last executing test programs: 3m37.408664896s ago: executing program 2 (id=91): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r1, 0x0, 0x0) 3m37.139052808s ago: executing program 2 (id=95): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 3m36.553109365s ago: executing program 2 (id=105): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r1, 0x0, 0x0) 3m36.25373706s ago: executing program 2 (id=106): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC], 0x5, 0x236, &(0x7f00000027c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m35.979990882s ago: executing program 2 (id=109): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xff, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x20, 0x3, 0x2, {0x2, 0x5}}, 0x0, 0x0, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c000000000010505000000000000000002000000240002801400018008000100ac1e010108000200ffffffff0c00028005000100210000000800074000000000240001800c00028005000100210000001400018008000100"], 0xc0}, 0x1, 0x0, 0x0, 0x240c8011}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v\x00\x00\x00'], 0x0}, 0x0) 3m35.592071633s ago: executing program 2 (id=115): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17ace6c4dd09fc22e489062a2a0561cd86b9b192a963caa53ef444b5efb693a13053a25e0759ea4e6c9585f550e004e770b6a3f5e396f2412fc556c54c3d4a4282872b18b8041a372cdcb2d04994a2360b4769a5bb05", 0xffffffffffffff91, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c) 3m35.501156701s ago: executing program 32 (id=115): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17ace6c4dd09fc22e489062a2a0561cd86b9b192a963caa53ef444b5efb693a13053a25e0759ea4e6c9585f550e004e770b6a3f5e396f2412fc556c54c3d4a4282872b18b8041a372cdcb2d04994a2360b4769a5bb05", 0xffffffffffffff91, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c) 3m23.744029423s ago: executing program 3 (id=205): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000140)}, {&(0x7f0000000040)="95", 0x1}], 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) splice(r0, 0x0, r5, 0x0, 0x80020005, 0x0) 3m23.491149384s ago: executing program 3 (id=207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x50000000, r0, 0x4}, 0x38) 3m23.2933142s ago: executing program 3 (id=208): unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[], 0xfe, 0xc2b, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoX67ZIZcZy9S+mYhXGqqbZBpBlIhRzC8AVSakLUyRBUq1spAXTSw89FCiKHnIi0BoFUjQwmiLokWldIL34UOTUE9HCRlD0wBYBfGoZzOxbcUmRtiyKEmV9Pjb13Z19b/e9mfWMLOg3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN9+9eKp0+lhjwIAeJAuj33j1BnXfwB4rFzx//8AAAAAAAAAAAAAAHDQpSjiyUgxf3k9TVTPO+qX2n03b40Pj+zc7Uiqeh6q2pc/9dNnzp776otD57t5qT37Ef3vty/G62NXLjZembsxvzC9uDg91RifbU/OTU3f9Tvstf92g9UOaNx44+bUtWuLjTMvnN3y8q2BD/qfOD5wYei5k890244Pj4yMbTap97av3fNAOnar8DgcRZyMFM9//6epFRFF7H1f1B/ssd/uSDWJwWoS48Mj1URm2q3ZpfLF0e6OKCIaPZ2a3X2087GIWt8DncPumhHL5fDLAQ+W0xubby20rs5MN0ZbC0vtpfbc7GjqjLacTyOKOJ8iViJirf/Ot+uLImqR4rvH1tPViDjU3Q9fqQqDdx9HsY9zvAvlOBt9ESvFI3DMDrD+KOK1SPGzd0/EZD7PVOeaL0e8VuYPI94u8+WIVH4xzkW8v8P3iEdTLYr40/L4X1hPU9X5oHteufTNxtdnr831tO2eVz7h9eGOM8VDuj4c2ZYPxgE/N9WjiFZ1xl9P9/6bHQAAAAAAAAAAAAAAAADutyNRxBcixav/9vtVXXFUdenHLgz9zsAv9taMP/0x71O2fSEilou7q8k9nAsDR9NoSg+5lvhxVo8i/jDX/33nYQ8GAAAAAAAAAAAAAAAAAADgsVbETyLFS++dSCvRu6Z4e/Z640rr6kxnVdju2r/dNdM3NjY2GqmTzZwTOZdzruRczbmWM4rcP2cz50TO5ZwrOVdzruWMQ7l/zmbOiZzLOVdyruZcyxm13D9nM+dEzuWcKzlXc67ljAOydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdJEUX8/0ZHpIhoRkxEJ1f7H/boAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyriB5Gi8bvN29tqEZGqfztOlL+ci+bhMj8bzaEyX47mxZytKmvN7zyE8bM3famIf40U/fV3bh/wfPz7Os9ufw3i7W9vPvtirZOHui8OfND/xPFjF4ZGfuXp3R6nnQYweKk9e/NWY3x4ZGSsZ3Mtf/pne7YN5M8t7s/UiYjFN996ozUzM71w7w/Kr8Aeuj9CD1LtcZmpB9WDqB2IYTycufMYKK//70eK33zv37sX/M71vx6/0Hl2+wofH/7R5vX/pe1v9LHX/6jtOIB8/S+v6Ttd/5/s2fZS/t1IXy2ivnRjvu94RH3xzbdOtm+0rk9fn549d+rU14aGvnb2VN/hiPq19sx0z6O97ikAAAAAAAAAAAAAAACAByx167vWUyMiblX1WgMXhp47+cyhOFTVW22p23597MrFxitzN+YXphcXp6ca47Ptybmp6bv9uHpV7jU+PHLfJ3JXjuzz+I/UX5mbf3Ohff33lnZ8/Wj94tXFpYXW5M4vx5EoIpq9WwarAY8Pj1SDnmm3ZquuozsW039yfamI/4gUk+ca6dlqy+Fu/f/2Cv8t9f/L299on+r/P9OzrfzMlIr4MFL8xp8/Hc9W4zwad+yz3O6vI8Xg+S/ldnG4bNcdQ+e+Ap3KwLLt/0SKv/+/rW279ZBPbrY9/Ql27SOhPP7HIsUP/uR78at529b7P+x8/I9uf6N9Ov5P9Ww7uuV+BXueOvn4n4wULz/5Tvxa3vZR9//o3nvjRG58+/4c+3T8P9ezbSB/7q/fn6kDAAAAAAAAAAA80vpSEX8TKX40Uksv5m138/f/pra/0T79/a/P92ybuj/rFX3sgz3vVAAAAAA4IPpSET+JFNeX3rldQ721/run/vO3Nus/h9O2V6s/5/ul6r4B9/PP/3oN5M+diIj63qcOAAAAAAAAAAAAAAAAAAAAB0ZKRbyY11OfqOr5p3ZdT301Urz6X8/ndul42a67DvxA9Wv98tzsyYszM3OTraXW1Znpxth8a3K67PtUpFj/qy/lvkW1vvqzuW9njffNtdgXIsXI33bbdtZi765N/tRm29Nl289Eiv/8u61tu+tYf26z7Zmy7V9Gim/9485tj2+2PVu2/V6k+PG3Gt22R8u23fujfn6z7QuTc8U+HBUAAAAAAAAAAAAAAAAAAAAeN32piD+OFP99Y+V2LX9e/7+v52nl7W/3rPe/za1qnf+Bav3/3R7fy/r/1X0Flnf7VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HRKUcRbkWL+8npa7S+fd9QvtWdv3hofHtm525FU9TxUtS9/6qfPnD331ReHznfzo/vfb1+I18euXGy8MndjfmF6cXF6qjE+256cm5q+63fYa//tBqsd0Ljxxs2pa9cWG2deOLvl5VsDH/Q/cXzgwtBzJ5/pth0fHhkZ62lT67vnT79D2mX74SjiLyLF89//afpRf0QRe98XH/Pd2W9HqkkMVpMYHx6pJjLTbs0ulS+OdndEEdHo6dTs7qMHcCz2pBmxXA6/HPBgOb2x+dZC6+rMdGO0tbDUXmrPzY6mzmjL+TSiiPMpYiUi1vrvfLu+KOKNSPHdY+vpn/ojDnX3w1cuj33j1Jndx1Hs4xzvQjnORl/ESvEIHLMDrD+K+IdI8bN3T8Q/90fUovMTX454rcwfRrwdneOdyi/GuYj3d/ge8WiqRRH/Wx7/C+vp3f7yfNA9r1z6ZuPrs9fmetp2zyuP/PXhQTrg56Z6FPHj6oy/nv7Ff9cAAAAAAAAAAAAAAAAAB0gRvxwpXnrvRKrqg2/XFLdnrzeutK7OdMr6urV/3ZrpjY2NjUbqZDPnRM7lnCs5V3Ou5Ywi98/ZLLO+sTGRny/nXMm5mnMtZxzK/XM2c07kXM65knM151rOqOX+OZs5J3Iu51zJuZpzLWcckNo9AAAAAAAAAAAAAAAAAADg06Wo/knxZ3+wnjb6O+tLT0QnV60H+qn38wAAAP//Cw38Gw==") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3m22.700689648s ago: executing program 3 (id=212): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80040c, &(0x7f0000000440)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYBLOB="3ef628a9ecf9e1751ed9b65d6a5359bd9afb81136cbff69e1bdbcb39d60e9b32d9f142ac189ae0d659610ddf0bf8c95e8f1a51f27bbb9098900d07e5f0303418856a470de86ec769d69ea60f0ea33a2089c2a2d372ec5958bbc02c2b4d00f71d7062876aa812e57f7333fa60a4d976aba0ce610efbc27f6cd9f0eee7074c05c92ae57e5e1b9afed08d27df4b8b9fb9a30a14a0b4a82028df4924d31f4c15fe48e62ddf7437e325ec87679945ecbaeda079054d10574c0036c82e2fbc9d073f4f6644162662a8dc5700d5943d13b93f9868919746c86a6d48", @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc666859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xb0, &(0x7f0000000300)=ANY=[]) 3m22.131545654s ago: executing program 3 (id=216): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000140)}, {&(0x7f0000000040)="95", 0x1}], 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) splice(r0, 0x0, r5, 0x0, 0x80020005, 0x0) 3m21.372467225s ago: executing program 3 (id=220): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='.\x00', 0x4000423) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3m20.983333477s ago: executing program 33 (id=220): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='.\x00', 0x4000423) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 55.949073753s ago: executing program 6 (id=1220): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 55.807795705s ago: executing program 0 (id=1222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) 55.711481512s ago: executing program 6 (id=1224): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)={0x200000, 0x0, 0x13}, 0x18) 55.701139373s ago: executing program 0 (id=1225): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x86}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "25042ac9"}]}}, 0x0}, 0x0) 55.553686075s ago: executing program 6 (id=1226): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 52.863907963s ago: executing program 4 (id=1242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000b40)="5e97dba633be30d6253c35b5725ceab91f4cfc273970f7eed480790f1345667b1f44be82776e5afed7a7f198d9dabb8bb701257889f7d20f12cdff3f5558c19da116bf5c170d999fb2d43984ec221e039fddf3eb45b441985174a48abb7e0458eb7073d312ce7fb2c69d1191627fc1cb72a47cca7ac47128b3c3c323956142d81bfa06ec825db6959d8ddab3de77f7e8", 0x90}, {&(0x7f0000000780)="a5b8384e83e74d244e33c45d1f28df5533c9627e81d326c882789b71ffab4d0cda7f273a35a99470d0c1e69732eb1e4e921486699debe7be3baed5d16efa", 0x3e}, {&(0x7f0000000340)="7544738146aeaf48715d7193d767dcba1a0b9248d97960238a5dbb7a077baa484d49ddaff184060d42a49b3acde7a638bd6bf85edb97ccefb84de13fe4e9aee2e6b666a0443187d475894e12a47a60b838dda441bceac137132b2b4b079b055ac3a00c269c217803ff856fc7208650ca3e8ec72e4472d4b13db776514a05bc50d5ae586bafe423a1ba7cb7b334533cb669b8e59945d9e968523c2c27", 0x9c}, {&(0x7f0000000400)="1da517416a1755a930913d28d55f8d2852c5133d7d52a085fb4b7455193d2f578a92d6dbe86789660e95c04f4a57c873b95f5a55f5b7804af49e30cab408a579354e2d0ac30d8d486a55186b029b6abc1f0579cc03695bee5b17c55b89c187ce7470872c9eee1b8d16a25c85e9f5eddba492286819cb45b85cf63be692aa8c3c65eb2dae39d16ed49ea99ee4ae37da408b2b86", 0x93}], 0x4, &(0x7f0000001a00)=ANY=[], 0xa8, 0x40400c0}, 0x0) 52.841381385s ago: executing program 4 (id=1244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000008500000023000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x894, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 52.716001314s ago: executing program 4 (id=1246): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 52.700052206s ago: executing program 0 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000080000000000000000000022000000000000009300000000993bd17d8fdc9b9c019d7d250dd84ce20e556260efa0b0fc670366512b330ae6ccd2963c7463dd25f8130cd3b74284d412c101acb60c613cdee530655f1abeeb025306a4f6d9e912bc698853f632475f933bf628d666a5bfd346e851cb2eecbbbb4ea5475db5a61956fb5402597725ea31b1737ff3ce3b65e7cf2e34129c229293bf9e249792e43f5b81a196f249b191a449fe59786ed729e09aed8d795066b3941617a97596dc35ff75a8f0620df86995c4b54e831ed21cac09ad44443000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000940)={[{@sysvgroups}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@block_validity}]}, 0x0, 0x625, &(0x7f0000001100)="$eJzs3ctvFEcaAPCv20/s3bVhV7vLHhZLqxVICTY2kKAoUuCOEHnccnKwQQSDEXaUmCDFROQSKcolh0g5cQj5LxKkXHPINYdccoqQUBRxCBEKE3VPjxnPw/g1bmP/flIzVd3urprBn6umpmo6gF1rJPsnjdgfEVeTiKG6Y91RHByp/tyDX2+cy7YkKpXXf0nixgfJYv21kuJxsDj5j6FIvk8j9nU1lzu3cP3S5MzM9LUiPzZ/+erY3ML1wxcvT16YvjB9ZeKFiRPHjx0/MX5kQ8+vvujTt95+d+jjM29++cWjZPyrH88kcTIeFz+QPa/Gc/s2VHL2mo1Epeph/f7sdT2xwWtvF78N1X5Pnkgad7BtpcXvY09E/CuGoqvuf3MoPnq11MoBHVVJotZGAbtOsq7479/8igBbrNYPqL23b/U+uFna4V4JsBXun6oOAFRjvyciavHfXR0bjP58bGDgQbJsnCeJiI2NzFVlZXz37Zlb2RZtxuGAzli8WRvlbmz/kzw2h6M/zw08SJfFf1q3ZftfW2f5Iw158Q9bZ/FmRPy7aP97ozn+/96b55bHf5LH/Uhd/L+1zvLFPwAAAAAAAGyeu6ci4vlW8//Spfk/vS3m/wxGxMlNKP/pn/+l94pEsgnFAXXun4p4ueX836U5vsNdRe6v+XygnuT8xZnpIxHxt4g4FD19WX684br1M4QPf7Lv83bl18//y7as/NpcwOJK97obFuJOTc5PbvR5AxH3b0b8J5//e6DYs3z+T9b+Jy3a/yy+r66yjH3/v3O23bGnxz/QKZXbEQdbtv9PutvJyt/PMZb3B8ZqvYJm/33/06/blS/+oTxZ+z+wcvz3JfXf1zO3tuv3RsTRhe5Ku+Pr7f/3Jm901a6feW9yfv7aeERvcrp5/0SWut32PQjsfHuKx2o81OIli/9D/1t5/G+p/9+3/GqLqyz5n48Hf2p3TPsP5cnif2rl9n94efu/9sTEneFv2pV/tjn+s+Kq8Z8PImbt/7G8TT9UnGP8D+o1fx/HagO0lOoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDMujYi/RJKOLqXTdHQ0YjAi/hED6czs3Pxz52ffuTKVHcvv/5/W7vQ7VM0ntfv/D9flJxryRyNib0R81rUnz4+em52ZKvvJAwAAAAAAAAAAAAAAAAAAwDYxmK/5r/Q1rv/P/NxVdu2AjusuHsU77D7d6z6z0repFQG23PrjH3jWrT7+ezpaD2Dr5fH/YqsjDx9VclteJWCL6P/D7rXO+PdxAewA2n/YrVY5ptff6XoAZdD+AwAAAADAjrL3wN0fkohYfGlPvmV6i2Mm+8POlpZdAaA05vDC7tU9W3YNgLJ4jw8kS6nfWy72bz/7P+lMhQAAAAAAAAAAAACAJgf3t1///2GpNQM6beX1/y3n9lsyDDvECsHcKvjFPuwg7W/9YV0f7HTW/wNPa+2t/wcAAAAAAAAAAACAbaD/+qXJmZnpa3MLz17ile1RjbUlFie3RTU2NfG4M1fuiYi1ntVX/quxCYnaV3CUWI2S/y4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABL/gwAAP//MWolnQ==") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x120c060, &(0x7f00000004c0)=ANY=[@ANYBLOB]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x4, 0x239, &(0x7f0000000780)="$eJzs3UFIPFUcB/DvzO5m6hJWlyCoICJKELsFXewUCCESEVRgRHQpNDClm3bq0qHOFZ66SHTLruFFuhRBJysPdglKOiQd6rCxOxqWK0VrO3/+8/nA6Mzue/N7w8z3ze5h2ACNNZNkIUkryWySTpLiYoP7qmXmbHNn8mAl6fWe+rkYtKu2K+f9ppNsJ3k0yX5Z5JV2srn33PGvh088+PZG54EP956dHOtBnjk5Pnry9IOltz5ZfGTzy69/XCqykO5fjuv6FUNeaxfJHf9HsRtE0a57BPwby298/E0/93cmuX+Q/07KVCfvnfVb9jt5+P2r+r7701d3j3OswPXr9Tr9e+B2D2icMkk3RTmXpFovy7m56jP8t62p8tW19ddnX17bWH2p7pkKuC7V996JT6f/lv8fWlX+gZtXNzl6enn3u/76aavu0QDj1M//7AtbD0X+oXHkH5pL/qG55B+a6+r8z9Q2JmA83P+hueQfmkv+obnkH5pL/qG5LuYfAGiW3kTdTyADdal7/gEAAAAAAAAAAAAAAAAAAC7bmTxYOV/GVfPz95KTx5O0h9VvDX6POLl18Hfql6Lf7E9F1W0kz9874g5G9FHNT1/f9n299b+4p976W6vJ9ptJ5tvty9dfcXb9/Xe3/8P7nRdHLDCix56pt/7vu/XWXzxMPuvPP/PD5p8ydw3+D59/uv3zN2L9134bcQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMzR8BAAD//xhXa10=") r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0000003f271c20d8a5ff1e000000"], 0x36f0516f) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) setresuid(0xee01, 0xee00, 0x0) fanotify_init(0x200, 0xdcb534a8813228d2) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000700)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 52.572256626s ago: executing program 0 (id=1248): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 52.552003458s ago: executing program 0 (id=1249): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) creat(&(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) 52.5272131s ago: executing program 0 (id=1250): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000dc0)='./bus\x00', 0x18008, &(0x7f0000000100)=ANY=[], 0xb, 0x2fb, &(0x7f0000000800)="$eJzs3EtrE1EUwPHTPNokpU0WoihIL7rRzdBG19ogLYgBS23EBwjTdqIhY1IyoRIRHyu34odwUbrsrqD9At24040bd90ILuxCjMyreTRp+ohNbf8/KHM6954793ZSODcks3Hv3dN81tKyelkCESV9IiKbIgkJiK/POwacuF/qvZbLgz+/nL9z/8GtVDo9Ma3UZGrmSlIpNTzy8dmLqNdtdUDWE482fiS/r59eP7vxZ+ZJzlI5SxWKZaWr2eK3sj5rGmo+Z+U1paZMQ7cMlStYRsltL7rtWbO4sFBRemF+KLZQMixL6YWKyhsVVS6qcqmigo/1XEFpmqaGYoJOMkvT03pqn8lzXZ4M/pFSKaUHRSS6rSWz1JMJAQCAnmqu/wOiuln/L19YKw/eXRn26v/VwVb1/9Wv7lgN9X9ERFrW//71W9b/+t7q/+0V0clyoPofR8NI/7ZTfbXQbiyl9Jj3/+t483B51Amo/wEAAAAAAAAAAAAAAAAAAAAA+B9sVqvxarUa94/+j90WEZH635sEReT64c8Y3dTu/g90vv84Bmpf3AsNi5hvFzOLGffodVgTEVMMGZW4/HZeDx479r95pGwJ+WS+svPDdeOnspJz8sckHpbm/Gp18mZ6Yky5/HwR+xiWWH1+UuJyqnV+smV+v1y6WJevSVw+z0lRTJl35lHLfzmm1I3b6ab8qNMPAAAAAIDjQFNbEo3736DbrrVrd/O39tfN7w8Ea/vr0Zb785CcC/V27QAAAAAAnBRW5XleN02jtEMQlc593CC8iz7NQWgvnRuCgIi07+OvcLcD+p9l2PM0uhH4F29oingnu3ot8R4Pe8BxAjv85dsHI/Zq1EFX4b9t1K6PTI0f/h10gjPvP/zq3oDXViIdVrr/ILjzCyDsffwLAAAAwDFSK/r9M+O9nRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfQYTwdrddrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6KvwEAAP//YXoBYg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44020, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x7, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r7) socket$nl_route(0x10, 0x3, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) lseek(r1, 0x8183, 0x3) 50.990611634s ago: executing program 6 (id=1255): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 50.711832427s ago: executing program 6 (id=1258): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x200006, &(0x7f00000000c0)={[{@abort}, {@inlinecrypt}, {@minixdf}, {@nodioread_nolock}]}, 0x3, 0x5a9, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x100, 0x2e0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012002, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 50.294014591s ago: executing program 4 (id=1261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0xffff, 0x0) preadv(r4, 0x0, 0x0, 0x6f7, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/222, 0xde, 0x5, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 47.83033977s ago: executing program 5 (id=1263): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x348, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]}) 47.007931887s ago: executing program 4 (id=1265): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x80000c, 0x10, 0x10, 0x2, 0x11, 0x6a, 0x10, 0x10, 0x800, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 46.899025995s ago: executing program 6 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x228, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x14, 0x6, 0x1, [0xfff, 0x7, 0x5, 0xfffe, 0x8, 0x7, 0x48, 0x4, 0x4, 0x9, 0x26, 0x8, 0x1, 0x81, 0x7, 0x7]}}, @common=@ipv6header={{0x28}, {0x2, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xf3c8, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 46.863291068s ago: executing program 5 (id=1268): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x29c500a, 0x0, 0x4, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 46.653164935s ago: executing program 5 (id=1270): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 46.543053144s ago: executing program 5 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 46.445009032s ago: executing program 5 (id=1273): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x804, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}]}, 0x4, 0x511, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x108) fallocate(r0, 0x1, 0x5, 0x7fff) 43.75178909s ago: executing program 4 (id=1276): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@inlinecrypt}, {@usrquota}, {@dax_always}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x4800) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x161802) 43.708046713s ago: executing program 5 (id=1277): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000ff"], &(0x7f0000000100)=""/101, 0x3c, 0x65, 0x1, 0x2}, 0x28) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 36.810052042s ago: executing program 34 (id=1250): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000dc0)='./bus\x00', 0x18008, &(0x7f0000000100)=ANY=[], 0xb, 0x2fb, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44020, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x7, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r7) socket$nl_route(0x10, 0x3, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) lseek(r1, 0x8183, 0x3) 31.26161218s ago: executing program 35 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x228, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x14, 0x6, 0x1, [0xfff, 0x7, 0x5, 0xfffe, 0x8, 0x7, 0x48, 0x4, 0x4, 0x9, 0x26, 0x8, 0x1, 0x81, 0x7, 0x7]}}, @common=@ipv6header={{0x28}, {0x2, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xf3c8, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 28.703988177s ago: executing program 36 (id=1276): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@inlinecrypt}, {@usrquota}, {@dax_always}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x4800) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x161802) 28.343650487s ago: executing program 37 (id=1277): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000ff"], &(0x7f0000000100)=""/101, 0x3c, 0x65, 0x1, 0x2}, 0x28) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8.798060048s ago: executing program 7 (id=1371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x7, 0xf, 0x0, &(0x7f0000000200)="24c2afc3a2e0527bea330054165096", 0x0, 0xffaf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.171258799s ago: executing program 7 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 6.812677309s ago: executing program 1 (id=1375): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80442, 0x104) fstatfs(r0, &(0x7f0000000380)=""/18) 5.842518127s ago: executing program 8 (id=1331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x26a, 0x0, 0x7}]}) 5.509285054s ago: executing program 7 (id=1376): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x80000c, 0x10, 0x10, 0x2, 0x11, 0x6a, 0x10, 0x10, 0x800, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.342195637s ago: executing program 1 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000098"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001d00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0}}, 0x10) 5.283546932s ago: executing program 8 (id=1378): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) 5.06452543s ago: executing program 1 (id=1379): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0740000010e3de4c6002000000b822008100220008004500ac14142eac1414aa0e00907800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801b, &(0x7f00000000c0)={[{}]}) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) r5 = fsopen(&(0x7f0000000100)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 3.748435747s ago: executing program 7 (id=1380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.682613292s ago: executing program 8 (id=1381): socket(0x1d, 0x5, 0xff7fff83) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000101010101010000040005010400cc00"], 0x30}}, 0x0) 3.351682449s ago: executing program 7 (id=1382): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) 3.203169151s ago: executing program 1 (id=1383): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f0000000280)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5101666aeeb41"], 0x4, 0x5ce, &(0x7f00000006c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, 0x28) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007729042024d6d502b5204fbe2c01090224000100"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x62042, 0x113) sendfile(r3, r3, 0x0, 0x7a680003) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000325bd7000ffdbdf252e006ee2691ed82c1419f7bfaf7f189b070008000300202cb1b3e04db420a2853300230e6944d7551db734bd95f2c8d0c27a1edb965fb86ff5805adfc3c87ae74d5472a3cc0db5702eb2d1e129dc13b8bebc066f4512737d52a90000", @ANYRES32, @ANYBLOB="0c009900b20c00005400000008004200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}]}, 0x30}}, 0x0) 3.097668559s ago: executing program 8 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.999942827s ago: executing program 7 (id=1385): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2000006, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 498.84898ms ago: executing program 8 (id=1386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r3, 0xaea3) 330.876953ms ago: executing program 1 (id=1387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x404081) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 84.827253ms ago: executing program 1 (id=1388): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x80000c, 0x10, 0x10, 0x2, 0x11, 0x6a, 0x10, 0x10, 0x800, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 8 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000000000000000, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) accept4(r3, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 123.533213][ T5445] udevd[5445]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 123.540919][ T4241] usb 7-1: config 128 has no interface number 0 [ 123.552881][ T5630] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 123.570792][ T5630] UDF-fs: Scanning with blocksize 1024 failed [ 123.598106][ T5630] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 123.627665][ T5630] UDF-fs: Scanning with blocksize 2048 failed [ 123.678147][ T5630] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 123.737840][ T5630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.784296][ T26] audit: type=1800 audit(125.750:11): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.384" name="file1" dev="loop5" ino=36 res=0 errno=0 [ 123.809977][ T4241] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 123.864162][ T4241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.891189][ T4241] usb 7-1: Product: syz [ 123.895604][ T4241] usb 7-1: Manufacturer: syz [ 123.909683][ T4241] usb 7-1: SerialNumber: syz [ 123.942100][ T5654] loop0: detected capacity change from 0 to 512 [ 124.086226][ T5654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.158511][ T5654] EXT4-fs (loop0): 1 truncate cleaned up [ 124.174586][ T5654] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,discard,noauto_da_alloc,resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,quota,. Quota mode: writeback. [ 124.231910][ T4241] asix: probe of 7-1:128.251 failed with error -22 [ 124.363964][ T4241] usb 7-1: USB disconnect, device number 3 [ 124.821944][ T5673] loop4: detected capacity change from 0 to 8192 [ 124.937154][ T5689] loop6: detected capacity change from 0 to 512 [ 125.025877][ T5689] EXT4-fs (loop6): Ignoring removed nobh option [ 125.045472][ T5689] EXT4-fs (loop6): Test dummy encryption mode enabled [ 125.078112][ T5689] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.240465][ T5701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.614430][ T5689] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.402: iget: bad i_size value: 38620345925642 [ 127.614906][ T5689] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.402: couldn't read orphan inode 15 (err -117) [ 127.615205][ T5689] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 127.640160][ T5689] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.402: iget: bad i_size value: 38620345925642 [ 127.832583][ T5724] loop4: detected capacity change from 0 to 256 [ 128.079278][ T1325] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 128.413978][ T5756] loop4: detected capacity change from 0 to 1024 [ 128.433255][ T5756] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 128.447738][ T5757] loop1: detected capacity change from 0 to 128 [ 128.449564][ T1325] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 128.474441][ T5756] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.483003][ T1325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.527509][ T1325] usb 6-1: config 0 has no interface number 0 [ 128.539406][ T1325] usb 6-1: config 0 interface 176 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 128.565058][ T1325] usb 6-1: config 0 interface 176 has no altsetting 0 [ 128.609206][ T5756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 128.623820][ T5756] System zones: 0-1, 3-36 [ 128.632003][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 128.669251][ T5757] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 128.750088][ T1325] usb 6-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 128.807088][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.845686][ T1325] usb 6-1: Product: syz [ 128.945175][ T1325] usb 6-1: Manufacturer: syz [ 129.075131][ T1325] usb 6-1: SerialNumber: syz [ 129.303895][ T1325] usb 6-1: config 0 descriptor?? [ 129.695082][ T1325] snd-usb-audio: probe of 6-1:0.176 failed with error -2 [ 129.722581][ T5798] loop1: detected capacity change from 0 to 128 [ 129.766788][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.873535][ T4185] usb 6-1: USB disconnect, device number 6 [ 129.899089][ T1325] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.039191][ T23] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 130.269857][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.439270][ T1325] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.453714][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.462280][ T1325] usb 5-1: Product: syz [ 130.466477][ T1325] usb 5-1: Manufacturer: syz [ 130.479076][ T1325] usb 5-1: SerialNumber: syz [ 130.969343][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 130.981741][ T23] usb 7-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 130.991079][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.003489][ T23] usb 7-1: config 0 descriptor?? [ 131.010715][ T5849] loop5: detected capacity change from 0 to 1024 [ 131.020227][ T5802] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 131.085691][ T5849] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.246064][ T5858] loop1: detected capacity change from 0 to 2048 [ 131.315656][ T5861] loop5: detected capacity change from 0 to 2048 [ 131.332768][ T5858] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 131.374076][ T5861] Alternate GPT is invalid, using primary GPT. [ 131.385115][ T5861] loop5: p1 p2 p3 [ 131.468789][ T23] ntrig 0003:1B96:000E.000B: bogus close delimiter [ 131.499217][ T23] ntrig 0003:1B96:000E.000B: item 0 4 2 10 parsing failed [ 131.517962][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 131.520943][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 131.531241][ T4381] udevd[4381]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 131.554464][ T23] ntrig 0003:1B96:000E.000B: parse failed [ 131.569100][ T23] ntrig: probe of 0003:1B96:000E.000B failed with error -22 [ 131.649436][ T1325] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 131.664685][ T1325] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 131.680739][ T23] usb 7-1: USB disconnect, device number 4 [ 131.909236][ T4248] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 131.992364][ T1325] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 132.013334][ T1325] usb 5-1: USB disconnect, device number 10 [ 132.022753][ T1325] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 132.767568][ T5905] loop6: detected capacity change from 0 to 256 [ 132.832083][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838597][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.949544][ T4248] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 132.976354][ T4248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.987572][ T4248] usb 2-1: config 0 has no interface number 0 [ 132.994515][ T4248] usb 2-1: config 0 interface 176 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.008405][ T4248] usb 2-1: config 0 interface 176 has no altsetting 0 [ 133.334327][ T4248] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 133.343606][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.351791][ T4248] usb 2-1: Product: syz [ 133.355979][ T4248] usb 2-1: Manufacturer: syz [ 133.360647][ T4248] usb 2-1: SerialNumber: syz [ 133.966363][ T4248] usb 2-1: config 0 descriptor?? [ 134.180369][ T5944] loop5: detected capacity change from 0 to 256 [ 134.339283][ T4248] snd-usb-audio: probe of 2-1:0.176 failed with error -2 [ 134.557166][ T4248] usb 2-1: USB disconnect, device number 4 [ 134.578507][ T4485] udevd[4485]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.641248][ T5990] loop1: detected capacity change from 0 to 256 [ 136.025595][ T6012] loop5: detected capacity change from 0 to 256 [ 136.047325][ T6012] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.066766][ T6012] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 136.088965][ T6012] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 137.204338][ T6043] loop6: detected capacity change from 0 to 256 [ 138.212111][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.514'. [ 140.199951][ T6092] loop5: detected capacity change from 0 to 1024 [ 140.284824][ T6098] loop6: detected capacity change from 0 to 2048 [ 140.348130][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 140.406137][ T6092] loop5: detected capacity change from 0 to 512 [ 140.413914][ T5445] Alternate GPT is invalid, using primary GPT. [ 140.423956][ T5445] loop6: p1 p2 p3 [ 140.498716][ T6092] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 140.517068][ T6092] fscrypt (loop5, inode 15): Error -61 getting encryption context [ 140.550919][ T6098] Alternate GPT is invalid, using primary GPT. [ 140.577802][ T6098] loop6: p1 p2 p3 [ 140.772889][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 140.782526][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 140.784249][ T5445] udevd[5445]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 140.849481][ T4305] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 140.905067][ T5445] udevd[5445]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 140.908903][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 140.929514][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 140.950170][ T6125] loop4: detected capacity change from 0 to 512 [ 140.977164][ T6125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.040503][ T6125] EXT4-fs (loop4): 1 truncate cleaned up [ 141.097360][ T6125] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 141.219479][ T4305] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.241410][ T4305] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.343229][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 141.387441][ T6141] loop4: detected capacity change from 0 to 8 [ 141.429431][ T4305] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.447226][ T4305] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.455916][ T4305] usb 1-1: Product: syz [ 141.465484][ T4305] usb 1-1: Manufacturer: syz [ 141.475299][ T6141] SQUASHFS error: Unknown LZ4 version [ 141.486736][ T6141] squashfs image failed sanity check [ 141.497124][ T4305] usb 1-1: SerialNumber: syz [ 141.522209][ T6147] loop6: detected capacity change from 0 to 512 [ 141.538709][ T4305] usb 1-1: config 0 descriptor?? [ 141.592390][ T4305] usb 1-1: selecting invalid altsetting 0 [ 141.609074][ T6147] EXT4-fs (loop6): Ignoring removed nobh option [ 141.615665][ T6147] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 141.615665][ T6147] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 141.615665][ T6147] [ 141.704436][ T4253] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.754713][ T6147] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.544: corrupted inode contents [ 141.787398][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 141.804515][ T6147] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #16: comm syz.6.544: mark_inode_dirty error [ 141.823297][ T1325] usb 1-1: USB disconnect, device number 3 [ 141.856086][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 141.879947][ T6147] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.544: corrupted inode contents [ 141.902550][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 141.911021][ T6147] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.544: mark_inode_dirty error [ 141.914503][ T6156] loop5: detected capacity change from 0 to 2048 [ 141.928398][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 141.937698][ T6147] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.544: corrupted inode contents [ 141.961442][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 141.968053][ T6147] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 141.995051][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 141.999172][ T4253] usb 2-1: Using ep0 maxpacket: 8 [ 142.008885][ T6147] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #16: comm syz.6.544: corrupted inode contents [ 142.035931][ T6156] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 142.054063][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 142.055484][ T6156] EXT4-fs error (device loop5): ext4_lookup:1858: inode #16: comm syz.5.547: iget: bad i_size value: 8796093031208 [ 142.075059][ T6147] EXT4-fs error (device loop6): ext4_truncate:4273: inode #16: comm syz.6.544: mark_inode_dirty error [ 142.103993][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 142.129422][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.135221][ T6147] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 142.149507][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.166265][ T4253] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 142.176521][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 142.191462][ T6147] EXT4-fs (loop6): 1 truncate cleaned up [ 142.193890][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.201851][ T6147] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x0000000000000008,nobh,lazytime,auto_da_alloc=0x0000000000000008,noacl,. Quota mode: writeback. [ 142.230875][ T4253] usb 2-1: config 0 descriptor?? [ 142.374056][ T6169] loop4: detected capacity change from 0 to 1024 [ 142.415166][ T6172] loop5: detected capacity change from 0 to 1764 [ 142.511408][ T6169] EXT4-fs (loop4): Ignoring removed oldalloc option [ 142.534028][ T6169] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 142.560124][ T6169] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53445!=20869) [ 142.602816][ T6169] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.549: iget: special inode unallocated [ 142.679743][ T6169] EXT4-fs (loop4): no journal found [ 142.689476][ T6169] EXT4-fs (loop4): can't get journal size [ 142.713486][ T4253] logitech 0003:046D:C626.000C: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 142.727419][ T6169] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,oldalloc,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 142.854750][ T6195] netlink: 'syz.5.554': attribute type 1 has an invalid length. [ 142.897928][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'. [ 142.916976][ T1325] usb 2-1: USB disconnect, device number 5 [ 142.944441][ T6199] loop4: detected capacity change from 0 to 16 [ 142.981665][ T6199] erofs: (device loop4): mounted with root inode @ nid 36. [ 143.088780][ T6205] loop5: detected capacity change from 0 to 512 [ 143.125526][ T6210] loop4: detected capacity change from 0 to 8 [ 143.144618][ T6205] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.188261][ T6210] SQUASHFS error: Unknown LZ4 version [ 143.212190][ T6210] squashfs image failed sanity check [ 143.247943][ T6205] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 143.285926][ T6205] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 143.303864][ T6205] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 143.314331][ T6205] System zones: 0-2, 18-18, 34-35 [ 143.321557][ T6205] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.373295][ T6219] loop6: detected capacity change from 0 to 256 [ 143.436158][ T6219] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.509186][ T6219] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 143.553340][ T6219] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 143.868816][ T6235] loop6: detected capacity change from 0 to 256 [ 144.697390][ T6250] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~  [ 144.985095][ T6268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.029103][ T1325] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 145.198509][ T6282] loop6: detected capacity change from 0 to 8 [ 145.296697][ T6282] SQUASHFS error: Unknown LZ4 version [ 145.318785][ T6282] squashfs image failed sanity check [ 145.399417][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.409366][ T4241] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.420945][ T1325] usb 2-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 145.440987][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.469761][ T1325] usb 2-1: config 0 descriptor?? [ 145.489768][ T6256] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.675258][ T6304] loop5: detected capacity change from 0 to 1024 [ 145.733829][ T6304] hfsplus: invalid btree flag [ 145.738817][ T6304] hfsplus: failed to load extents file [ 145.809353][ T4241] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.819636][ T4241] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.828517][ T4241] usb 5-1: config 1 has no interface number 0 [ 145.834767][ T4241] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.951166][ T1325] ntrig 0003:1B96:000E.000D: bogus close delimiter [ 145.964227][ T1325] ntrig 0003:1B96:000E.000D: item 0 4 2 10 parsing failed [ 145.972537][ T1325] ntrig 0003:1B96:000E.000D: parse failed [ 145.978517][ T1325] ntrig: probe of 0003:1B96:000E.000D failed with error -22 [ 146.040183][ T4241] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.085100][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.108354][ T4241] usb 5-1: Product: syz [ 146.140049][ T4241] usb 5-1: Manufacturer: syz [ 146.150791][ T4241] usb 5-1: SerialNumber: syz [ 146.154722][ T4305] usb 2-1: USB disconnect, device number 6 [ 146.209308][ T4185] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 146.230142][ T4241] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 146.248008][ T4241] cdc_ncm 5-1:1.1: bind() failure [ 146.966794][ T6372] loop6: detected capacity change from 0 to 8 [ 146.987617][ T6373] loop1: detected capacity change from 0 to 512 [ 147.054715][ T6372] SQUASHFS error: Unknown LZ4 version [ 147.091894][ T6372] squashfs image failed sanity check [ 147.121675][ T4185] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.149114][ T4185] usb 6-1: config 0 interface 0 has no altsetting 0 [ 147.155851][ T4185] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 147.177807][ T4185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.203671][ T4185] usb 6-1: config 0 descriptor?? [ 147.224586][ T6373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.350151][ T6373] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.596: iget: bad i_size value: 15393162788874 [ 147.373516][ T4305] usb 5-1: USB disconnect, device number 11 [ 147.402303][ T6388] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.596: iget: bad i_size value: 15393162788874 [ 147.549303][ T4185] usbhid 6-1:0.0: can't add hid device: -71 [ 147.555477][ T4185] usbhid: probe of 6-1:0.0 failed with error -71 [ 147.612239][ T4185] usb 6-1: USB disconnect, device number 7 [ 147.913502][ T6416] loop1: detected capacity change from 0 to 512 [ 148.005653][ T6416] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.117782][ T6418] loop6: detected capacity change from 0 to 2048 [ 148.626934][ T4485] Alternate GPT is invalid, using primary GPT. [ 148.636953][ T6416] EXT4-fs (loop1): 1 truncate cleaned up [ 148.659695][ T6416] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 148.693366][ T4485] loop6: p1 p2 p3 [ 148.775152][ T6418] Alternate GPT is invalid, using primary GPT. [ 148.799289][ T6418] loop6: p1 p2 p3 [ 148.861642][ T6416] EXT4-fs (loop1): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 148.984390][ T6446] loop5: detected capacity change from 0 to 256 [ 149.026616][ T6449] loop4: detected capacity change from 0 to 8 [ 149.115111][ T6449] SQUASHFS error: Unknown LZ4 version [ 149.123626][ T6449] squashfs image failed sanity check [ 149.178613][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 149.185509][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 149.207006][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 149.411047][ T6471] netlink: set zone limit has 4 unknown bytes [ 149.530687][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 149.567477][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 149.581127][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 150.335000][ T6490] loop4: detected capacity change from 0 to 256 [ 150.429351][ T4248] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 150.532395][ T6496] loop5: detected capacity change from 0 to 256 [ 150.586834][ T6490] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.587492][ T6492] loop6: detected capacity change from 0 to 8192 [ 150.628949][ T6490] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 150.828193][ T6490] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 150.844085][ T4248] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 150.874701][ T4248] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.099223][ T4248] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.130583][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.159119][ T4248] usb 2-1: Product: syz [ 151.176381][ T4248] usb 2-1: Manufacturer: syz [ 151.208807][ T4248] usb 2-1: SerialNumber: syz [ 151.250629][ T4248] usb 2-1: config 0 descriptor?? [ 151.322739][ T4248] usb 2-1: selecting invalid altsetting 0 [ 151.797244][ T4248] usb 2-1: USB disconnect, device number 7 [ 152.084998][ T6540] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 152.141880][ T6543] loop6: detected capacity change from 0 to 256 [ 152.160250][ T6540] batman_adv: batadv0: Adding interface: team0 [ 152.177344][ T6540] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.299400][ T6540] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 152.605452][ T6546] loop5: detected capacity change from 0 to 8192 [ 152.717787][ T5445] udevd[5445]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.771838][ T6546] 9pnet: Insufficient options for proto=fd [ 152.803544][ T6561] loop1: detected capacity change from 0 to 256 [ 152.883397][ T6561] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.919348][ T6561] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 153.034706][ T6561] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 153.409411][ T4189] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 153.709317][ T4189] usb 6-1: Using ep0 maxpacket: 32 [ 153.941509][ T6606] device bpq0 entered promiscuous mode [ 153.958513][ T6594] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.966594][ T4189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.989791][ T4189] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 154.004991][ T4189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.121718][ T4189] usb 6-1: config 0 descriptor?? [ 154.687162][ T6618] netlink: 52 bytes leftover after parsing attributes in process `syz.0.662'. [ 154.715995][ T6615] loop4: detected capacity change from 0 to 512 [ 154.786711][ T6615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.836230][ T6624] syz.0.666 uses obsolete (PF_INET,SOCK_PACKET) [ 154.871707][ T6628] loop1: detected capacity change from 0 to 256 [ 154.907333][ T6630] loop6: detected capacity change from 0 to 256 [ 154.932031][ T6615] EXT4-fs (loop4): 1 truncate cleaned up [ 154.937752][ T6615] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 154.954267][ T6628] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.997914][ T6628] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 155.049851][ T4189] hid (null): invalid report_count 37137 [ 155.060754][ T4189] magicmouse 0003:05AC:0265.000E: invalid report_count 37137 [ 155.075532][ T4189] magicmouse 0003:05AC:0265.000E: item 0 2 1 9 parsing failed [ 155.093965][ T6615] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 155.114995][ T4189] magicmouse 0003:05AC:0265.000E: magicmouse hid parse failed [ 155.124478][ T4189] magicmouse: probe of 0003:05AC:0265.000E failed with error -22 [ 155.162900][ T6628] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 155.357066][ T4248] usb 6-1: USB disconnect, device number 8 [ 155.431806][ T6643] netlink: 'syz.4.671': attribute type 3 has an invalid length. [ 156.671593][ T6671] loop1: detected capacity change from 0 to 256 [ 156.776478][ T6679] loop6: detected capacity change from 0 to 256 [ 156.843393][ T6683] tipc: Started in network mode [ 156.857056][ T6683] tipc: Node identity 524f3e0eb45d, cluster identity 4711 [ 156.871462][ T6679] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.907786][ T6683] tipc: Enabled bearer , priority 0 [ 156.917050][ T6679] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 156.937678][ T6688] device syzkaller0 entered promiscuous mode [ 156.971818][ T6679] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 157.153521][ T6692] tipc: Resetting bearer [ 157.326911][ T6692] tipc: Disabling bearer [ 158.794054][ T4241] tipc: Node number set to 3859955214 [ 159.334266][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 159.452411][ T6742] loop1: detected capacity change from 0 to 512 [ 159.469628][ T4253] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 159.753557][ T6742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.306475][ T6742] EXT4-fs (loop1): 1 truncate cleaned up [ 160.469285][ T6742] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 160.605572][ T6742] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 162.869185][ T4253] usb 5-1: device descriptor read/all, error -71 [ 164.325242][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 164.338555][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 164.499818][ T6811] loop6: detected capacity change from 0 to 512 [ 164.518637][ T6809] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.529375][ T6809] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.538097][ T6809] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.548198][ T6809] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.706268][ T6811] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 165.730831][ T6811] EXT4-fs (loop6): 1 truncate cleaned up [ 165.767117][ T6811] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 165.955444][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 165.998448][ T6811] EXT4-fs (loop6): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 166.017547][ T4305] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 166.045926][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 166.999851][ T4305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 167.016399][ T4305] usb 2-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 167.033884][ T4305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.061122][ T4305] usb 2-1: config 0 descriptor?? [ 167.089801][ T6819] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.634980][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.734'. [ 168.569371][ T4305] usbhid 2-1:0.0: can't add hid device: -71 [ 168.575573][ T4305] usbhid: probe of 2-1:0.0 failed with error -71 [ 168.598638][ T4305] usb 2-1: USB disconnect, device number 8 [ 169.709468][ T23] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 170.179953][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 170.279839][ T23] usb 6-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 170.339877][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.367615][ T6907] loop6: detected capacity change from 0 to 512 [ 170.440538][ T23] usb 6-1: config 0 descriptor?? [ 170.459472][ T6895] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.479949][ T6907] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 170.548053][ T6907] EXT4-fs (loop6): 1 truncate cleaned up [ 170.576702][ T6907] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 170.750233][ T6907] EXT4-fs (loop6): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 171.049459][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 171.056680][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 171.099389][ T23] usb 6-1: USB disconnect, device number 9 [ 171.832442][ T6947] loop5: detected capacity change from 0 to 256 [ 172.627882][ T6960] loop6: detected capacity change from 0 to 512 [ 173.019838][ T6960] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.062885][ T6960] EXT4-fs (loop6): 1 truncate cleaned up [ 173.073148][ T6960] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 173.804358][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.813452][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.160093][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.205099][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.779922][ T7017] loop1: detected capacity change from 0 to 512 [ 176.809488][ T7017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.829523][ T6972] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.836818][ T7017] EXT4-fs (loop1): 1 truncate cleaned up [ 176.838668][ T6972] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.852975][ T7017] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 176.855537][ T6972] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.876801][ T6972] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.075597][ T6972] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.084926][ T6972] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.094153][ T6972] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.103187][ T6972] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.153516][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.778'. [ 177.170990][ T6976] device bridge_slave_1 left promiscuous mode [ 177.179194][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.193025][ T6976] device bridge_slave_0 left promiscuous mode [ 177.199842][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.269126][ T4270] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 178.321051][ T7035] loop6: detected capacity change from 0 to 8192 [ 178.811441][ T4270] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 179.541943][ T4270] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.647583][ T7060] loop4: detected capacity change from 0 to 512 [ 179.685648][ T7064] loop6: detected capacity change from 0 to 8 [ 179.699224][ T4270] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 179.708701][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.713624][ T7060] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 179.736457][ T7060] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.739919][ T4270] usb 2-1: Product: syz [ 179.765320][ T7064] SQUASHFS error: Unknown LZ4 version [ 179.780154][ T7060] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 179.791683][ T7060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 179.793596][ T7064] squashfs image failed sanity check [ 179.806863][ T7060] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 179.823234][ T7060] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 179.824311][ T4270] usb 2-1: Manufacturer: syz [ 179.847122][ T7060] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,data_err=ignore,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 179.859142][ T4270] usb 2-1: SerialNumber: syz [ 179.893752][ T7060] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.803: dx entry: limit 65535 != root limit 120 [ 179.909148][ T4241] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.977593][ T7060] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.803: Corrupt directory, running e2fsck is recommended [ 180.058534][ T4270] usb 2-1: config 0 descriptor?? [ 180.101541][ T4270] usb 2-1: selecting invalid altsetting 0 [ 180.290364][ T4241] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.406883][ T4241] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.543687][ T4241] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 180.690073][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.757088][ T4270] usb 2-1: USB disconnect, device number 9 [ 180.789122][ T4241] usb 1-1: config 0 descriptor?? [ 180.863573][ T7074] overlayfs: missing 'lowerdir' [ 181.086891][ T7083] loop5: detected capacity change from 0 to 8192 [ 181.184220][ T5445] udevd[5445]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.186828][ T4189] Bluetooth: hci3: command 0x0406 tx timeout [ 181.206869][ T4189] Bluetooth: hci4: command 0x0406 tx timeout [ 181.215306][ T4189] Bluetooth: hci0: command 0x0406 tx timeout [ 181.279227][ T13] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 181.679351][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 181.699189][ T4241] wacom 0003:056A:00BA.000F: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 181.710989][ T4241] wacom 0003:056A:00BA.000F: hidraw0: USB HID v10.00 Device [HID 056a:00ba] on usb-dummy_hcd.0-1/input0 [ 181.729882][ T4241] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BA.000F/input/input14 [ 181.735602][ T13] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 181.757269][ T7095] loop4: detected capacity change from 0 to 1024 [ 181.814453][ T4241] usb 1-1: USB disconnect, device number 4 [ 181.885482][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.902684][ T13] usb 7-1: config 0 descriptor?? [ 181.929102][ T7095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.630898][ T13] logitech 0003:046D:C626.0010: unbalanced delimiter at end of report description [ 182.682975][ T13] logitech 0003:046D:C626.0010: parse failed [ 182.723340][ T13] logitech: probe of 0003:046D:C626.0010 failed with error -22 [ 182.857098][ T13] usb 7-1: USB disconnect, device number 5 [ 183.548422][ T7109] fido_id[7109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.763716][ T7112] loop1: detected capacity change from 0 to 1024 [ 183.782585][ T7121] 9pnet: Insufficient options for proto=fd [ 184.709264][ T4189] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 185.259515][ T4189] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 185.335418][ T4189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.714454][ T4189] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.732226][ T7168] loop5: detected capacity change from 0 to 512 [ 185.762629][ T4189] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 185.792570][ T7168] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.815898][ T7172] loop6: detected capacity change from 0 to 512 [ 185.823520][ T4189] usb 5-1: Product: syz [ 185.842960][ T4189] usb 5-1: Manufacturer: syz [ 185.868590][ T7168] EXT4-fs (loop5): 1 truncate cleaned up [ 185.884364][ T7172] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 185.884364][ T7172] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 185.884364][ T7172] [ 185.925802][ T4189] usb 5-1: SerialNumber: syz [ 186.049246][ T7168] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 186.064654][ T7172] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.076920][ T4189] usb 5-1: config 0 descriptor?? [ 186.131214][ T7168] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 186.492151][ T4189] usb 5-1: selecting invalid altsetting 0 [ 186.535326][ T7172] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026099, mo2=0000] [ 186.543126][ T7172] EXT4-fs (loop6): 1 truncate cleaned up [ 186.543142][ T7172] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 186.563317][ T9] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 186.563463][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:0: Failed to release dquot type 1 [ 186.771191][ T4241] usb 5-1: USB disconnect, device number 14 [ 187.325467][ T7193] loop5: detected capacity change from 0 to 512 [ 187.530434][ T7197] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 187.648519][ T7193] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 187.739933][ T7193] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 188.109643][ T7193] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 188.176525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 188.699343][ T7193] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 188.704728][ T7217] loop1: detected capacity change from 0 to 512 [ 188.708367][ T7193] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.730319][ T7193] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.846: bg 0: block 34: padding at end of block bitmap is not set [ 189.081506][ T7193] Quota error (device loop5): write_blk: dquota write failed [ 189.119214][ T7193] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 189.135119][ T7217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.234410][ T7193] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.846: Failed to acquire dquot type 1 [ 189.236430][ T7217] EXT4-fs (loop1): 1 truncate cleaned up [ 189.315599][ T7193] EXT4-fs (loop5): 1 truncate cleaned up [ 189.360114][ T7193] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,nodioread_nolock,errors=continue,lazytime,noblock_validity,usrjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 189.389314][ T7217] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 189.759194][ T7217] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 189.770757][ T7193] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.846: iget: bad i_size value: 360287970189639690 [ 189.923266][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 191.109731][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.117188][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.187929][ T7249] loop6: detected capacity change from 0 to 2048 [ 191.253020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 191.269041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 191.278282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 191.287857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 191.302235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 191.490787][ T6993] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 191.701490][ T7249] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.772517][ T7249] fs-verity: sha512 using implementation "sha512-avx2" [ 192.329472][ T6993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.351938][ T6993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.456487][ T6993] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.476126][ T6993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.496226][ T6993] usb 6-1: SerialNumber: syz [ 192.616240][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.677688][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.793671][ T6993] usb 6-1: 0:2 : does not exist [ 192.852176][ T6993] usb 6-1: USB disconnect, device number 10 [ 193.090035][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.382597][ T7216] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.395179][ T7216] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.410049][ T7216] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.423056][ T7216] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.480286][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.850625][ T6993] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 195.389802][ T6993] usb 7-1: config 0 has an invalid interface number: 176 but max is 0 [ 195.412477][ T6993] usb 7-1: config 0 has no interface number 0 [ 195.454638][ T6993] usb 7-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 195.573305][ T6993] usb 7-1: config 0 interface 176 has no altsetting 0 [ 195.999460][ T6993] usb 7-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 196.022496][ T6993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.052630][ T6993] usb 7-1: Product: syz [ 196.057095][ T6993] usb 7-1: Manufacturer: syz [ 196.068849][ T6993] usb 7-1: SerialNumber: syz [ 196.097620][ T7325] loop5: detected capacity change from 0 to 128 [ 196.108592][ T6993] usb 7-1: config 0 descriptor?? [ 196.149833][ T7296] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.825405][ T6993] usb 7-1: USB disconnect, device number 6 [ 196.937541][ T7325] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.976774][ T7325] fscrypt (loop5, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 197.027958][ T7339] loop4: detected capacity change from 0 to 512 [ 197.184844][ T7339] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.896: invalid block [ 197.273898][ T7339] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.896: invalid indirect mapped block 10 (level 1) [ 197.288243][ T6992] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 197.399584][ T7339] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.896: invalid indirect mapped block 8 (level 1) [ 197.560208][ T7339] EXT4-fs (loop4): 1 truncate cleaned up [ 197.577688][ T7339] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 197.606284][ T7350] loop6: detected capacity change from 0 to 256 [ 197.694659][ T7352] loop5: detected capacity change from 0 to 1024 [ 197.823616][ T6992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 197.835972][ T6992] usb 2-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 197.845233][ T6992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.855290][ T6992] usb 2-1: config 0 descriptor?? [ 197.889438][ T7338] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 198.332262][ T7359] loop6: detected capacity change from 0 to 1024 [ 198.411149][ T6992] ntrig 0003:1B96:000E.0011: bogus close delimiter [ 198.461837][ T7359] EXT4-fs (loop6): Ignoring removed nobh option [ 198.488480][ T6992] ntrig 0003:1B96:000E.0011: item 0 4 2 10 parsing failed [ 198.520278][ T6992] ntrig 0003:1B96:000E.0011: parse failed [ 198.528157][ T6992] ntrig: probe of 0003:1B96:000E.0011 failed with error -22 [ 198.550565][ T7359] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,dioread_lock,jqfmt=vfsv1,nogrpid,errors=remount-ro,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,nobarrier,jqfmt=vfsold,max_batch_time=0x000000000000000b,data_err=abort,. Quota mode: none. [ 198.650610][ T6992] usb 2-1: USB disconnect, device number 10 [ 199.939189][ T1325] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 200.038637][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.047593][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.059275][ T4189] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 200.279229][ T4189] usb 7-1: device descriptor read/64, error -71 [ 200.299265][ T4234] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.319408][ T1325] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 200.328075][ T1325] usb 5-1: config 0 has no interface number 0 [ 200.335066][ T1325] usb 5-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 200.349892][ T1325] usb 5-1: config 0 interface 176 has no altsetting 0 [ 200.436236][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.471675][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.519293][ T1325] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 200.544585][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.549301][ T4189] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 200.553516][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 200.566719][ T1325] usb 5-1: Product: syz [ 200.571757][ T1325] usb 5-1: Manufacturer: syz [ 200.577468][ T1325] usb 5-1: SerialNumber: syz [ 200.599468][ T1325] usb 5-1: config 0 descriptor?? [ 200.619598][ T7379] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 200.719224][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.732496][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.744854][ T4234] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 200.749265][ T4189] usb 7-1: device descriptor read/64, error -71 [ 200.754058][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.766365][ T4234] usb 2-1: config 0 descriptor?? [ 200.868955][ T7371] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.879716][ T7371] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.888976][ T7371] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.890284][ T4189] usb usb7-port1: attempt power cycle [ 200.899162][ T7371] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.952473][ T1325] usb 5-1: USB disconnect, device number 15 [ 201.003523][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.319206][ T4189] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 201.419402][ T4189] usb 7-1: device descriptor read/8, error -71 [ 201.543718][ T7402] loop4: detected capacity change from 0 to 4096 [ 201.607794][ T7402] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.704730][ T4189] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 201.815935][ T4189] usb 7-1: device descriptor read/8, error -71 [ 202.051965][ T4189] usb usb7-port1: unable to enumerate USB device [ 202.468516][ T4234] usbhid 2-1:0.0: can't add hid device: -71 [ 202.476035][ T4234] usbhid: probe of 2-1:0.0 failed with error -71 [ 202.500230][ T4234] usb 2-1: USB disconnect, device number 11 [ 202.670215][ T4189] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 203.049318][ T4189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 203.073153][ T4189] usb 6-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 203.098145][ T4189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.135568][ T4189] usb 6-1: config 0 descriptor?? [ 203.169393][ T7411] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 203.632336][ T4189] ntrig 0003:1B96:000E.0012: bogus close delimiter [ 203.639732][ T4189] ntrig 0003:1B96:000E.0012: item 0 4 2 10 parsing failed [ 203.647531][ T4189] ntrig 0003:1B96:000E.0012: parse failed [ 203.653578][ T4189] ntrig: probe of 0003:1B96:000E.0012 failed with error -22 [ 203.690941][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.728283][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.856768][ T7423] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.862576][ T4189] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.876163][ T23] usb 6-1: USB disconnect, device number 11 [ 203.882659][ T7423] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.900776][ T7423] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.928692][ T7423] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.119152][ T4189] usb 2-1: Using ep0 maxpacket: 16 [ 204.239249][ T4189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.257459][ T4189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.268238][ T4189] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 204.283465][ T4189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.296140][ T4189] usb 2-1: config 0 descriptor?? [ 204.729168][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 204.839268][ T4189] usbhid 2-1:0.0: can't add hid device: -71 [ 204.845638][ T4189] usbhid: probe of 2-1:0.0 failed with error -71 [ 204.854444][ T4189] usb 2-1: USB disconnect, device number 12 [ 204.919194][ T23] usb 6-1: device descriptor read/64, error -71 [ 204.967163][ T7460] loop4: detected capacity change from 0 to 256 [ 205.090743][ T7460] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 205.220265][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 205.252085][ T7471] loop6: detected capacity change from 0 to 256 [ 205.345667][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.386858][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.427629][ T7471] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 205.449102][ T23] usb 6-1: device descriptor read/64, error -71 [ 205.477103][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.503292][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.524890][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.547585][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.555915][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.567569][ T7471] FAT-fs (loop6): Directory bread(block 1285) failed [ 205.576096][ T23] usb usb6-port1: attempt power cycle [ 205.591009][ T7471] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 205.957836][ T7489] loop6: detected capacity change from 0 to 8 [ 205.989366][ T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 206.011813][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.019294][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.025070][ T7489] SQUASHFS error: lzo decompression failed, data probably corrupt [ 206.044784][ T7489] SQUASHFS error: Failed to read block 0x91: -5 [ 206.062191][ T7489] SQUASHFS error: Unable to read metadata cache entry [8f] [ 206.089918][ T7489] SQUASHFS error: Unable to read inode 0x11f [ 206.099433][ T23] usb 6-1: device descriptor read/8, error -71 [ 206.369232][ T23] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 206.469759][ T23] usb 6-1: device descriptor read/8, error -71 [ 206.594141][ T4313] Bluetooth: hci1: command 0x0406 tx timeout [ 206.601013][ T23] usb usb6-port1: unable to enumerate USB device [ 207.719729][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.805722][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.084584][ T7519] loop5: detected capacity change from 0 to 16 [ 208.941845][ T7479] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.970546][ T7479] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.989169][ T7479] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.027263][ T7479] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.435236][ T7542] loop5: detected capacity change from 0 to 512 [ 209.522071][ T7542] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 209.522071][ T7542] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 209.522071][ T7542] [ 209.595672][ T7542] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 209.595672][ T7542] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 209.595672][ T7542] [ 209.615373][ T7542] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.684063][ T7542] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 209.703485][ T7542] EXT4-fs (loop5): 1 truncate cleaned up [ 209.713842][ T7542] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 209.738635][ T4391] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 209.752967][ T4391] EXT4-fs error (device loop5): ext4_release_dquot:6245: comm kworker/u4:10: Failed to release dquot type 1 [ 209.809091][ T7542] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.966: iget: bad i_size value: 360287970199339018 [ 209.864424][ T7542] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.966: iget: bad i_size value: 360287970199339018 [ 210.587388][ T7562] loop6: detected capacity change from 0 to 128 [ 210.754211][ T7562] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 210.894932][ T7573] loop1: detected capacity change from 0 to 128 [ 210.959318][ T6992] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 211.999764][ T6992] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.016030][ T6992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.069351][ T6992] usb 5-1: config 0 descriptor?? [ 212.170802][ T6992] cp210x 5-1:0.0: cp210x converter detected [ 212.234181][ T7598] loop1: detected capacity change from 0 to 256 [ 212.255558][ T7599] loop6: detected capacity change from 0 to 128 [ 212.359694][ T7599] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 212.469947][ T1107] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 212.628329][ T6992] usb 5-1: cp210x converter now attached to ttyUSB0 [ 212.815380][ T23] usb 5-1: USB disconnect, device number 16 [ 212.847313][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.894579][ T23] cp210x 5-1:0.0: device disconnected [ 212.899179][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 212.952772][ T7621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.971579][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.978968][ T7625] loop6: detected capacity change from 0 to 1024 [ 212.986734][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.015697][ T7621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.032921][ T1107] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 213.041591][ T1107] usb 6-1: config 0 has no interface number 0 [ 213.047800][ T1107] usb 6-1: config 0 interface 184 has no altsetting 0 [ 213.057398][ T7625] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.234367][ T1107] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 213.249164][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.257381][ T1107] usb 6-1: Product: syz [ 213.259286][ T7638] loop6: detected capacity change from 0 to 128 [ 213.275874][ T1107] usb 6-1: Manufacturer: syz [ 213.289115][ T1107] usb 6-1: SerialNumber: syz [ 213.300148][ T1107] usb 6-1: config 0 descriptor?? [ 213.327417][ T7642] fuse: Bad value for 'fd' [ 213.360020][ T1107] smsc75xx v1.0.0 [ 213.725439][ T7657] loop1: detected capacity change from 0 to 128 [ 213.742260][ T4313] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 213.752045][ T4313] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.800062][ T7657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.604759][ T7671] loop4: detected capacity change from 0 to 512 [ 214.662535][ T7673] loop6: detected capacity change from 0 to 128 [ 214.730684][ T7673] EXT4-fs (loop6): Ignoring removed nobh option [ 214.733811][ T7671] EXT4-fs (loop4): Ignoring removed nobh option [ 214.756919][ T7673] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 214.760930][ T7677] loop1: detected capacity change from 0 to 128 [ 214.789243][ T7671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.793791][ T26] audit: type=1800 audit(216.760:12): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1023" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 214.828056][ T7677] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 214.849322][ T7671] EXT4-fs (loop4): 1 truncate cleaned up [ 214.876267][ T7671] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 215.004936][ T1107] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 215.037646][ T1107] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.083761][ T1107] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 215.115490][ T1107] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 215.143228][ T1107] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 215.159491][ T1107] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 215.174038][ T1107] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 215.191742][ T1107] usb 6-1: USB disconnect, device number 16 [ 215.246185][ T7691] loop1: detected capacity change from 0 to 164 [ 215.289213][ T4313] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 215.322669][ T7691] isofs_fill_super: root inode is not a directory. Corrupted media? [ 215.529122][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 215.809643][ T4313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.840554][ T6992] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 215.909826][ T4313] usb 5-1: config index 0 descriptor too short (expected 25, got 18) [ 215.932593][ T4313] usb 5-1: config 9 has an invalid interface number: 112 but max is 0 [ 216.028023][ T4313] usb 5-1: config 9 has no interface number 0 [ 216.090178][ T4313] usb 5-1: config 9 interface 112 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.220546][ T6992] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 216.255993][ T4313] usb 5-1: config 9 interface 112 has no altsetting 0 [ 216.291716][ T6992] usb 2-1: config 0 has no interface number 0 [ 216.337748][ T6992] usb 2-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 216.375767][ T6992] usb 2-1: config 0 interface 176 has no altsetting 0 [ 216.489460][ T4313] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 216.515666][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.531735][ T4313] usb 5-1: Product: syz [ 216.536561][ T4313] usb 5-1: Manufacturer: syz [ 216.542364][ T4313] usb 5-1: SerialNumber: syz [ 216.545975][ T7725] loop6: detected capacity change from 0 to 2048 [ 216.563976][ T6992] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 216.646374][ T7725] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 216.837481][ T7725] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 217.237600][ T6992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.246390][ T6992] usb 2-1: Product: syz [ 217.251290][ T6992] usb 2-1: Manufacturer: syz [ 217.256083][ T6992] usb 2-1: SerialNumber: syz [ 217.262588][ T6992] usb 2-1: config 0 descriptor?? [ 217.279433][ T7699] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.293981][ T26] audit: type=1800 audit(219.260:13): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1043" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 217.329256][ T4313] r8152-cfgselector 5-1: Unknown version 0x0000 [ 217.362564][ T7725] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1043: bg 0: block 234: padding at end of block bitmap is not set [ 217.382221][ T4313] r8152-cfgselector 5-1: Unknown version 0x0000 [ 217.406403][ T4313] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 217.430935][ T7725] EXT4-fs (loop6): Remounting filesystem read-only [ 217.631577][ T7747] trusted_key: encrypted_key: insufficient parameters specified [ 217.725535][ T7749] loop4: detected capacity change from 0 to 128 [ 217.736064][ T6990] usb 2-1: USB disconnect, device number 13 [ 217.776844][ T7753] loop6: detected capacity change from 0 to 512 [ 217.786937][ T7749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.886585][ T7753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 217.903721][ T7753] EXT4-fs (loop6): orphan cleanup on readonly fs [ 217.916718][ T7753] EXT4-fs warning (device loop6): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 217.937737][ T7753] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 217.945024][ T7753] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #13: comm syz.6.1054: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.965349][ T7753] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1054: couldn't read orphan inode 13 (err -117) [ 217.977950][ T7753] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 218.050436][ T7753] EXT4-fs error (device loop6): ext4_lookup:1858: comm syz.6.1054: inode #15: comm syz.6.1054: iget: illegal inode # [ 218.075936][ T7753] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 218.099556][ T7753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 218.135263][ T7753] EXT4-fs warning (device loop6): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 218.338243][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 218.402962][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1063'. [ 218.483054][ T7777] loop5: detected capacity change from 0 to 128 [ 218.571133][ T7777] EXT4-fs (loop5): Ignoring removed nobh option [ 218.599763][ T7777] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 218.712131][ T6990] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.218185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 219.227375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 219.237245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 219.500061][ T6990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.639398][ T6990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.801350][ T6990] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 219.981291][ T6990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.108167][ T6990] usb 1-1: config 0 descriptor?? [ 220.909945][ T7807] loop5: detected capacity change from 0 to 16 [ 220.992875][ T7811] loop6: detected capacity change from 0 to 256 [ 221.048180][ T7807] erofs: (device loop5): mounted with root inode @ nid 36. [ 221.063028][ T6990] hid-led 0003:1D34:0004.0014: item fetching failed at offset 5/7 [ 221.079283][ T7811] exFAT-fs (loop6): bogus data start sector [ 221.087489][ T7811] exFAT-fs (loop6): failed to read boot sector [ 221.140168][ T7811] exFAT-fs (loop6): failed to recognize exfat type [ 221.726227][ T6990] hid-led: probe of 0003:1D34:0004.0014 failed with error -22 [ 221.816417][ T6990] usb 1-1: USB disconnect, device number 5 [ 221.875293][ T7818] loop1: detected capacity change from 0 to 1024 [ 221.891155][ T7822] loop5: detected capacity change from 0 to 164 [ 222.254076][ T7832] loop6: detected capacity change from 0 to 128 [ 222.335795][ T7832] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 222.473874][ T7832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.240997][ T7850] loop5: detected capacity change from 0 to 8 [ 223.280952][ T7851] loop4: detected capacity change from 0 to 512 [ 223.311418][ T7853] loop1: detected capacity change from 0 to 2048 [ 223.318075][ T7850] SQUASHFS error: Unknown LZ4 version [ 223.328583][ T7850] squashfs image failed sanity check [ 223.361103][ T26] audit: type=1326 audit(225.330:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.6.1095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c9df0bbe9 code=0x0 [ 223.382498][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.393465][ T7851] EXT4-fs (loop4): inline encryption not supported [ 223.406204][ T7853] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 223.427268][ T7851] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.481215][ T7851] EXT4-fs (loop4): 1 truncate cleaned up [ 223.487108][ T7851] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 223.507192][ T6990] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 223.548228][ T7853] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 223.598735][ T7853] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #15: comm syz.1.1093: inline data xattr refers to an external xattr inode [ 223.618641][ T7853] EXT4-fs (loop1): Remounting filesystem read-only [ 223.899241][ T6990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 223.910574][ T6990] usb 1-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 223.920185][ T6990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.929081][ T4253] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 223.938415][ T6990] usb 1-1: config 0 descriptor?? [ 223.960090][ T7848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.029318][ T1107] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 224.071114][ T4313] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 224.084804][ T4313] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.272183][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 224.292560][ T4253] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 224.312651][ T4253] usb 5-1: config 0 has no interface number 0 [ 224.332472][ T4253] usb 5-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 224.356137][ T4253] usb 5-1: config 0 interface 176 has no altsetting 0 [ 224.400613][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.428228][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.438995][ T1107] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 225.084776][ T6990] usbhid 1-1:0.0: can't add hid device: -71 [ 225.091312][ T6990] usbhid: probe of 1-1:0.0 failed with error -71 [ 225.177564][ T4253] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 225.188807][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.198564][ T6990] usb 1-1: USB disconnect, device number 6 [ 225.204515][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.214093][ T4253] usb 5-1: Product: syz [ 225.219667][ T4253] usb 5-1: Manufacturer: syz [ 225.224724][ T4253] usb 5-1: SerialNumber: syz [ 225.236041][ T1107] usb 2-1: config 0 descriptor?? [ 225.255593][ T4253] usb 5-1: config 0 descriptor?? [ 225.279734][ T7868] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.313031][ T7891] loop6: detected capacity change from 0 to 128 [ 225.358977][ T7891] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.366588][ T7891] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.385857][ T7891] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 225.401222][ T7891] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 225.415913][ T7891] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 225.520341][ T7898] loop5: detected capacity change from 0 to 8 [ 225.562418][ T7898] SQUASHFS error: Unknown LZ4 version [ 225.567864][ T7898] squashfs image failed sanity check [ 225.590389][ T4253] usb 5-1: USB disconnect, device number 18 [ 225.641458][ T7902] loop6: detected capacity change from 0 to 256 [ 225.674830][ T7902] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 225.687877][ T7902] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 225.702921][ T26] audit: type=1800 audit(227.670:15): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1107" name="file1" dev="loop6" ino=1048842 res=0 errno=0 [ 225.725444][ T1107] apple 0003:05AC:024B.0016: unknown main item tag 0x6 [ 225.750537][ T7902] attempt to access beyond end of device [ 225.750537][ T7902] loop6: rw=524288, want=696, limit=256 [ 225.752963][ T1107] apple 0003:05AC:024B.0016: ignoring exceeding usage max [ 225.768421][ T26] audit: type=1800 audit(227.680:16): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1107" name="file1" dev="loop6" ino=1048842 res=0 errno=0 [ 225.798558][ T1107] apple 0003:05AC:024B.0016: invalid report_size 16640 [ 225.806202][ T1107] apple 0003:05AC:024B.0016: item 0 2 1 7 parsing failed [ 225.807995][ T26] audit: type=1804 audit(227.750:17): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1107" name="/newroot/167/file2/file1" dev="loop6" ino=1048842 res=1 errno=0 [ 225.826570][ T1107] apple 0003:05AC:024B.0016: parse failed [ 225.836041][ T26] audit: type=1800 audit(227.750:18): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1107" name="file1" dev="loop6" ino=1048842 res=0 errno=0 [ 225.851949][ T4544] udevd[4544]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.878157][ T1107] apple: probe of 0003:05AC:024B.0016 failed with error -22 [ 225.934709][ T6990] usb 2-1: USB disconnect, device number 14 [ 225.967418][ T7909] loop6: detected capacity change from 0 to 512 [ 226.048968][ T7909] EXT4-fs (loop6): Test dummy encryption mode enabled [ 226.049157][ T1107] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 226.064132][ T7909] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.082720][ T7909] EXT4-fs (loop6): 1 truncate cleaned up [ 226.089165][ T7909] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 226.184830][ T7909] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 226.248409][ T7919] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 226.412707][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.472158][ T7934] loop6: detected capacity change from 0 to 256 [ 226.532732][ T7936] loop1: detected capacity change from 0 to 512 [ 226.556263][ T7934] exFAT-fs (loop6): bogus data start sector [ 226.582064][ T7934] exFAT-fs (loop6): failed to read boot sector [ 226.589273][ T1107] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.598470][ T7934] exFAT-fs (loop6): failed to recognize exfat type [ 226.607283][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1119'. [ 226.608634][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.656789][ T7936] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #12: comm syz.1.1117: corrupted in-inode xattr [ 226.682624][ T1107] usb 1-1: Product: syz [ 226.702310][ T1107] usb 1-1: Manufacturer: syz [ 226.717338][ T1107] usb 1-1: SerialNumber: syz [ 226.724508][ T7936] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1117: couldn't read orphan inode 12 (err -117) [ 226.738225][ T7936] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000084,noload,noload,barrier=0x0000000000000001,,errors=continue. Quota mode: none. [ 226.765373][ T7936] EXT4-fs (loop1): shut down requested (2) [ 226.923289][ T7955] loop6: detected capacity change from 0 to 512 [ 226.959588][ T7958] loop4: detected capacity change from 0 to 8 [ 226.963876][ T7953] loop1: detected capacity change from 0 to 2048 [ 226.986328][ T7955] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 227.003459][ T7953] EXT4-fs (loop1): inline encryption not supported [ 227.010701][ T7955] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 227.023314][ T7958] SQUASHFS error: Unknown LZ4 version [ 227.028867][ T7958] squashfs image failed sanity check [ 227.037003][ T7955] System zones: 1-12 [ 227.043934][ T7953] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.059719][ T7955] EXT4-fs (loop6): 1 truncate cleaned up [ 227.065578][ T7955] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 227.074924][ T7953] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,inlinecrypt,min_batch_time=0x0000000000000007,bsdgroups,user_xattr,dioread_nolock,. Quota mode: writeback. [ 227.120490][ T26] audit: type=1800 audit(229.090:19): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1122" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 227.331931][ T6992] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 227.485281][ T7970] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.605129][ T6992] usb 6-1: Using ep0 maxpacket: 16 [ 227.671436][ T7977] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1132'. [ 227.724334][ T7979] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 227.784158][ T6992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.807444][ T6992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.827127][ T6992] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 227.861534][ T6992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.896283][ T6992] usb 6-1: config 0 descriptor?? [ 227.937843][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 227.947861][ T1107] cdc_ncm 1-1:1.0: failed to get mac address [ 227.987704][ T1107] cdc_ncm 1-1:1.0: bind() failure [ 228.040453][ T7997] usb usb7: usbfs: process 7997 (syz.6.1142) did not claim interface 0 before use [ 228.065104][ T1107] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 228.114383][ T1107] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 228.213633][ T8004] loop6: detected capacity change from 0 to 256 [ 228.238101][ T4313] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.447937][ T1107] usbtest: probe of 1-1:1.1 failed with error -71 [ 228.589329][ T4313] usb 5-1: Using ep0 maxpacket: 32 [ 228.719935][ T4313] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 228.758429][ T4313] usb 5-1: config 0 has no interface number 0 [ 228.962953][ T6992] apple 0003:05AC:024B.0017: unknown main item tag 0x6 [ 229.020849][ T4313] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 229.066006][ T1107] usb 1-1: USB disconnect, device number 7 [ 229.079265][ T6992] apple 0003:05AC:024B.0017: ignoring exceeding usage max [ 229.089687][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.104828][ T6992] apple 0003:05AC:024B.0017: invalid report_size 16640 [ 229.112229][ T4313] usb 5-1: Product: syz [ 229.116897][ T4313] usb 5-1: Manufacturer: syz [ 229.127442][ T6992] apple 0003:05AC:024B.0017: item 0 2 1 7 parsing failed [ 229.135664][ T4313] usb 5-1: SerialNumber: syz [ 229.147076][ T6992] apple 0003:05AC:024B.0017: parse failed [ 229.154174][ T4313] usb 5-1: config 0 descriptor?? [ 229.161424][ T6992] apple: probe of 0003:05AC:024B.0017 failed with error -22 [ 229.185907][ T6992] usb 6-1: USB disconnect, device number 17 [ 229.203241][ T4313] smsc95xx v2.0.0 [ 229.669731][ T4313] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 229.740606][ T4313] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 230.298214][ T4313] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.347846][ T4313] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 230.396222][ T4313] usb 5-1: USB disconnect, device number 19 [ 231.058936][ T8048] loop4: detected capacity change from 0 to 8192 [ 231.380364][ T4253] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 231.559379][ T1107] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 231.619134][ T4253] usb 2-1: Using ep0 maxpacket: 16 [ 231.799421][ T4248] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 232.079582][ T4248] usb 5-1: Using ep0 maxpacket: 32 [ 232.210074][ T4248] usb 5-1: config 10 has an invalid interface number: 184 but max is 0 [ 232.229957][ T4248] usb 5-1: config 10 has no interface number 0 [ 232.267862][ T4248] usb 5-1: config 10 interface 184 has no altsetting 0 [ 232.469147][ T4253] usb 2-1: unable to read config index 0 descriptor/all [ 232.476372][ T4253] usb 2-1: can't read configurations, error -71 [ 232.489567][ T4248] usb 5-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=4a.d0 [ 232.501490][ T6990] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 232.518388][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.518551][ T6990] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.536470][ T4248] usb 5-1: Product: syz [ 232.551675][ T4248] usb 5-1: Manufacturer: syz [ 232.572180][ T4248] usb 5-1: SerialNumber: syz [ 232.579325][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.607309][ T8080] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 232.754490][ T8090] device syzkaller0 entered promiscuous mode [ 232.770780][ T1107] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.785650][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.801210][ T1107] usb 6-1: Product: syz [ 232.805614][ T1107] usb 6-1: Manufacturer: syz [ 232.812692][ T1107] usb 6-1: SerialNumber: syz [ 232.912711][ T4248] usb-storage 5-1:10.184: USB Mass Storage device detected [ 232.935109][ T4248] usb-storage 5-1:10.184: Quirks match for vid 054c pid 0069: 1 [ 232.978107][ T4248] usb 5-1: USB disconnect, device number 20 [ 233.324992][ T8103] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 233.622512][ T8108] loop6: detected capacity change from 0 to 256 [ 235.756489][ T1107] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 235.769099][ T1107] cdc_ncm 6-1:1.0: bind() failure [ 235.777113][ T1107] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 235.799100][ T1107] cdc_ncm 6-1:1.1: bind() failure [ 235.824074][ T1107] usb 6-1: USB disconnect, device number 18 [ 235.902031][ T8122] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 235.945500][ T4253] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 235.989748][ T4253] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.231278][ T8140] No such timeout policy "syz1" [ 236.289168][ T1107] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 236.429159][ T4253] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.930274][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 236.939211][ T4253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.090256][ T1107] usb 6-1: config index 0 descriptor too short (expected 8457, got 36) [ 237.205988][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.280106][ T4253] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.357200][ T4253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.399971][ T1107] usb 6-1: config 0 has no interfaces? [ 237.416033][ T4253] usb 1-1: Product: syz [ 237.434802][ T4253] usb 1-1: Manufacturer: syz [ 237.490901][ T4253] usb 1-1: SerialNumber: syz [ 237.540460][ T8154] loop6: detected capacity change from 0 to 1024 [ 237.589465][ T1107] usb 6-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 237.608143][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.627332][ T8156] loop4: detected capacity change from 0 to 1024 [ 237.634551][ T1107] usb 6-1: Product: syz [ 237.644523][ T1107] usb 6-1: Manufacturer: syz [ 237.654395][ T1107] usb 6-1: SerialNumber: syz [ 237.668769][ T1107] usb 6-1: config 0 descriptor?? [ 237.706287][ T4317] hfsplus: b-tree write err: -5, ino 8 [ 237.811250][ T8163] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 237.944414][ T8124] loop5: detected capacity change from 0 to 1024 [ 238.066471][ T8171] loop6: detected capacity change from 0 to 8 [ 238.118528][ T8171] SQUASHFS error: Unknown LZ4 version [ 238.146119][ T8171] squashfs image failed sanity check [ 238.208801][ T8176] loop4: detected capacity change from 0 to 128 [ 238.235293][ T4253] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 238.249392][ T4253] cdc_ncm 1-1:1.0: bind() failure [ 238.270590][ T4253] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 238.284490][ T4253] cdc_ncm 1-1:1.1: bind() failure [ 238.288503][ T8176] EXT4-fs (loop4): Ignoring removed nobh option [ 238.345391][ T8176] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 238.805757][ T4313] usb 6-1: USB disconnect, device number 19 [ 238.992348][ T4317] hfsplus: b-tree write err: -5, ino 4 [ 239.490104][ T4253] usb 1-1: USB disconnect, device number 8 [ 239.689298][ T4248] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 239.969584][ T4248] usb 6-1: Using ep0 maxpacket: 32 [ 240.120782][ T4248] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 240.186830][ T4248] usb 6-1: config 0 has no interface number 0 [ 240.227699][ T8200] loop4: detected capacity change from 0 to 128 [ 240.244765][ T4248] usb 6-1: config 0 interface 184 has no altsetting 0 [ 240.297958][ T8204] loop6: detected capacity change from 0 to 128 [ 240.368879][ T8204] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 240.447514][ T8206] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1221'. [ 240.469366][ T4248] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 240.491147][ T4248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.509348][ T8210] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1221'. [ 240.525430][ T4248] usb 6-1: Product: syz [ 240.535031][ T4248] usb 6-1: Manufacturer: syz [ 240.550259][ T4248] usb 6-1: SerialNumber: syz [ 240.569357][ T4248] usb 6-1: config 0 descriptor?? [ 240.595997][ T8214] loop4: detected capacity change from 0 to 256 [ 240.639963][ T4248] smsc75xx v1.0.0 [ 240.661069][ T8214] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 240.699665][ T8214] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 240.862225][ T4305] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 240.976657][ T26] audit: type=1800 audit(242.940:20): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1223" name="file1" dev="loop4" ino=1048895 res=0 errno=0 [ 241.029495][ T6992] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 241.359553][ T4305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 241.432082][ T4305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.651817][ T4305] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 241.726676][ T4305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.737445][ T4305] usb 1-1: config 0 descriptor?? [ 241.830477][ T8212] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 241.878580][ T4248] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 241.890063][ T4248] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 241.929279][ T4248] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 241.946135][ T4248] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 242.005430][ T8241] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 242.509553][ T4248] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 242.521170][ T4248] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 242.541836][ T4248] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 242.880915][ T4305] wacom 0003:056A:003F.001A: hidraw0: USB HID v0.07 Device [HID 056a:003f] on usb-dummy_hcd.0-1/input0 [ 242.973991][ T4305] usb 1-1: USB disconnect, device number 9 [ 243.082448][ T4248] usb 6-1: USB disconnect, device number 20 [ 243.119347][ T6992] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.176630][ T8248] fido_id[8248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 243.353287][ T6992] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.372824][ T6992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.399325][ T6992] usb 7-1: Product: syz [ 243.403746][ T6992] usb 7-1: Manufacturer: syz [ 243.408698][ T6992] usb 7-1: SerialNumber: syz [ 243.759180][ T4313] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 244.219631][ T6992] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 244.229127][ T6992] cdc_ncm 7-1:1.0: bind() failure [ 244.244029][ T6992] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 244.255889][ T6992] cdc_ncm 7-1:1.1: bind() failure [ 244.669532][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 244.707796][ T4313] usb 5-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 244.744572][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.863332][ T4313] usb 5-1: config 0 descriptor?? [ 244.889586][ T8269] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.231009][ T6992] usb 7-1: USB disconnect, device number 11 [ 245.429856][ T4313] usbhid 5-1:0.0: can't add hid device: -71 [ 245.451142][ T4313] usbhid: probe of 5-1:0.0 failed with error -71 [ 245.503113][ T4313] usb 5-1: USB disconnect, device number 21 [ 245.626192][ T8297] loop6: detected capacity change from 0 to 1024 [ 245.678215][ T8297] EXT4-fs (loop6): inline encryption not supported [ 245.954767][ T8297] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,inlinecrypt,minixdf,nodioread_nolock,,errors=continue. Quota mode: none. [ 246.706600][ T8297] EXT4-fs (loop6): shut down requested (2) [ 249.561097][ T8327] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 249.609198][ T4248] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 249.867420][ T8336] loop5: detected capacity change from 0 to 512 [ 250.106673][ T8336] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,. Quota mode: writeback. [ 251.379145][ T4248] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.440110][ T4248] usb 5-1: string descriptor 0 read error: -71 [ 252.446528][ T4248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.516008][ T8348] loop4: detected capacity change from 0 to 512 [ 252.526252][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.576954][ T4248] usb 5-1: can't set config #1, error -71 [ 252.605684][ T8348] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 252.639328][ T4248] usb 5-1: USB disconnect, device number 22 [ 252.654053][ T8348] EXT4-fs (loop4): inline encryption not supported [ 252.675103][ T8348] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 252.691209][ T8348] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 255.548708][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1300'. [ 255.648678][ T8402] 9pnet: Insufficient options for proto=fd [ 255.723152][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.110806][ T8418] 9pnet: Insufficient options for proto=fd [ 259.739478][ T8432] xt_NFQUEUE: number of total queues is 0 [ 261.332928][ T8439] chnl_net:caif_netlink_parms(): no params data found [ 261.500826][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.524454][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.545322][ T8439] device bridge_slave_0 entered promiscuous mode [ 261.571596][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.595449][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.616469][ T8439] device bridge_slave_1 entered promiscuous mode [ 261.703743][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.743392][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.834586][ T8439] team0: Port device team_slave_0 added [ 261.861632][ T8439] team0: Port device team_slave_1 added [ 261.953856][ T8466] overlayfs: failed to clone upperpath [ 261.966081][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.973119][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.045211][ T8439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.067878][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.077719][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.112236][ T8439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.172476][ T8439] device hsr_slave_0 entered promiscuous mode [ 262.184204][ T8439] device hsr_slave_1 entered promiscuous mode [ 262.193697][ T8439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.206371][ T8439] Cannot create hsr debugfs directory [ 262.387372][ T8439] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.405245][ T8439] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 262.422164][ T8439] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 262.432182][ T8439] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 262.545063][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.567058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.593717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.621539][ T8439] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.643700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.664535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.688376][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.695520][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.734874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.765419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.793199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.817338][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.824513][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.862167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.916518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.942124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.962846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.978356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.988710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.997230][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 263.010538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.020551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.041207][ T8439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.060627][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.068753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.086517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.098575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.265510][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.280473][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.301994][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.986045][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.025272][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.069336][ T6992] Bluetooth: hci5: command 0x041b tx timeout [ 265.097068][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.116416][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.155497][ T8439] device veth0_vlan entered promiscuous mode [ 265.175606][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.228895][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.267772][ T8439] device veth1_vlan entered promiscuous mode [ 265.369280][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.378679][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.446580][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.639503][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.668967][ T8439] device veth0_macvtap entered promiscuous mode [ 265.688047][ T8439] device veth1_macvtap entered promiscuous mode [ 265.843871][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.885522][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.905351][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.936437][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.989678][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.035936][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.066979][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.094881][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.133708][ T8439] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.158526][ T8439] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.199136][ T8439] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.232632][ T8439] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.577842][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.629383][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.667706][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.689124][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.713929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.762102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.826322][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 267.045134][ T8515] loop7: detected capacity change from 0 to 1024 [ 267.159781][ T6992] Bluetooth: hci5: command 0x040f tx timeout [ 267.245655][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.266462][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.274152][ T26] audit: type=1800 audit(525.189:21): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1314" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 267.301472][ T8515] hfsplus: can't free extent [ 267.332720][ T8505] device bridge_slave_0 entered promiscuous mode [ 267.383731][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.449135][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.500684][ T8505] device bridge_slave_1 entered promiscuous mode [ 267.771003][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.789784][ T23] Bluetooth: hci6: command 0x0409 tx timeout [ 267.871867][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.155067][ T8505] team0: Port device team_slave_0 added [ 268.201571][ T8505] team0: Port device team_slave_1 added [ 268.378864][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.419051][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.523733][ T8505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.630758][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.653337][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.724467][ T8505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.901534][ T8505] device hsr_slave_0 entered promiscuous mode [ 268.922260][ T8505] device hsr_slave_1 entered promiscuous mode [ 268.929780][ T8505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.937370][ T8505] Cannot create hsr debugfs directory [ 269.230488][ T4248] Bluetooth: hci5: command 0x0419 tx timeout [ 269.288044][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 269.400340][ T8531] chnl_net:caif_netlink_parms(): no params data found [ 269.624919][ T8505] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 269.664052][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.681473][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.702911][ T8529] device bridge_slave_0 entered promiscuous mode [ 269.732916][ T8505] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.764196][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.779183][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.806717][ T8529] device bridge_slave_1 entered promiscuous mode [ 269.830362][ T8505] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 270.062636][ T6997] Bluetooth: hci6: command 0x041b tx timeout [ 270.073089][ T8505] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 270.083402][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.097513][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.112200][ T8531] device bridge_slave_0 entered promiscuous mode [ 271.130081][ T8552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1342'. [ 271.398181][ T4313] Bluetooth: hci7: command 0x0409 tx timeout [ 271.418937][ T4313] Bluetooth: hci8: command 0x0409 tx timeout [ 271.960379][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.977383][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.030338][ T8531] device bridge_slave_1 entered promiscuous mode [ 272.082432][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.109108][ T6997] Bluetooth: hci6: command 0x040f tx timeout [ 272.282193][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.314499][ T8531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.659871][ T8531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.680808][ T8529] team0: Port device team_slave_0 added [ 272.752682][ T8529] team0: Port device team_slave_1 added [ 272.806078][ T8531] team0: Port device team_slave_0 added [ 272.865900][ T8531] team0: Port device team_slave_1 added [ 272.890796][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.908224][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.996995][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.092225][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.109125][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.178841][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.257976][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.282724][ T8531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.302453][ T8531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.377918][ T8531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.417540][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.436708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.465160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.479400][ T23] Bluetooth: hci7: command 0x041b tx timeout [ 273.527284][ T8531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.539435][ T8531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.580991][ T8531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.644422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.657701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.675743][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.683305][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.703389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.718625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.759643][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.766806][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.823666][ T8529] device hsr_slave_0 entered promiscuous mode [ 273.851546][ T8529] device hsr_slave_1 entered promiscuous mode [ 273.868404][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.877635][ T4313] Bluetooth: hci8: command 0x041b tx timeout [ 273.896842][ T8529] Cannot create hsr debugfs directory [ 273.957900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.968244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.001422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.030768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.070861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.101341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.132566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.199608][ T23] Bluetooth: hci6: command 0x0419 tx timeout [ 274.219851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.238870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.249844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.258537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.278105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.314191][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.351256][ T8531] device hsr_slave_0 entered promiscuous mode [ 274.376236][ T8531] device hsr_slave_1 entered promiscuous mode [ 274.393758][ T8531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.415846][ T8531] Cannot create hsr debugfs directory [ 276.662442][ T23] Bluetooth: hci7: command 0x040f tx timeout [ 276.704998][ T23] Bluetooth: hci8: command 0x040f tx timeout [ 277.202795][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.219993][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.245570][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.621546][ T8529] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 277.662778][ T8529] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 277.723852][ T8529] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 277.977900][ T8529] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 278.778834][ T4313] Bluetooth: hci8: command 0x0419 tx timeout [ 278.886290][ T4313] Bluetooth: hci7: command 0x0419 tx timeout [ 279.065653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.085349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.258237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.277490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.311126][ T8505] device veth0_vlan entered promiscuous mode [ 279.362479][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.381123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.405037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.427149][ T8505] device veth1_vlan entered promiscuous mode [ 279.480713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.491126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.531129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.585043][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.626237][ T8505] device veth0_macvtap entered promiscuous mode [ 279.670488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.684262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.724048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.788902][ T8505] device veth1_macvtap entered promiscuous mode [ 279.866635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.877583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.919992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.970173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.009510][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.016617][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.075523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.305407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.334644][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.341913][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.418075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.534710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.620098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.685735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.759599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.800398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.871761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.135632][ T8529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.571369][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.378529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.398255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.068075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.115146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.318906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.366785][ T8505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.410312][ T8505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.452338][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.498527][ T8531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.541765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.561207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.599962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.662187][ T8505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.695725][ T8505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.749929][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.777936][ T8531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.808719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.843925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.884853][ T8505] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.913410][ T8505] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.999534][ T8505] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.008312][ T8505] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.334628][ T8531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.464889][ T8531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.503912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.529385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.616016][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.796204][ T4439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.829072][ T4439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.878897][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.957572][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.987579][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.162237][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.309684][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.586996][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.612502][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.781129][ T8531] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.832775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.872679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.923367][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.930609][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.101999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.152834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.196353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.395044][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.402240][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.555330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.635070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.694993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.769710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.807271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.868751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.061702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.120006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.218733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.297539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.319643][ T8770] loop7: detected capacity change from 0 to 256 [ 294.404194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.553734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.584427][ T8770] FAT-fs (loop7): Directory bread(block 64) failed [ 295.611146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.621432][ T8770] FAT-fs (loop7): Directory bread(block 65) failed [ 295.643092][ T8770] FAT-fs (loop7): Directory bread(block 66) failed [ 295.657176][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.779269][ T8770] FAT-fs (loop7): Directory bread(block 67) failed [ 295.833303][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.859342][ T8770] FAT-fs (loop7): Directory bread(block 68) failed [ 295.866002][ T8770] FAT-fs (loop7): Directory bread(block 69) failed [ 295.885377][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.957918][ T8529] device veth0_vlan entered promiscuous mode [ 295.979417][ T8770] FAT-fs (loop7): Directory bread(block 70) failed [ 295.987104][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.044956][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.145037][ T8770] FAT-fs (loop7): Directory bread(block 71) failed [ 296.230537][ T8770] FAT-fs (loop7): Directory bread(block 72) failed [ 296.237117][ T8770] FAT-fs (loop7): Directory bread(block 73) failed [ 296.250676][ T8529] device veth1_vlan entered promiscuous mode [ 401.349035][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 401.356056][ C1] (detected by 1, t=10502 jiffies, g=28497, q=92) [ 401.362640][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294977253-4294966750), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 401.376134][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g28497 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 401.387415][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 401.397499][ C1] rcu: RCU grace-period kthread stack dump: [ 401.403482][ C1] task:rcu_preempt state:R running task stack:28128 pid: 15 ppid: 2 flags:0x00004000 [ 401.414386][ C1] Call Trace: [ 401.417817][ C1] [ 401.420854][ C1] __schedule+0x11bb/0x4390 [ 401.425391][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 401.430943][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 401.437046][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 401.442987][ C1] ? _raw_spin_unlock+0x40/0x40 [ 401.447944][ C1] ? rcu_is_watching+0x11/0xa0 [ 401.452724][ C1] ? release_firmware_map_entry+0x190/0x190 [ 401.458947][ C1] schedule+0x11b/0x1e0 [ 401.463214][ C1] schedule_timeout+0x15c/0x280 [ 401.468164][ C1] ? console_conditional_schedule+0x40/0x40 [ 401.474242][ C1] ? update_process_times+0x200/0x200 [ 401.479800][ C1] ? prepare_to_swait_event+0x331/0x350 [ 401.485349][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 401.490537][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 401.495978][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 401.500755][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 401.505533][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 401.510859][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 401.516338][ C1] rcu_gp_kthread+0x98/0x350 [ 401.521213][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 401.526667][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 401.532579][ C1] ? __kthread_parkme+0x157/0x1b0 [ 401.538140][ C1] kthread+0x436/0x520 [ 401.542210][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 401.547317][ C1] ? kthread_blkcg+0xd0/0xd0 [ 401.551906][ C1] ret_from_fork+0x1f/0x30 [ 401.556427][ C1] [ 401.559486][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 401.566196][ C1] NMI backtrace for cpu 1 [ 401.570532][ C1] CPU: 1 PID: 8786 Comm: syz.8.1389 Not tainted syzkaller #0 [ 401.577982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.588219][ C1] Call Trace: [ 401.591595][ C1] [ 401.594441][ C1] dump_stack_lvl+0x168/0x230 [ 401.599296][ C1] ? show_regs_print_info+0x20/0x20 [ 401.604623][ C1] ? load_image+0x3b0/0x3b0 [ 401.609272][ C1] ? irq_work_queue+0xbf/0x140 [ 401.614073][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 401.619117][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 401.625358][ C1] ? _printk+0xcc/0x110 [ 401.629613][ C1] ? cpu_online+0x1d/0x30 [ 401.634199][ C1] ? load_image+0x3b0/0x3b0 [ 401.638900][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 401.644974][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 401.650958][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 401.657156][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 401.662619][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 401.667791][ C1] ? rcu_qs+0xc1/0x160 [ 401.672065][ C1] ? rcu_softirq_qs+0x280/0x280 [ 401.676930][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 401.682320][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 401.687350][ C1] ? account_process_tick+0x227/0x3a0 [ 401.692992][ C1] update_process_times+0x193/0x200 [ 401.698560][ C1] tick_sched_timer+0x37d/0x560 [ 401.703503][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 401.708732][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 401.714291][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 401.719405][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 401.725563][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 401.730771][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 401.736846][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 401.742477][ C1] [ 401.745403][ C1] [ 401.748428][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 401.754540][ C1] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x70 [ 401.761136][ C1] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 3d f6 ff ff eb 31 eb 35 e8 d4 f1 d4 f7 e8 cf ef d4 f7 fb 65 48 8b 05 a6 76 59 76 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 61 32 bd f7 48 [ 401.781070][ C1] RSP: 0018:ffffc90003baff08 EFLAGS: 00000286 [ 401.787629][ C1] RAX: ffff888029329dc0 RBX: 0000000000000027 RCX: 0101eaf5b5a51300 [ 401.795706][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1620 RDI: ffffffff8a59a240 [ 401.803879][ C1] RBP: ffffc90003baff48 R08: dffffc0000000000 R09: fffffbfff1ad3196 [ 401.812252][ C1] R10: fffffbfff1ad3196 R11: 1ffffffff1ad3195 R12: 0000000000000000 [ 401.820495][ C1] R13: 0000000000000000 R14: ffffc90003baff58 R15: 0000000000000000 [ 401.828484][ C1] ? syscall_enter_from_user_mode+0x21/0x70 [ 401.834473][ C1] do_syscall_64+0x24/0xa0 [ 401.838889][ C1] ? clear_bhb_loop+0x30/0x80 [ 401.843564][ C1] ? clear_bhb_loop+0x30/0x80 [ 401.848325][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.854484][ C1] RIP: 0033:0x7f3a7f736ba7 [ 401.858932][ C1] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d f2 6c d7 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f3 f7 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 401.878819][ C1] RSP: 002b:00007f3a7d9a6b08 EFLAGS: 00000202 ORIG_RAX: 0000000000000027 [ 401.887330][ C1] RAX: ffffffffffffffda RBX: 00007f3a7d9a6c70 RCX: 00007f3a7f736ba7 [ 401.895310][ C1] RDX: 00007f3a7d9a6b40 RSI: 00007f3a7d9a6c70 RDI: 0000000000000021 [ 401.903515][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.911587][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 401.919572][ C1] R13: 00007f3a7f977038 R14: 00007ffe80c9c7c0 R15: 00007ffe80c9c8a8 [ 401.927563][ C1]