last executing test programs: 8m39.33753219s ago: executing program 3 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r5 = userfaultfd(0x80001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) read(r5, &(0x7f0000000380)=""/153, 0x99) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r6, &(0x7f0000000600)=[{0x0}], 0x1, 0x1006c, 0x0) close(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7ffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x428, 0x3f4, 0x20, 0x70bd27, 0x25dfdbfb, {0x4, 0x2, 0x2d, [0xc, 0x6, 0x9, 0x5, 0x81, 0x9, 0xffffffff, 0x0, 0x9, 0x4, 0xd837, 0x6, 0xfe1a, 0x3, 0x6, 0x0, 0x7, 0x1000, 0x7ff, 0x3, 0xa000000, 0x1, 0x4, 0x40000, 0x8, 0x4, 0x51e, 0x4, 0x3, 0x8, 0x6, 0x6, 0x6, 0x7, 0x8000, 0xc, 0x7, 0x3, 0x1, 0x1, 0xf987, 0x76d, 0x8, 0x5, 0x6, 0xbf, 0x2, 0x39d, 0xd89, 0x1, 0x101, 0x800, 0x400, 0x7, 0x1, 0x10, 0x1, 0x2, 0xe, 0x7ff, 0x6, 0x0, 0xfffffff7, 0x9], [0x6, 0x3, 0x6175, 0x8, 0x36c, 0xd, 0x6, 0x6, 0x1, 0x5144, 0xcfce, 0x1000, 0x10001, 0x0, 0x6c, 0x6, 0xffffffff, 0x1ff, 0x9, 0x9, 0xd, 0x1, 0x0, 0xd, 0xfffffffb, 0x0, 0x8129, 0x6, 0x81, 0x5, 0x0, 0xfffffffd, 0xfffffffc, 0x8, 0x0, 0x6, 0x401, 0x9, 0x4, 0x1, 0x1ff, 0x5, 0x3, 0xdb2, 0x401, 0x55fe, 0x6, 0x1, 0x918, 0x6, 0xfffffffb, 0x43, 0x0, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0xfffffff7, 0x3, 0x86, 0xcab, 0x401, 0xfffffffa], [0xa0d6, 0x2, 0x6, 0x0, 0xe, 0x8001, 0x5, 0x8001, 0x0, 0x1ff, 0x5, 0x7ff, 0x8e93, 0x6, 0x2, 0x8, 0x100, 0x7, 0x2, 0x7, 0x0, 0x9, 0xb, 0x1, 0x4, 0x81, 0x1, 0x8001, 0x6, 0x200, 0x8001, 0x1000, 0x4, 0x6, 0x9, 0xa198, 0x7, 0x5143, 0x42, 0x0, 0x370d, 0xa7, 0x0, 0x400, 0x7ee4, 0x10001, 0xffff6209, 0x9, 0xa5a, 0x3, 0x4, 0x4, 0x3, 0x401, 0x5, 0x7, 0x1000, 0x9524, 0x65a8, 0x397ac931, 0xd647, 0x80000000, 0xce12, 0x3], [0x4, 0x7, 0x5, 0x8132, 0xffffffff, 0x5, 0x1, 0x31b9, 0x120000, 0xf54f, 0x7, 0x5f, 0x2, 0x9, 0x3, 0x1, 0x848, 0x2, 0x6, 0x3, 0x4, 0x7, 0x3b539950, 0xb, 0x1, 0x3, 0x9, 0xff, 0xffff0001, 0x7, 0x9, 0x659e, 0xb6, 0x100, 0x4, 0x80, 0x3, 0x9, 0x1, 0x9f, 0x430, 0x7f, 0xd, 0x4, 0x7, 0x400, 0xa, 0x8, 0x6, 0x67, 0x1, 0x7fff, 0x7, 0x1, 0x3, 0x0, 0x1, 0x2, 0xfffffff7, 0x0, 0x3, 0x6, 0x9, 0x2], 0x7, ['%(%:\xa4&\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008850) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) 8m34.97758517s ago: executing program 3 (id=183): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x109341) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0xc880) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x539ef252}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffd947f089}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40881) gettid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x697d}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m23.425566106s ago: executing program 3 (id=189): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x315, 0x2) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}}) socket$netlink(0x10, 0x3, 0xf) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 8m18.369021288s ago: executing program 3 (id=196): ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000200)={0x1, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x4, 0x10005, 0x77, 0xffffffff, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x13, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7ff, 0x1539b804, 0x6, 0x1, 0x4002]}) r1 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x4040080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) r5 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}}, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) 8m13.457277437s ago: executing program 3 (id=205): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000cc0)}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r3, 0x26}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getdents(r5, &(0x7f0000000240)=""/48, 0x30) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,errors=remount-ro,iocharset=cp932,fmask=00000000000000000000001,namecase=1,iocharset=iso8859-14,namecase=1,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r6], 0x1, 0x1534, &(0x7f0000002840)="$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") utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[0x0]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) 8m11.198564053s ago: executing program 3 (id=208): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x8, {}, {0x1a}, @raw32={[0x3, 0x0, 0x800000]}}], 0x1c) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) unshare(0x22020600) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r7, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) 7m54.521811122s ago: executing program 32 (id=208): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x8, {}, {0x1a}, @raw32={[0x3, 0x0, 0x800000]}}], 0x1c) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) unshare(0x22020600) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r7, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) 4m50.015505336s ago: executing program 5 (id=1121): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') exit(0xffff) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 4m48.877118124s ago: executing program 5 (id=1134): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4m47.500167746s ago: executing program 5 (id=1142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f00000003c0)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x20084800) 4m46.480869003s ago: executing program 5 (id=1148): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@showassoc}, {@nojoliet}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x8) getdents(r0, &(0x7f0000000880)=""/232, 0xe8) 4m45.205933953s ago: executing program 5 (id=1153): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x110}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582"], 0x0) 4m44.277094039s ago: executing program 5 (id=1158): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 4m43.788758916s ago: executing program 33 (id=1158): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 4m17.720104486s ago: executing program 2 (id=1312): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 4m17.431651901s ago: executing program 2 (id=1316): unshare(0x62020600) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000003c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 4m16.330305439s ago: executing program 2 (id=1322): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)='X', 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080), 0x4) 4m15.868153996s ago: executing program 2 (id=1325): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f00000144c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESHEX, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m15.083988029s ago: executing program 2 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4m14.40511056s ago: executing program 2 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0xffffffff, 0x200a, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004050) 4m14.035930395s ago: executing program 34 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0xffffffff, 0x200a, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004050) 7.259612943s ago: executing program 6 (id=2571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 6.937904468s ago: executing program 6 (id=2575): syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xffffffff}) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") 6.440987186s ago: executing program 6 (id=2580): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x12}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465d75b62a93bf7a438cce59f", @ANYRES16=r0]) 4.587120236s ago: executing program 4 (id=2592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x20000400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 4.289798071s ago: executing program 4 (id=2595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.160995293s ago: executing program 1 (id=2596): r0 = inotify_init() r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 4.017003155s ago: executing program 1 (id=2597): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x7fffffff, 0x3017}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}]}, 0x21) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000880)={[{@dots}, {@fat=@check_strict}, {@fat=@tz_utc}, {@fat=@nocase}, {@fat=@tz_utc}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x91}}, {@nodots}, {@fat=@check_strict}]}, 0x1, 0x249, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) r7 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362387a706fcab2b62c9cf701191e6f1843142a512f5fb5e28c4537c755c5390b2c44b36ea9500acf4f2a535f1f9372e797", 0x58}], 0x2) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 3.947710716s ago: executing program 6 (id=2598): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0xf, 0x0, 0x0, 0xcaf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x40884) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x1000000, 0xfaff24f64ad9189a, 0x2, 0x0, 0xe}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000080)="cc109ca7966b11d284c53a63", 0xc, 0x8000, 0x0, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r5, 0x80105873, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x8, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e24, 0x4, 'lblc\x00', 0x9, 0x5, 0x6f}, 0x2c) timer_create(0x2, 0x0, &(0x7f0000000740)) timer_delete(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000000000), 0x4) 3.903315167s ago: executing program 4 (id=2600): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacvN}\xdanh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b&6\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\x003\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x90\xcf\xb5\x7f\x00\x00\x00\x8d\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xc0\xb8\x88`W\xa9\xef\'\xe1\xee[\xac^\x00\x00\x00\x98a\xdaM\xfe\t\xfc\xfd\xb8S\x81\xe3', 0x0) dup(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3.817345138s ago: executing program 7 (id=2601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xc, 0xfff1}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 3.544149372s ago: executing program 4 (id=2602): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.543361852s ago: executing program 0 (id=2603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xffff}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 3.342170766s ago: executing program 7 (id=2604): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000000c0)='coredump_filter\x00') exit(0xf) pread64(r2, 0x0, 0x0, 0x7fffffff) 3.0723435s ago: executing program 4 (id=2605): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x24, 0x628f, &(0x7f000000c880)="$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") syz_clone(0x2000000, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000002240)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) 2.700590926s ago: executing program 0 (id=2606): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(r0, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.4849404s ago: executing program 0 (id=2607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}}, 0x4010040) 2.171935145s ago: executing program 7 (id=2608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2c0d0}, 0x40010) 1.893235389s ago: executing program 0 (id=2609): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x12}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r0]) 1.86770233s ago: executing program 7 (id=2610): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(0x3) 1.557020155s ago: executing program 1 (id=2611): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x1, 0x1, 0x3, 0xe, 0x0, 0x4}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 1.349722348s ago: executing program 7 (id=2612): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1) 1.147892871s ago: executing program 4 (id=2613): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@nodioread_nolock}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f00000018c0)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x813) getdents64(r0, 0x0, 0x0) 1.040663333s ago: executing program 0 (id=2614): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 697.873149ms ago: executing program 0 (id=2615): syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 600.98988ms ago: executing program 6 (id=2616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x18ab81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 446.912182ms ago: executing program 1 (id=2617): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 261.267856ms ago: executing program 1 (id=2618): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x7}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x48043) socket$can_j1939(0x1d, 0x2, 0x7) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000101401002abd7000fcdbdf25000215af9e9db53d89b00600000000030001000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20001051}, 0x40040c0) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd09000192ea797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) pread64(r0, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 196.775877ms ago: executing program 6 (id=2619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv0\x00', 0x400}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0xffff, {0xf, 0x6, "db02a9", 0xfffe, 0x2f, 0x1, @private0, @local}}}}}}}}, 0x6a) 17.0126ms ago: executing program 1 (id=2620): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x4}, 0x28) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 0s ago: executing program 7 (id=2621): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r0, 0x0, 0x9b1, 0x1001ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) fallocate(r1, 0x10, 0x800, 0x8000) kernel console output (not intermixed with test programs): tdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.813858][ T9561] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.861603][ T9561] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.907790][ T9561] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 498.363670][ T9573] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1407'. [ 499.373406][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 499.403188][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 499.519892][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 499.532002][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 499.650593][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 499.687637][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 499.715818][ T9306] device veth0_vlan entered promiscuous mode [ 499.770549][ T9306] device veth1_vlan entered promiscuous mode [ 499.819106][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 499.838072][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 499.861748][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 499.884580][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 499.908764][ T9306] device veth0_macvtap entered promiscuous mode [ 499.925484][ T9306] device veth1_macvtap entered promiscuous mode [ 499.954740][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.965669][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.012141][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.034255][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.062120][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.080810][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.102081][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.129669][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.165884][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.197121][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 500.224594][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 500.232992][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 500.277420][ T7559] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 500.288678][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 500.333659][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.364051][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.390347][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.433702][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.471102][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.503574][ T7559] usb 7-1: unable to get BOS descriptor or descriptor too short [ 500.534617][ T7559] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 500.542280][ T7559] usb 7-1: can't read configurations, error -71 [ 500.552394][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.584194][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.599704][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.612539][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.621405][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.663153][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 500.687459][ T9306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.715714][ T9306] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.744102][ T9306] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.764065][ T9306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.005956][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.013913][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.034531][ T9617] loop4: detected capacity change from 0 to 164 [ 501.106895][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 501.147763][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.208606][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.240967][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.603970][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1337'. [ 501.794867][ T7559] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 501.997724][ T7559] usb 7-1: Using ep0 maxpacket: 32 [ 502.004978][ T7559] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 502.061768][ T7559] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.323658][ T7559] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 502.349278][ T7559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 502.381749][ T7559] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 502.413169][ T7559] usb 7-1: media controller created [ 502.430489][ T9654] loop7: detected capacity change from 0 to 64 [ 502.501190][ T7559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.628346][ T7559] az6027: usb out operation failed. (-71) [ 502.651370][ T7559] az6027: usb out operation failed. (-71) [ 502.657186][ T7559] stb0899_attach: Driver disabled by Kconfig [ 502.696182][ T7559] az6027: no front-end attached [ 502.696182][ T7559] [ 502.729173][ T7559] az6027: usb out operation failed. (-71) [ 502.756442][ T7559] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 502.799908][ T7559] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 502.863691][ T7559] dvb-usb: schedule remote query interval to 400 msecs. [ 502.893866][ T7559] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 502.949563][ T7559] usb 7-1: USB disconnect, device number 3 [ 503.079331][ T7559] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 503.269207][ T6836] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 503.461582][ T6836] usb 8-1: Using ep0 maxpacket: 8 [ 503.468809][ T6836] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 503.503041][ T6836] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 503.547397][ T6836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.634107][ T6836] usb 8-1: Product: syz [ 503.656540][ T6836] usb 8-1: Manufacturer: syz [ 503.712137][ T6836] usb 8-1: SerialNumber: syz [ 503.918506][ T6836] usb 8-1: config 0 descriptor?? [ 504.024924][ T6836] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 504.169995][ T6836] usb 8-1: setting power ON [ 504.225916][ T6836] dvb-usb: bulk message failed: -22 (2/0) [ 504.235166][ T9659] loop4: detected capacity change from 0 to 32768 [ 504.280289][ T6836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.362795][ T6836] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 504.401984][ T9659] JBD2: Ignoring recovery information on journal [ 504.422583][ T6836] usb 8-1: media controller created [ 504.472660][ T6836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.503932][ T6836] usb 8-1: selecting invalid altsetting 6 [ 504.512638][ T6836] usb 8-1: digital interface selection failed (-22) [ 504.519453][ T6836] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 504.556566][ T6836] usb 8-1: setting power OFF [ 504.573064][ T6836] dvb-usb: bulk message failed: -22 (2/0) [ 504.581313][ T6836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 504.598376][ T6836] (NULL device *): no alternate interface [ 504.641644][ T9659] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 504.659671][ T6836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 504.731239][ T6836] usb 8-1: USB disconnect, device number 2 [ 504.815448][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'. [ 504.907510][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'. [ 505.023970][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 505.806762][ T9718] loop4: detected capacity change from 0 to 128 [ 505.859439][ T9718] FAT-fs (loop4): Directory bread(block 414) failed [ 505.929364][ T9718] FAT-fs (loop4): Directory bread(block 415) failed [ 505.972819][ T9718] FAT-fs (loop4): Directory bread(block 416) failed [ 506.005918][ T9718] FAT-fs (loop4): Directory bread(block 417) failed [ 506.012628][ T9718] FAT-fs (loop4): Directory bread(block 418) failed [ 506.039346][ T9727] loop6: detected capacity change from 0 to 512 [ 506.045811][ T9718] FAT-fs (loop4): Directory bread(block 419) failed [ 506.067103][ T9718] FAT-fs (loop4): Directory bread(block 420) failed [ 506.096950][ T9718] FAT-fs (loop4): Directory bread(block 421) failed [ 506.105650][ T9727] EXT4-fs (loop6): 1 truncate cleaned up [ 506.200352][ T9727] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 506.448272][ T26] audit: type=1800 audit(489.292:72): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1450" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 506.554159][ T9740] FAT-fs (loop4): Directory bread(block 414) failed [ 506.561307][ T9740] FAT-fs (loop4): Directory bread(block 415) failed [ 506.820765][ T8634] EXT4-fs (loop6): unmounting filesystem. [ 507.658909][ T9763] loop7: detected capacity change from 0 to 128 [ 507.675342][ T9763] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 507.689288][ T9764] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 507.778746][ T9763] hpfs: filesystem error: improperly stopped [ 507.784917][ T9763] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 507.955561][ T9763] hpfs: You really don't want any checks? You are crazy... [ 508.014781][ T9763] hpfs: hpfs_map_sector(): read error [ 508.020245][ T9763] hpfs: code page support is disabled [ 508.085402][ T9763] hpfs: hpfs_map_4sectors(): unaligned read [ 508.120216][ T9763] hpfs: hpfs_map_4sectors(): unaligned read [ 508.145267][ T9763] hpfs: filesystem error: unable to find root dir [ 508.533196][ T9774] loop6: detected capacity change from 0 to 128 [ 508.583375][ T9774] FAT-fs (loop6): Directory bread(block 414) failed [ 508.590081][ T9774] FAT-fs (loop6): Directory bread(block 415) failed [ 508.656173][ T9774] FAT-fs (loop6): Directory bread(block 416) failed [ 508.662894][ T9774] FAT-fs (loop6): Directory bread(block 417) failed [ 508.736451][ T9774] FAT-fs (loop6): Directory bread(block 418) failed [ 508.761894][ T9774] FAT-fs (loop6): Directory bread(block 419) failed [ 508.794300][ T9774] FAT-fs (loop6): Directory bread(block 420) failed [ 508.801042][ T9774] FAT-fs (loop6): Directory bread(block 421) failed [ 508.811003][ T9783] lo speed is unknown, defaulting to 1000 [ 509.212311][ T9791] FAT-fs (loop6): Directory bread(block 414) failed [ 509.219184][ T9791] FAT-fs (loop6): Directory bread(block 415) failed [ 509.903738][ T9778] loop7: detected capacity change from 0 to 32768 [ 510.058496][ T9778] XFS (loop7): Mounting V5 Filesystem [ 510.184962][ T9778] XFS (loop7): Ending clean mount [ 510.208086][ T9778] XFS (loop7): Quotacheck needed: Please wait. [ 510.329945][ T9778] XFS (loop7): Quotacheck: Done. [ 510.532969][ T9306] XFS (loop7): Unmounting Filesystem [ 510.944430][ T9827] netlink: 'syz.1.1477': attribute type 3 has an invalid length. [ 512.301950][ T9850] loop4: detected capacity change from 0 to 128 [ 512.447498][ T9850] FAT-fs (loop4): Directory bread(block 414) failed [ 512.499089][ T9850] FAT-fs (loop4): Directory bread(block 415) failed [ 512.523463][ T9850] FAT-fs (loop4): Directory bread(block 416) failed [ 512.541055][ T9850] FAT-fs (loop4): Directory bread(block 417) failed [ 512.562656][ T9850] FAT-fs (loop4): Directory bread(block 418) failed [ 512.584236][ T9850] FAT-fs (loop4): Directory bread(block 419) failed [ 512.644913][ T9850] FAT-fs (loop4): Directory bread(block 420) failed [ 512.673443][ T9850] FAT-fs (loop4): Directory bread(block 421) failed [ 513.098521][ T9866] FAT-fs (loop4): Directory bread(block 414) failed [ 513.105469][ T9866] FAT-fs (loop4): Directory bread(block 415) failed [ 513.301017][ T9867] loop7: detected capacity change from 0 to 512 [ 513.385210][ T9867] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.394848][ T9862] loop6: detected capacity change from 0 to 4096 [ 513.446390][ T9867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 513.565704][ T9867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 513.810592][ T9867] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 513.904363][ T26] audit: type=1800 audit(496.273:73): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1488" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 514.059138][ T9306] EXT4-fs (loop7): unmounting filesystem. [ 514.113751][ T4409] ntfs3: loop6: ntfs3_write_inode r=5 failed, -22. [ 514.142107][ T8634] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 514.187230][ T8634] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 514.520972][ T9885] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 514.909561][ T9883] loop6: detected capacity change from 0 to 32768 [ 514.971532][ T9883] [ 514.971532][ T9883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.971532][ T9883] [ 515.083951][ T9883] ERROR: (device loop6): diWrite: ixpxd invalid [ 515.083951][ T9883] [ 515.195302][ T9883] ERROR: (device loop6): txCommit: [ 515.195302][ T9883] [ 515.351955][ T9900] ERROR: (device loop6): diWrite: ixpxd invalid [ 515.351955][ T9900] [ 515.397125][ T9900] ERROR: (device loop6): txCommit: [ 515.397125][ T9900] [ 515.483161][ T9883] [ 515.483161][ T9883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 515.483161][ T9883] [ 515.509114][ T9883] [ 515.509114][ T9883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 515.509114][ T9883] [ 515.566291][ T9883] ERROR: (device loop6): diAllocBit: iag inconsistent [ 515.566291][ T9883] [ 515.611399][ T9883] ialloc: diAlloc returned -5! [ 515.807954][ T8634] [ 515.807954][ T8634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 515.807954][ T8634] [ 515.910997][ T8634] [ 515.910997][ T8634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 515.910997][ T8634] [ 516.044142][ T9921] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1503'. [ 516.748777][ T9943] device syzkaller1 entered promiscuous mode [ 518.103850][ T9988] loop6: detected capacity change from 0 to 16 [ 518.274820][ T9988] erofs: (device loop6): mounted with root inode @ nid 36. [ 518.386711][ T9988] erofs: (device loop6): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 518.436912][ T9996] lo speed is unknown, defaulting to 1000 [ 518.677574][ T9966] loop7: detected capacity change from 0 to 32768 [ 518.833963][ T9966] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 519.110865][ T9306] ocfs2: Unmounting device (7,7) on (node local) [ 519.726065][T10010] loop6: detected capacity change from 0 to 40427 [ 519.741331][T10010] F2FS-fs (loop6): Invalid log blocks per segment (1) [ 519.748641][T10010] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 519.762660][T10010] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 519.775536][T10010] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 519.793897][T10010] F2FS-fs (loop6): invalid crc value [ 519.815584][T10010] F2FS-fs (loop6): Found nat_bits in checkpoint [ 520.133323][T10010] F2FS-fs (loop6): Start checkpoint disabled! [ 520.183982][T10037] loop4: detected capacity change from 0 to 128 [ 520.217893][T10010] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 520.225621][T10037] FAT-fs (loop4): Directory bread(block 414) failed [ 520.238936][T10010] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 520.282465][ T7559] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 520.291741][T10037] FAT-fs (loop4): Directory bread(block 415) failed [ 520.323934][T10037] FAT-fs (loop4): Directory bread(block 416) failed [ 520.365670][T10037] FAT-fs (loop4): Directory bread(block 417) failed [ 520.398479][T10037] FAT-fs (loop4): Directory bread(block 418) failed [ 520.439312][T10037] FAT-fs (loop4): Directory bread(block 419) failed [ 520.474167][T10037] FAT-fs (loop4): Directory bread(block 420) failed [ 520.487256][ T7559] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 520.520027][ T7559] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.528936][T10037] FAT-fs (loop4): Directory bread(block 421) failed [ 520.585789][ T7559] usb 8-1: config 0 descriptor?? [ 520.621113][ T7559] cp210x 8-1:0.0: cp210x converter detected [ 520.931928][ T4409] kworker/u4:12: attempt to access beyond end of device [ 520.931928][ T4409] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 521.037829][T10055] FAT-fs (loop4): Directory bread(block 414) failed [ 521.044680][T10055] FAT-fs (loop4): Directory bread(block 415) failed [ 521.542401][ T7559] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 521.567895][ T7559] usb 8-1: cp210x converter now attached to ttyUSB0 [ 521.783320][ T4331] usb 8-1: USB disconnect, device number 3 [ 521.821200][ T4331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 521.877174][ T4331] cp210x 8-1:0.0: device disconnected [ 523.567690][T10106] loop4: detected capacity change from 0 to 256 [ 523.676676][T10106] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 524.189566][T10091] loop7: detected capacity change from 0 to 40427 [ 524.236392][T10091] F2FS-fs (loop7): Invalid log blocks per segment (1) [ 524.247180][T10091] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 524.288984][T10091] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7 [ 524.297216][T10091] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x3ffff [ 524.320951][ T7564] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 524.341002][T10091] F2FS-fs (loop7): invalid crc value [ 524.365219][T10091] F2FS-fs (loop7): Found nat_bits in checkpoint [ 524.527118][T10091] F2FS-fs (loop7): Start checkpoint disabled! [ 524.560442][ T7564] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.593220][ T7564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.648426][ T7564] usb 5-1: config 0 descriptor?? [ 524.654884][T10091] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 524.662010][T10091] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 524.694163][ T7564] cp210x 5-1:0.0: cp210x converter detected [ 524.934587][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 524.941056][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.123674][ T7564] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 525.153720][ T4372] kworker/u4:8: attempt to access beyond end of device [ 525.153720][ T4372] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 525.352422][ T7564] usb 5-1: cp210x converter now attached to ttyUSB0 [ 525.567760][ T7564] usb 5-1: USB disconnect, device number 11 [ 525.609432][ T7564] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 525.657705][ T7564] cp210x 5-1:0.0: device disconnected [ 526.959614][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1580'. [ 527.592566][T10173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1580'. [ 528.409831][T10205] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 529.325671][T10215] loop6: detected capacity change from 0 to 128 [ 529.350863][T10215] EXT4-fs: Ignoring removed i_version option [ 529.429821][T10215] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 529.564041][T10223] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1595'. [ 529.645956][ T8634] EXT4-fs (loop6): unmounting filesystem. [ 530.163279][T10245] loop6: detected capacity change from 0 to 128 [ 530.218067][T10245] FAT-fs (loop6): Directory bread(block 414) failed [ 530.285163][T10245] FAT-fs (loop6): Directory bread(block 415) failed [ 530.292072][T10245] FAT-fs (loop6): Directory bread(block 416) failed [ 530.299212][T10245] FAT-fs (loop6): Directory bread(block 417) failed [ 530.306627][T10245] FAT-fs (loop6): Directory bread(block 418) failed [ 530.313490][T10245] FAT-fs (loop6): Directory bread(block 419) failed [ 530.321288][T10245] FAT-fs (loop6): Directory bread(block 420) failed [ 530.328398][T10245] FAT-fs (loop6): Directory bread(block 421) failed [ 530.919331][T10265] FAT-fs (loop6): Directory bread(block 414) failed [ 530.926310][T10265] FAT-fs (loop6): Directory bread(block 415) failed [ 531.248267][T10266] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 531.426701][T10271] loop6: detected capacity change from 0 to 128 [ 531.513367][T10271] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 531.559453][T10271] hpfs: filesystem error: improperly stopped [ 531.577750][T10271] hpfs: You really don't want any checks? You are crazy... [ 531.618459][T10271] hpfs: hpfs_map_sector(): read error [ 531.636136][T10273] loop4: detected capacity change from 0 to 256 [ 531.639992][T10271] hpfs: code page support is disabled [ 531.670095][T10271] hpfs: hpfs_map_4sectors(): unaligned read [ 531.691862][T10273] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 531.703279][T10271] hpfs: hpfs_map_4sectors(): unaligned read [ 531.720947][T10271] hpfs: filesystem error: unable to find root dir [ 531.770630][T10273] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 531.855872][T10273] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 532.161846][T10281] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1611'. [ 532.288595][ T7559] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 532.401349][ T7559] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 533.740551][T10314] loop4: detected capacity change from 0 to 128 [ 533.822584][T10314] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 533.903088][T10314] hpfs: filesystem error: improperly stopped [ 533.924773][T10314] hpfs: You really don't want any checks? You are crazy... [ 533.955144][T10314] hpfs: hpfs_map_sector(): read error [ 533.988221][T10314] hpfs: code page support is disabled [ 534.019478][T10314] hpfs: hpfs_map_4sectors(): unaligned read [ 534.039858][T10314] hpfs: hpfs_map_4sectors(): unaligned read [ 534.067801][T10314] hpfs: filesystem error: unable to find root dir [ 534.188072][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 534.226949][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1627'. [ 534.252384][T10327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1626'. [ 534.528300][ T7559] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 534.893567][T10349] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 535.658739][ T7559] usb 8-1: Using ep0 maxpacket: 16 [ 535.670910][ T7559] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 535.679094][ T7559] usb 8-1: config 0 has no interface number 0 [ 535.697112][ T7559] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 535.711695][ T7559] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 535.725870][ T7559] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 535.738152][ T7559] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.746447][ T7559] usb 8-1: Product: syz [ 535.752101][ T7559] usb 8-1: Manufacturer: syz [ 535.756834][ T7559] usb 8-1: SerialNumber: syz [ 535.777050][ T7559] usb 8-1: config 0 descriptor?? [ 535.782761][T10329] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 535.798197][T10329] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 536.038870][T10329] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 536.048791][T10354] overlayfs: failed to clone upperpath [ 536.086273][T10329] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 536.965448][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1641'. [ 536.974417][ T7559] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 537.624871][ T7559] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 537.635083][ T7559] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 537.908458][ T7559] asix: probe of 8-1:0.34 failed with error -71 [ 537.918283][ T7559] usb 8-1: USB disconnect, device number 4 [ 540.739125][T10399] netlink: 'syz.4.1645': attribute type 5 has an invalid length. [ 540.912436][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 541.211135][T10413] loop6: detected capacity change from 0 to 2048 [ 541.303557][T10413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 543.173919][T10438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1658'. [ 544.545380][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 544.625913][T10428] loop4: detected capacity change from 0 to 32768 [ 544.645900][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1660'. [ 544.700015][T10452] device bond0 entered promiscuous mode [ 544.720549][T10452] device bond_slave_0 entered promiscuous mode [ 544.727114][T10452] device bond_slave_1 entered promiscuous mode [ 544.751881][T10428] XFS (loop4): Mounting V5 Filesystem [ 544.767550][T10452] device batadv0 entered promiscuous mode [ 544.785757][T10452] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 544.810022][T10452] Cannot create hsr debugfs directory [ 544.837305][T10452] device hsr1 entered promiscuous mode [ 544.838482][T10428] XFS (loop4): Ending clean mount [ 544.859713][T10452] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 544.876656][T10428] XFS (loop4): User initiated shutdown received. [ 544.885675][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 544.902843][T10428] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 544.941827][T10428] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 545.137445][ T4273] XFS (loop4): Unmounting Filesystem [ 545.871656][T10477] loop7: detected capacity change from 0 to 128 [ 545.925886][T10477] FAT-fs (loop7): Directory bread(block 414) failed [ 545.953193][T10477] FAT-fs (loop7): Directory bread(block 415) failed [ 545.970992][T10477] FAT-fs (loop7): Directory bread(block 416) failed [ 545.980981][T10477] FAT-fs (loop7): Directory bread(block 417) failed [ 545.998912][T10477] FAT-fs (loop7): Directory bread(block 418) failed [ 546.056756][T10477] FAT-fs (loop7): Directory bread(block 419) failed [ 546.074470][T10477] FAT-fs (loop7): Directory bread(block 420) failed [ 546.102719][T10477] FAT-fs (loop7): Directory bread(block 421) failed [ 546.228354][T10483] lo speed is unknown, defaulting to 1000 [ 547.050364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.609107][T10500] FAT-fs (loop7): Directory bread(block 414) failed [ 547.615823][T10500] FAT-fs (loop7): Directory bread(block 415) failed [ 548.101760][T10495] loop6: detected capacity change from 0 to 32768 [ 548.141266][T10495] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1672 (10495) [ 548.222290][T10495] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 548.257745][T10495] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 548.310760][T10495] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 548.343864][T10495] BTRFS info (device loop6): use zstd compression, level 3 [ 548.353909][T10495] BTRFS info (device loop6): using free space tree [ 548.582713][T10538] loop4: detected capacity change from 0 to 512 [ 548.610190][T10538] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 548.626164][T10495] BTRFS info (device loop6): enabling ssd optimizations [ 549.097274][T10550] loop8: detected capacity change from 0 to 7 [ 549.118365][T10550] Dev loop8: unable to read RDB block 7 [ 549.124380][T10550] loop8: unable to read partition table [ 549.131025][T10550] loop8: partition table beyond EOD, truncated [ 549.137349][T10550] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 549.594615][ T8634] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 549.748901][ T4609] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 553.450110][T10609] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 553.468442][T10582] loop6: detected capacity change from 0 to 32768 [ 553.624189][T10582] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1686 (10582) [ 554.098769][T10582] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 554.229212][T10582] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 554.320156][T10582] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 554.367187][T10582] BTRFS info (device loop6): use zstd compression, level 3 [ 554.407322][T10582] BTRFS info (device loop6): using free space tree [ 556.185788][T10582] BTRFS error (device loop6): open_ctree failed: -12 [ 556.213741][ T5249] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by udevd (5249) [ 556.588242][T10666] loop4: detected capacity change from 0 to 128 [ 556.629979][T10666] FAT-fs (loop4): Directory bread(block 414) failed [ 556.700405][T10666] FAT-fs (loop4): Directory bread(block 415) failed [ 556.753125][T10666] FAT-fs (loop4): Directory bread(block 416) failed [ 556.792572][T10666] FAT-fs (loop4): Directory bread(block 417) failed [ 556.818545][T10666] FAT-fs (loop4): Directory bread(block 418) failed [ 556.849186][T10666] FAT-fs (loop4): Directory bread(block 419) failed [ 556.856137][T10666] FAT-fs (loop4): Directory bread(block 420) failed [ 556.895706][T10666] FAT-fs (loop4): Directory bread(block 421) failed [ 557.375318][T10682] FAT-fs (loop4): Directory bread(block 414) failed [ 557.382169][T10682] FAT-fs (loop4): Directory bread(block 415) failed [ 557.684196][T10645] loop7: detected capacity change from 0 to 40427 [ 558.136482][T10645] F2FS-fs (loop7): invalid crc value [ 558.154536][T10691] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 558.542234][T10645] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 558.756423][T10697] loop4: detected capacity change from 0 to 128 [ 558.773557][T10697] FAT-fs (loop4): Directory bread(block 414) failed [ 558.910675][T10697] FAT-fs (loop4): Directory bread(block 415) failed [ 558.936789][T10697] FAT-fs (loop4): Directory bread(block 416) failed [ 558.987621][T10697] FAT-fs (loop4): Directory bread(block 417) failed [ 558.994424][T10697] FAT-fs (loop4): Directory bread(block 418) failed [ 559.039040][T10697] FAT-fs (loop4): Directory bread(block 419) failed [ 559.062240][T10697] FAT-fs (loop4): Directory bread(block 420) failed [ 559.068948][T10697] FAT-fs (loop4): Directory bread(block 421) failed [ 560.700195][T10736] loop6: detected capacity change from 0 to 128 [ 560.720103][T10736] FAT-fs (loop6): Directory bread(block 414) failed [ 560.726814][T10736] FAT-fs (loop6): Directory bread(block 415) failed [ 560.734174][T10736] FAT-fs (loop6): Directory bread(block 416) failed [ 560.740942][T10736] FAT-fs (loop6): Directory bread(block 417) failed [ 560.747713][T10736] FAT-fs (loop6): Directory bread(block 418) failed [ 560.808413][T10737] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 560.995936][T10736] FAT-fs (loop6): Directory bread(block 419) failed [ 561.119723][T10736] FAT-fs (loop6): Directory bread(block 420) failed [ 561.560028][T10736] FAT-fs (loop6): Directory bread(block 421) failed [ 562.202739][T10748] FAT-fs (loop6): Directory bread(block 414) failed [ 562.209706][T10748] FAT-fs (loop6): Directory bread(block 415) failed [ 562.396665][T10718] FAT-fs (loop4): Directory bread(block 414) failed [ 562.498168][T10718] FAT-fs (loop4): Directory bread(block 415) failed [ 563.009994][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1728'. [ 564.729803][T10791] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 566.463883][T10817] loop6: detected capacity change from 0 to 128 [ 566.505306][T10817] FAT-fs (loop6): Directory bread(block 414) failed [ 566.543523][T10817] FAT-fs (loop6): Directory bread(block 415) failed [ 566.550453][T10817] FAT-fs (loop6): Directory bread(block 416) failed [ 566.557467][T10817] FAT-fs (loop6): Directory bread(block 417) failed [ 566.564358][T10817] FAT-fs (loop6): Directory bread(block 418) failed [ 566.571319][T10817] FAT-fs (loop6): Directory bread(block 419) failed [ 566.579287][T10817] FAT-fs (loop6): Directory bread(block 420) failed [ 566.586576][T10817] FAT-fs (loop6): Directory bread(block 421) failed [ 566.838083][T10785] loop7: detected capacity change from 0 to 32768 [ 566.911316][T10785] XFS (loop7): Mounting V5 Filesystem [ 566.984007][T10828] FAT-fs (loop6): Directory bread(block 414) failed [ 566.990904][T10828] FAT-fs (loop6): Directory bread(block 415) failed [ 567.664012][T10785] XFS (loop7): log mount failed [ 567.991373][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1744'. [ 568.403803][T10844] loop6: detected capacity change from 0 to 1024 [ 568.641961][T10844] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 568.849534][T10859] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1747: bg 0: block 112: padding at end of block bitmap is not set [ 569.365918][T10866] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 569.963209][ T4330] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 570.042788][T10871] loop4: detected capacity change from 0 to 512 [ 570.075053][ T4330] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 570.088328][ T4330] EXT4-fs (loop6): This should not happen!! Data will be lost [ 570.088328][ T4330] [ 570.120734][ T4451] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:16: lblock 8 mapped to illegal pblock 8 (length 5) [ 570.144444][T10871] EXT4-fs (loop4): 1 truncate cleaned up [ 570.172136][T10871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 570.181514][ T4451] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 570.205039][ T4451] EXT4-fs (loop6): This should not happen!! Data will be lost [ 570.205039][ T4451] [ 570.241224][ T8634] EXT4-fs (loop6): unmounting filesystem. [ 570.337755][ T26] audit: type=1800 audit(549.080:74): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1753" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 570.361153][T10871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1753: bg 0: block 465: padding at end of block bitmap is not set [ 570.496241][T10871] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 570.554833][T10871] EXT4-fs (loop4): This should not happen!! Data will be lost [ 570.554833][T10871] [ 570.581292][T10871] EXT4-fs (loop4): Total free blocks count 0 [ 570.609311][T10871] EXT4-fs (loop4): Free/Dirty block details [ 570.630945][T10871] EXT4-fs (loop4): free_blocks=0 [ 570.660795][T10871] EXT4-fs (loop4): dirty_blocks=9 [ 570.700883][T10871] EXT4-fs (loop4): Block reservation details [ 570.731097][T10871] EXT4-fs (loop4): i_reserved_data_blocks=9 [ 570.879805][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 571.229704][T10897] loop4: detected capacity change from 0 to 64 [ 571.685888][T10907] loop7: detected capacity change from 0 to 1024 [ 572.346869][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1762'. [ 572.467267][T10916] loop4: detected capacity change from 0 to 512 [ 572.505615][T10916] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 572.657695][T10908] 9pnet_fd: Insufficient options for proto=fd [ 573.076116][T10924] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 573.166918][ T4323] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 573.558160][ T4323] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 573.584050][ T4323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.596095][ T4323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.606559][ T4323] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 573.624030][ T4323] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 574.284662][ T4323] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 574.292941][ T4323] usb 8-1: Manufacturer: syz [ 574.299626][ T4323] usb 8-1: config 0 descriptor?? [ 574.763900][ T4323] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 574.773664][ T4323] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 574.808719][ T4323] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 575.589841][ T4358] usb 8-1: USB disconnect, device number 5 [ 575.751897][T10958] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1778'. [ 575.789043][T10956] fido_id[10956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 576.322414][T10978] loop7: detected capacity change from 0 to 128 [ 576.345769][T10978] FAT-fs (loop7): Directory bread(block 414) failed [ 576.358577][T10978] FAT-fs (loop7): Directory bread(block 415) failed [ 576.365741][T10978] FAT-fs (loop7): Directory bread(block 416) failed [ 576.372563][T10978] FAT-fs (loop7): Directory bread(block 417) failed [ 576.379628][T10978] FAT-fs (loop7): Directory bread(block 418) failed [ 576.386527][T10978] FAT-fs (loop7): Directory bread(block 419) failed [ 576.393628][T10978] FAT-fs (loop7): Directory bread(block 420) failed [ 576.400848][T10978] FAT-fs (loop7): Directory bread(block 421) failed [ 577.411725][T10995] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 577.510773][T10991] netlink: 'syz.4.1786': attribute type 3 has an invalid length. [ 578.606671][T11005] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1791'. [ 579.717365][ T4320] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 579.922510][ T4320] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 579.955711][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.999508][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.042541][ T4320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 580.098678][ T4320] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 580.161958][ T4320] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 580.194367][ T4320] usb 5-1: Manufacturer: syz [ 580.231263][ T4320] usb 5-1: config 0 descriptor?? [ 580.722425][ T4320] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 580.734788][ T4320] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 580.762014][ T4320] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 580.833147][T11040] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 581.507754][ T4320] usb 5-1: USB disconnect, device number 12 [ 581.842836][T11053] fido_id[11053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 582.544435][T11090] loop4: detected capacity change from 0 to 128 [ 582.609380][T11090] FAT-fs (loop4): Directory bread(block 414) failed [ 582.638339][T11090] FAT-fs (loop4): Directory bread(block 415) failed [ 582.697592][T11094] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 582.738295][T11090] FAT-fs (loop4): Directory bread(block 416) failed [ 582.842314][T11090] FAT-fs (loop4): Directory bread(block 417) failed [ 582.943585][T11090] FAT-fs (loop4): Directory bread(block 418) failed [ 583.046197][T11090] FAT-fs (loop4): Directory bread(block 419) failed [ 583.172556][T11090] FAT-fs (loop4): Directory bread(block 420) failed [ 583.276403][T11090] FAT-fs (loop4): Directory bread(block 421) failed [ 585.362498][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 585.513715][T11137] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 586.055639][T11154] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 587.154841][ T4358] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 587.391618][ T4358] usb 8-1: Using ep0 maxpacket: 32 [ 587.407786][ T4358] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 587.472612][ T4358] usb 8-1: config 0 has no interface number 0 [ 587.507459][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 587.531760][ T4358] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 587.551348][ T4358] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.563630][ T4358] usb 8-1: Product: syz [ 587.567974][ T4358] usb 8-1: Manufacturer: syz [ 587.572996][ T4358] usb 8-1: SerialNumber: syz [ 587.580582][ T4358] usb 8-1: config 0 descriptor?? [ 587.593743][ T4358] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 587.731703][ C0] hrtimer: interrupt took 47950 ns [ 587.809013][ T4358] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 588.245411][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 588.466472][ T4358] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 588.493617][ T4358] usb 8-1: USB disconnect, device number 6 [ 588.515065][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 588.555377][ T4358] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 588.631282][ T4358] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 588.669209][ T4358] quatech2 8-1:0.51: device disconnected [ 588.815382][T11195] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1847'. [ 589.513157][T11205] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 589.953571][T11209] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1852'. [ 590.094436][T11213] loop4: detected capacity change from 0 to 512 [ 590.138108][T11213] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 590.290500][T11222] loop6: detected capacity change from 0 to 128 [ 590.458993][T11222] FAT-fs (loop6): Directory bread(block 414) failed [ 590.753848][T11228] loop8: detected capacity change from 0 to 7 [ 590.762109][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.772433][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.808852][T11222] FAT-fs (loop6): Directory bread(block 415) failed [ 590.904306][T11222] FAT-fs (loop6): Directory bread(block 416) failed [ 590.981163][T11228] Dev loop8: unable to read RDB block 7 [ 590.986950][T11228] loop8: unable to read partition table [ 590.993108][T11228] loop8: partition table beyond EOD, truncated [ 590.999707][T11228] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 591.021709][T11222] FAT-fs (loop6): Directory bread(block 417) failed [ 591.086731][T11222] FAT-fs (loop6): Directory bread(block 418) failed [ 591.125019][T11222] FAT-fs (loop6): Directory bread(block 419) failed [ 591.131843][T11222] FAT-fs (loop6): Directory bread(block 420) failed [ 591.138564][T11222] FAT-fs (loop6): Directory bread(block 421) failed [ 591.158268][ T4935] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 591.494433][T11237] FAT-fs (loop6): Directory bread(block 414) failed [ 591.501305][T11237] FAT-fs (loop6): Directory bread(block 415) failed [ 591.757214][T11240] loop7: detected capacity change from 0 to 128 [ 591.849176][T11240] FAT-fs (loop7): Directory bread(block 414) failed [ 591.910159][T11240] FAT-fs (loop7): Directory bread(block 415) failed [ 591.917030][T11240] FAT-fs (loop7): Directory bread(block 416) failed [ 592.018086][T11240] FAT-fs (loop7): Directory bread(block 417) failed [ 592.024795][T11240] FAT-fs (loop7): Directory bread(block 418) failed [ 592.047904][T11240] FAT-fs (loop7): Directory bread(block 419) failed [ 592.064797][T11240] FAT-fs (loop7): Directory bread(block 420) failed [ 592.168949][T11240] FAT-fs (loop7): Directory bread(block 421) failed [ 592.287428][T11249] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 592.842790][T11252] FAT-fs (loop7): Directory bread(block 414) failed [ 592.849678][T11252] FAT-fs (loop7): Directory bread(block 415) failed [ 593.460410][T11258] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 595.333521][T11266] loop6: detected capacity change from 0 to 4096 [ 595.712686][T11294] device macsec0 entered promiscuous mode [ 596.040322][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1877'. [ 596.256559][T11296] device veth1_macvtap left promiscuous mode [ 596.702287][T11299] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1878'. [ 596.772501][ T4284] Bluetooth: hci2: link tx timeout [ 596.778424][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 596.789968][ T4284] Bluetooth: hci2: link tx timeout [ 596.795374][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 597.040605][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1883'. [ 597.393959][T11321] loop4: detected capacity change from 0 to 512 [ 597.431070][T11321] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 597.705955][T11330] loop7: detected capacity change from 0 to 512 [ 597.910495][T11331] loop8: detected capacity change from 0 to 7 [ 598.568109][ T4450] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 598.592364][T11330] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 598.794652][ T4327] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 599.005759][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 599.465876][ T4327] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 599.900225][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 599.931737][T11354] loop4: detected capacity change from 0 to 1024 [ 599.963084][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1894'. [ 600.009469][T11358] loop7: detected capacity change from 0 to 512 [ 600.071066][T11354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 600.155121][T11354] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 2: comm syz.4.1893: lblock 2 mapped to illegal pblock 2 (length 4) [ 600.187524][T11358] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 600.259068][T11364] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.1893: lblock 0 mapped to illegal pblock 0 (length 2) [ 600.364941][T11364] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 600.469666][T11364] EXT4-fs (loop4): This should not happen!! Data will be lost [ 600.469666][T11364] [ 600.581054][T11369] loop8: detected capacity change from 0 to 7 [ 600.901798][T11369] Dev loop8: unable to read RDB block 7 [ 600.907485][T11369] loop8: unable to read partition table [ 600.913471][T11369] loop8: partition table beyond EOD, truncated [ 600.919814][T11369] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 601.068840][ T4327] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:5: lblock 4 mapped to illegal pblock 4 (length 2) [ 601.148634][ T4327] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 601.207695][ T4450] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 601.210822][ T4327] EXT4-fs (loop4): This should not happen!! Data will be lost [ 601.210822][ T4327] [ 601.227997][ T4935] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:30: bg 0: block 112: padding at end of block bitmap is not set [ 601.306111][ T4935] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 601.346071][ T4935] EXT4-fs (loop4): This should not happen!! Data will be lost [ 601.346071][ T4935] [ 601.355810][ T4935] EXT4-fs (loop4): Total free blocks count 0 [ 601.388617][ T4935] EXT4-fs (loop4): Free/Dirty block details [ 601.399472][ T4935] EXT4-fs (loop4): free_blocks=0 [ 601.772514][ T8634] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 601.803855][ T8634] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 602.853780][T11405] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1909'. [ 603.579405][ T127] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 603.792979][ T127] usb 7-1: Using ep0 maxpacket: 16 [ 603.800240][ T127] usb 7-1: config index 0 descriptor too short (expected 52, got 36) [ 603.837459][T11437] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1918'. [ 603.846616][ T127] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 603.854830][ T127] usb 7-1: config 0 has no interface number 0 [ 603.886248][ T127] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 603.905101][ T127] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 603.955267][ T127] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 604.026353][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.072918][ T127] usb 7-1: Product: syz [ 604.077178][ T127] usb 7-1: Manufacturer: syz [ 604.130643][ T127] usb 7-1: SerialNumber: syz [ 604.174228][ T127] usb 7-1: config 0 descriptor?? [ 604.183563][T11444] device batadv_slave_1 entered promiscuous mode [ 604.195928][T11417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.213930][T11441] device batadv_slave_1 left promiscuous mode [ 604.231350][T11417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.477010][ T7687] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 604.478106][T11417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.530378][T11417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.690895][ T7687] usb 5-1: Using ep0 maxpacket: 8 [ 604.698080][ T7687] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 604.728717][ T7687] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.756679][ T7687] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.797590][ T7687] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.829729][ T7687] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.877048][ T7687] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 604.904943][ T7687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.997909][ T127] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 605.039148][ T127] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 605.080028][ T127] asix: probe of 7-1:0.251 failed with error -71 [ 605.129737][ T127] usb 7-1: USB disconnect, device number 4 [ 605.193013][ T7687] usb 5-1: usb_control_msg returned -32 [ 605.199119][ T7687] usbtmc 5-1:16.0: can't read capabilities [ 605.525755][ T4284] Bluetooth: hci2: link tx timeout [ 605.530978][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 605.614087][T11467] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 606.207411][ T4284] Bluetooth: hci2: link tx timeout [ 606.210919][T11468] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 606.219894][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.424752][ T4323] usb 5-1: USB disconnect, device number 13 [ 607.287939][ T4284] Bluetooth: hci2: link tx timeout [ 607.293464][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 607.319994][ T4284] Bluetooth: hci2: link tx timeout [ 607.325235][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 607.388335][T11488] loop4: detected capacity change from 0 to 512 [ 607.504724][T11488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 607.832280][ T127] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 608.284007][ T4284] Bluetooth: hci2: link tx timeout [ 608.289533][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 608.360408][T11514] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 608.814227][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 609.016470][ T127] usb 8-1: Using ep0 maxpacket: 16 [ 609.030731][ T127] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.044434][ T127] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.054742][ T127] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 609.063973][ T127] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.074199][ T127] usb 8-1: config 0 descriptor?? [ 609.508356][T11529] loop4: detected capacity change from 0 to 512 [ 609.553116][ T127] wacom 0003:056A:0084.0004: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.7-1/input0 [ 609.585367][T11529] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 609.772663][T11533] loop6: detected capacity change from 0 to 128 [ 609.830067][ T127] usb 8-1: USB disconnect, device number 7 [ 609.955019][T11537] loop8: detected capacity change from 0 to 7 [ 610.023148][T11537] Dev loop8: unable to read RDB block 7 [ 610.029122][T11537] loop8: unable to read partition table [ 610.036147][T11537] loop8: partition table beyond EOD, truncated [ 610.042614][T11537] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 610.605355][ T4409] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 610.709404][T11540] fido_id[11540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 610.809084][T11542] loop4: detected capacity change from 0 to 2048 [ 610.894232][T11542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 611.130897][ T4284] Bluetooth: hci2: link tx timeout [ 611.136615][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.499117][ T127] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 611.629014][T11563] loop7: detected capacity change from 0 to 32768 [ 611.638793][T11563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1952 (11563) [ 611.669178][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 611.677196][T11563] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 611.687461][T11563] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 611.696333][T11563] BTRFS info (device loop7): force clearing of disk cache [ 611.703792][T11563] BTRFS info (device loop7): enabling auto defrag [ 611.710321][T11563] BTRFS info (device loop7): max_inline at 0 [ 611.716475][T11563] BTRFS info (device loop7): enabling disk space caching [ 611.723613][T11563] BTRFS info (device loop7): disk space caching is enabled [ 611.766787][ T127] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 611.832360][ T127] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 611.900765][T11563] BTRFS info (device loop7): enabling ssd optimizations [ 611.910616][T11563] BTRFS info (device loop7): rebuilding free space tree [ 611.930074][T11563] BTRFS info (device loop7): disabling free space tree [ 611.937096][T11563] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 611.946841][T11563] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 611.977846][ T127] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.994570][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 612.013974][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1954'. [ 612.032068][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.040387][ T127] usb 7-1: Product: syz [ 612.053881][ T127] usb 7-1: Manufacturer: syz [ 612.059751][ T127] usb 7-1: SerialNumber: syz [ 612.111184][ T127] cdc_mbim 7-1:1.0: skipping garbage [ 612.315328][T11558] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 612.394137][ T4450] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 612.479313][T11590] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 613.078925][ T9306] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 613.120922][T11592] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1956'. [ 613.509927][T11558] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 613.772265][ T127] cdc_mbim 7-1:1.0: bind() failure [ 613.843376][ T127] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 613.889316][ T127] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 613.954606][ T127] usbtest: probe of 7-1:1.1 failed with error -71 [ 614.122986][ T127] usb 7-1: USB disconnect, device number 5 [ 614.546948][T11613] loop4: detected capacity change from 0 to 512 [ 614.713481][T11613] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 614.731100][T11619] loop6: detected capacity change from 0 to 512 [ 614.981222][T11619] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 615.007309][T11619] EXT4-fs (loop6): orphan cleanup on readonly fs [ 615.105413][T11629] loop8: detected capacity change from 0 to 7 [ 615.115696][T11629] Dev loop8: unable to read RDB block 7 [ 615.121688][T11629] loop8: unable to read partition table [ 615.128274][T11629] loop8: partition table beyond EOD, truncated [ 615.134634][T11629] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 615.245894][T11619] EXT4-fs error (device loop6): ext4_quota_enable:7045: comm syz.6.1967: Bad quota inum: 5, type: 1 [ 615.475823][T11619] EXT4-fs (loop6): Remounting filesystem read-only [ 615.482422][T11619] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 615.688755][T11619] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 615.713466][ T4327] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 615.758139][T11619] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 616.036453][ T8634] EXT4-fs (loop6): unmounting filesystem. [ 616.053992][ T4284] Bluetooth: hci2: link tx timeout [ 616.059244][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 616.090361][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 616.111185][ T4284] Bluetooth: hci2: link tx timeout [ 616.116488][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 616.132390][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 616.306627][ T4284] Bluetooth: hci2: link tx timeout [ 616.311840][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 617.809936][T11671] [U]  [ 618.107445][T11676] loop7: detected capacity change from 0 to 512 [ 618.378923][T11676] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 618.432758][ T7687] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 618.753191][T11668] loop8: detected capacity change from 0 to 7 [ 618.760324][T11668] Dev loop8: unable to read RDB block 7 [ 618.766237][T11668] loop8: unable to read partition table [ 618.772112][T11668] loop8: partition table beyond EOD, truncated [ 618.778388][T11668] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 619.190508][ T4928] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 619.214716][ T7687] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.234825][ T7687] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.266579][ T7687] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.275885][ T7687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.340458][ T7687] usb 7-1: SerialNumber: syz [ 619.593309][ T7687] usb 7-1: 0:2 : does not exist [ 620.283550][ T7687] usb 7-1: USB disconnect, device number 6 [ 620.986949][T11699] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 621.854166][ T5249] udevd[5249]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.697590][T11733] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 623.461272][ T4287] Bluetooth: hci2: link tx timeout [ 623.466909][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 623.487704][ T4287] Bluetooth: hci2: link tx timeout [ 623.493147][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 623.583604][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 623.685308][ T4287] Bluetooth: hci2: link tx timeout [ 623.699178][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 624.230297][ T4287] Bluetooth: hci2: link tx timeout [ 624.236068][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 624.620920][T11764] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 625.433651][ T4287] Bluetooth: hci2: link tx timeout [ 625.438859][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 625.458662][ T4287] Bluetooth: hci2: link tx timeout [ 625.464201][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 625.565990][T11773] loop7: detected capacity change from 0 to 512 [ 625.582664][T11773] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 625.979124][T11783] loop8: detected capacity change from 0 to 7 [ 625.989335][T11783] Dev loop8: unable to read RDB block 7 [ 625.995106][T11783] loop8: unable to read partition table [ 626.001853][T11783] loop8: partition table beyond EOD, truncated [ 626.008490][T11783] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 626.398803][T11785] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 626.900222][ T4450] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 626.948685][ T4287] Bluetooth: hci2: link tx timeout [ 626.953980][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 627.313105][T10655] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 627.517695][T10655] usb 5-1: Using ep0 maxpacket: 8 [ 627.617603][T11813] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 627.770938][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.429219][T10655] usb 5-1: unable to get BOS descriptor or descriptor too short [ 628.446422][T10655] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 628.454070][T10655] usb 5-1: can't read configurations, error -71 [ 628.542840][T11828] loop7: detected capacity change from 0 to 512 [ 628.573440][T11828] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 628.941366][T11833] loop8: detected capacity change from 0 to 7 [ 628.956918][T11833] Dev loop8: unable to read RDB block 7 [ 628.963208][T11833] loop8: unable to read partition table [ 628.969382][T11833] loop8: partition table beyond EOD, truncated [ 628.975642][T11833] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 629.616637][ T4287] Bluetooth: hci2: link tx timeout [ 629.622542][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 629.697133][ T4935] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 629.782306][ T4287] Bluetooth: hci2: link tx timeout [ 629.787576][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 630.049016][T11854] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 630.822619][ T4287] Bluetooth: hci2: link tx timeout [ 630.828205][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 630.906921][T11862] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 631.717434][T11866] loop6: detected capacity change from 0 to 512 [ 631.767994][T11869] input: syz0 as /devices/virtual/input/input17 [ 631.775190][T11866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 632.393178][T11866] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 632.662162][ T8634] EXT4-fs (loop6): unmounting filesystem. [ 632.897130][ T4287] Bluetooth: hci2: link tx timeout [ 632.902582][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 633.889446][ T4287] Bluetooth: hci2: link tx timeout [ 633.895360][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 633.916421][T11892] netlink: 'syz.4.2044': attribute type 11 has an invalid length. [ 634.183134][T11895] loop6: detected capacity change from 0 to 4096 [ 634.466103][ T4287] Bluetooth: hci2: link tx timeout [ 634.471493][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 634.505900][T11907] loop4: detected capacity change from 0 to 512 [ 634.545834][ T6835] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 634.583423][T11907] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 634.761111][ T6835] usb 8-1: Using ep0 maxpacket: 8 [ 634.778243][ T6835] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 634.846799][ T6835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.876917][ T6835] usb 8-1: Product: syz [ 634.891382][ T6835] usb 8-1: Manufacturer: syz [ 634.896217][ T6835] usb 8-1: SerialNumber: syz [ 634.953230][T11914] loop8: detected capacity change from 0 to 7 [ 635.034258][T11914] Dev loop8: unable to read RDB block 7 [ 635.040281][T11914] loop8: unable to read partition table [ 635.046904][T11914] loop8: partition table beyond EOD, truncated [ 635.053373][T11914] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 635.548443][T11919] loop3: detected capacity change from 0 to 7 [ 635.625711][T11919] Dev loop3: unable to read RDB block 7 [ 635.631577][ T4451] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 635.675396][T11919] loop3: unable to read partition table [ 635.724629][T11919] loop3: partition table beyond EOD, truncated [ 635.730901][T11919] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 635.926547][ T6835] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 635.958564][ T6835] usb 8-1: clock source 0 is not valid, cannot use [ 636.004856][ T6835] usb 8-1: 1:1: cannot get freq (v2/v3): err -32 [ 636.057688][T11929] loop4: detected capacity change from 0 to 128 [ 636.110300][T11929] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 636.171864][T11929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.237496][ T6835] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 636.246211][ T6835] usb 8-1: clock source 0 is not valid, cannot use [ 636.299126][ T6835] usb 8-1: 2:1: cannot get freq (v2/v3): err -71 [ 636.308946][ T6835] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 636.398332][ T6835] usb 8-1: USB disconnect, device number 8 [ 636.608538][ T4287] Bluetooth: hci2: link tx timeout [ 636.614026][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 636.731224][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.791970][T11951] loop4: detected capacity change from 0 to 512 [ 636.804305][T11951] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 637.199749][T11960] loop8: detected capacity change from 0 to 7 [ 637.211339][T11960] Dev loop8: unable to read RDB block 7 [ 637.217180][T11960] loop8: unable to read partition table [ 637.223826][T11960] loop8: partition table beyond EOD, truncated [ 637.230317][T11960] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 637.876863][ T4330] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 638.386964][T11980] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 639.228668][T11990] loop4: detected capacity change from 0 to 256 [ 639.241954][T11990] exfat: Deprecated parameter 'namecase' [ 639.247734][T11990] exfat: Deprecated parameter 'namecase' [ 639.287284][T11989] loop7: detected capacity change from 0 to 1024 [ 639.295033][T11990] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 640.005364][T11966] loop6: detected capacity change from 0 to 32768 [ 640.092568][T11966] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 640.138380][T11966] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 640.176764][T11966] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 640.220399][T11966] BTRFS info (device loop6): use zstd compression, level 3 [ 640.256402][ T4287] Bluetooth: hci2: link tx timeout [ 640.261745][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 640.277445][T11966] BTRFS info (device loop6): using free space tree [ 640.797865][T11966] BTRFS info (device loop6): enabling ssd optimizations [ 640.975263][T12041] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 641.023671][ T8210] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 641.269028][ T8210] usb 8-1: Using ep0 maxpacket: 16 [ 641.284727][ T8210] usb 8-1: unable to get BOS descriptor or descriptor too short [ 641.384858][ T8210] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 641.584816][ T8210] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 641.675022][ T8210] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.749860][ T8210] usb 8-1: Product: syz [ 641.754442][ T8210] usb 8-1: Manufacturer: syz [ 641.759082][ T8210] usb 8-1: SerialNumber: syz [ 642.054551][ T8210] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 642.086715][ T8210] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 642.097237][ T8634] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 642.526242][ T8210] usb 8-1: 2:1 : bogus bTerminalLink 6 [ 642.749508][T12060] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 642.786609][ T8210] usb 8-1: USB disconnect, device number 9 [ 642.913487][T12060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 642.974560][T12063] bond1: (slave geneve3): making interface the new active one [ 643.011929][T12063] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 643.020912][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 643.038324][T12044] loop4: detected capacity change from 0 to 32768 [ 643.140348][T12044] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 643.205720][ T26] audit: type=1804 audit(617.275:75): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2088" name="/newroot/381/file1/cgroup.controllers" dev="loop4" ino=17058 res=1 errno=0 [ 643.345831][ T26] audit: type=1326 audit(617.331:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12071 comm="syz.1.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dbb59ce59 code=0x0 [ 643.378842][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 643.653668][ T4287] Bluetooth: hci2: link tx timeout [ 643.658903][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.667530][ T4287] Bluetooth: hci2: link tx timeout [ 643.672737][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.464411][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 644.607869][T12114] loop6: detected capacity change from 0 to 128 [ 644.658846][T12114] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 644.724479][T12116] netlink: 'syz.1.2109': attribute type 12 has an invalid length. [ 644.738706][T12114] hpfs: filesystem error: improperly stopped [ 644.748775][T12116] netlink: 'syz.1.2109': attribute type 29 has an invalid length. [ 644.766345][T12116] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2109'. [ 644.776879][T12114] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 644.805725][T12116] netlink: 'syz.1.2109': attribute type 2 has an invalid length. [ 644.817012][T12114] hpfs: You really don't want any checks? You are crazy... [ 644.838092][T12114] hpfs: Code page index out of array [ 644.843475][T12114] hpfs: code page support is disabled [ 644.859610][T12116] netlink: 'syz.1.2109': attribute type 3 has an invalid length. [ 644.879837][T12114] hpfs: hpfs_map_4sectors(): unaligned read [ 644.892948][T12114] hpfs: hpfs_map_4sectors(): unaligned read [ 644.898921][T12114] hpfs: filesystem error: unable to find root dir [ 644.975223][T12120] lo speed is unknown, defaulting to 1000 [ 645.153926][T12126] loop6: detected capacity change from 0 to 512 [ 645.226512][T12126] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 645.625135][T12132] loop8: detected capacity change from 0 to 7 [ 645.645943][T12132] Dev loop8: unable to read RDB block 7 [ 645.651980][T12132] loop8: unable to read partition table [ 645.658483][T12132] loop8: partition table beyond EOD, truncated [ 645.665035][T12132] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 646.262931][ T4409] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 646.263181][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 646.548006][T12143] loop7: detected capacity change from 0 to 128 [ 646.564123][T12143] FAT-fs (loop7): Directory bread(block 414) failed [ 646.580123][T12143] FAT-fs (loop7): Directory bread(block 415) failed [ 646.598014][T12143] FAT-fs (loop7): Directory bread(block 416) failed [ 646.608836][T12143] FAT-fs (loop7): Directory bread(block 417) failed [ 646.651964][T12143] FAT-fs (loop7): Directory bread(block 418) failed [ 646.669352][T12143] FAT-fs (loop7): Directory bread(block 419) failed [ 646.698129][T12143] FAT-fs (loop7): Directory bread(block 420) failed [ 646.704840][T12143] FAT-fs (loop7): Directory bread(block 421) failed [ 647.132618][T12162] FAT-fs (loop7): Directory bread(block 414) failed [ 647.139586][T12162] FAT-fs (loop7): Directory bread(block 415) failed [ 647.452381][ T26] audit: type=1326 audit(621.243:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.2124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dbb59ce59 code=0x0 [ 647.522873][T12164] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2125'. [ 647.791573][T12169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2127'. [ 648.032557][T12181] smc: net device veth0_to_bond applied user defined pnetid SYZ2 [ 648.181234][T12184] loop7: detected capacity change from 0 to 512 [ 648.298772][T12184] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 648.426647][T12188] loop6: detected capacity change from 0 to 4096 [ 648.481062][T12196] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 648.656313][T12201] loop4: detected capacity change from 0 to 128 [ 648.668311][ T9306] EXT4-fs (loop7): unmounting filesystem. [ 648.749684][T12201] FAT-fs (loop4): Directory bread(block 414) failed [ 648.778605][T12201] FAT-fs (loop4): Directory bread(block 415) failed [ 648.808588][T12201] FAT-fs (loop4): Directory bread(block 416) failed [ 648.833511][T12201] FAT-fs (loop4): Directory bread(block 417) failed [ 648.862351][T12201] FAT-fs (loop4): Directory bread(block 418) failed [ 648.901703][T12201] FAT-fs (loop4): Directory bread(block 419) failed [ 648.928298][T12201] FAT-fs (loop4): Directory bread(block 420) failed [ 648.951924][T12201] FAT-fs (loop4): Directory bread(block 421) failed [ 649.299487][T12210] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 649.659602][T12213] FAT-fs (loop4): Directory bread(block 414) failed [ 649.666360][T12213] FAT-fs (loop4): Directory bread(block 415) failed [ 649.753277][ T6830] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 649.970830][ T6830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.029457][ T6830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.082037][ T6830] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.124351][ T6830] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.142805][ T6830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.165198][ T6830] usb 8-1: config 0 descriptor?? [ 650.227956][T12222] lo speed is unknown, defaulting to 1000 [ 650.634467][ T6830] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 650.673234][ T6830] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 650.784334][ T6826] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 651.137057][T12243] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 651.215190][ T6826] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.226260][ T6826] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.238051][ T6826] usb 7-1: config 1 has no interface number 0 [ 651.245918][ T6826] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.262791][T12249] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 651.276836][ T6826] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 651.288197][ T6826] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 651.504718][ T6826] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.609584][ T6826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.772913][ T6826] usb 7-1: Product: syz [ 651.987086][ T6826] usb 7-1: Manufacturer: syz [ 652.002733][ T6826] usb 7-1: SerialNumber: syz [ 652.028462][T12253] loop4: detected capacity change from 0 to 128 [ 652.053840][T12253] FAT-fs (loop4): Directory bread(block 414) failed [ 652.079854][T12253] FAT-fs (loop4): Directory bread(block 415) failed [ 652.115290][T12253] FAT-fs (loop4): Directory bread(block 416) failed [ 652.122005][T12253] FAT-fs (loop4): Directory bread(block 417) failed [ 652.164420][T12253] FAT-fs (loop4): Directory bread(block 418) failed [ 652.201074][T12253] FAT-fs (loop4): Directory bread(block 419) failed [ 652.207783][T12253] FAT-fs (loop4): Directory bread(block 420) failed [ 652.243486][T12253] FAT-fs (loop4): Directory bread(block 421) failed [ 652.251565][T12231] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 652.670050][T12263] FAT-fs (loop4): Directory bread(block 414) failed [ 652.677012][T12263] FAT-fs (loop4): Directory bread(block 415) failed [ 653.415977][ T4358] usb 8-1: USB disconnect, device number 10 [ 653.613152][T12231] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 653.732436][ T6826] cdc_ncm 7-1:1.1: bind() failure [ 654.171203][T10655] usb 7-1: USB disconnect, device number 7 [ 654.952207][T12274] loop7: detected capacity change from 0 to 32768 [ 654.988803][T12292] syzkaller0: mtu greater than device maximum [ 655.153832][T12274] XFS (loop7): Mounting V5 Filesystem [ 655.248639][T12304] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 655.399520][T12274] XFS (loop7): Ending clean mount [ 655.866315][ T26] audit: type=1800 audit(885.080:78): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2163" name="file0" dev="loop7" ino=6156 res=0 errno=0 [ 655.956902][ T9306] XFS (loop7): Unmounting Filesystem [ 656.176525][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'. [ 656.186349][T12308] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 656.227249][T12295] loop6: detected capacity change from 0 to 32768 [ 656.249335][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 656.255782][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 656.329661][ T26] audit: type=1800 audit(885.558:79): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2168" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 656.552350][ T26] audit: type=1800 audit(885.754:80): pid=12320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2168" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 657.898888][ T4287] Bluetooth: hci2: link tx timeout [ 657.911365][ T4287] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 657.921656][ T4287] Bluetooth: hci2: link tx timeout [ 657.926912][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.028670][T12334] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 659.182218][T12353] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 659.706452][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2186'. [ 659.822948][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 659.887081][T12366] loop4: detected capacity change from 0 to 128 [ 659.918406][T12366] FAT-fs (loop4): Directory bread(block 414) failed [ 659.925124][T12366] FAT-fs (loop4): Directory bread(block 415) failed [ 659.941865][T12369] loop7: detected capacity change from 0 to 1024 [ 659.970334][T12369] EXT4-fs: Ignoring removed orlov option [ 659.980750][T12366] FAT-fs (loop4): Directory bread(block 416) failed [ 659.987463][T12366] FAT-fs (loop4): Directory bread(block 417) failed [ 660.016486][T12366] FAT-fs (loop4): Directory bread(block 418) failed [ 660.038151][T12366] FAT-fs (loop4): Directory bread(block 419) failed [ 660.046338][T12369] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 660.056073][T12366] FAT-fs (loop4): Directory bread(block 420) failed [ 660.089177][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 660.107382][T12366] FAT-fs (loop4): Directory bread(block 421) failed [ 660.547641][T12384] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 660.892648][T12386] FAT-fs (loop4): Directory bread(block 414) failed [ 660.899669][T12386] FAT-fs (loop4): Directory bread(block 415) failed [ 661.487920][ T9306] EXT4-fs (loop7): unmounting filesystem. [ 661.571752][T12395] loop4: detected capacity change from 0 to 4096 [ 661.599096][T12395] EXT4-fs: Ignoring removed orlov option [ 661.661756][T12395] EXT4-fs (loop4): Test dummy encryption mode enabled [ 661.724426][T12395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 661.999021][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'. [ 662.033056][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2200'. [ 662.098336][T12415] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 662.706715][T12420] loop6: detected capacity change from 0 to 1024 [ 662.770857][T12395] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 662.842119][ T4928] hfsplus: b-tree write err: -5, ino 25 [ 662.887015][ T4928] hfsplus: b-tree write err: -5, ino 4 [ 662.904023][ T4928] hfsplus: b-tree write err: -5, ino 2 [ 663.058704][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 663.824003][T12451] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 664.495685][T12482] loop6: detected capacity change from 0 to 512 [ 664.566549][T12482] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 664.882939][T12495] loop8: detected capacity change from 0 to 7 [ 664.890234][T12495] Dev loop8: unable to read RDB block 7 [ 664.896009][T12495] loop8: unable to read partition table [ 664.904889][T12495] loop8: partition table beyond EOD, truncated [ 664.911215][T12495] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 665.942229][ T4935] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 666.263667][T12519] netlink: 'syz.7.2234': attribute type 7 has an invalid length. [ 666.296017][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 666.305263][T12518] netlink: 'syz.6.2233': attribute type 1 has an invalid length. [ 666.335971][T12518] netlink: 'syz.6.2233': attribute type 2 has an invalid length. [ 666.357469][T12519] netlink: 'syz.7.2234': attribute type 7 has an invalid length. [ 666.370917][T12522] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2236'. [ 666.418430][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 668.010372][T12530] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 669.239820][T12566] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 669.744793][T12574] loop7: detected capacity change from 0 to 512 [ 670.451880][T12574] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 670.831652][T12585] loop8: detected capacity change from 0 to 7 [ 670.839056][T12585] Dev loop8: unable to read RDB block 7 [ 670.844746][T12585] loop8: unable to read partition table [ 670.850759][T12585] loop8: partition table beyond EOD, truncated [ 670.857017][T12585] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 670.886693][T12589] netlink: 'syz.1.2258': attribute type 3 has an invalid length. [ 671.274609][ T4372] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 671.857688][T12608] loop6: detected capacity change from 0 to 32768 [ 671.897732][T12608] XFS (loop6): Mounting V5 Filesystem [ 671.960970][T12608] XFS (loop6): Ending clean mount [ 671.986642][ T26] audit: type=1800 audit(900.203:81): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2265" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 672.217302][ T8634] XFS (loop6): Unmounting Filesystem [ 672.753798][T12630] loop4: detected capacity change from 0 to 512 [ 672.785968][T12630] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 673.072048][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2273'. [ 673.081027][T12634] netlink: 'syz.7.2273': attribute type 26 has an invalid length. [ 673.093291][T12633] loop8: detected capacity change from 0 to 7 [ 673.100925][T12633] Dev loop8: unable to read RDB block 7 [ 673.106743][T12633] loop8: unable to read partition table [ 673.112668][T12633] loop8: partition table beyond EOD, truncated [ 673.118952][T12633] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 673.126618][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2273'. [ 673.156730][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2273'. [ 673.176896][T12634] netlink: 'syz.7.2273': attribute type 26 has an invalid length. [ 673.259218][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2273'. [ 673.712858][ T4451] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 673.855460][T12649] device pim6reg1 entered promiscuous mode [ 673.889109][T12653] loop4: detected capacity change from 0 to 256 [ 673.971671][T12653] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 674.222384][T12636] loop6: detected capacity change from 0 to 40427 [ 674.281039][T12636] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 674.332839][T12636] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 674.373831][T12636] F2FS-fs (loop6): invalid crc value [ 674.405809][T12636] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 674.694056][T12636] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 674.703793][T12636] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 674.855130][T12670] syz.6.2274: attempt to access beyond end of device [ 674.855130][T12670] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 675.081507][ T8634] syz-executor: attempt to access beyond end of device [ 675.081507][ T8634] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 675.189379][T12656] loop7: detected capacity change from 0 to 32768 [ 675.271664][T12656] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 675.283656][T12656] XFS (loop7): Mounting V5 Filesystem [ 675.371309][T12656] XFS (loop7): Ending clean mount [ 675.423422][T12656] XFS (loop7): Quotacheck needed: Please wait. [ 675.545552][T12656] XFS (loop7): Quotacheck: Done. [ 675.623934][T12656] XFS (loop7): User initiated shutdown received. [ 675.703347][T12656] XFS (loop7): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 675.813644][T12656] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 676.129419][ T9306] XFS (loop7): Unmounting Filesystem [ 677.032444][T12716] loop6: detected capacity change from 0 to 128 [ 677.085750][ T26] audit: type=1800 audit(904.975:82): pid=12716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2300" name="file1" dev="loop6" ino=1048684 res=0 errno=0 [ 677.151371][T12716] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 677.187743][T12716] FAT-fs (loop6): Filesystem has been set read-only [ 677.197604][ T127] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 677.334068][T12722] loop7: detected capacity change from 0 to 2048 [ 677.368131][T12722] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 677.387664][ T26] audit: type=1800 audit(905.256:83): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2302" name="file3" dev="loop7" ino=16 res=0 errno=0 [ 677.392349][T12722] fs-verity: sha256 using implementation "sha256-avx2" [ 677.419898][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 677.445162][ T127] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 677.465474][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.483888][ T127] usb 5-1: Product: syz [ 677.488288][ T127] usb 5-1: Manufacturer: syz [ 677.492990][ T127] usb 5-1: SerialNumber: syz [ 677.510161][ T127] usb 5-1: config 0 descriptor?? [ 677.531173][ T127] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 677.544524][ T127] usb 5-1: Detected FT-X [ 677.748065][ T127] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 677.865473][ T9306] EXT4-fs (loop7): unmounting filesystem. [ 677.996206][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.043230][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.394253][ T127] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 678.568342][ T127] usb 5-1: USB disconnect, device number 16 [ 678.641951][T12727] loop6: detected capacity change from 0 to 131072 [ 678.649050][ T127] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 678.664104][T12727] F2FS-fs (loop6): invalid crc value [ 678.680260][ T127] ftdi_sio 5-1:0.0: device disconnected [ 678.757688][T12727] F2FS-fs (loop6): Found nat_bits in checkpoint [ 678.819664][T12727] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 679.434842][T12744] loop4: detected capacity change from 0 to 512 [ 679.515910][T12744] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 679.619250][T12744] loop8: detected capacity change from 0 to 7 [ 679.626719][T12744] Dev loop8: unable to read RDB block 7 [ 679.632877][T12744] loop8: unable to read partition table [ 679.638725][T12744] loop8: partition table beyond EOD, truncated [ 679.645139][T12744] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 680.100899][T12738] loop7: detected capacity change from 0 to 32768 [ 680.193463][T12752] 9pnet_fd: Insufficient options for proto=fd [ 680.259107][T12738] read_mapping_page failed! [ 680.294654][T12738] ERROR: (device loop7): txCommit: [ 680.294654][T12738] [ 680.691605][ T4609] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 680.889187][T12757] input: syz1 as /devices/virtual/input/input18 [ 682.343681][T12778] loop4: detected capacity change from 0 to 512 [ 682.412056][T12778] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 682.423924][T12778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 682.451648][T12778] EXT4-fs (loop4): 1 truncate cleaned up [ 682.495921][T12778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 682.523287][T12783] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 683.201056][ T26] audit: type=1800 audit(910.674:84): pid=12778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2322" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 683.330343][T12790] loop6: detected capacity change from 0 to 512 [ 683.341094][T12790] EXT4-fs: Ignoring removed i_version option [ 683.347192][T12790] EXT4-fs: Ignoring removed nobh option [ 683.404780][T12790] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 683.428130][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 683.461386][T12790] EXT4-fs (loop6): 1 truncate cleaned up [ 683.461429][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 683.467102][T12790] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 683.483167][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 683.684566][T12798] loop4: detected capacity change from 0 to 256 [ 683.758988][T12798] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 683.811907][ T8634] EXT4-fs (loop6): unmounting filesystem. [ 683.838769][T12798] FAT-fs (loop4): Filesystem has been set read-only [ 683.853491][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2328'. [ 683.882053][T12798] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 683.928004][T12798] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 683.947694][ T26] audit: type=1800 audit(911.395:85): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2326" name="file1" dev="loop4" ino=1048687 res=0 errno=0 [ 684.320381][T12813] loop4: detected capacity change from 0 to 512 [ 684.389005][T12813] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 684.583042][T12816] loop7: detected capacity change from 0 to 512 [ 684.661370][T12816] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 684.913715][T12819] loop8: detected capacity change from 0 to 7 [ 684.928557][T12819] Dev loop8: unable to read RDB block 7 [ 684.934369][T12819] loop8: unable to read partition table [ 684.940205][T12819] loop8: partition table beyond EOD, truncated [ 684.946504][T12819] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 685.265998][ T4682] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 685.541264][ T4609] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 685.950463][T12822] loop6: detected capacity change from 0 to 32768 [ 685.984827][T12822] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2337 (12822) [ 686.033239][T12822] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 686.059030][T12822] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 686.105002][T12822] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 686.150297][T12822] BTRFS info (device loop6): use zstd compression, level 3 [ 686.157604][T12822] BTRFS info (device loop6): using free space tree [ 687.493268][T12822] BTRFS info (device loop6): enabling ssd optimizations [ 687.956033][ T8634] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 688.702393][T12886] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 691.246614][T12916] overlayfs: failed to clone upperpath [ 691.403328][T12890] loop6: detected capacity change from 0 to 40427 [ 691.414917][T12890] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 691.425233][T12890] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 691.484013][T12890] F2FS-fs (loop6): Found nat_bits in checkpoint [ 691.673469][T12890] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 691.705908][T12890] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 691.766749][T12930] loop4: detected capacity change from 0 to 512 [ 691.846404][T12930] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 691.892172][T12906] loop7: detected capacity change from 0 to 32768 [ 692.125346][T12930] loop8: detected capacity change from 0 to 7 [ 692.132592][T12930] Dev loop8: unable to read RDB block 7 [ 692.138342][T12930] loop8: unable to read partition table [ 692.144293][T12930] loop8: partition table beyond EOD, truncated [ 692.150775][T12930] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 692.222379][T12906] XFS (loop7): Mounting V5 Filesystem [ 692.289923][ T4935] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 692.379275][T12906] XFS (loop7): Ending clean mount [ 692.445363][T12906] XFS (loop7): Quotacheck needed: Please wait. [ 692.569560][ T8634] syz-executor: attempt to access beyond end of device [ 692.569560][ T8634] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 692.590090][T12906] XFS (loop7): Quotacheck: Done. [ 692.609508][ T4287] Bluetooth: hci2: link tx timeout [ 692.614749][ T4287] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 692.622544][ T4287] Bluetooth: hci2: link tx timeout [ 692.627786][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 692.720502][T12955] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2373'. [ 692.815057][ T26] audit: type=1804 audit(919.696:86): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2357" name="/newroot/153/file0/bus" dev="loop7" ino=9291 res=1 errno=0 [ 693.091404][T12958] loop4: detected capacity change from 0 to 512 [ 693.198487][T12958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 693.243589][ T9306] XFS (loop7): Unmounting Filesystem [ 693.410249][ T26] audit: type=1804 audit(920.238:87): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2375" name="/newroot/434/file1/bus" dev="loop4" ino=19 res=1 errno=0 [ 693.839487][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 694.263245][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 694.276843][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2384'. [ 695.163467][T12997] loop7: detected capacity change from 0 to 512 [ 695.205261][T12997] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 695.646697][T13006] loop8: detected capacity change from 0 to 7 [ 695.654374][T13006] Dev loop8: unable to read RDB block 7 [ 695.660061][T13006] loop8: unable to read partition table [ 695.666048][T13006] loop8: partition table beyond EOD, truncated [ 695.672447][T13006] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 695.757689][T13010] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 696.188879][T13015] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 697.010093][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'. [ 697.032565][T13019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2395'. [ 697.791893][ T4450] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 697.958344][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 698.361028][T13041] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 698.711818][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2406'. [ 698.730816][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2406'. [ 698.806163][T13051] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 699.815901][T13061] lo speed is unknown, defaulting to 1000 [ 701.028770][T13072] loop7: detected capacity change from 0 to 256 [ 701.048757][T13072] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 701.111216][T13075] fuse: Bad value for 'fd' [ 701.145265][T13072] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 701.199078][T13072] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 701.648101][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 701.718237][T13086] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 702.444596][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2419'. [ 702.476610][ T4287] Bluetooth: hci4: Invalid handle: 0x9c98 > 0x0eff [ 704.816864][T13128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2433'. [ 705.510364][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 705.746469][T13133] loop7: detected capacity change from 0 to 32768 [ 706.105334][T13133] XFS (loop7): Mounting V5 Filesystem [ 706.284860][T13133] XFS (loop7): Ending clean mount [ 707.406245][ T9306] XFS (loop7): Unmounting Filesystem [ 707.460160][T13182] fuse: Bad value for 'fd' [ 707.649497][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2448'. [ 707.662176][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2448'. [ 707.734772][T13192] overlayfs: failed to clone upperpath [ 708.595956][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 708.606496][T13218] device hsr_slave_0 left promiscuous mode [ 708.621800][T13218] device hsr_slave_1 left promiscuous mode [ 708.889952][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 708.909391][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2460'. [ 709.221751][T13227] loop7: detected capacity change from 0 to 8192 [ 709.270370][T13227] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 709.369042][T13227] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 709.391503][T13227] REISERFS (device loop7): using ordered data mode [ 709.459730][T13227] reiserfs: using flush barriers [ 709.481163][T13227] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 709.563958][T13227] REISERFS (device loop7): checking transaction log (loop7) [ 709.598420][T13227] REISERFS (device loop7): Using r5 hash to sort names [ 709.645491][T13227] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 710.123713][T13244] Unsupported xt match [ 710.123733][T13244] unable to load match [ 710.227550][ T26] audit: type=1326 audit(935.997:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.1.2468" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dbb59ce59 code=0x0 [ 710.790124][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2471'. [ 711.146860][T10655] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 711.444085][T10655] usb 5-1: Using ep0 maxpacket: 32 [ 711.451222][T10655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.469583][T10655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.510447][T10655] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 711.533471][T10655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.565510][T10655] usb 5-1: config 0 descriptor?? [ 711.574684][T10655] hub 5-1:0.0: USB hub found [ 711.803963][T10655] hub 5-1:0.0: 1 port detected [ 712.426295][T13276] loop6: detected capacity change from 0 to 512 [ 712.475597][T13276] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 712.543961][T13276] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 712.682624][T13276] Quota error (device loop6): write_blk: dquota write failed [ 712.704100][T13276] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 712.737223][T13276] Quota error (device loop6): write_blk: dquota write failed [ 712.757804][T13276] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 712.789868][T13276] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2476: Failed to acquire dquot type 1 [ 712.807627][ T8210] hub 5-1:0.0: activate --> -90 [ 712.816725][T13276] EXT4-fs (loop6): 1 truncate cleaned up [ 712.823065][T13276] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 713.083102][ T8210] usb 5-1-port1: cannot disable (err = -71) [ 713.093534][ T4283] usb 5-1: USB disconnect, device number 17 [ 713.153875][T10655] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 713.403679][T10655] usb 7-1: Using ep0 maxpacket: 8 [ 713.455667][T10655] usb 7-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 713.469422][T10655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.481376][T10655] usb 7-1: Product: syz [ 713.494075][T10655] usb 7-1: Manufacturer: syz [ 713.499107][T10655] usb 7-1: SerialNumber: syz [ 713.778866][T10655] usb 7-1: 1:1 : unsupported sample bitwidth 1 in 7 bytes [ 713.809444][T10655] usb 7-1: 1:1 : unsupported format bits 0xf0cc602 [ 713.816029][T10655] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 713.867095][T10655] usb 7-1: failed to enable PITCH for EP 0x1 [ 713.885544][T10655] usb 7-1: unit 2 not found! [ 713.890245][T10655] usb 7-1: unit 10 not found! [ 714.020883][T10655] usb 7-1: USB disconnect, device number 8 [ 714.361825][ T5345] udevd[5345]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.452116][ T8634] EXT4-fs (loop6): unmounting filesystem. [ 716.465381][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'. [ 716.777829][T13301] loop4: detected capacity change from 0 to 1024 [ 716.811472][T13301] EXT4-fs: Ignoring removed bh option [ 717.076255][T13301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 717.302438][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 717.862924][T13308] loop6: detected capacity change from 0 to 32768 [ 717.936918][ T26] audit: type=1800 audit(943.203:89): pid=13308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2486" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 717.964515][T13308] read_mapping_page failed! [ 717.985228][T13308] ERROR: (device loop6): txCommit: [ 717.985228][T13308] [ 718.166724][T13321] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 718.166724][T13321] [ 718.201734][T13323] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2491'. [ 718.609525][T13329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2494'. [ 719.084778][ T14] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 719.193832][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 719.210409][T13350] device veth1_macvtap left promiscuous mode [ 719.320050][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 719.329971][ T14] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 719.350086][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.369867][ T14] usb 7-1: Product: syz [ 719.375115][ T14] usb 7-1: Manufacturer: syz [ 719.398267][ T14] usb 7-1: SerialNumber: syz [ 719.425197][ T14] usb 7-1: config 0 descriptor?? [ 719.674067][ T14] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 009 [ 719.918249][ T8210] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 720.121131][ T8210] usb 5-1: Using ep0 maxpacket: 8 [ 720.130357][ T8210] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 720.150774][ T8210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.172418][ T8210] usb 5-1: Product: syz [ 720.176812][ T8210] usb 5-1: Manufacturer: syz [ 720.192344][ T8210] usb 5-1: SerialNumber: syz [ 720.225785][ T8210] usb 5-1: config 0 descriptor?? [ 720.255592][T13376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 720.278607][T13376] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 720.327513][T13376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 720.378385][T13333] i2c i2c-1: failure reading status [ 720.388628][T10655] usb 7-1: USB disconnect, device number 9 [ 720.468862][ T8210] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.737453][T13383] netlink: 'syz.0.2515': attribute type 11 has an invalid length. [ 720.745603][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2515'. [ 721.467642][ T4283] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 721.552444][ T8210] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 721.572570][ T8210] usb 5-1: USB disconnect, device number 18 [ 721.673604][ T4283] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.701128][ T4283] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 721.721632][ T4283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 721.734438][ T4283] usb 7-1: Product: syz [ 721.751563][ T4283] usb 7-1: Manufacturer: syz [ 721.761574][ T4283] usb 7-1: SerialNumber: syz [ 721.898716][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.905166][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.017739][ T4283] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 722.213594][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.221190][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.284825][T13411] loop4: detected capacity change from 0 to 64 [ 722.360882][ C1] usblp0: nonzero write bulk status received: -71 [ 722.368100][ T6826] usb 7-1: USB disconnect, device number 10 [ 722.411150][ T6826] usblp0: removed [ 722.447417][T13401] batman_adv: batadv0: Interface deactivated: dummy0 [ 722.901408][ T127] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 723.113332][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 723.120580][ T127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.137925][T13401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.142985][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.166900][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 723.193840][ T127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.213048][ T127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.232082][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.257965][T13401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.472382][ T127] usb 5-1: GET_CAPABILITIES returned 0 [ 723.478464][ T127] usbtmc 5-1:16.0: can't read capabilities [ 723.697823][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.706878][T13426] loop6: detected capacity change from 0 to 16 [ 723.708446][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.722575][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.731680][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.740777][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.755221][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.764430][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.773578][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.782724][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.791840][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.838804][T13426] erofs: (device loop6): mounted with root inode @ nid 36. [ 723.867482][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.876664][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.885851][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.894977][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.904116][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 723.913250][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 723.925697][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 723.946043][ T4283] usb 5-1: USB disconnect, device number 19 [ 723.963973][T13426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 724.111903][T13401] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.121695][T13401] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.131181][T13401] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.140451][T13401] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.616981][T13437] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.624479][T13437] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.714858][T13440] netlink: 'syz.6.2534': attribute type 12 has an invalid length. [ 724.738634][T13444] device bridge_slave_1 left promiscuous mode [ 724.749718][T13444] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.803747][T13444] device bridge_slave_0 left promiscuous mode [ 724.818699][T13444] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.958259][T13451] overlayfs: failed to clone upperpath [ 724.995514][T13440] netlink: 'syz.6.2534': attribute type 4 has an invalid length. [ 725.902478][ T4283] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 726.096650][ T4283] usb 8-1: Using ep0 maxpacket: 8 [ 726.104171][ T4283] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.159151][ T4283] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 726.168296][ T4283] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.233404][ T4283] usb 8-1: config 0 descriptor?? [ 726.487086][ T4283] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 726.548351][T13470] loop4: detected capacity change from 0 to 32768 [ 726.620307][T13470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2543 (13470) [ 726.689290][T13470] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 726.746621][T13470] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 726.756527][T13494] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2551'. [ 726.785171][T13470] BTRFS info (device loop4): setting nodatasum [ 726.815050][T13470] BTRFS info (device loop4): force zlib compression, level 3 [ 726.846205][T13470] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 726.885429][T13470] BTRFS info (device loop4): use lzo compression, level 0 [ 726.918716][T13470] BTRFS info (device loop4): turning on flush-on-commit [ 726.945172][T13470] BTRFS info (device loop4): enabling auto defrag [ 726.971284][T13470] BTRFS info (device loop4): max_inline at 4096 [ 727.011259][ T6830] usb 8-1: USB disconnect, device number 11 [ 727.017678][T13470] BTRFS info (device loop4): using free space tree [ 727.041231][T13502] overlayfs: failed to clone upperpath [ 727.229875][T13470] BTRFS info (device loop4): enabling ssd optimizations [ 727.754074][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 728.126873][T13546] loop7: detected capacity change from 0 to 512 [ 728.176461][T13546] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 728.267848][T13546] loop8: detected capacity change from 0 to 7 [ 728.275699][T13546] Dev loop8: unable to read RDB block 7 [ 728.281470][T13546] loop8: unable to read partition table [ 728.287369][T13546] loop8: partition table beyond EOD, truncated [ 728.293594][T13546] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 728.712152][ T4450] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 729.891348][T13588] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 730.035018][T13594] vivid-000: disconnect [ 730.085722][T13594] loop6: detected capacity change from 0 to 256 [ 730.178244][T13594] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 730.244026][T13593] vivid-000: reconnect [ 730.785955][ T8210] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 730.988837][ T8210] usb 7-1: Using ep0 maxpacket: 16 [ 731.000782][ T8210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.031602][ T8210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.074369][ T8210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.116871][ T8210] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 731.160553][ T8210] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.193984][ T8210] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.209234][ T8210] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.236786][ T8210] usb 7-1: Manufacturer: syz [ 731.265958][ T8210] usb 7-1: config 0 descriptor?? [ 731.747517][ T8210] rc_core: IR keymap rc-hauppauge not found [ 731.754801][ T8210] Registered IR keymap rc-empty [ 731.766048][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 731.812185][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 731.855553][ T8210] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 731.900005][ T8210] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 731.962168][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.004254][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.036142][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.068852][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.111014][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.124696][T13612] overlayfs: failed to clone upperpath [ 732.142971][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.175210][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.207303][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.260347][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.292847][ T8210] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 732.326397][ T8210] mceusb 7-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 732.342222][ T8210] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 732.386230][ T8210] usb 7-1: USB disconnect, device number 11 [ 733.156263][T13666] overlayfs: failed to clone upperpath [ 734.084139][T13687] IPVS: set_ctl: invalid protocol: 8 172.20.20.47:20004 [ 734.792224][T13685] loop4: detected capacity change from 0 to 32768 [ 734.923512][ T26] audit: type=1800 audit(959.102:90): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2605" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 735.076300][ T4372] read_mapping_page failed! [ 735.108520][ T4372] ERROR: (device loop4): txCommit: [ 735.108520][ T4372] [ 735.151515][ T4372] ERROR: (device loop4): remounting filesystem as read-only [ 735.194314][ T4372] jfs_write_inode: jfs_commit_inode failed! [ 735.254007][ T4451] read_mapping_page failed! [ 735.269513][ T4451] ERROR: (device loop4): txCommit: [ 735.269513][ T4451] [ 735.299602][ T4451] jfs_write_inode: jfs_commit_inode failed! [ 735.692159][ T4273] non-latin1 character 0x3ff found in JFS file name [ 735.733397][ T4273] mount with iocharset=utf8 to access [ 735.844367][ T4273] read_mapping_page failed! [ 735.849003][ T4273] ERROR: (device loop4): txCommit: [ 735.849003][ T4273] [ 735.931554][ T4273] ERROR: (device loop4): remounting filesystem as read-only [ 736.358688][T13714] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3404436750 (435767904000 ns) > initial count (145616958848 ns). Using initial count to start timer. [ 736.664328][T13720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2618'. [ 736.908024][T13727] loop7: detected capacity change from 0 to 1024 [ 736.942399][T13727] EXT4-fs: Ignoring removed orlov option [ 737.002157][T13700] ------------[ cut here ]------------ [ 737.008929][T13700] kernel BUG at fs/jfs/inode.c:175! [ 737.015533][T13700] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 737.021823][T13700] CPU: 0 PID: 13700 Comm: syz.4.2605 Not tainted syzkaller #0 [ 737.029321][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.030950][T13727] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 737.039401][T13700] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 737.039441][T13700] Code: e7 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 da 28 e7 fe e9 16 fe ff ff e8 20 01 96 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 737.039459][T13700] RSP: 0018:ffffc900058a7648 EFLAGS: 00010293 [ 737.039479][T13700] RAX: ffffffff82ec1ff0 RBX: ffff888054784e30 RCX: ffff888028858000 [ 737.039496][T13700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888054784e30 [ 737.039510][T13700] RBP: 0000000000000001 R08: ffffffff90af23e7 R09: 1ffffffff215e47c [ 737.039525][T13700] R10: dffffc0000000000 R11: fffffbfff215e47d R12: dffffc0000000000 [ 737.039542][T13700] R13: dffffc0000000000 R14: ffff888054784ab8 R15: ffff888054784e58 [ 737.039559][T13700] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 737.039577][T13700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.039593][T13700] CR2: 00007fb922185fc0 CR3: 000000013fec1000 CR4: 00000000003506f0 [ 737.143723][T13700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.151766][T13700] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 737.159788][T13700] Call Trace: [ 737.163188][T13700] [ 737.166155][T13700] ? jfs_write_inode+0x220/0x220 [ 737.171156][T13700] evict+0x4b6/0x8b0 [ 737.175109][T13700] ? evict_inodes+0x577/0x6e0 [ 737.179950][T13700] ? proc_nr_inodes+0x2f0/0x2f0 [ 737.185010][T13700] ? do_raw_spin_unlock+0x11d/0x230 [ 737.190317][T13700] ? do_raw_spin_unlock+0x11d/0x230 [ 737.195576][T13700] evict_inodes+0x650/0x6e0 [ 737.200223][T13700] ? clear_inode+0x150/0x150 [ 737.204861][T13700] ? dput+0x37/0x1d0 [ 737.208817][T13700] generic_shutdown_super+0x93/0x340 [ 737.214178][T13700] kill_block_super+0x7c/0xe0 [ 737.218916][T13700] deactivate_locked_super+0x93/0xf0 [ 737.224425][T13700] cleanup_mnt+0x471/0x4f0 [ 737.228965][T13700] task_work_run+0x1d0/0x260 [ 737.233681][T13700] ? task_work_cancel+0x220/0x220 [ 737.238797][T13700] ? do_exit+0x9d0/0x2570 [ 737.243274][T13700] ? kmem_cache_free+0xf7/0x2a0 [ 737.248236][T13700] do_exit+0x9d5/0x2570 [ 737.252448][T13700] ? nfs_stat_to_errno+0x170/0x170 [ 737.257703][T13700] ? put_task_struct+0x80/0x80 [ 737.262533][T13700] ? lock_chain_count+0x20/0x20 [ 737.267467][T13700] do_group_exit+0x229/0x2e0 [ 737.272118][T13700] ? lockdep_hardirqs_on+0x94/0x140 [ 737.277378][T13700] get_signal+0x1259/0x1340 [ 737.282014][T13700] arch_do_signal_or_restart+0xc4/0x1310 [ 737.287734][T13700] ? __send_signal_locked+0xb38/0xde0 [ 737.293170][T13700] ? get_sigframe_size+0x10/0x10 [ 737.298183][T13700] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 737.304240][T13700] ? do_user_addr_fault+0x3a5/0xb20 [ 737.309611][T13700] ? exit_to_user_mode_loop+0x3b/0x110 [ 737.315228][T13700] exit_to_user_mode_loop+0x70/0x110 [ 737.320578][T13700] exit_to_user_mode_prepare+0xee/0x180 [ 737.326191][T13700] irqentry_exit_to_user_mode+0x5/0x30 [ 737.331713][T13700] exc_page_fault+0x88/0x100 [ 737.336371][T13700] asm_exc_page_fault+0x22/0x30 [ 737.341277][T13700] RIP: 0033:0x0 [ 737.344788][T13700] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 737.352269][T13700] RSP: 002b:0000200000000448 EFLAGS: 00010217 [ 737.358404][T13700] RAX: 0000000000000000 RBX: 00007f5404a15fa0 RCX: 00007f540479ce59 [ 737.366730][T13700] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000002000000 [ 737.374752][T13700] RBP: 00007f5404832e6f R08: 0000000000000000 R09: 0000000000000000 [ 737.382781][T13700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 737.390801][T13700] R13: 00007f5404a16038 R14: 00007f5404a15fa0 R15: 00007ffe22627828 [ 737.398831][T13700] [ 737.401896][T13700] Modules linked in: [ 737.408514][T13700] ---[ end trace 0000000000000000 ]--- [ 737.414413][T13700] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 737.420296][T13700] Code: e7 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 da 28 e7 fe e9 16 fe ff ff e8 20 01 96 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 737.440148][T13700] RSP: 0018:ffffc900058a7648 EFLAGS: 00010293 [ 737.446394][T13700] RAX: ffffffff82ec1ff0 RBX: ffff888054784e30 RCX: ffff888028858000 [ 737.454563][T13700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888054784e30 [ 737.475185][T13700] RBP: 0000000000000001 R08: ffffffff90af23e7 R09: 1ffffffff215e47c [ 737.497719][T13700] R10: dffffc0000000000 R11: fffffbfff215e47d R12: dffffc0000000000 [ 737.505915][T13700] R13: dffffc0000000000 R14: ffff888054784ab8 R15: ffff888054784e58 [ 737.514064][T13700] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 737.523440][T13700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.530222][T13700] CR2: 0000555584b4aa38 CR3: 0000000072cce000 CR4: 00000000003506f0 [ 737.538416][T13700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.546659][T13700] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 737.558457][T13700] Kernel panic - not syncing: Fatal exception [ 737.565273][T13700] Kernel Offset: disabled [ 737.569643][T13700] Rebooting in 86400 seconds..