x80000001, 0x1, 0x5, 0x7fff, 0xf134, 0x10, 0x6, 0x1000000, 0x7, 0x10000, 0x122a4e47, 0x6, 0x8, 0x1, 0x9, 0x3, 0xd, 0x2a2b, 0x100, 0x6, 0x4, 0x4, 0x0, 0x95, 0x3, 0x1, 0xb, 0xb14, 0x99, 0x7a, 0x2e, 0x3, 0x0, 0x6, 0x58, 0x6, 0xe1, 0x58c, 0x2, 0x100, 0x5, 0x1, 0x5c2, 0x3, 0xfff, 0x7, 0x3, 0xfffffff7, 0x1000, 0x6584, 0x7, 0x9, 0x7, 0x4, 0x2, 0x4000, 0x54b, 0x469]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 4m30.689283388s ago: executing program 3 (id=2365): syz_usb_connect(0x3, 0x73, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000500)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4m27.474889353s ago: executing program 3 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x810) 4m25.959602199s ago: executing program 3 (id=2383): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4m24.666701503s ago: executing program 3 (id=2387): syz_io_uring_setup(0x475, &(0x7f0000000180)={0x0, 0x289b, 0x10006, 0x1, 0x31f}, &(0x7f0000000000), &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz90JwjAABOCrbbXpUycQl3IeEXQIV3DJSK0/OICI8H1vubsEEn5q1WVKlzal3h0+61qTjK9jMyRNrXWTbV+WaNef2iFZPxbDvCq55JhkyrNo3k+exyWa7++v3/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyDWwAAAP//OdEPfA==") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r0, 0x4, 0x0) 4m8.963801644s ago: executing program 35 (id=2387): syz_io_uring_setup(0x475, &(0x7f0000000180)={0x0, 0x289b, 0x10006, 0x1, 0x31f}, &(0x7f0000000000), &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz90JwjAABOCrbbXpUycQl3IeEXQIV3DJSK0/OICI8H1vubsEEn5q1WVKlzal3h0+61qTjK9jMyRNrXWTbV+WaNef2iFZPxbDvCq55JhkyrNo3k+exyWa7++v3/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyDWwAAAP//OdEPfA==") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r0, 0x4, 0x0) 1m16.627018172s ago: executing program 0 (id=3131): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0xdb0078e619f2dde7, 0xdd2, 0x6, 0xb, 0x20000800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) 1m15.603370571s ago: executing program 0 (id=3137): shutdown(0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xd, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 1m14.898626834s ago: executing program 0 (id=3141): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 1m14.207478837s ago: executing program 0 (id=3146): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x4) 1m12.888452161s ago: executing program 0 (id=3151): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m11.992835022s ago: executing program 0 (id=3154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x54540e96, 0xdc4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) 1m10.542829461s ago: executing program 36 (id=3154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x54540e96, 0xdc4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) 9.852331196s ago: executing program 7 (id=3375): r0 = userfaultfd(0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.414773333s ago: executing program 8 (id=3388): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r2, @in={{0x2, 0x4e21, @local}}, [0x175, 0x7, 0x8, 0x1, 0x814, 0x10000, 0x4, 0x1, 0x2, 0xc79, 0x2b, 0x21, 0x4, 0xfff, 0x3]}, &(0x7f0000000100)=0x100) 7.29270888s ago: executing program 6 (id=3389): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) 6.747818972s ago: executing program 8 (id=3392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) 6.458306767s ago: executing program 8 (id=3393): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r1 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r0}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000002c0), 0x0, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.245107951s ago: executing program 7 (id=3394): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x2, 0x4, 0x8, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x5, 0x2, 0x0, 0x0, "e2b328ed6d967bed"}}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) 6.126206842s ago: executing program 1 (id=3395): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@local, 0xbce, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) 6.060486145s ago: executing program 6 (id=3396): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x98, 0x98, 0x168, 0x0, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x94}, @ECN={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250c00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000000000004002800500050801400088104000100040001000400010004000200050009000000000004000500110001000024fb54b0f798fac4164411af00000006000419f2860000050002"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x40000c4) 6.02059493s ago: executing program 9 (id=3397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) fcntl$lock(r1, 0x6, &(0x7f0000000580)={0x0, 0x1, 0x5, 0x42ce8f01}) close_range(r0, 0xffffffffffffffff, 0x0) 5.632097879s ago: executing program 8 (id=3398): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r0) 5.425803017s ago: executing program 7 (id=3399): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 5.316524604s ago: executing program 9 (id=3400): r0 = userfaultfd(0x80801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 4.611658135s ago: executing program 6 (id=3401): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x101, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.305783743s ago: executing program 8 (id=3402): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0xce) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 4.18014297s ago: executing program 1 (id=3403): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0xfffffff5}, &(0x7f0000000280)=0x8) 3.643841687s ago: executing program 9 (id=3404): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2.65948952s ago: executing program 7 (id=3405): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r1 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.288158642s ago: executing program 6 (id=3406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r1, 0x6a98047402e98331, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004100}, 0x20044850) 2.133371842s ago: executing program 1 (id=3407): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f00008fb000/0x2000)=nil, 0x2000}}) 1.829632696s ago: executing program 9 (id=3408): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 1.46384383s ago: executing program 6 (id=3409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@timestamping={{0x18, 0x1, 0x25, 0x3}}], 0x18}, 0x40801) 1.41313482s ago: executing program 1 (id=3410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0x2, 0x4) 1.266134716s ago: executing program 8 (id=3411): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x1947, 0x0, 0x42}) 1.143013722s ago: executing program 9 (id=3412): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) 1.05916331s ago: executing program 7 (id=3413): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0xbd5e4000) 827.526055ms ago: executing program 1 (id=3414): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 785.439645ms ago: executing program 6 (id=3415): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000540)=r2, 0x12) 335.489426ms ago: executing program 7 (id=3416): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a3000000000140007800800084000002859080006400000000005000500000040000500010006"], 0x5c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 225.089029ms ago: executing program 9 (id=3417): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3418): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f00000013c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x4, r2, 0x0, 0x0, 0xff, 0x0, 0x3, r1}]) kernel console output (not intermixed with test programs): 00032 is beyond EOD, truncated [ 758.830603][T12544] loop3: p214 start 2164300032 is beyond EOD, truncated [ 758.868618][T12544] loop3: p215 start 2164300032 is beyond EOD, truncated [ 758.904977][T12544] loop3: p216 start 2164300032 is beyond EOD, truncated [ 758.937951][T12544] loop3: p217 start 2164300032 is beyond EOD, truncated [ 758.983037][T12544] loop3: p218 start 2164300032 is beyond EOD, truncated [ 758.990238][T12544] loop3: p219 start 2164300032 is beyond EOD, truncated [ 759.040204][T12544] loop3: p220 start 2164300032 is beyond EOD, truncated [ 759.066679][T12544] loop3: p221 start 2164300032 is beyond EOD, truncated [ 759.070549][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 759.086627][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 759.106226][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.123650][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.142415][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 759.148785][T12544] loop3: p222 start 2164300032 is beyond EOD, truncated [ 759.235509][T12544] loop3: p223 start 2164300032 is beyond EOD, truncated [ 759.326342][T12544] loop3: p224 start 2164300032 is beyond EOD, truncated [ 759.396961][T12544] loop3: p225 start 2164300032 is beyond EOD, truncated [ 759.457175][T12544] loop3: p226 start 2164300032 is beyond EOD, truncated [ 759.491008][T12544] loop3: p227 start 2164300032 is beyond EOD, truncated [ 759.547637][T12544] loop3: p228 start 2164300032 is beyond EOD, truncated [ 759.591421][T12544] loop3: p229 start 2164300032 is beyond EOD, truncated [ 759.598604][T12544] loop3: p230 start 2164300032 is beyond EOD, truncated [ 759.621513][ T794] gspca_sonixj: reg_w err -71 [ 759.626606][ T794] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 759.680486][T12544] loop3: p231 start 2164300032 is beyond EOD, truncated [ 759.687201][ T794] usb 8-1: USB disconnect, device number 5 [ 759.740233][T12544] loop3: p232 start 2164300032 is beyond EOD, truncated [ 759.775131][T12544] loop3: p233 start 2164300032 is beyond EOD, truncated [ 759.815884][T12544] loop3: p234 start 2164300032 is beyond EOD, truncated [ 759.845863][T12544] loop3: p235 start 2164300032 is beyond EOD, truncated [ 759.853365][T12544] loop3: p236 start 2164300032 is beyond EOD, truncated [ 759.860848][T12544] loop3: p237 start 2164300032 is beyond EOD, truncated [ 759.869436][T12544] loop3: p238 start 2164300032 is beyond EOD, truncated [ 759.892582][T12544] loop3: p239 start 2164300032 is beyond EOD, truncated [ 759.900121][T12544] loop3: p240 start 2164300032 is beyond EOD, truncated [ 759.926008][T12544] loop3: p241 start 2164300032 is beyond EOD, truncated [ 759.950218][T12544] loop3: p242 start 2164300032 is beyond EOD, truncated [ 759.999786][T12544] loop3: p243 start 2164300032 is beyond EOD, truncated [ 760.038426][T12544] loop3: p244 start 2164300032 is beyond EOD, truncated [ 760.091358][T12544] loop3: p245 start 2164300032 is beyond EOD, truncated [ 760.098582][T12544] loop3: p246 start 2164300032 is beyond EOD, truncated [ 760.129547][T12544] loop3: p247 start 2164300032 is beyond EOD, truncated [ 760.159998][T12544] loop3: p248 start 2164300032 is beyond EOD, truncated [ 760.222661][T12544] loop3: p249 start 2164300032 is beyond EOD, truncated [ 760.251347][T12544] loop3: p250 start 2164300032 is beyond EOD, truncated [ 760.260090][T12544] loop3: p251 start 2164300032 is beyond EOD, truncated [ 760.269684][T12544] loop3: p252 start 2164300032 is beyond EOD, truncated [ 760.295368][T12544] loop3: p253 start 2164300032 is beyond EOD, truncated [ 760.333680][T12544] loop3: p254 start 2164300032 is beyond EOD, truncated [ 760.340875][T12544] loop3: p255 start 2164300032 is beyond EOD, truncated [ 761.175429][ T49] Bluetooth: hci5: command tx timeout [ 761.536254][T12712] chnl_net:caif_netlink_parms(): no params data found [ 763.259270][ T49] Bluetooth: hci5: command tx timeout [ 763.759050][T12759] binder: 12758:12759 ioctl c0306201 0 returned -14 [ 764.277185][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.316988][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.367134][T12712] bridge_slave_0: entered allmulticast mode [ 764.440842][T12712] bridge_slave_0: entered promiscuous mode [ 764.536886][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.580580][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.622393][T12712] bridge_slave_1: entered allmulticast mode [ 764.673830][T12766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.686325][T12712] bridge_slave_1: entered promiscuous mode [ 765.242093][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.331667][ T49] Bluetooth: hci5: command tx timeout [ 765.373083][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.847647][T12712] team0: Port device team_slave_0 added [ 765.853610][T12775] loop0: detected capacity change from 0 to 128 [ 765.967437][T12712] team0: Port device team_slave_1 added [ 766.379342][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.422098][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.491429][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.584239][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.640160][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.761601][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.265414][T12792] loop7: detected capacity change from 0 to 128 [ 767.411670][ T49] Bluetooth: hci5: command tx timeout [ 767.540705][T12712] hsr_slave_0: entered promiscuous mode [ 767.579981][T12712] hsr_slave_1: entered promiscuous mode [ 767.634375][T12712] debugfs: 'hsr0' already exists in 'hsr' [ 767.640306][T12712] Cannot create hsr debugfs directory [ 767.982452][T12795] loop6: detected capacity change from 0 to 2048 [ 768.138562][ T5925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.520409][ T5925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.888280][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.897142][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.905946][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.914595][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.923336][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.931977][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.940564][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.949473][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.958241][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.084800][ T793] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 769.264725][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 769.291160][ T793] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.302871][ T793] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.359357][ T793] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.367324][T12817] loop7: detected capacity change from 0 to 128 [ 769.369491][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.427446][ T793] usb 7-1: Product: syz [ 769.439405][ T793] usb 7-1: Manufacturer: syz [ 769.450300][ T793] usb 7-1: SerialNumber: syz [ 769.731159][ T5925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.744482][ T793] usb 7-1: 0:2 : does not exist [ 769.860588][ T793] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 769.923049][ T5925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.641502][ T793] usb 7-1: USB disconnect, device number 8 [ 771.150941][T12832] loop1: detected capacity change from 0 to 128 [ 771.399235][T12668] udevd[12668]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 771.572285][ T5925] bridge_slave_1: left allmulticast mode [ 771.619752][ T5925] bridge_slave_1: left promiscuous mode [ 771.671011][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.738304][ T5925] bridge_slave_0: left allmulticast mode [ 771.754399][ T5925] bridge_slave_0: left promiscuous mode [ 771.803466][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.885500][T12835] loop0: detected capacity change from 0 to 2048 [ 773.139746][ T5925] batman_adv: batadv0: Removing interface: macvlan2 [ 773.193654][ T5925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.264752][ T5925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.299655][ T5925] bond0 (unregistering): Released all slaves [ 773.414959][T10267] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 773.571898][T10267] usb 2-1: Using ep0 maxpacket: 32 [ 773.603603][T10267] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 773.616297][T10267] usb 2-1: config 0 has no interface number 0 [ 773.632827][T10267] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 773.645536][T10267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.654457][T10267] usb 2-1: Product: syz [ 773.659755][T10267] usb 2-1: Manufacturer: syz [ 773.667183][T10267] usb 2-1: SerialNumber: syz [ 773.684440][T10267] usb 2-1: config 0 descriptor?? [ 774.765729][T10267] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 774.811765][T10267] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 774.837798][T10267] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 774.863477][T10267] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 774.895284][T10267] usb 2-1: USB disconnect, device number 18 [ 774.950044][T12712] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 774.983315][T12712] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 775.261713][ T794] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 775.274589][T12712] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 775.409991][T12712] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 775.481656][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 775.512733][ T794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.551593][ T794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 775.620597][ T794] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 775.663920][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.693371][ T794] usb 1-1: Product: syz [ 775.702764][ T794] usb 1-1: Manufacturer: syz [ 775.707579][ T794] usb 1-1: SerialNumber: syz [ 775.716366][ T5925] hsr_slave_0: left promiscuous mode [ 775.765667][ T5925] hsr_slave_1: left promiscuous mode [ 775.828712][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.906121][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.987979][T12872] loop1: detected capacity change from 0 to 256 [ 776.003169][ T5925] veth0_macvtap: left promiscuous mode [ 776.009218][ T5925] veth1_vlan: left promiscuous mode [ 776.063890][ T794] usb 1-1: 0:2 : does not exist [ 776.090044][ T5925] veth0_vlan: left promiscuous mode [ 776.161984][ T794] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 776.593769][ T794] usb 1-1: USB disconnect, device number 20 [ 776.951719][T12876] loop7: detected capacity change from 0 to 2048 [ 777.080288][T12879] loop1: detected capacity change from 0 to 2048 [ 777.085366][T12668] udevd[12668]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.268325][T12879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.451078][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.473679][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.571406][ T29] audit: type=1800 audit(1770979703.376:301): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2498" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 777.947227][T12885] input: syz0 as /devices/virtual/input/input37 [ 778.404537][ T5925] team0 (unregistering): Port device team_slave_1 removed [ 778.595858][ T5925] team0 (unregistering): Port device team_slave_0 removed [ 778.869444][T12892] loop7: detected capacity change from 0 to 16 [ 778.928500][T12892] erofs (device loop7): mounted with root inode @ nid 36. [ 779.123581][T12892] syz.7.2504: attempt to access beyond end of device [ 779.123581][T12892] loop7: rw=524288, sector=44083543801856, nr_sectors = 64 limit=16 [ 779.259362][T12892] syz.7.2504: attempt to access beyond end of device [ 779.259362][T12892] loop7: rw=8388608, sector=44083543801856, nr_sectors = 8 limit=16 [ 779.372877][T12892] erofs (device loop7): failed to readdir of logical block 0 of nid 46 [ 779.422738][T12899] netlink: 3900 bytes leftover after parsing attributes in process `syz.1.2506'. [ 780.358146][T12907] bond1: option resend_igmp: invalid value (2878) [ 780.364919][T12907] bond1: option resend_igmp: allowed values 0 - 255 [ 780.392182][T12907] bond1 (unregistering): Released all slaves [ 780.393394][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 780.466059][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 780.511118][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2507'. [ 780.530040][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2508'. [ 780.565084][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2508'. [ 781.143092][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.316099][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.443653][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.451414][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.584658][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.592339][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.090259][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2516'. [ 782.933422][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 783.112321][T12946] netlink: 3900 bytes leftover after parsing attributes in process `syz.6.2519'. [ 784.191115][T12712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.712432][T12958] loop1: detected capacity change from 0 to 4096 [ 784.772958][T12958] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 784.830578][T12971] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.2526'. [ 784.856465][T12958] ntfs3(loop1): ino=3, mi_enum_attr [ 785.283647][ T29] audit: type=1800 audit(1770979711.086:302): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2522" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 786.375549][T12986] loop0: detected capacity change from 0 to 2048 [ 786.554166][T12986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.676314][ T29] audit: type=1800 audit(1770979712.486:303): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2531" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 786.827733][T12991] loop7: detected capacity change from 0 to 2048 [ 787.097389][T12991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.195790][T12991] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.633563][T12712] veth0_vlan: entered promiscuous mode [ 787.828194][T12712] veth1_vlan: entered promiscuous mode [ 788.017653][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.420789][T12712] veth0_macvtap: entered promiscuous mode [ 788.578549][T12712] veth1_macvtap: entered promiscuous mode [ 788.659455][T13014] input: syz0 as /devices/virtual/input/input38 [ 788.809452][T12712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.024192][T12712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.282020][ T5925] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.329748][T13022] loop8: detected capacity change from 0 to 7 [ 789.376575][T13022] Dev loop8: unable to read RDB block 7 [ 789.381567][ T1100] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.391991][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.421918][T13022] loop8: unable to read partition table [ 789.474873][T13022] loop8: partition table beyond EOD, truncated [ 789.498361][ T53] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.541534][T13022] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 789.793432][T13030] loop7: detected capacity change from 0 to 64 [ 789.842819][T13030] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 790.251893][T13027] loop0: detected capacity change from 0 to 4096 [ 790.280192][T13027] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 790.320017][T13027] ntfs3(loop0): ino=3, mi_enum_attr [ 790.806868][ T29] audit: type=1800 audit(1770979716.616:304): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2541" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 794.481460][T13092] loop6: detected capacity change from 0 to 128 [ 794.572309][T13092] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 794.591680][T13094] loop8: detected capacity change from 0 to 7 [ 794.631551][T13092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.660354][T13094] Dev loop8: unable to read RDB block 7 [ 794.666333][T13097] loop7: detected capacity change from 0 to 256 [ 794.716082][T13094] loop8: unable to read partition table [ 794.739715][T13094] loop8: partition table beyond EOD, truncated [ 794.772987][T13097] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 794.816058][T13094] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 795.067010][T13097] FAT-fs (loop7): Directory bread(block 64) failed [ 795.099752][T13097] FAT-fs (loop7): Directory bread(block 65) failed [ 795.131118][T13097] FAT-fs (loop7): Directory bread(block 66) failed [ 795.182774][T13097] FAT-fs (loop7): Directory bread(block 67) failed [ 795.223511][T13097] FAT-fs (loop7): Directory bread(block 68) failed [ 795.234494][T13097] FAT-fs (loop7): Directory bread(block 69) failed [ 795.264355][T13097] FAT-fs (loop7): Directory bread(block 70) failed [ 795.292402][T13097] FAT-fs (loop7): Directory bread(block 71) failed [ 795.299302][T13097] FAT-fs (loop7): Directory bread(block 72) failed [ 795.403176][T13097] FAT-fs (loop7): Directory bread(block 73) failed [ 795.917945][T13108] loop0: detected capacity change from 0 to 256 [ 796.005213][T13108] exfat: Deprecated parameter 'utf8' [ 796.232730][T13108] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 797.440896][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.496362][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.689302][T13128] input: syz1 as /devices/virtual/input/input39 [ 797.820800][T11559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.856856][T11559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.659655][T13140] loop7: detected capacity change from 0 to 256 [ 799.789078][T13155] loop7: detected capacity change from 0 to 128 [ 799.863416][T13155] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 799.897031][T13155] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.046549][T13155] syz.7.2578 (pid 13155) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 800.494576][T10712] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 802.318313][T13189] loop8: detected capacity change from 0 to 1024 [ 802.520574][T13189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 802.552061][T13189] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.582309][T13189] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2590: lblock 0 mapped to illegal pblock 0 (length 6) [ 802.618210][T13189] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2590: lblock 0 mapped to illegal pblock 0 (length 1) [ 802.701961][T13189] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 802.733432][T13195] loop0: detected capacity change from 0 to 512 [ 802.790014][T13189] EXT4-fs (loop8): This should not happen!! Data will be lost [ 802.790014][T13189] [ 803.013295][ C1] net_ratelimit: 631 callbacks suppressed [ 803.013369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.374436][T12712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 804.491519][ T793] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 804.722396][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 804.738518][ T793] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 804.811862][ T793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 804.841350][ T793] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 804.850656][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.902755][ T793] usb 2-1: config 0 descriptor?? [ 805.012499][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2601'. [ 805.192468][ T793] usbhid 2-1:0.0: can't add hid device: -71 [ 805.237665][ T793] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 805.311667][ T793] usb 2-1: USB disconnect, device number 19 [ 805.791506][ T793] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 805.925999][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2604'. [ 805.981568][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 805.981683][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2604'. [ 806.024328][ T793] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 806.117217][ T793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 806.159360][T13236] loop6: detected capacity change from 0 to 256 [ 806.176438][ T793] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 806.235798][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.295599][ T793] usb 2-1: config 0 descriptor?? [ 806.347695][T13236] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 806.351005][T13232] loop8: detected capacity change from 0 to 4096 [ 806.799411][ T793] saitek 0003:06A3:0621.0018: item fetching failed at offset 2/5 [ 806.851123][ T793] saitek 0003:06A3:0621.0018: parse failed [ 806.924874][ T793] saitek 0003:06A3:0621.0018: probe with driver saitek failed with error -22 [ 807.062331][ T793] usb 2-1: USB disconnect, device number 20 [ 808.731518][T13262] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 809.926340][T13283] sctp: [Deprecated]: syz.0.2620 (pid 13283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.926340][T13283] Use struct sctp_sack_info instead [ 809.932971][T13281] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 810.696163][ T5786] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 810.938836][ T5786] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 810.975189][ T5786] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 811.029641][ T5786] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.094879][ T5786] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.124814][ T5786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.159232][ T5786] usb 7-1: Product: syz [ 811.186205][ T5786] usb 7-1: Manufacturer: syz [ 811.207898][ T5786] usb 7-1: SerialNumber: syz [ 811.410245][T13300] loop1: detected capacity change from 0 to 2048 [ 811.463391][T13300] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 811.575514][T13290] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2623'. [ 811.611645][T13300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.842920][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 811.892955][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 811.902593][ T794] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 811.936617][ T5786] usb 7-1: 0:2 : does not exist [ 812.331860][ T794] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.581778][T13315] sock: sock_set_timeout: `syz.0.2630' (pid 13315) tries to set negative timeout [ 812.748489][ T5786] usb 7-1: USB disconnect, device number 9 [ 812.852001][ T794] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 813.440686][T13331] loop6: detected capacity change from 0 to 256 [ 813.542115][T12668] udevd[12668]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.728189][T13343] loop6: detected capacity change from 0 to 512 [ 814.808149][T13343] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 814.881416][T13343] EXT4-fs (loop6): orphan cleanup on readonly fs [ 814.898059][T13343] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2640: Block bitmap for bg 0 marked uninitialized [ 815.030997][T13343] loop6: lost filesystem error report for type 5 error -117 [ 815.031316][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 815.045461][ C1] EXT4-fs (loop6): initial error at time 1770979740: ext4_read_block_bitmap_nowait:517 [ 815.055734][ C1] EXT4-fs (loop6): last error at time 1770979740: ext4_read_block_bitmap_nowait:517 [ 815.159287][T13343] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 815.205837][T13343] loop6: lost filesystem error report for type 5 error -117 [ 815.220263][T13343] EXT4-fs (loop6): 1 orphan inode deleted [ 815.274193][T13343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 815.419313][T13343] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 815.571855][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 815.617369][T13343] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 816.084605][ T9987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.759820][T13372] loop6: detected capacity change from 0 to 512 [ 816.924615][T13372] FAT-fs (loop6): Directory bread(block 199916) failed [ 816.973119][T13372] FAT-fs (loop6): Directory bread(block 199917) failed [ 817.001897][T13372] FAT-fs (loop6): Directory bread(block 199918) failed [ 817.029890][T13372] FAT-fs (loop6): Directory bread(block 199919) failed [ 817.069701][T13372] FAT-fs (loop6): Directory bread(block 199920) failed [ 817.120933][T13372] FAT-fs (loop6): Directory bread(block 199921) failed [ 817.163561][T13372] FAT-fs (loop6): Directory bread(block 199922) failed [ 817.232343][T13372] FAT-fs (loop6): Directory bread(block 199923) failed [ 817.400580][T13372] FAT-fs (loop6): Directory bread(block 199916) failed [ 817.482885][T13372] FAT-fs (loop6): Directory bread(block 199917) failed [ 818.677570][T13399] loop1: detected capacity change from 0 to 128 [ 818.729612][T13399] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 818.804543][ T794] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 818.830667][T13399] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 819.031732][ T794] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 819.081387][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.158251][ T794] usb 8-1: config 0 descriptor?? [ 819.230013][ T794] cp210x 8-1:0.0: cp210x converter detected [ 819.464874][ T5893] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 819.753302][ T794] usb 8-1: cp210x converter now attached to ttyUSB0 [ 819.933414][ T793] usb 8-1: USB disconnect, device number 6 [ 819.987429][T13406] loop8: detected capacity change from 0 to 512 [ 820.014842][ T793] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 820.136323][ T29] audit: type=1800 audit(1770979745.936:305): pid=13406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2660" name="file2" dev="loop8" ino=1048708 res=0 errno=0 [ 820.172578][ T793] cp210x 8-1:0.0: device disconnected [ 820.173789][T13406] FAT-fs (loop8): error, corrupted file size (i_pos 51, 8960) [ 820.208921][T13406] FAT-fs (loop8): Filesystem has been set read-only [ 820.217944][T13406] FAT-fs (loop8): error, corrupted file size (i_pos 51, 8960) [ 821.615371][T13425] loop7: detected capacity change from 0 to 512 [ 821.876448][T13425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.969475][T13425] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.330175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 822.744844][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.851831][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 823.496322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.564763][T13459] input: syz1 as /devices/virtual/input/input40 [ 824.231468][ T794] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 824.446427][ T794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 824.502212][ T794] usb 7-1: config 1 has no interface number 0 [ 824.508885][ T794] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.611728][ T794] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 824.641538][ T794] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 824.713104][ T794] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 824.764291][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.812744][ T794] usb 7-1: Product: syz [ 824.833504][ T794] usb 7-1: Manufacturer: syz [ 824.893374][ T794] usb 7-1: SerialNumber: syz [ 825.898155][ T794] cdc_ncm 7-1:1.1: bind() failure [ 826.161582][ T794] usb 7-1: USB disconnect, device number 10 [ 827.178289][T13490] loop7: detected capacity change from 0 to 2048 [ 827.280068][T13490] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 827.446566][T13495] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 827.528165][T13493] loop0: detected capacity change from 0 to 2048 [ 827.597877][T13500] loop6: detected capacity change from 0 to 524287999 [ 827.655810][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2692'. [ 827.666063][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 827.753379][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 827.766217][T13493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.781931][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 827.844611][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 827.920304][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 828.028696][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 828.037161][T13493] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 828.092175][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 828.100563][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 828.147801][T13493] overlayfs: failed to verify upper root origin [ 828.184554][T12836] ldm_validate_partition_table(): Disk read failed. [ 828.204197][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 828.215049][T12836] Buffer I/O error on dev loop6, logical block 0, async page read [ 828.302126][T12836] Dev loop6: unable to read RDB block 0 [ 828.308452][T12836] loop6: unable to read partition table [ 828.346013][T13500] ldm_validate_partition_table(): Disk read failed. [ 828.420560][T13500] Dev loop6: unable to read RDB block 0 [ 828.477299][T13500] loop6: unable to read partition table [ 828.572315][T13500] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 828.620502][T13502] ldm_validate_partition_table(): Disk read failed. [ 828.656403][T10833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.698356][T13502] Dev loop6: unable to read RDB block 0 [ 828.792283][T13502] loop6: unable to read partition table [ 828.798894][T13502] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 829.387163][T13520] loop0: detected capacity change from 0 to 512 [ 829.466156][T13520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 829.541893][T13520] EXT4-fs (loop0): 1 truncate cleaned up [ 829.575572][T13520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.976324][T13524] loop7: detected capacity change from 0 to 512 [ 829.984691][T13527] netlink: 'syz.8.2699': attribute type 1 has an invalid length. [ 830.037929][T13527] netlink: 'syz.8.2699': attribute type 2 has an invalid length. [ 830.106916][T13524] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2697: iget: bad i_size value: 38620345925642 [ 830.150997][T13524] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 830.157692][T13524] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2697: couldn't read orphan inode 15 (err -117) [ 830.168051][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 830.168152][ C1] EXT4-fs (loop7): initial error at time 1770979755: ext4_orphan_get:1391: inode 15 [ 830.168316][ C1] EXT4-fs (loop7): last error at time 1770979755: ext4_orphan_get:1391: inode 15 [ 830.308425][T13524] loop7: lost filesystem error report for type 5 error -117 [ 830.315777][T13524] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.603704][T13524] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2697: bg 0: block 5: invalid block bitmap [ 830.634105][T10833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.743972][T13524] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 830.807362][T13524] EXT4-fs (loop7): This should not happen!! Data will be lost [ 830.807362][T13524] [ 830.867051][T13524] EXT4-fs (loop7): Total free blocks count 0 [ 830.917023][T13524] EXT4-fs (loop7): Free/Dirty block details [ 830.942358][T13524] EXT4-fs (loop7): free_blocks=0 [ 830.947491][T13524] EXT4-fs (loop7): dirty_blocks=65 [ 830.989805][T13524] EXT4-fs (loop7): Block reservation details [ 831.051554][T13524] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 831.466007][ T1100] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 831.963178][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.002336][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.107842][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.200020][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.246416][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.293995][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.325101][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.402313][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.470306][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.572801][T13552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.334635][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2713'. [ 833.432295][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2713'. [ 834.316691][T13584] binder: 13581:13584 ioctl c018620c 80000200 returned -1 [ 834.760013][T13588] loop0: detected capacity change from 0 to 1024 [ 835.216355][T13598] loop1: detected capacity change from 0 to 128 [ 835.457667][T13598] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 835.661337][T13598] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 835.987747][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'. [ 836.036742][T13607] loop8: detected capacity change from 0 to 512 [ 836.102948][T13607] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 836.317146][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 836.931862][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 837.119594][T13616] loop1: detected capacity change from 0 to 1024 [ 837.398317][T13616] hfsplus: request for non-existent node 33554434 in B*Tree [ 837.431629][T13616] hfsplus: request for non-existent node 33554434 in B*Tree [ 837.439123][T13622] loop8: detected capacity change from 0 to 64 [ 837.476391][T13622] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 838.258460][T13625] net_ratelimit: 16 callbacks suppressed [ 838.258536][T13625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.275721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.880627][T13626] loop0: detected capacity change from 0 to 4096 [ 838.888608][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.896251][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.572764][T13637] overlayfs: statfs failed on './file0' [ 839.677571][T11437] tipc: Subscription rejected, illegal request [ 840.619166][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'. [ 842.015193][T13672] delete_channel: no stack [ 842.572064][T13681] loop7: detected capacity change from 0 to 512 [ 842.622872][T13681] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 842.651554][ T5786] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 842.736733][T13681] EXT4-fs (loop7): 1 truncate cleaned up [ 842.820774][T13681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.905975][ T5786] usb 1-1: Using ep0 maxpacket: 8 [ 842.952543][ T5786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 842.994760][ T5786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.071868][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 843.117622][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 843.168980][ T5786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.190533][T13691] loop8: detected capacity change from 0 to 256 [ 843.253287][ T5786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 843.330075][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.373176][T13691] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 843.654398][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.672115][ T5786] usb 1-1: GET_CAPABILITIES returned 2f [ 843.701532][ T5786] usbtmc 1-1:16.0: can't read capabilities [ 843.898830][ T5786] usb 1-1: USB disconnect, device number 21 [ 844.735051][T13703] loop1: detected capacity change from 0 to 1024 [ 844.934900][T13703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.559259][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.801834][ T5828] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 846.048259][ T5828] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 846.087792][ T5828] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 846.120008][ T5828] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 846.218172][ T5828] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 846.271714][ T5828] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.279940][ T5828] usb 9-1: Product: syz [ 846.319806][ T5828] usb 9-1: Manufacturer: syz [ 846.338163][ T5828] usb 9-1: SerialNumber: syz [ 846.670798][T13720] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2767'. [ 846.990874][T11559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 847.040474][T13508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 847.050866][T11559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 847.092278][ T5828] usb 9-1: 0:2 : does not exist [ 847.169210][T13508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 847.311881][T13738] loop1: detected capacity change from 0 to 1024 [ 847.680503][ T5828] usb 9-1: USB disconnect, device number 2 [ 847.805143][T13744] hfsplus: b-tree write err: -5, ino 2 [ 848.052082][T13508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 848.333072][T13749] mkiss: ax0: crc mode is auto. [ 848.394930][T13750] loop7: detected capacity change from 0 to 512 [ 848.571673][T13750] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.2775: corrupted in-inode xattr: e_value size too large [ 848.607002][T12668] udevd[12668]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 848.681778][T13750] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 848.691369][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 848.707421][ C0] EXT4-fs (loop7): initial error at time 1770979774: ext4_iget_extra_inode:5025: inode 15 [ 848.714319][ T53] hfsplus: b-tree write err: -5, ino 25 [ 848.717724][ C0] EXT4-fs (loop7): last error at time 1770979774: ext4_iget_extra_inode:5025: inode 15 [ 848.774485][T13750] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2775: couldn't read orphan inode 15 (err -117) [ 848.831467][T13750] loop7: lost filesystem error report for type 5 error -117 [ 848.835342][ T53] hfsplus: b-tree write err: -5, ino 4 [ 848.835783][T13750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.901929][ T53] hfsplus: b-tree write err: -5, ino 2 [ 848.941716][ T53] hfsplus: b-tree write err: -5, ino 26 [ 849.604720][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.857785][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.297213][T13788] loop7: detected capacity change from 0 to 1024 [ 851.493995][T13791] loop1: detected capacity change from 0 to 64 [ 851.545959][T13788] hfsplus: xattr searching failed [ 851.571579][T13788] hfsplus: xattr searching failed [ 851.579238][T13791] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 851.828819][T13798] loop0: detected capacity change from 0 to 128 [ 852.670596][T13800] loop6: detected capacity change from 0 to 4096 [ 852.764251][T13800] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 852.905756][T13800] ntfs3(loop6): ino=3, mi_enum_attr [ 853.501342][ T29] audit: type=1800 audit(1770979779.306:306): pid=13800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2792" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 854.688986][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 854.771521][T13825] netlink: 'syz.1.2801': attribute type 18 has an invalid length. [ 854.871510][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2801'. [ 855.851068][T13843] loop8: detected capacity change from 0 to 512 [ 855.894898][T13844] loop1: detected capacity change from 0 to 256 [ 855.978093][T13844] exfat: Deprecated parameter 'utf8' [ 856.023900][T13843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.157205][T13844] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 856.184409][T13847] loop0: detected capacity change from 0 to 1024 [ 856.480521][T12712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.772023][T13858] hfsplus: b-tree write err: -5, ino 2 [ 857.652856][ T127] hfsplus: b-tree write err: -5, ino 25 [ 857.702037][ T127] hfsplus: b-tree write err: -5, ino 4 [ 857.707929][ T127] hfsplus: b-tree write err: -5, ino 2 [ 857.746204][ T127] hfsplus: b-tree write err: -5, ino 26 [ 857.883877][T13869] loop1: detected capacity change from 0 to 2048 [ 858.051849][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.061605][T13875] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 859.912993][ T794] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 860.145712][ T794] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 860.200839][ T794] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 860.275344][ T794] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.372460][ T794] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 860.400600][T13908] loop1: detected capacity change from 0 to 1024 [ 860.452196][ T794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.515288][ T794] usb 8-1: Product: syz [ 860.581955][ T794] usb 8-1: Manufacturer: syz [ 860.612327][ T794] usb 8-1: SerialNumber: syz [ 860.803702][T13908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 860.936835][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2824'. [ 861.170723][T13921] loop0: detected capacity change from 0 to 164 [ 861.205819][T13922] loop8: detected capacity change from 0 to 256 [ 861.234408][T11559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 861.287477][ T5786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 861.293160][T13922] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 861.300710][T11559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 861.332716][ T794] usb 8-1: 0:2 : does not exist [ 861.368818][T13922] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 861.380600][T13921] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 861.503946][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.692029][ T5786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 861.972313][ T5786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 862.022438][ T794] usb 8-1: USB disconnect, device number 7 [ 862.286732][T13929] loop0: detected capacity change from 0 to 512 [ 862.344810][T13929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 862.373019][T13927] loop1: detected capacity change from 0 to 2048 [ 862.416963][T13929] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2832: inode has both inline data and extents flags [ 862.438288][T13927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 862.472518][T13929] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.475086][T13929] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2832: couldn't read orphan inode 15 (err -117) [ 862.484853][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 862.484948][ C0] EXT4-fs (loop0): initial error at time 1770979788: ext4_orphan_get:1391: inode 15 [ 862.485117][ C0] EXT4-fs (loop0): last error at time 1770979788: ext4_orphan_get:1391: inode 15 [ 862.583811][T13929] loop0: lost filesystem error report for type 5 error -117 [ 862.650866][ T29] audit: type=1800 audit(1770979788.446:307): pid=13927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2831" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 862.658153][T12836] udevd[12836]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.779594][T13929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.905536][ T5786] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 863.116608][ T5786] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 863.178617][ T5786] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 863.263042][ T5786] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 863.351577][ T5786] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.457258][ T5786] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.497818][T10833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.509367][ T5786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.602728][ T5786] usb 8-1: config 0 descriptor?? [ 863.811792][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.135565][T13946] netlink: 'syz.8.2840': attribute type 4 has an invalid length. [ 864.169992][T13946] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2840'. [ 864.195450][ T5786] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 864.446069][ T794] usb 8-1: USB disconnect, device number 8 [ 864.939122][T13953] fido_id[13953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 865.251876][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 865.805648][T13969] loop1: detected capacity change from 0 to 128 [ 865.968359][T13969] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 866.000512][T13963] loop8: detected capacity change from 0 to 4096 [ 866.057523][T13969] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.565905][ T12] tipc: Subscription rejected, illegal request [ 866.688058][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 866.766399][T13976] loop7: detected capacity change from 0 to 1024 [ 866.940597][T13976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 866.968072][T13976] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.011620][ T5786] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 867.148675][T13976] EXT4-fs (loop7): shut down requested (0) [ 867.193193][ T5786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.229260][ T5786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.291419][ T5786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 867.380384][ T5786] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 867.431491][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.494656][ T5786] usb 1-1: config 0 descriptor?? [ 867.673315][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 867.743732][ T794] kernel write not supported for file bpf-prog (pid: 794 comm: kworker/1:2) [ 868.007403][ T5786] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 868.036318][ T5786] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 868.148301][ T5786] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 868.291562][ T5786] usb 1-1: USB disconnect, device number 22 [ 869.130860][T13999] fido_id[13999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 869.359769][T14008] loop6: detected capacity change from 0 to 128 [ 869.643128][T14008] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 869.713596][T14008] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.522460][ T9987] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 870.742180][T14023] loop1: detected capacity change from 0 to 128 [ 870.919057][T14023] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 870.968408][T14023] hpfs: filesystem error: improperly stopped [ 871.034760][T14023] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 871.049040][T14025] loop6: detected capacity change from 0 to 1024 [ 871.094936][T14025] EXT4-fs: Ignoring removed orlov option [ 871.101038][T14025] EXT4-fs: inline encryption not supported [ 871.111781][T14023] hpfs: You really don't want any checks? You are crazy... [ 871.119556][T14023] hpfs: hpfs_map_sector(): read error [ 871.164532][T14025] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 871.175574][T14023] hpfs: code page support is disabled [ 871.196051][T14023] hpfs: hpfs_map_4sectors(): unaligned read [ 871.202972][T14025] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 871.223471][T14023] hpfs: hpfs_map_4sectors(): unaligned read [ 871.283897][T14023] hpfs: filesystem error: unable to find root dir [ 871.291666][T14025] EXT4-fs (loop6): invalid journal inode [ 871.297572][T14025] EXT4-fs (loop6): can't get journal size [ 871.368671][T14025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 871.944382][ T9987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.363870][ T794] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 872.598883][ T794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.641376][ T794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.702331][ T794] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 872.731398][ T794] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 872.771727][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 872.771738][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 872.800401][ T794] usb 8-1: Manufacturer: syz [ 872.833726][ T794] usb 8-1: config 0 descriptor?? [ 873.169460][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.232460][T14051] netlink: 'syz.0.2879': attribute type 61 has an invalid length. [ 873.250153][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 873.541894][ T794] uclogic 0003:256C:006D.001B: failed retrieving Huion firmware version: -71 [ 873.589864][ T794] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 873.622900][ T794] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 873.692807][ T794] usb 8-1: USB disconnect, device number 9 [ 875.090305][T14071] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 875.565289][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.605770][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.742083][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.825904][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.889358][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.946083][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.120735][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.092391][ T5786] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 877.277448][ T5786] usb 8-1: Using ep0 maxpacket: 32 [ 877.301673][ T5786] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.323400][ T5786] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.366448][ T5786] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 877.399691][ T5786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.444405][ T5786] usb 8-1: config 0 descriptor?? [ 877.483710][ T5786] hub 8-1:0.0: USB hub found [ 877.691724][ T5786] hub 8-1:0.0: 1 port detected [ 878.129171][ T5786] usb 8-1: USB disconnect, device number 10 [ 878.338016][T14096] can0: slcan on ttyS3. [ 878.445909][T14096] can0 (unregistered): slcan off ttyS3. [ 879.348807][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.573043][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.644243][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.687874][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.721785][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.766244][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.805927][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.865944][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.908971][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.918555][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.338699][T14121] batadv_slave_1: entered promiscuous mode [ 880.429463][T14119] batadv_slave_1: left promiscuous mode [ 881.174263][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 881.231866][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 881.381680][ T794] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 881.609209][ T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.641844][ T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.671742][ T794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 881.734702][ T794] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 881.778083][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.886580][ T794] usb 7-1: config 0 descriptor?? [ 881.894489][T14114] Bluetooth: hci5: command 0x0406 tx timeout [ 882.379860][ T794] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 882.441958][ T5786] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 882.446097][ T794] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 882.510459][ T794] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 882.641485][ T5786] usb 2-1: Using ep0 maxpacket: 32 [ 882.675934][ T794] usb 7-1: USB disconnect, device number 11 [ 882.711528][ T5786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 882.784510][ T5786] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 882.808204][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.851579][ T5786] usb 2-1: Product: syz [ 882.855957][ T5786] usb 2-1: Manufacturer: syz [ 882.860734][ T5786] usb 2-1: SerialNumber: syz [ 882.928797][ T5786] usb 2-1: config 0 descriptor?? [ 883.368047][T14148] fido_id[14148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 883.465149][ T5786] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 883.887518][ T5786] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 883.933012][ T5786] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 884.085633][ T794] usb 2-1: USB disconnect, device number 21 [ 885.471895][T14176] loop6: detected capacity change from 0 to 512 [ 885.641500][T14176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.722591][T14176] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.199155][ T9987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.021701][ T5786] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 887.191923][ T5786] usb 7-1: Using ep0 maxpacket: 32 [ 887.260276][ T5786] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 887.311698][ T5786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.361555][ T5786] usb 7-1: Product: syz [ 887.365953][ T5786] usb 7-1: Manufacturer: syz [ 887.370718][ T5786] usb 7-1: SerialNumber: syz [ 887.425399][ T5786] usb 7-1: config 0 descriptor?? [ 887.492128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 887.752983][ T5786] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 012 [ 888.009359][T14192] i2c i2c-1: failure reading data [ 888.083771][ T5786] usb 7-1: USB disconnect, device number 12 [ 888.871640][T14217] net_ratelimit: 51 callbacks suppressed [ 888.871718][T14217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.936328][T14217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.983915][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2951'. [ 888.993724][T14217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.042677][T14219] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2951'. [ 889.080000][T14217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.140648][T14224] macvlan0: entered allmulticast mode [ 889.156777][T14217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.166307][T14224] veth1_vlan: entered allmulticast mode [ 889.216036][T14224] veth1_vlan: left allmulticast mode [ 889.246726][T14216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.312658][T14224] macvlan0 (unregistering): left allmulticast mode [ 889.932254][ T794] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 889.954406][T13508] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 890.155631][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.180327][T13508] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 890.216764][T13508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.225804][ T794] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 890.247884][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.259832][T13508] usb 1-1: config 0 descriptor?? [ 890.308898][ T794] usb 9-1: config 0 descriptor?? [ 890.885749][ T794] lenovo 0003:17EF:6047.001D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 890.988503][T13508] usb 1-1: Cannot set autoneg [ 891.010203][T13508] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 891.028263][T14242] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2961'. [ 891.105129][T13508] usb 1-1: USB disconnect, device number 23 [ 891.441794][ T794] lenovo 0003:17EF:6047.001D: Fn-lock setting failed: -71 [ 891.463047][ T794] lenovo 0003:17EF:6047.001D: Sensitivity setting failed: -71 [ 891.551624][ T794] usb 9-1: USB disconnect, device number 3 [ 891.645991][T14248] fido_id[14248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:17EF:6047.001D/report_descriptor': No such device [ 891.765194][T14250] loop1: detected capacity change from 0 to 1024 [ 891.786067][T14252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.804704][T14250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 891.842188][T14252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.851489][T14252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.973675][T14252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.251645][ T5786] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 892.591646][ T5786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.141340][ T5786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.213573][ T5786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.231821][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.261524][ T5786] usb 2-1: Product: syz [ 893.265905][ T5786] usb 2-1: Manufacturer: syz [ 893.270682][ T5786] usb 2-1: SerialNumber: syz [ 893.958214][ T5786] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 894.290287][ T5786] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 894.309750][ T5786] usb 2-1: USB disconnect, device number 22 [ 894.386121][T12668] udevd[12668]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.901705][ T794] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 896.093709][ T794] usb 7-1: Using ep0 maxpacket: 16 [ 896.131799][ T794] usb 7-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 896.170495][ T794] usb 7-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 896.230322][ T794] usb 7-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.281409][ T794] usb 7-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.326935][ T794] usb 7-1: config 173 interface 0 has no altsetting 0 [ 896.359281][ T794] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 896.417061][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.640101][T14293] loop7: detected capacity change from 0 to 1024 [ 896.743367][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.816382][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.902562][T14293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.457578][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.524107][ T5786] kernel read not supported for file /usbmon8 (pid: 5786 comm: kworker/0:3) [ 897.594218][ T794] usb 7-1: USB disconnect, device number 13 [ 897.751558][ T5786] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 897.951555][ T5786] usb 9-1: Using ep0 maxpacket: 8 [ 898.005174][ T5786] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 898.041611][ T5786] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 898.086698][ T5786] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 898.121630][ T5786] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 898.158822][ T5786] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.259420][ T5786] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 898.331897][ T5786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.488278][T14312] loop0: detected capacity change from 0 to 1024 [ 898.552862][T14312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 898.629436][ T5786] usb 9-1: usb_control_msg returned -32 [ 898.665604][ T5786] usbtmc 9-1:16.0: can't read capabilities [ 898.982493][ T5786] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 899.199510][ T5786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.241534][ T5786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.309378][ T5786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 899.370595][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.409504][ T5786] usb 1-1: Product: syz [ 899.419277][ T5786] usb 1-1: Manufacturer: syz [ 899.425205][ T5786] usb 1-1: SerialNumber: syz [ 900.085942][ T5786] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 900.332458][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.340013][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.573486][T10267] usb 9-1: USB disconnect, device number 4 [ 900.668303][ T5786] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 900.762458][ T5786] usb 1-1: USB disconnect, device number 24 [ 901.219994][T12668] udevd[12668]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.297297][T14337] loop6: detected capacity change from 0 to 64 [ 901.478698][T14337] hfs: unable to locate alternate MDB [ 901.536205][T14337] hfs: continuing without an alternate MDB [ 901.571833][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 902.536573][T14351] smc: net device bond0 applied user defined pnetid SYZ2 [ 902.576028][T14351] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3004'. [ 902.656327][T14347] loop0: detected capacity change from 0 to 2048 [ 902.752038][T14351] smc: removing net device bond0 with user defined pnetid SYZ2 [ 902.756210][T14347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 902.868255][T14351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.063515][T14351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.204046][T14351] bond0 (unregistering): Released all slaves [ 903.219593][T10833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.232151][ T794] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 903.424670][ T794] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 903.456287][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.501041][ T794] usb 2-1: config 0 descriptor?? [ 903.610698][ T794] cp210x 2-1:0.0: cp210x converter detected [ 903.869729][T14362] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3010'. [ 903.991801][ T794] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 904.111956][ T794] usb 2-1: cp210x converter now attached to ttyUSB0 [ 904.408467][ T5786] usb 2-1: USB disconnect, device number 23 [ 904.483473][ T5786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 904.624960][ T5786] cp210x 2-1:0.0: device disconnected [ 904.876947][T14370] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3014'. [ 904.912341][T14370] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3014'. [ 904.989597][T14370] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3014'. [ 905.059980][T14370] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3014'. [ 905.274745][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3016'. [ 905.487599][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3017'. [ 905.524050][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3017'. [ 906.348074][T14385] loop8: detected capacity change from 0 to 1024 [ 906.528448][T14385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.577017][T14390] loop1: detected capacity change from 0 to 2048 [ 906.667614][T14385] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4224: comm syz.8.3020: Allocating blocks 385-513 which overlap fs metadata [ 906.726006][T14385] EXT4-fs (loop8): pa ffff88812d4024d0: logic 16, phys. 129, len 24 [ 906.736130][T14385] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 8 [ 906.742228][T14390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 907.280655][T12712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.300676][T14397] loop7: detected capacity change from 0 to 512 [ 907.444321][T14397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.472367][T14397] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.588661][T14397] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 908.085466][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.242744][T14418] ALSA: seq fatal error: cannot create timer (-19) [ 911.290993][T14443] loop8: detected capacity change from 0 to 1024 [ 911.512037][T14443] hfsplus: b-tree write err: -5, ino 2 [ 911.765749][T14450] capability: warning: `syz.0.3045' uses deprecated v2 capabilities in a way that may be insecure [ 911.799379][T11437] hfsplus: b-tree write err: -5, ino 25 [ 911.860069][T11437] hfsplus: b-tree write err: -5, ino 4 [ 911.914262][T11437] hfsplus: b-tree write err: -5, ino 2 [ 911.945437][T11437] hfsplus: b-tree write err: -5, ino 26 [ 912.008874][T14455] loop0: detected capacity change from 0 to 512 [ 912.148875][T14455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.181998][T14451] ALSA: seq fatal error: cannot create timer (-19) [ 912.270143][T14455] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.302715][T14461] loop8: detected capacity change from 0 to 1024 [ 912.314291][T14461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 912.384614][T14461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 912.473737][T14461] System zones: 0-1, 3-36 [ 912.568965][T14461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.691628][ T794] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 912.871525][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 912.923968][T10833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.933361][ T794] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 913.003827][ T794] usb 2-1: config 0 has no interface number 0 [ 913.031508][ T794] usb 2-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 913.087628][ T794] usb 2-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 913.151402][ T794] usb 2-1: config 0 interface 101 has no altsetting 0 [ 913.202542][ T794] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 913.214866][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.223486][ T794] usb 2-1: Product: syz [ 913.227830][ T794] usb 2-1: Manufacturer: syz [ 913.265415][T12712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.276168][ T794] usb 2-1: SerialNumber: syz [ 913.334123][ T794] usb 2-1: config 0 descriptor?? [ 913.664317][ T794] gspca_main: se401-2.14.0 probing 047d:5003 [ 914.571666][ T794] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 915.252135][ T794] gspca_se401: read req failed req 0x06 error -71 [ 915.269890][ T794] se401 2-1:0.101: probe with driver se401 failed with error -71 [ 915.312735][ T794] usb 2-1: USB disconnect, device number 24 [ 916.180795][T14497] loop0: detected capacity change from 0 to 1024 [ 917.571647][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 918.359533][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 918.407493][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 919.217311][T14535] loop0: detected capacity change from 0 to 64 [ 919.247546][T14529] loop8: detected capacity change from 0 to 4096 [ 919.310281][T14529] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 919.325004][T14537] loop1: detected capacity change from 0 to 1024 [ 919.749845][T10833] hfs: node 4:3 still has 1 user(s)! [ 920.729402][T14549] loop1: detected capacity change from 0 to 512 [ 920.771745][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 920.875787][T14549] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 921.026564][T14549] EXT4-fs (loop1): 1 truncate cleaned up [ 921.083482][T14549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.801904][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.245900][T14567] loop6: detected capacity change from 0 to 256 [ 922.344363][T14567] exfat: Unknown parameter '01777777777777777777777' [ 922.822141][T14577] loop7: detected capacity change from 0 to 1024 [ 923.728863][T14591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3101'. [ 924.147121][T14595] loop7: detected capacity change from 0 to 256 [ 924.198230][T14598] loop6: detected capacity change from 0 to 128 [ 924.820545][T14604] loop0: detected capacity change from 0 to 512 [ 924.848157][T14606] binder: 14605:14606 ioctl c0306201 0 returned -14 [ 925.034163][T14604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.159632][T14604] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.530912][T14615] net_ratelimit: 7 callbacks suppressed [ 925.530985][T14615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.559411][T14615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.570982][T14615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.678451][T14614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.733639][T14614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.832424][T10833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.971693][T14621] loop1: detected capacity change from 0 to 2048 [ 926.131541][T14621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 926.522559][T14630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.561398][T14629] loop6: detected capacity change from 0 to 256 [ 926.592491][T14630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.685332][T14630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.700967][T14630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.752820][T14630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.875717][T14629] exFAT-fs (loop6): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 928.579197][T14658] loop6: detected capacity change from 0 to 128 [ 929.129022][T14663] loop0: detected capacity change from 0 to 256 [ 929.160461][T14663] exfat: Deprecated parameter 'utf8' [ 929.200362][T14663] exfat: Deprecated parameter 'namecase' [ 929.340815][T14663] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 929.947217][T14669] overlayfs: upper fs does not support file handles, falling back to index=off. [ 930.283094][T14675] sctp: [Deprecated]: syz.7.3133 (pid 14675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 930.283094][T14675] Use struct sctp_sack_info instead [ 930.413920][ T29] audit: type=1326 audit(1770979856.226:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.1.3134" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704ef6c code=0x0 [ 930.813527][T14682] input: syz1 as /devices/virtual/input/input44 [ 932.213220][T14700] input: syz0 as /devices/virtual/input/input45 [ 932.413499][T14707] loop1: detected capacity change from 0 to 512 [ 932.620141][T14709] loop0: detected capacity change from 0 to 512 [ 932.646292][T14709] EXT4-fs: Ignoring removed oldalloc option [ 932.657078][T14707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.743816][T14707] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 932.789179][T14709] EXT4-fs (loop0): 1 truncate cleaned up [ 932.950761][T14709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.281614][T14717] loop7: detected capacity change from 0 to 128 [ 933.349631][T14717] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 933.396441][T14717] hpfs: filesystem error: improperly stopped [ 933.406949][ T5786] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 933.407384][T14717] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 933.439938][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.467909][T14717] hpfs: You really don't want any checks? You are crazy... [ 933.475101][T10833] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 933.512372][T14717] hpfs: hpfs_map_sector(): read error [ 933.526821][T14717] hpfs: code page support is disabled [ 933.536736][T10833] EXT4-fs (loop0): Remounting filesystem read-only [ 933.559127][T14717] hpfs: hpfs_map_4sectors(): unaligned read [ 933.584335][T14717] hpfs: hpfs_map_4sectors(): unaligned read [ 933.621710][T14717] hpfs: filesystem error: unable to find root dir [ 933.634753][ T5786] usb 9-1: Using ep0 maxpacket: 32 [ 933.699025][ T5786] usb 9-1: config 4 has an invalid interface number: 196 but max is 0 [ 933.708654][T14717] hpfs: hpfs_map_4sectors(): unaligned read [ 933.728415][ T5786] usb 9-1: config 4 has no interface number 0 [ 933.759457][ T5786] usb 9-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 933.797362][ T5786] usb 9-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 933.839671][ T5786] usb 9-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 933.882179][ T5786] usb 9-1: config 4 interface 196 has no altsetting 0 [ 933.981823][ T5786] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 934.031593][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 934.067790][ T5786] usb 9-1: Product: syz [ 934.095971][ T5786] usb 9-1: Manufacturer: syz [ 934.116319][ T5786] usb 9-1: SerialNumber: syz [ 934.228532][T10833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.249882][T14715] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 934.744907][ T5786] ipheth 9-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 934.770370][ T5786] ipheth 9-1:4.196: probe with driver ipheth failed with error -22 [ 934.947957][T13508] usb 9-1: USB disconnect, device number 5 [ 936.982793][T14114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 937.002739][T14114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 937.012487][T14114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 937.027066][T14114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 937.038238][T14114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 937.273180][T14753] loop7: detected capacity change from 0 to 64 [ 937.661567][ C0] net_ratelimit: 2 callbacks suppressed [ 937.661638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.676620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.504057][T14765] netlink: 'syz.1.3172': attribute type 4 has an invalid length. [ 939.161722][T14114] Bluetooth: hci0: command tx timeout [ 939.439821][T14748] chnl_net:caif_netlink_parms(): no params data found [ 939.892956][T14114] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 940.581752][T10267] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 940.841601][T10267] usb 7-1: Using ep0 maxpacket: 32 [ 940.909639][T10267] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 941.115319][T10267] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 941.172072][T14114] Bluetooth: hci0: command tx timeout [ 941.236894][T10267] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 941.328981][T10267] usb 7-1: Product: syz [ 941.392033][T10267] usb 7-1: Manufacturer: syz [ 941.396939][T10267] usb 7-1: SerialNumber: syz [ 941.490948][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 941.594283][T10267] usb 7-1: config 0 descriptor?? [ 941.613147][T14780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 941.706991][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 941.754246][T10267] hub 7-1:0.0: bad descriptor, ignoring hub [ 941.821568][T10267] hub 7-1:0.0: probe with driver hub failed with error -5 [ 942.321393][T10267] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 942.668817][T14780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 943.242352][T10267] usb 7-1: USB disconnect, device number 14 [ 943.259752][T14114] Bluetooth: hci0: command tx timeout [ 944.098247][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.158036][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.254924][T14748] bridge_slave_0: entered allmulticast mode [ 944.365412][T14748] bridge_slave_0: entered promiscuous mode [ 944.502202][T14748] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.606787][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.667462][T14748] bridge_slave_1: entered allmulticast mode [ 944.755193][T14748] bridge_slave_1: entered promiscuous mode [ 944.980236][T14803] binder: 14802:14803 ioctl c0306201 0 returned -14 [ 945.331790][T14114] Bluetooth: hci0: command tx timeout [ 945.713910][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.978588][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.610753][T14748] team0: Port device team_slave_0 added [ 946.660925][T14748] team0: Port device team_slave_1 added [ 946.786841][T14809] loop8: detected capacity change from 0 to 4096 [ 946.960823][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.000691][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.073437][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.158744][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.201550][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.226182][T14809] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 947.291720][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.773899][T14748] hsr_slave_0: entered promiscuous mode [ 947.799577][T14748] hsr_slave_1: entered promiscuous mode [ 947.826090][T14748] debugfs: 'hsr0' already exists in 'hsr' [ 947.842402][T14748] Cannot create hsr debugfs directory [ 948.502467][T14829] loop1: detected capacity change from 0 to 512 [ 948.582029][T14829] EXT4-fs (loop1): orphan cleanup on readonly fs [ 948.616113][T14829] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3196: bg 0: block 63: padding at end of block bitmap is not set [ 948.631272][T14829] loop1: lost filesystem error report for type 5 error -117 [ 948.641301][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 948.655504][ C1] EXT4-fs (loop1): initial error at time 1770979874: ext4_validate_block_bitmap:441 [ 948.665269][ C1] EXT4-fs (loop1): last error at time 1770979874: ext4_validate_block_bitmap:441 [ 948.681060][T14829] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.3196: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 948.792210][T14829] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 948.794108][T14829] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.3196: ea_inode dec ref err=-117 [ 948.890522][T14829] EXT4-fs (loop1): 1 orphan inode deleted [ 948.921941][T14829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 949.160148][T14748] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 949.233741][T14748] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 949.410579][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.420417][T14748] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 949.569757][T14748] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 950.118557][T14838] loop1: detected capacity change from 0 to 2048 [ 950.336781][T14842] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 950.378314][T14838] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 950.463978][T14838] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 950.513456][T14847] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 950.565863][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3202'. [ 950.598780][T14838] Remounting filesystem read-only [ 950.601828][T14847] Remounting filesystem read-only [ 950.610015][T14838] NILFS (loop1): error -5 truncating bmap (ino=16) [ 951.017836][T14748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.173035][T14748] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.243037][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.250705][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.310657][T14854] loop7: detected capacity change from 0 to 128 [ 951.320149][T14856] netlink: 'syz.8.3204': attribute type 8 has an invalid length. [ 951.379973][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.387673][T13559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.430068][T14854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 951.515310][T14854] System zones: 1-3, 19-19, 35-36 [ 951.554313][T14854] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 951.613561][ T5776] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 951.632232][T14854] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 952.151673][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3208'. [ 952.354817][T10712] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 953.205532][T14876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.787626][T14748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.007375][T14888] loop6: detected capacity change from 0 to 128 [ 954.153060][T14888] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 954.179761][T14888] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.498577][ T9987] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 955.445858][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 956.372766][ T794] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 956.468593][T14748] veth0_vlan: entered promiscuous mode [ 956.541586][T13508] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 956.563970][T14748] veth1_vlan: entered promiscuous mode [ 956.567665][ T794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.593281][ T794] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 956.667008][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.716148][ T794] usb 8-1: config 0 descriptor?? [ 956.756345][T13508] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 956.801637][T13508] usb 2-1: config 0 has no interface number 0 [ 956.854191][T13508] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 956.891942][T13508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.900308][T13508] usb 2-1: Product: syz [ 956.925058][T13508] usb 2-1: Manufacturer: syz [ 956.949604][T13508] usb 2-1: SerialNumber: syz [ 956.982774][T14748] veth0_macvtap: entered promiscuous mode [ 956.996900][T13508] usb 2-1: config 0 descriptor?? [ 957.084636][T14748] veth1_macvtap: entered promiscuous mode [ 957.104056][T14919] loop6: detected capacity change from 0 to 8192 [ 957.196499][T14919] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 957.265920][ T794] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 957.330639][ T29] audit: type=1800 audit(1770979883.136:309): pid=14919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3227" name="file2" dev="loop6" ino=1048717 res=0 errno=0 [ 957.352950][T13508] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 957.372527][T14919] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 957.381864][T14919] FAT-fs (loop6): Filesystem has been set read-only [ 957.394862][T13508] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 957.416277][T14748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.451325][ T794] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.001F/input/input46 [ 957.476313][T13508] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 957.519199][T14748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.539205][T14916] loop7: detected capacity change from 0 to 256 [ 957.563694][T13508] usb 2-1: media controller created [ 957.854301][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.921768][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.958902][ T794] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 957.976513][T13508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.049661][T14916] FAT-fs (loop7): Directory bread(block 64) failed [ 958.083340][T14916] FAT-fs (loop7): Directory bread(block 65) failed [ 958.092164][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.111639][T14916] FAT-fs (loop7): Directory bread(block 66) failed [ 958.118628][T14916] FAT-fs (loop7): Directory bread(block 67) failed [ 958.145839][T14916] FAT-fs (loop7): Directory bread(block 68) failed [ 958.194560][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.212005][T14916] FAT-fs (loop7): Directory bread(block 69) failed [ 958.242046][T14916] FAT-fs (loop7): Directory bread(block 70) failed [ 958.248820][T14916] FAT-fs (loop7): Directory bread(block 71) failed [ 958.382174][T14916] FAT-fs (loop7): Directory bread(block 72) failed [ 958.389416][T14916] FAT-fs (loop7): Directory bread(block 73) failed [ 958.541996][T13508] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 959.483215][ T5828] usb 8-1: USB disconnect, device number 11 [ 959.773419][T13508] usb 2-1: USB disconnect, device number 25 [ 959.888587][T14929] fido_id[14929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 959.987849][T14939] Bluetooth: MGMT ver 1.23 [ 961.393952][T14953] loop8: detected capacity change from 0 to 512 [ 961.508722][T14953] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3240: invalid indirect mapped block 256 (level 2) [ 961.580022][T14953] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 961.581242][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 961.597323][ C0] EXT4-fs (loop8): initial error at time 1770979887: ext4_free_branches:1023: inode 11 [ 961.607358][ C0] EXT4-fs (loop8): last error at time 1770979887: ext4_free_branches:1023: inode 11 [ 961.619933][T14953] EXT4-fs (loop8): 2 truncates cleaned up [ 961.630657][T14953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.735366][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 961.757820][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 962.166165][ T53] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 962.249419][T14966] loop6: detected capacity change from 0 to 128 [ 962.259739][ T53] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 962.278129][T14966] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 962.341584][T14966] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 962.371040][ T53] EXT4-fs (loop8): This should not happen!! Data will be lost [ 962.371040][ T53] [ 962.441858][ T53] EXT4-fs (loop8): Total free blocks count 0 [ 962.448145][ T53] EXT4-fs (loop8): Free/Dirty block details [ 962.501773][ T53] EXT4-fs (loop8): free_blocks=0 [ 962.524189][ T53] EXT4-fs (loop8): dirty_blocks=66 [ 962.561765][ T53] EXT4-fs (loop8): Block reservation details [ 962.581931][ T53] EXT4-fs (loop8): i_reserved_data_blocks=66 [ 962.625754][T13559] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 962.937643][ T5925] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 963.762200][ T5786] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 963.918026][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.918262][ T5786] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 963.918402][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.925642][ T5786] usb 2-1: config 0 descriptor?? [ 964.403757][T14981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.483823][T14981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.553495][ T5786] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 964.684613][ T5786] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0020/input/input47 [ 965.191860][ T5786] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 965.293931][ T5786] usb 2-1: USB disconnect, device number 26 [ 965.916215][T15001] fido_id[15001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 966.141820][T13559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.204416][T13559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.584635][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.666494][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.138053][T15015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.184378][T15016] loop6: detected capacity change from 0 to 256 [ 967.925956][ T5786] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 968.111515][ T5786] usb 10-1: Using ep0 maxpacket: 8 [ 968.155014][ T5786] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 968.191758][ T5786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.243874][ T5786] usb 10-1: config 0 descriptor?? [ 968.284866][T15026] loop6: detected capacity change from 0 to 128 [ 968.373182][T15026] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 968.550195][T15026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 968.924178][ T5786] prodikeys 0003:041E:2801.0021: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.9-1/input0 [ 969.032207][ T5786] usb 10-1: USB disconnect, device number 2 [ 969.231915][T10267] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 969.436649][T10267] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 969.479755][T10267] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 969.558541][T10267] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 969.606721][T15033] fido_id[15033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 969.611549][T10267] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.652093][T10267] usb 8-1: Product: syz [ 969.667962][T10267] usb 8-1: Manufacturer: syz [ 969.692321][T10267] usb 8-1: SerialNumber: syz [ 969.733841][T10267] usb 8-1: config 0 descriptor?? [ 969.780111][T15032] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 969.853423][T15032] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 970.147576][T15032] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 970.221975][T15032] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 970.241854][ T5828] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 970.451927][ T5828] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.507706][ T5828] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 970.547690][ T5828] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 970.610014][ T5828] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 970.640420][ T5828] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.675262][ T5828] usb 9-1: Product: syz [ 970.694949][ T5828] usb 9-1: Manufacturer: syz [ 970.714091][ T5828] usb 9-1: SerialNumber: syz [ 970.787828][ T5828] cdc_mbim 9-1:1.0: skipping garbage [ 971.012913][T15038] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 971.136282][T10267] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 971.219986][T10267] dm9601 8-1:0.0 eth17: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 971.275288][T10267] usb 8-1: USB disconnect, device number 12 [ 971.287384][T15048] loop9: detected capacity change from 0 to 1024 [ 971.308775][T10267] dm9601 8-1:0.0 eth17: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet [ 971.500342][T15048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.618481][ T29] audit: type=1800 audit(1770979897.426:310): pid=15048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3274" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 971.632939][T15048] EXT4-fs (loop9): shut down requested (1) [ 971.716556][T15038] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 971.958118][ T5828] cdc_mbim 9-1:1.0: bind() failure [ 972.002802][ T5828] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 972.074837][ T5828] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 972.091413][ T5828] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 972.105225][T14748] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.161974][ T5828] usb 9-1: USB disconnect, device number 6 [ 973.427159][T15067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.673728][T15072] loop9: detected capacity change from 0 to 512 [ 973.810600][T15072] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3282: invalid indirect mapped block 256 (level 2) [ 973.921534][T15072] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 973.923514][T15072] EXT4-fs (loop9): 2 truncates cleaned up [ 973.933144][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 973.933245][ C1] EXT4-fs (loop9): initial error at time 1770979899: ext4_free_branches:1023: inode 11 [ 973.933398][ C1] EXT4-fs (loop9): last error at time 1770979899: ext4_free_branches:1023: inode 11 [ 974.037391][T15072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.351844][T15080] netlink: 'syz.7.3285': attribute type 11 has an invalid length. [ 974.684141][ T5925] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 974.759848][ T5925] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 974.791635][ T5925] EXT4-fs (loop9): This should not happen!! Data will be lost [ 974.791635][ T5925] [ 974.825827][ T5925] EXT4-fs (loop9): Total free blocks count 0 [ 974.857727][ T5925] EXT4-fs (loop9): Free/Dirty block details [ 974.875455][ T5925] EXT4-fs (loop9): free_blocks=0 [ 974.880606][ T5925] EXT4-fs (loop9): dirty_blocks=66 [ 974.931593][ T5925] EXT4-fs (loop9): Block reservation details [ 974.937795][ T5925] EXT4-fs (loop9): i_reserved_data_blocks=66 [ 974.992812][T13559] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 975.643460][T15091] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3292'. [ 975.962386][T15096] loop7: detected capacity change from 0 to 512 [ 976.119423][ T29] audit: type=1800 audit(1770979901.926:311): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3294" name="file2" dev="loop7" ino=1048730 res=0 errno=0 [ 976.224713][T15101] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 976.230387][T15096] FAT-fs (loop7): error, corrupted file size (i_pos 51, 8960) [ 976.278210][T15096] FAT-fs (loop7): Filesystem has been set read-only [ 976.329589][T15096] FAT-fs (loop7): error, corrupted file size (i_pos 51, 8960) [ 977.091842][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.143023][T15109] loop6: detected capacity change from 0 to 128 [ 977.239887][T15109] syz.6.3298: attempt to access beyond end of device [ 977.239887][T15109] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 977.333407][T15109] syz.6.3298: attempt to access beyond end of device [ 977.333407][T15109] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 977.428485][T15109] buffer_io_error: 39 callbacks suppressed [ 977.428562][T15109] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 977.450333][T15109] syz.6.3298: attempt to access beyond end of device [ 977.450333][T15109] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 977.451617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.473738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.542489][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3301'. [ 977.612305][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3301'. [ 978.461515][T10267] IPVS: starting estimator thread 0... [ 978.473370][T15123] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 978.564941][T15126] IPVS: using max 240 ests per chain, 12000 per kthread [ 978.598667][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3306'. [ 978.959772][T15132] loop1: detected capacity change from 0 to 256 [ 979.395194][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3311'. [ 979.471749][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3311'. [ 980.363349][T15150] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3314'. [ 980.412496][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3314'. [ 982.384763][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3324'. [ 982.479212][T15173] vlan2: entered allmulticast mode [ 982.601659][T15173] dummy0: entered allmulticast mode [ 982.643843][ T29] audit: type=1326 audit(1770979908.436:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.8.3325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 982.704355][T15173] bridge0: port 3(vlan2) entered blocking state [ 982.736905][T15173] bridge0: port 3(vlan2) entered disabled state [ 982.762393][ T29] audit: type=1326 audit(1770979908.436:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.8.3325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 982.800548][T15173] vlan2: entered promiscuous mode [ 982.852269][T15173] dummy0: entered promiscuous mode [ 982.889887][ T29] audit: type=1326 audit(1770979908.456:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.8.3325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 982.997406][ T29] audit: type=1326 audit(1770979908.456:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.8.3325" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 983.973737][ T5786] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 984.179303][ T5786] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 984.234224][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.279545][ T5786] usb 2-1: config 0 descriptor?? [ 984.336580][ T5786] cp210x 2-1:0.0: cp210x converter detected [ 984.421583][T13508] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 984.888667][T13508] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 984.909588][T13508] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.921816][ T5786] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 984.924497][T13508] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 984.993883][T13508] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.052813][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3335'. [ 985.127640][T15198] netlink: 'syz.6.3335': attribute type 15 has an invalid length. [ 985.236451][ T5786] usb 2-1: cp210x converter now attached to ttyUSB0 [ 985.282523][T13508] usb 9-1: usb_control_msg returned -32 [ 985.309270][T13508] usbtmc 9-1:16.0: can't read capabilities [ 985.359859][ T5786] usb 2-1: USB disconnect, device number 27 [ 985.464182][ T5786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 985.552485][ T5786] cp210x 2-1:0.0: device disconnected [ 985.894527][T15203] loop6: detected capacity change from 0 to 128 [ 986.038591][T15203] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 986.126117][T15207] loop7: detected capacity change from 0 to 2048 [ 986.151039][T15203] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.289000][T15207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.302829][T15207] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.728517][ T9987] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 986.829284][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.844844][T15213] loop8: detected capacity change from 0 to 8 [ 986.949006][T15213] Dev loop8: unable to read RDB block 8 [ 986.981638][T15213] loop8: unable to read partition table [ 987.037193][T15213] loop8: partition table beyond EOD, truncated [ 987.111804][T15213] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 987.495773][ T5786] usb 9-1: USB disconnect, device number 7 [ 987.675606][T15218] loop7: detected capacity change from 0 to 512 [ 987.853461][T15218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.891957][T15218] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 988.206357][T15218] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3342: bg 0: block 217: padding at end of block bitmap is not set [ 988.946801][T15233] loop8: detected capacity change from 0 to 128 [ 989.052732][T15233] syz.8.3347: attempt to access beyond end of device [ 989.052732][T15233] loop8: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 989.075123][T15233] syz.8.3347: attempt to access beyond end of device [ 989.075123][T15233] loop8: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 989.110934][T15233] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 989.144834][T15233] syz.8.3347: attempt to access beyond end of device [ 989.144834][T15233] loop8: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 989.867235][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.854980][T15247] loop9: detected capacity change from 0 to 512 [ 990.894645][T15247] EXT4-fs: Ignoring removed mblk_io_submit option [ 990.935059][T15245] loop7: detected capacity change from 0 to 1764 [ 990.990404][T15247] EXT4-fs (loop9): orphan cleanup on readonly fs [ 991.010383][T15245] iso9660: Bad value for 'uid' [ 991.021823][T15247] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 991.085939][T15245] iso9660: Bad value for 'uid' [ 991.158069][T15247] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3350: attempt to clear invalid blocks 2 len 1 [ 991.254053][T15247] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 991.261257][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 991.277256][ C0] EXT4-fs (loop9): initial error at time 1770979917: ext4_clear_blocks:876: inode 13 [ 991.287267][ C0] EXT4-fs (loop9): last error at time 1770979917: ext4_clear_blocks:876: inode 13 [ 991.309173][T15247] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 991.332111][T15247] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3350: invalid indirect mapped block 1819239214 (level 0) [ 991.420456][T15247] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 991.423406][T15247] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3350: invalid indirect mapped block 1819239214 (level 1) [ 991.555583][T15247] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 991.576205][T15247] EXT4-fs (loop9): 1 truncate cleaned up [ 991.626150][T15247] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 991.882362][T15247] EXT4-fs (loop9): Quota file not on filesystem root. Journaled quota will not work [ 991.895872][T15256] loop8: detected capacity change from 0 to 256 [ 992.012149][T15256] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x3d86555d, utbl_chksum : 0xe619d30d) [ 992.180191][T14748] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.769520][T15268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.780530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.791636][ T5786] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 992.861449][T13508] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 992.970964][T15270] loop8: detected capacity change from 0 to 256 [ 992.991006][ T5786] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.019985][T15270] exfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 993.058227][ T5786] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.064056][T13508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.089552][ T5786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.123470][T13508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.135285][ T5786] usb 7-1: Product: syz [ 993.139646][ T5786] usb 7-1: Manufacturer: syz [ 993.175693][T13508] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.179490][ T5786] usb 7-1: SerialNumber: syz [ 993.272269][T13508] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.316607][T13508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.404963][T13508] usb 2-1: config 0 descriptor?? [ 993.742718][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3362'. [ 993.799700][T15276] binder: 15275:15276 ioctl c0306201 800003c0 returned -22 [ 993.948834][T13508] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 994.165126][T13508] usb 2-1: USB disconnect, device number 28 [ 994.482161][ T5786] cdc_ncm 7-1:1.0: bind() failure [ 994.549316][T15281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.576902][ T5786] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 994.589365][T15281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.601732][ T5786] cdc_ncm 7-1:1.1: bind() failure [ 994.660965][T15281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.670923][ T5786] usb 7-1: USB disconnect, device number 15 [ 994.743699][T15281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.777075][T15281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.809731][T15281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.856813][T15277] fido_id[15277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 994.887448][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.568716][T15290] loop1: detected capacity change from 0 to 512 [ 995.809762][T15290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.912183][T15290] ext4 filesystem being mounted at /704/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 996.152632][T15290] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3369: bg 0: block 217: padding at end of block bitmap is not set [ 996.639655][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.347073][T15313] binder: 15312:15313 ioctl c0306201 800003c0 returned -22 [ 998.633868][T15330] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 998.851912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.406370][T15341] loop6: detected capacity change from 0 to 128 [ 999.641783][T15341] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 999.707964][T15345] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3392'. [ 999.738991][T15341] ext4 filesystem being mounted at /376/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 999.860899][ T1100] tipc: Subscription rejected, illegal request [ 1000.422271][ T9987] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1001.187278][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3396'. [ 1002.944365][T15450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.953929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.236988][T15458] loop8: detected capacity change from 0 to 1024 [ 1004.300888][T15458] EXT4-fs: Ignoring removed orlov option [ 1004.523120][T15458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.157934][T12712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.960784][T15484] block nbd1: shutting down sockets [ 1006.003236][ T5786] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1006.254939][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.314432][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.332050][T15490] netlink: 'syz.7.3416': attribute type 12 has an invalid length. [ 1006.356952][ T5786] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1006.404825][T15490] netlink: 'syz.7.3416': attribute type 29 has an invalid length. [ 1006.411518][ T5786] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1006.453165][T15490] netlink: 'syz.7.3416': attribute type 8 has an invalid length. [ 1006.481549][ T5786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.506905][T15490] netlink: 'syz.7.3416': attribute type 6 has an invalid length. [ 1006.536951][T15490] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1006.543972][ T5786] usb 9-1: config 0 descriptor?? [ 1006.639315][T10267] ===================================================== [ 1006.647213][T10267] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 [ 1006.656771][T10267] vidtv_ts_null_write_into+0x43e/0x5c0 [ 1006.663181][T10267] vidtv_mux_tick+0x34b7/0x3e40 [ 1006.668235][T10267] process_scheduled_works+0xae7/0x1d60 [ 1006.674145][T10267] worker_thread+0xede/0x1580 [ 1006.678974][T10267] kthread+0x53f/0x600 [ 1006.683483][T10267] ret_from_fork+0x20f/0x910 [ 1006.688226][T10267] ret_from_fork_asm+0x1a/0x30 [ 1006.693347][T10267] [ 1006.695748][T10267] Uninit was stored to memory at: [ 1006.700964][T10267] vidtv_ts_null_write_into+0x437/0x5c0 [ 1006.707978][T10267] vidtv_mux_tick+0x34b7/0x3e40 [ 1006.713140][T10267] process_scheduled_works+0xae7/0x1d60 [ 1006.718830][T10267] worker_thread+0xede/0x1580 [ 1006.724676][T10267] kthread+0x53f/0x600 [ 1006.728911][T10267] ret_from_fork+0x20f/0x910 [ 1006.733857][T10267] ret_from_fork_asm+0x1a/0x30 [ 1006.738917][T10267] [ 1006.741464][T10267] Local variable args.i134 created at: [ 1006.747000][T10267] vidtv_mux_tick+0x3150/0x3e40 [ 1006.753528][T10267] process_scheduled_works+0xae7/0x1d60 [ 1006.759233][T10267] [ 1006.762115][T10267] CPU: 0 UID: 0 PID: 10267 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.773477][T10267] Tainted: [L]=SOFTLOCKUP [ 1006.777896][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1006.788509][T10267] Workqueue: events vidtv_mux_tick [ 1006.794019][T10267] ===================================================== [ 1006.801028][T10267] Disabling lock debugging due to kernel taint [ 1006.930274][T10267] Kernel panic - not syncing: kmsan.panic set ... [ 1006.936882][T10267] CPU: 0 UID: 0 PID: 10267 Comm: kworker/0:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1006.948346][T10267] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1006.953963][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1006.964133][T10267] Workqueue: events vidtv_mux_tick [ 1006.969432][T10267] Call Trace: [ 1006.972779][T10267] [ 1006.975791][T10267] __dump_stack+0x26/0x30 [ 1006.980264][T10267] dump_stack_lvl+0x50/0x1c0 [ 1006.985005][T10267] ? dump_stack+0x12/0x25 [ 1006.989483][T10267] dump_stack+0x1e/0x25 [ 1006.993782][T10267] vpanic+0x7b4/0x1430 [ 1006.998023][T10267] panic+0x15d/0x160 [ 1007.002119][T10267] kmsan_report+0x31a/0x320 [ 1007.006772][T10267] ? __msan_warning+0x1b/0x30 [ 1007.011671][T10267] ? vidtv_ts_null_write_into+0x43e/0x5c0 [ 1007.017646][T10267] ? vidtv_mux_tick+0x34b7/0x3e40 [ 1007.023074][T10267] ? process_scheduled_works+0xae7/0x1d60 [ 1007.028927][T10267] ? worker_thread+0xede/0x1580 [ 1007.033904][T10267] ? kthread+0x53f/0x600 [ 1007.038285][T10267] ? ret_from_fork+0x20f/0x910 [ 1007.043182][T10267] ? ret_from_fork_asm+0x1a/0x30 [ 1007.048270][T10267] ? ret_from_fork_asm+0x1a/0x30 [ 1007.053375][T10267] ? preempt_schedule_irq+0x79/0xa0 [ 1007.058742][T10267] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 1007.064993][T10267] ? kmsan_get_metadata+0xf1/0x160 [ 1007.070263][T10267] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1007.076245][T10267] ? vidtv_ts_null_write_into+0x41/0x5c0 [ 1007.082027][T10267] ? filter_irq_stacks+0x49/0x190 [ 1007.087219][T10267] ? stack_depot_save_flags+0x35/0x790 [ 1007.092808][T10267] ? kmsan_get_metadata+0xf1/0x160 [ 1007.098075][T10267] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1007.104556][T10267] ? kmsan_get_metadata+0xf1/0x160 [ 1007.109831][T10267] __msan_warning+0x1b/0x30 [ 1007.114502][T10267] vidtv_ts_null_write_into+0x43e/0x5c0 [ 1007.120229][T10267] vidtv_mux_tick+0x34b7/0x3e40 [ 1007.125402][T10267] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1007.130774][T10267] process_scheduled_works+0xae7/0x1d60 [ 1007.136515][T10267] worker_thread+0xede/0x1580 [ 1007.141371][T10267] kthread+0x53f/0x600 [ 1007.145595][T10267] ? __pfx_worker_thread+0x10/0x10 [ 1007.150854][T10267] ? __pfx_kthread+0x10/0x10 [ 1007.155617][T10267] ret_from_fork+0x20f/0x910 [ 1007.160342][T10267] ? __switch_to+0x51c/0x750 [ 1007.165190][T10267] ? __pfx_kthread+0x10/0x10 [ 1007.169928][T10267] ret_from_fork_asm+0x1a/0x30 [ 1007.174884][T10267] [ 1007.178351][T10267] Kernel Offset: disabled [ 1007.182737][T10267] Rebooting in 86400 seconds..