last executing test programs: 15m34.58014766s ago: executing program 32 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) 15m28.725678683s ago: executing program 33 (id=521): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)}], 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) socket$unix(0x1, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r2 = dup(r1) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 15m27.734030955s ago: executing program 34 (id=527): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000380)={{0x1, 0x1, 0x1, 0x3, 0x9}, 0x6, 0x7, 0x8}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@errors_remount}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_continue}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x1, 0x1534, &(0x7f0000000380)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 14m46.263068796s ago: executing program 35 (id=733): unshare(0x26020480) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 13m58.219833933s ago: executing program 36 (id=1069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="66baf80cb83c02178fef66bafc0c66b8800066ef2e660f3840465ec4c14a5de30f01cfb8bb0000000f23c00f21f83500000d000f23f8ea7432e4653f01b8009000000f23d80f21f835000000100f23f8660fc7b100500000440f20c0350e000000440f22c0c4e3d56e610098", 0x6c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m51.535407374s ago: executing program 37 (id=1004): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000000)={0x79}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000300)={"61fa9dcd7fc168b6f8af26387ad6aeb8d41216f236a96d30d8df4642c095bba1acf976b5d1130ac1c667b6b3231e1f5bedecfb5396721d52a88840e3a98133db8e43096cc6e8bb49fb9445e4472ab9907271aa4fb975a95e8a2783eb00047b747a1b36d626348c043785d051a375783fc90fd6420e1465f28be1df9d8e47204f5cff29b0535e2ed833410ce20b65f343fe892408932ac564bec67a94092a45f884dfd613a17c0bb78cf5b918e9c0025a413331a2a9b986c776731692ea29f92528de8a0f29c8d01d8d9afad0a7f14db636cb9abc3d884d366361558ee4eebbd35ce49049af69644a6fbba26ea496ca88bf9155e5675288733f75c05af544e21085e8b650aa78b32ec65b46bee2061ef3a92baa4f60fdcc5f9684b5d1178e104122ff29f5b8b0b9bd74b5fadf092d501faf5440a1252619c78c4c5779bfa6881508f4bd9651e726dc1776207b43d2b35b65e17515b5f48329fc00fcf0de6c1d248cae40be9a9b57f32d5a0accef27f5f71df6f84852a0601ecc881d17f4e085f1f02981ae019cc4121c8d7e0a2bc9ae082a690489bebf212b70b72fa04faaefd254b2e0c2c3be154928669c748fe4c9056d0306856ff93065b23209fa799f9743a5c5fb682e4c106bd3addd3d3dba06c19854df2db3d2b0fcc648d00f51360e4346a3527069cdf8867659cad327e4c1d6bd0d85a297dfe2bc6da4894d8eedf479fc97b9f2fe92f42611b2b3e83d4470b1bc890c47d058d0ce309e672a68e7487fd630004267a9a20dc632d826e550fe9bf48a5cec3325cab49247cc46bb6d5ec4cef8ea36771e54351f6cab9699e72925f7a2a09c09ce88283151d741a65f00145602aef4d61daa7bd9223977c68d24f136a2a1776807cb30d2739ccb61aac9a1f093abc95b5d612685823c4036133b72ddeb7c18211eef6d9b5c70278b5ea53d4b34d6cb7179091dc0b59c77ca083a6243fe0199386c1c9f71ac529c780b584421a3d92db9fcfe68ea8283ac6ff2df61537b070a7d943f9c4cb34a6c845e0963c1c105338be1aae43ed22bdc7544790ccd6bace59b2e32b64cf1edd4fd6ddc45b69420261ea2966eb126bc720d904736ad2d3963ac855a6b9a27459d12376a989046993510a0765d692b6f0f1bb59d7e4a71ed3ecab5e0056f1cc1bd14a1235b8085d30c559770397034b671dc85f61e5624dd5188009194aadfc6a0db7cf7af0eadf24a15bdfc4e84780fba47c452a94000520ff2a37d40008ff45005d7ce47f16098592722c53fe6cd52a5f9b2ca78f63034d1f07424ee72dcfcfbe7be2943679a82ceff47fb06e3bcd8b4f93fba0b1fc1498bbff5a2051dbca67ae4e72cc61184bd9b348f5f49fa7c7841c46d02753b19eb2cce191acbf0089a788cf5e3cf8ad42909a641a75b2acbbd7536336633ccc54ac3f2ad0d1a9b6d737a866517cd"}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000b00)={"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"}) 12m48.831173578s ago: executing program 38 (id=1478): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xf, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") 12m45.499771593s ago: executing program 39 (id=1493): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0xc, &(0x7f0000000300)={0x40, 0x30, 0x5, {0x5, 0x22, "ca52ab"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 9m41.05214185s ago: executing program 40 (id=2045): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000380)={0x9, 0x8, 0x1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d036be269ba, 0x4000010, 0xffffffffffffffff, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x602582) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000007c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x1, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100009423000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xe3, @empty, 0x1}, 0x1c) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 9m15.425597948s ago: executing program 41 (id=2137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000005500218f2abd7000ffffffff07000000", @ANYRES32, @ANYBLOB=' \x00'], 0x38}, 0x1, 0x0, 0x0, 0x60042884}, 0x24000480) 8m20.383383853s ago: executing program 0 (id=2292): unshare(0x2040600) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x2, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0xf2, 0x2, 0x0, 0x40}) 8m19.859128389s ago: executing program 0 (id=2294): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 8m18.17171392s ago: executing program 0 (id=2295): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8m17.59703783s ago: executing program 0 (id=2298): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 8m17.296183827s ago: executing program 0 (id=2301): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, 0x0, &(0x7f0000000300)=r2}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m17.264482748s ago: executing program 1 (id=2302): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000500)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 8m16.883741487s ago: executing program 0 (id=2304): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d00cf32cac80000040300000108000000e707800c00018006000600800a00000800028004"], 0x76}, 0x1, 0x0, 0x0, 0x105}, 0x0) 8m16.883356127s ago: executing program 1 (id=2305): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 8m14.600484829s ago: executing program 1 (id=2310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500"], 0x398}}, 0x0) 8m14.059945597s ago: executing program 1 (id=2312): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x7cb7562f2d67) 8m13.670582233s ago: executing program 1 (id=2313): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x10}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x100) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x30, 0x1, 0x0, 0x0, 0x10001, 'syz1\x00', 0x0}) 8m12.497678582s ago: executing program 1 (id=2315): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x101}, 0x8) io_setup(0xf, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{}, &(0x7f0000001100), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 8m1.650273387s ago: executing program 42 (id=2304): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d00cf32cac80000040300000108000000e707800c00018006000600800a00000800028004"], 0x76}, 0x1, 0x0, 0x0, 0x105}, 0x0) 7m56.646440246s ago: executing program 43 (id=2315): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x101}, 0x8) io_setup(0xf, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{}, &(0x7f0000001100), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 6m57.953166549s ago: executing program 9 (id=2473): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 6m57.163057449s ago: executing program 9 (id=2478): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_usb_disconnect(r0) r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 6m50.687701266s ago: executing program 9 (id=2490): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1000}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x10000000, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e26, 0xfff, @remote}, 0x1c, 0x0, 0x0, 0x0, 0x2e8}}], 0x2, 0x0) 6m49.988988556s ago: executing program 9 (id=2493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001008000100010000005a458f9804eb66e3cf2e94b7aa2e6f4db2f69d3bb31b5164f5be4110bac25a5b5f3d4ed554e7563ae09d2422bbda520a"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a04", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 6m49.051863158s ago: executing program 9 (id=2497): setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 6m48.315951197s ago: executing program 9 (id=2499): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 6m41.93358179s ago: executing program 7 (id=2508): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x51}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 6m40.718862405s ago: executing program 7 (id=2512): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 6m40.234543347s ago: executing program 7 (id=2514): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) 6m39.796604979s ago: executing program 7 (id=2515): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0xa000, '\x00', 0x5, 0x81, 0x8c, 0x4, {0x7, 0x80000002}, {0x4000000000006, 0x2000006}, {0x0, 0xd}, {0x0, 0xa00}, 0x200, 0xa, 0xfff00002, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2b, 0x2, 0x80, 0xce5, 0x3ff, 0x7, 0xa, 0x0, 0x0, 0x8, 0x40}}, 0x50) 6m39.315732847s ago: executing program 7 (id=2518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 6m38.814290175s ago: executing program 7 (id=2519): r0 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x24f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r0, 0x47b8, 0x3bf6, 0x2, 0x0, 0x0) 6m32.548072028s ago: executing program 44 (id=2499): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 6m23.117937618s ago: executing program 45 (id=2519): r0 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x24f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r0, 0x47b8, 0x3bf6, 0x2, 0x0, 0x0) 3m17.695660036s ago: executing program 8 (id=3151): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 3m15.530887273s ago: executing program 8 (id=3160): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x620}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m13.771313181s ago: executing program 8 (id=3167): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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") syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000400)='./file0/file0\x00', 0x38c880, 0x0, 0xff, 0x0, &(0x7f0000006380)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffe0, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "ae3d8d52aa057deb758f397cf999bde9"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044004}, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0a0000794740c4b5d030d10005200000020000002c66f0ca8f92208437af5e3f88c100f7de2e65d867065cca88cec8b8c7341a297d15dfdc3345c5d2844a24a02c7672b5075a20927126743f5eef1d97da0800e34bf34fc237f5e60c0f8953e9941473cc1794d5b99f6a8b1f0a6a75b94998cbf6705b4393510a5d74813d5e8152d744340d2c0420e7d3e42bc52db90c3a150484fedd501e9cd65a324667b9279b09d2b8ed807828f0f3e77dc7973aaefb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) iopl(0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) close(r2) 3m8.572456619s ago: executing program 8 (id=3173): socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x240, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) 3m4.717821502s ago: executing program 8 (id=3180): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) truncate(0x0, 0x81) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) creat(&(0x7f0000000000)='./file2\x00', 0x149) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 3m1.479540031s ago: executing program 8 (id=3187): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x101, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xdffd, 0x10800, 0x0, 0x2e9}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r3, 0x5501) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000540)={{0x100, 0x8, 0x5, 0x7}, 'syz0\x00', 0x41}) 2m45.904523195s ago: executing program 46 (id=3187): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x101, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xdffd, 0x10800, 0x0, 0x2e9}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r3, 0x5501) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000540)={{0x100, 0x8, 0x5, 0x7}, 'syz0\x00', 0x41}) 10.731758111s ago: executing program 6 (id=3572): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x609}, 0x1}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) 9.224544228s ago: executing program 6 (id=3576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000008004"]) 8.675738719s ago: executing program 6 (id=3580): r0 = io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x109202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) close_range(r0, 0xffffffffffffffff, 0x0) 7.956635448s ago: executing program 6 (id=3584): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x4, 0x0, 0x0, @irqchip={0xcdd, 0x1}}]}) 7.487783105s ago: executing program 4 (id=3586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x2000, 0x0, 0xad, 0x628, 0x0, [{0x8, 0x9, 0x6, '\x00', 0x9}, {0x6, 0x3, 0x3, '\x00', 0xd}, {0x3, 0x48, 0x6, '\x00', 0x4}, {0x7, 0x1, 0x3, '\x00', 0x9f}, {0x5, 0xd, 0x80, '\x00', 0x40}, {0x2, 0x8, 0x9, '\x00', 0x3}, {0xa, 0x40, 0x6, '\x00', 0x5}, {0x8, 0x7, 0x7f, '\x00', 0x4}, {0x4, 0xc, 0xf9, '\x00', 0x1}, {0x5, 0x3, 0x9, '\x00', 0x5e}, {0xf8, 0x9c, 0x81, '\x00', 0x7}, {0x8, 0x1, 0x2, '\x00', 0x7}, {0x9, 0x1, 0x96, '\x00', 0x2}, {0x9, 0x9, 0x1, '\x00', 0x5}, {0x5, 0x3, 0xa, '\x00', 0xf9}, {0x8, 0xfb, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x5, '\x00', 0xd4}, {0x1, 0xf, 0x9, '\x00', 0x5}, {0x4, 0x0, 0x4, '\x00', 0x1}, {0x80, 0x3, 0x4, '\x00', 0x4}, {0xfa, 0xfa, 0x1, '\x00', 0x5}, {0x0, 0x2, 0x0, '\x00', 0xf7}, {0xcd, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x9d, 0xf8, '\x00', 0xd1}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000e6f25822f200000070000040000f00000600000000000000"]) 7.41172729s ago: executing program 2 (id=3587): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x10000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[], 0xa8}}, 0x10000000) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) sendmmsg(r2, 0x0, 0x0, 0x0) 7.320005756s ago: executing program 3 (id=3588): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r5, 0x300000b, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)={0x1, 0x0, [{0xd, 0x2, 0x9, 0x2}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x6, 0xc, 0x1, 0x2, 0x3}]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') 7.26784414s ago: executing program 6 (id=3589): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x700, 0x0, 0x0}, 0x20) 7.045305087s ago: executing program 4 (id=3591): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.960163326s ago: executing program 6 (id=3592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f", 0xc) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r7, @ANYRES64=r6, @ANYBLOB='\x00'/21], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x2024, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x5}, 0x1c) 6.799348917s ago: executing program 5 (id=3593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.599188766s ago: executing program 4 (id=3594): io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x109202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) 6.26036703s ago: executing program 2 (id=3595): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.852770292s ago: executing program 5 (id=3596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000093000040"]) 5.627882937s ago: executing program 2 (id=3597): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r0 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x2, 0x3) 5.555762658s ago: executing program 4 (id=3598): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200630138000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r4 = epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="080000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ae9d8cc000000000000020"], 0x5000) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x5, @empty, 0xfffffffe}}}, 0x104) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffd, 0x6, 0xfc, @buffer={0x0, 0xf5ff, 0x0}, &(0x7f0000002340)="d8498ebf158f", 0x0, 0xffffffff, 0x0, 0x3, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "d6780d7d713838e36a05cae48e1653e35b295e611fbae6b32294f37e6bfeabbbed09685bfa3d8246c599759c63d7e7799675ae3bdb752479f8435f0b501d9733", 0x1d}, 0x48, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0x40000000}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 5.371825677s ago: executing program 5 (id=3599): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) 5.304348916s ago: executing program 2 (id=3600): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000200)={{r1}, "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"}) 5.0393105s ago: executing program 3 (id=3601): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x4, 0x0, 0x0, @irqchip={0xcdd, 0x1}}]}) 4.939850931s ago: executing program 5 (id=3602): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000240)=0x8, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4000810) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x805, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0xeb, 0x2, 0x0, 0x101, 0x6, 0x1], 0xeeee8000, 0x141200}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x2000, 0x0, 0xad, 0x628, 0x0, [{0x8, 0x9, 0x6, '\x00', 0x9}, {0x6, 0x3, 0x3, '\x00', 0xd}, {0x3, 0x48, 0x6, '\x00', 0x4}, {0x7, 0x1, 0x3, '\x00', 0x9f}, {0x5, 0xd, 0x80, '\x00', 0x40}, {0x2, 0x8, 0x9, '\x00', 0x3}, {0xa, 0x40, 0x6, '\x00', 0x5}, {0x8, 0x7, 0x7f, '\x00', 0x4}, {0x4, 0xc, 0xf9, '\x00', 0x1}, {0x5, 0x3, 0x9, '\x00', 0x5e}, {0xf8, 0x9c, 0x81, '\x00', 0x7}, {0x8, 0x1, 0x2, '\x00', 0x7}, {0x9, 0x1, 0x96, '\x00', 0x2}, {0x9, 0x9, 0x1, '\x00', 0x5}, {0x5, 0x3, 0xa, '\x00', 0xf9}, {0x8, 0xfb, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x5, '\x00', 0xd4}, {0x1, 0xf, 0x9, '\x00', 0x5}, {0x4, 0x0, 0x4, '\x00', 0x1}, {0x80, 0x3, 0x4, '\x00', 0x4}, {0xfa, 0xfa, 0x1, '\x00', 0x5}, {0x0, 0x2, 0x0, '\x00', 0xf7}, {0xcd, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x9d, 0xf8, '\x00', 0xd1}]}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)=ANY=[]) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.599537494s ago: executing program 3 (id=3603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x2, [0x3, 0x8]}, 0xc) 3.970570473s ago: executing program 3 (id=3604): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x21000) 3.618187217s ago: executing program 5 (id=3605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000008004"]) 3.572012849s ago: executing program 2 (id=3606): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.534157536s ago: executing program 4 (id=3607): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), 0x0, 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f00000003c0)=ANY=[], 0x51, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x81) 2.791157063s ago: executing program 3 (id=3608): io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x109202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) 2.640378375s ago: executing program 2 (id=3609): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}}) 591.804858ms ago: executing program 4 (id=3610): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r0 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x2, 0x3) 454.671334ms ago: executing program 5 (id=3611): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000088c0)="761d830cb682c898eff0bd8cf89f15f4a12940213fdafa0f39ad239dbbe11851c2c7cd20f42c8d001b2cb0a97c0138f8bfeb1a5c117e02b3fbc1cba97a7d02e2d84a1018dab174d3ef91a5d9dc46dabb244d9115c89eff75d2da2e2f7578a4920d9dbe0cbd7c553e52bd778fefcdd2ee42a7e04889538a980f8f4293e8c1009a536db29275381f3b27aad6eb446e127671226111b5d8ef39caa7d016b1602e34eac24bc60a483c8c1a76f9489c9f6ebe2205f966871ee207c097c8d340683b187270a7422ee117f5e75dd70da830ef93c28fd4aa1f7a36d9a017557fc3463a728fd27a36d7923c975777245ac7a9df6e965cbd0c46629372a7631864a9da8cab08301b2a30e8deeac591fa9ba0389e1817a326d5842e1978dc1463f78badbb207551e2e4cdcfa668b3b7bbc9a8b209c673c9b20625cb996b87f313d59271e92df97b9b6b0a80da04d7b70fc8e3669b7a94610f75a69956e37a61342c7bc0bed83b1b961a4bbd8ac0e9ee959e275deff57b196abf2c103088561312a16ce7c5df67777a2ad9b2ecbb1d97af5d0988998e0a444c08f96b80a1ec27c1ea529be76a5836ae15d07b27893e357b1a170e025533f79946407d0fd5ef0e7af0ef5190a459d05b15d749805ac0461f65d6eaba156f9785b993b0ced640bec4fa11cebf4bb5488ce85304b23041373c77357ed0b637264dd251c081d2c575e46b4fd71af12d42335a4eac44222e5ba245e05dca8a16068f6330bd553850dd8a1af9ba69b4541959a25ea91b4662a596f6a4f8560c6aa7173897e0c6ada50d423bb8765b8ba19eb9936fb92edb685bbfe694f1648d88f1f9ef7d8ec7cecf4d9c5db05c9a1298176dc6f76f3145d438ee2dcb91b460027b3cd5f446ccc36e0d8b507f40afb1bc483a5febb9114bb406bd8fa2a5e084ca81d38ba9db65e87de94129db0c6b72d81a5c26ba6d3f703292009e302d560cb7e94c76b4cff0fa646d64f093bca010f2f10357c396bb6192669e6abec240d34b3a18e46961e290e902da0726d6850d832129fbf2b2ebf58116a909692344316d175a42c0433e7cd7124deed863b2bb7882ec571b8d4d9c48bfbd800abd963cf627a8bb7831b304baf62fe2ae1c753cfbbd48bd4548b23d9628eb334be84e2c4328c4791c9582bc5eb825593ddf6ae6dfe4deefcad4781d25ca680ae597e4f2e75eabfff5022bd53e80c069c1219d6dbea31c2ad85c788d5fcae83d964e74b2b5beedf2f411e70e5a37307ada87b129b1e45f09a59bae807b2ad634028906237a6f4f602b8525983ec8db4f018cd3d90066eddd0b83e03d9f8cb12590768700d3e89003c01051bad266be7c5eef0691274e0398333e90dae8f90b8b4d82b11b2a5db02f68f31f1274a4070b5183a1a74ac564f196561dff289860e490bf649051cf2a22677253d81c4300fca4518e9c681c2d2abde8cc7db1532c65fcdab8e6b212c92dd42a623caac3afadd29b61ef0c513c8004f98b744ad95b05cd6832e5d38177dc6e131ef2fb5b22fd010b330474d010177dcfc5c4f39b2f5ad80d95a20c2cb62fb04ca63d930935b7e1ff8912341bb8f9ac3a255a31e0c6a1c68bacb3734d074de72d94c96be9e4e2f80002c8cb0f604c9b10574ab4f12ed47231941cd1c91cf7e96b49548ebe668faa5e14a8c13302be1959618df4feaf704065195bcbf9566b6bd351af8b3bea61812a881f1841ae8873f15625f2c0948a0e134f080d6424f8df0002ffe8744a8accfd346e6464bc9be9793fd3183234aab031076c291e500ecdfc3e9be869c23bf0fb323dabaef6e490a6e3866a1de1312afa5d4686b492e1f9aee230ea1643c0219debaad7b66a8cc3908bf5a3492d6d70126eac292536a6e2e789747725e181dc5276b506fc7c698e59089f09a5648b21463ca11bce12d05abc4b9dd6408a07bd8bc90e25f984d2bdfee8effd51894075783c803addd7312a603fe05060c374bd3cc8a871bc0b4c959a6a2af1571d30ca462c46f08f887de11eccb603d94b6bb4dd177301afb9e7cb62896e1ef7c84c278f50fc066c33f8c1452fa00eb5677091ddd2d8fee7232ec7e461b079737980b0f5dc3edd0533a3995a00b05d223a6e12c03c01ed6d6dc9938d817e29bfa84d13d220aeddb3c4e7200e127e9cf4813537830b08d217fc5c91ad3add289a8f52b278fc05263bb1b6f5e161b5ec299a4020308c85958a4dc6208989ca2af5a29143d3b8150887e6d27fe2a20099ab547ef012bab8728e16cdfc00e7b20dd709714141e3c784301fe3dce23225e30aa208ddb0e3a4bd48f8d0b8273afdf003a687e276717b20ee2659fc1f3a93b3acff5bdbd76748d2765ddc2bb6d48abaac6590ddef219b29e998795fb48d668614551f3cfe4aa11600a6064ca6e2bf5233332378497f249fb8df6a3472a01c7853aeaa4bb0a28518bf66e033e79f6081d5562dfb3e91462605340b5b5caecc9a5e567181b3bea74e3e51cfb3f1a5b4a28bf7aca0a6dc0eca0a655735dde2103c8f4e53ab287be2e2e072de41829c077c4b65c29a51dfd60128836830e35dc51912fb107d3b971447d5c324a84b07537581b4a9536f399ae9b9822cc72388713e74806e8e77411d79c422cf4cbeb6bb32cd5605b0f87ee4d7c29de4c93a9bd01ccf13fa6d737e8e767b15af8abf689c43c43ccc033af76959502af27e9b58241433c3c824cd2148328b7beae98814dedce0196f6e4984916e081c3fc3b42b4baf9b2e41e353a42898a65227d36854970cea9f766578a0657028d101c39843b900dc3af1af4157a41d238a9c681c629d6d019324238831dc62eff0904072c7f0c0444a136ac3e602023152caa5c6879f23b88f20b7adf9ae37d7bc33ed80a7a88eedf6ab8ab719debd84f231babe4c000705db75e3fc25814f16d833237022aabce3bbf6a06d29ddbd25574a4d9194d7389393ac065979751a7a795c7fa8fc6476afefc66990702707578216ba49a1b230e7c19441af251ed03dac43de5e3c52b0b4038d89bb0051fcd31f2e920318c36aab22c5726979a5ca27310a90eb7555c6de045cfd8fc08cf4a6174b7c0865821ab6c5079bdde229cf185dfacd8c89ae89315f0a812802f62084d5193faa673823b80c6f83c61b2958b78a2f09058e37a1aef37c27491d5dae69f88a29fd9633bca6631d6720bd7893437c86bca3af15496c5d6efb8ad10353c0cb1b4715fd819c26d427028b5f10eb9aabb17e332d0db378d7cb1f024f0fafdede09d9cf40f9dbc1106ef509dcb9969dee26a45adbc453b6b0272685813d41b5f60c1ac3d1a3801211b73431b34fe3f231b3a6fb5d2f368f04145fc401c8b36c492c4e255d9eef6e5c906d469e3b326cafb7f49c59de427f3b6dbcbc9108fe421cedc57a66b99d15769dde6891027a7f3c4f12f0c831d666bc9f000a7dc07b8d4cd955983fead67a8757cc3729a94577d3de6e0479a4f69b24547eddfa5ceef2e7aab98348bc7ce0370f02000ddab8bd699f53db7a830837b279e3025591a46d6714ef72a2d2fbdd7bf6b71eb276aed95b77258122aa67806f88ea8969ef030e2e660fd1818cf663dccbb87f1c3f0b70008ed07261ac1dcb68b87ba7b3f8b63ec27e1ad2ca3af753ef3c43bf67bf3880dfa1a11c8940d616b2bfb04daef9dd2039564306f749c5e7dad3b05761e42c3246367fe2b392e7ca267b7a1b33b58135bcd67a2d9a81e7c5afbcc25873399f709f37adf5ceeb8be519e64887245cbf249e6976409c60e31ef41e69e13ee01ed7763f5ee825229c590c170b08464f28d2c989e1a6c701c46912c3f97a7f973bf4eacc8151fcb59ac641f0e83c5e3101c88e8d2710b7aa8cb72f6503a3fccb999a36c609f6d6f8707f6dc0ca025209aed8ecfba36b9ee52e2afc25e35da71fb9d577f80064c768b0003a788577aba71dc524d7808b033d602d870b66cdb339086109fbf2987f0bbe556d5ef4bb753dc4e1893f3937aa8465293beb7e96d00caf416dcc84a80a6ce8ebd01785611c1628310b099f375045e73a341ae06ec5423d59a7f5f9f21c40b52356d65e815ab5a4f74d8d4b7c6350b8bcf12907da2b1f502ce73b0aa73b4efabe91cebe116822177d797806edefaaac9c540ff02440baf9ae4b42c45104f01794461ba3ea1e7f9514e491032f8ba535ad104148be572a41598570843fd6fe90c97e7187fb433303852138f2dff0eb24f756ae378678919eb180822981eef929c724ec2295abfb0eb588fc406faf740ee71d4b285c05cd89ea27feeb6c9d744beacafd2f601d23ad06afcd903f4e9ee3375806afaf21f01ef0a493dcf92ff9d8858105e86029a12cef0bc37f3b54fcebf5646f5f02952efb2d80dd1bb3bab3bc18a31eedd327757a17565d3e267a054a63e1883638d7cbef83a8308ac2e2b7c657c21fa4495ec9506bc0b6c67b7f12a392ee0e557ac06625a5851effac29801c21746dd0bbd2e25d13ab020ed4e133a1eafbd58d26d1a1a3f71f1a958f2ec5c15f5c055c9f1d1ddb33048e48bb9acad7f167f67305ce4bb1dc4a6373b7c1726f5b298a5c7c74d960fe30ff9e1fc0bdc3408640cafb34e2a3a2bcce2ec0ca7bd13edd9f365ce338b63c1bf6c3c6e1d2171ee58dce6075cad284f5e7e466914bcd1afe28546fab2d9f537309a5b36e62de5dadc378aef8591797d3311f8cf5e965242840430ee123b9ac7dcca493a4bcb108eb85a9e52cc33b62b515b95634c57b58b52f72b10b4306e7282349b999e9deb93d867b95f2e14bf20f56c1068e2b0684dc67ffe1dff590145b28bb8dff42e44e6228ec5783662a5a67b34f46863e6711f0e3cacbb88447aee4be56aa318eaa570df303a1c88223cbdf2faa1840ca1e72018136aa3cf9d2ae00be52e5d51600f57a3c7421e15b778229fe8165fc50ed2dc7c577ceba7342ff6996dfd7087a2f61843064889bc505473a3aa7d96dbb7c550f4552331e4b601c1bc3bc1e6a7717264dcec37617dde6017edf48c8b6f9675d3a8978ecdf0bdeb716f9166f0bc7f9de5b47e7ab99ed8624c3f8487bb1fe2b5cce35bfbce2fcde38d0c5100f7819e0bcd360c7bb9f80d4392fa74d938ccd83d6f40d1a55e03a79c45ff68468ca42ac99a4de8c777f952d2ee6138fe62ee4d4a8b76ce799b8a0e7fac09f9610a472635f8b8b1721d1fee535a83722eb87d8c866544b8916f8af56361de6eea4427233cc804fe55ff9b3b2c88bff72115deda64d75fbc72b1742997a291d55251e8b2efffa37ba0e762c7d7bde8a81359d9c6dc2141f86d3eb31c63739f0790178a0e3dc3c1d403834df18c81e68430957249ca3cf55ec376af9d8b049490e890d0fa5782a9d6b23d4c1428037b053eae32bd6732ba96de194f210eb8fc79be3928deace54ad8e473791e7281a89b0d8e27b232269b8c35c85f9ecb72362170839753fb29d9930f39e869e9b07ff85da8a4a57be5b09bcaaf355bcf030f26d2f66a4ec6864c26e901fb3bf6fab435c16b4985cabc2f84d37a51ee8a1378cc7fd480c41826c2f1bdff2cf37ba2bdf2c8cf909968b9fce9af8448aaa63014dcac7a739e1b3ebfe30b6d934120c4bd63d2269becbe9fcf201f1a3009bdaecd4b90cfb3ba7e4d4f190ba0c6235a8d0ea23e451250f0a66fa189a030641d8a49a18807881ebcfeb0176093a158b2deb8837003fe0b1d4bf06e8f9bd7c8efd8775137497027ba997d2f7b4b98ec5b7e0f4614f532b81a6f96048a81da770423e8a952901e32051b0a0cb4e3c0c743ae9112d973480bab294cb7b49bb7a9051bffa60b85311dda853ce405f228a4126f1cb3c84c3b5ca4ef7efcc4e3effa3ba5ec31df051a270a48c1e80d387da573bcf78ba2428cd0126f2dcaf4d9bfd6ad568c2b368ddae77b8f2aaa4e6252c43ac997f0878fc746910b72becfedcd108087f3beea5a5dac569ec678a3a7819c4da0b4fe057952a0fd5c1065411f152f97103d03f0764165870c8886a8186d02f82ee7cbbe8f0cfe45e51bc8b495af35cf54867fbc856b4849a967d1bea98e93cea10c785a05940e83f1b75176fb9914ca914d92c7a7273ac3224a466e1ad6f451afdf98670623e50f1a45efe0ef75208eed5351a80da812a7cdeb46ebed49a224fcdc0bf32c66ea635703673b6800244ad2a6312a538185cf6cfd504b029d442aeba0203b8dcefb5acfd3f05ab59fa3b8a6f00544993682df4ec6213a010817fda6ab2ae011b28169c4ef9ff14c598c5e7026b5c4db1139c55d38024e7de8326855f189a96e400d1e070b60629e011e3670eb08841ed3c2606a9e81f8a847b6d0f08051679effd982173a8127e903509f4cc797f46fb819373982f9673c4b0c1a4b460e6f4a0c1c21a6815c00f9f6e72670fb57a03f53251518e6d9c7e1991ae88d574f3f5d2ed40246930766075434c3e37db8e2cd93af4d43e4b2bf0a4cb9d977f51fc96383d5da825259509e2484a31efb70682ac092324e335180a702cfad9d9f81a6ca5ea8c9176f74f71c51673c6e9e64037b4b13e9236e740adcc0c302f3661635185e9ec1cfdb7cec12db7d1c923cd779bba58994c7ff4f3be3a1eb21c7fd150a774150f2754340b304781c4be6500dbafe53c79c63c1a473c213ad2aff8300391cd6cc530214fc9df616fd4e67fc0d1eea8c2a824aeb11628b42138d4324b354cf7b88b1df675375e8a2735ccd325f5671b5fa22440f37b9958e770d96d869da814fda78550477d32712f862a6668c8c4a2177ab4c50dfce53ce31a0be6172e77785e43097d7a6b7850219a2ec3c31999cf98572c8bf36bef79391d588d17322357e810b5da925c1c439d3ca167bf5960ad91ad25318fa61bda11cb38adaa9ff651916874e16e7f72fecd224341d4c171202a85220f91e1e75a0100838e6f869a789df159074d56fa3e18b5450963dbd5c5321c10c063997b3172d2cfc3aa3edada0b493eab7d02ea10420c87519a522a299f91eddcc3f2e0ca6ad0917e2533a11d8c71eafdafd1c83f65e8fc120ad53ba92a6395052600f3b3a31e8fe88278aedd5d6fa664b35d6f23f0aba7d58694c9b524ac7780091648df0a029f7e8127108f31fbf11d400841321ece7344cad44ebbb0537b06742f5bb698b4e64201feadc473f7eb6bcb37dcf71f4a29bc6f591bb39e64ecf19c05eff3bd31a233d93d089667b9cad49d71fb25822eead10d5e2ea4eb5ca8e4710621cd0541f1014eb3fa226fac163af19f468a4c78daee28ae9429a3e3f6e17dec9804ad55f7b734ca935e604eee5385f1572ba73f375e1c9c5fd46c712fa4333efbc5dcb0349605f9141322da4136566c7bc47ba4c186c92cebe4fd2f2c74c38873170b1ce6806c06f815b63008e42b34b7f63d31ba77bf5de8535c1ea8d13e5d9dd46f951e5e765c5a259547604cd4e72eaa856d415c601e330677aaee9a5871978dd50c2b79252e09dec44c01ab8b3a5ec9a3c867a05a310c4d09f8380b657c297c04cec6a3475ba1bb81e075cbd05390cb8a7f33a614efa66f6d98a69c81f4ecfd2ff47d74f1bb50d33ebc5b6229fa8f17288904c828415968398cf9bd5037cae2965c9b716eb5732c4c71acf061a47850542fa859ca1255129c24712437d7db2aa5585ff21c9f26f36cac60704df53cba9edb19bbd1ce992cb58cdae1be756b9049ffcd4f913ff348e5214cc201508198027d18f3f066a7a5c0470cd0dd72468d8fb4526c26c07e7c4c72119bf3358740394e5dba42dd27229ad93f99c6138fb9f6c1bf29fe5ad58545b526f528389cb689b59e813a4b218c41a607c3e64f18a07d5430ec9a3af83e50b5566c9d4382da9a5d5ec6cb5058a870b228c49d6c05c99935478dd3fc4f98bff4f5e8dc2dbb8f6401e0d1798204cc1e16e69bccc30734e91968b61ec2cd04df14fd59f9f018dda9d7c90409ba707580b53c647971da9919c80886ef39d18a642aa939c69269e9b009a06545bd702380c877211fbd5a11043a72aa5777d7c90a878f3d5b13cffb74cf15cf4b3852c558589efd753ce8f9ec410ef3f8da6501e57f617853b99aeebf33d1daaec0e4dfa48d06bec8221d86daf37e66a7ea881651d782fe7024fc93066aa27a1bbae9215f42548e878c3a349631069284d53b8771892cc58b1d3e37f82e1fdcc55d2f42f7745a5a3424fd7866be4ca37b4e5f446782dc5e30621494453fdbfa19861ef66e7d2919f5105b8df680decbcdc3650ed9789754f9556243fa53ad07eabc4fabb667c634457a012b248260572ed4a89a137e63bb83fa6e8ca22b76c8d451c844afceaf55ca917eeeead551ef32129935c18161c89fd83a7d62816962b7fb86db839c350fb5f00e6eb777ade8c0e678f204f5934875b088e59037e08699fee74462b02410314811ffeff244068b9c0c9181b3bbc7f705541183f109373551429e8ddf3db2b01e9c304a5aa43f9021ec3150507e6762407372b5834d4979fcfd253ac3fbb9d54c4ea1eb665cbf1942ad55cec0b2a183c447d910afecd7611e02f1144b6beb3bf6ae8837c67db01bb9a6146344375baab5bcfff67fb23c0a22f41f8b7453b9d076f0a44897ac01ba98026a687f181d4f7c5195db543b20a8f4e600e719125d67890e5904ba7dab61c0419460dd5def6ce2308be0c3049aa24f60e9401b42490b9c9aebe1d2171102cd9019f9053a4c994d6b184b499b1c3f8bba0ae7ea46ff34a4a1d4b3a90e3c5e079445cf7984123d717f72709849266bc5b39608eb915f0b7ce572fff8eefe486702c6595f091e014a26bad6b9f64dc1fb118c47be183438d29e6dd98b77f97006dca7c8371903441a074d3aeac0e9fd00446cf9c7729e25bc5277ac272da5c050c607adc90057cda447c3710036a8f76b0706ae6cbd28de6cbd331a1ea2e5b1c61fe77176c4bea5d5e46dbb08a12c7100984aa26a02ff7ec83c96f375e65927933846f70e72c4decc0af60eeb11c7bca3ba62adbd0d9fa989b1e7c6e2e7c0f6e47c578914de9d7ba6c107882396420990023809ba3791136a5a97492c677fe90194c86c1c7972ac1f30df2bbccd319721c4fe96231e2f5df4da62992a1469e0a59a94827f3e3f5497e79c2860b0f9f8aeb24bac96adca8c3f9ca4f5d0ef77fa135fc6156ba6145a7a08879d75c0c35011acb19408b5d4af7f38109028a8285f5a31d30da886b70d734f01ef43ee2ff5f7e25f43fe47cff35388bec4e7d381d075f249628d10e74eada1e2af8caec7a3a89528b7d1da329fdfa337b5b507c14503fd89b96a33b52d327d41242456d836f464adc7ae2874dc41052fc86048314d5d31e89b20d16440f13af11a40be5f5524b8730af2c847102c6ef65d6baa2a0a6af98823605e9164f162c196b3b948def8d590a3f4ff19942a2ef8cd06d4b2fbafa4667c4116e146cf6a5116fb6971a2de211f3dc0d64ae99cc37877d7bd87c99a8c2d7dae406dacae89b6b6d44abd5dc6a581ad94dda6c962f0eb56a50c12b93a4312280a8519acbcca7d67fa6b92c75bfda0e257b5b1b0f566ea5ab487c390e02aa5b6cf544f211b98835a2b44e8b41a6418be54a7bb5cae4702aafe7f4d36893cb1d8c810844073c6f8560e0e3e46830cfb34f3ed1c633420a0da9d8bf62ea56fee88c1f0db7cc5997af1ab02c8bc568f4447d19f6c87cca057cd9c1dc6de139b2de4e0b26d8ee38e4019884a453292ca2ab00dbef7219269e61947e57faf1b2c653c0a4995ec58efdff79314a1961170a7f4e0883dfd21257de039986a0ffee0470667b3a5ef7997ea016e3245b293fa46d07f4095a982665dc6fc549104db25182eaf84b417f393d163889e7a2b83fd3aea8b4eeaf75d9550989e9541a1d91e2f968c32584c8a6a790fede715a2bc734dcd5f9b9883075314a9cf7954935b2469bd5cca61d0e0d491a627e51ee555dfc1c9d5ffb143fc7d31ad6e95258d4eaee798fd94fb52434a6f635bf778fce8d4e94885939cc3dc18bcc845850951a64a2267da0747966cbbbd169b60db08da5704f63d95a05ab4d629a29ad36223ed2a9decce89acdfd7cd8f9abbcb12bec072df2b2cafa6c017a25328ed091abb25db2cb8c0f40da5c3751872c70e89274444e337173de974908fa494fe5459a5939b29122895b66f7b6349a13611cf5e74aba8f62fdb8fe6f5a8604b499f7fa3e47c9566a2e48187e474809e845baab6bd4e2f0bf6f794e086e9f03d0eb3a9e4250b209a491cb2db591f2b0351e7733a776ac12396a5c7827b82377fe4a0e3c54722f08ee441e168ee586a0f13401c33b57a612993a6b3fe93594c6964afaeb971825c700943ab60cdb23306f82bf2ec32d05b7c75a35d5e432fa1146f6db1b33ffbfcf3cd9f40598e5a80b633d84c654e462d791d8bb83cfc5615729d5ef1bc33800dd34b8cb7bbf3383055e782877c8806e8f29389e55a27da788e1a08029cfb724ba73cb0ef1a860ff861372b509ec8200f20a5dc5841c5644fb5febe3d2e9733cca528f2b9af0e0b814f97c711b035d7e3fbb1951d8210d330e6bffdf0e2faa19088a89c6a737435c2e8958fd1126e0f2ca325990514f0ca8ec784040bc6e2238b3a548ce3ecd065e08451b049bb55cd000023861ad400d7ff659bbcf6721bbe7128d73b95411a6684a6b12a5277c08df26fcf79eb64ce4b1f6664a445f758cea910ae48bda79165bcd408dedb32b6ab6de7bff43a09f51d4ad29b3acdcc0a6266e8afcdf0e8c8bc3f8ffc85106d278dc95c8f652347ada2034f30886ba78ab80389447f5c99118efd3d58bc43469bf44ae3d3fdd0b33824e69fea0d0fd62b709ee5868fdc29a5963dd4869305eb70e4bad13bd974cc3243d83ee7407cf6e8ea88ea28ec72c4fc827aeb15dac717869b290a3ac94d6e8538ae1b23f9ebffdad3c4b1855d74f450a06eebb1d2bbb154d9cdbc384f5c8116c85daff1af4bf6ed9bc7ed98323ec98a083d56d60d2b500ac65ba2773d01747c74fadfd9ab55dd567fdf2996d9f696374a7835776a1b6b1dc3b4a00467218ae97bb1cd4631ce37f356f494545101cfd84feaa4c20f5a024687d99f074229439182a3cb87b1c3003dd646b60472d0942821209cb90f744436cb86fd8d76506b6a003b232fdf4b5790171cad9d70cd11a017b217904cbc2122ece2972ff87df0f25df761ec0775b5c9f86553267f5d9d666c2bdfcbddf942a687ec1489e3ee1f5846abad42384745e66dd888717b320326b2f90c1633a6cb3d1564a575e0296f1b12f4184a0696fa98946f7497f28440a6b68e959dab767406c2c5583b6ab79bcec82e89f4b36eb624a081096d286ae3910f2a94da414d1317fdbb6cc9f073032ddabe3c15133cc383d76b839531ed107ffdc492a7ea5b8bb4397b90beb45c066968303833674c150cae4b5d3c6edb96bfac63465d18433c4620f91a2d5a66f19a67176ea8ced53d25d1c22d2beb2ff9a97207f47bd16c18cd3ed7693d1e46d16b2786bc59b0818f03a8f35d3823b86bd1eea6ec4e81570be58287eb2789d59c5dbf7e16bbd54414efcbfc90e0ed9f0f55af31ff40c7392c6136e02448608852bab13ec71998aa03a40c6f9ce279cbb7db97d5a7", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r7, r8, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat2$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x80100, 0x83, 0x37}, 0x18) statx(r9, &(0x7f0000000000)='./file0\x00', 0x2000, 0x40, &(0x7f00000004c0)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="15"], 0x15) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000007100)={0x78, 0x0, r11, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) r12 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r12, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r15}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 3 (id=3612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, 0x0, 0x0) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x5}, 0x1000}], 0x3, 0x8042, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000280)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_USERDATA={0x71, 0xd, 0x1, 0x0, "bc898d62e13a9f9f455b05377d4bb5f3b72ab82964e41849e1001ed14e268c874319373a5d0dd979ab455797257a3a34da17e35f0703558d95c1efffa059c9cc738b45485062451a8cc04a2e556c66c5a5234079f25fd4d7c0c2e4b4bac5a1714ab901aba812892c46f85942de"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) socket$xdp(0x2c, 0x3, 0x0) openat$audio1(0xffffff9c, &(0x7f00000002c0), 0x82101, 0x0) kernel console output (not intermixed with test programs): [ 1004.371669][T14875] fuse: Invalid rootmode [ 1004.546502][T13569] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1004.857599][T14880] overlayfs: missing 'lowerdir' [ 1005.738280][T12683] BTRFS info (device loop8): last unmount of filesystem ca7e79d1-e95b-47ab-adac-79fdf2517d49 [ 1006.153113][T14887] loop5: detected capacity change from 0 to 1024 [ 1006.214826][T14887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.231238][T14887] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.448754][T14894] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.2920: lblock 0 mapped to illegal pblock 0 (length 4) [ 1006.481249][T14894] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 1006.494076][T14894] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1006.494076][T14894] [ 1006.588404][T14894] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.2920: lblock 0 mapped to illegal pblock 0 (length 1) [ 1006.692926][T14894] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1006.705878][T14894] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1006.705878][T14894] [ 1007.019487][T14891] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1007.167570][ T4247] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:24: lblock 4 mapped to illegal pblock 4 (length 2) [ 1007.279009][ T4247] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 1007.292244][ T4247] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1007.292244][ T4247] [ 1007.412022][ T4247] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 1007.424728][ T4247] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1007.424728][ T4247] [ 1007.434669][ T4247] EXT4-fs (loop5): Total free blocks count 0 [ 1007.970024][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1008.025127][T14905] overlayfs: missing 'workdir' [ 1008.131988][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1008.155398][ T9] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1008.165105][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1008.176348][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.312290][T14912] fuse: Invalid rootmode [ 1009.192580][T14916] loop3: detected capacity change from 0 to 32768 [ 1009.208188][T14916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2928 (14916) [ 1009.237245][T14916] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1009.248768][T14916] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1009.293589][T14923] overlayfs: missing 'lowerdir' [ 1009.341047][T14916] BTRFS info (device loop3): enabling ssd optimizations [ 1009.348330][T14916] BTRFS info (device loop3): enabling free space tree [ 1012.242612][ T1720] usb 5-1: USB disconnect, device number 31 [ 1012.329778][T13569] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1013.745354][T14963] fuse: Bad value for 'rootmode' [ 1014.290785][T14972] overlayfs: missing 'lowerdir' [ 1014.437240][T14977] loop3: detected capacity change from 0 to 64 [ 1014.565307][T14977] hfs: walked past end of dir [ 1014.962902][T14983] bridge1: entered promiscuous mode [ 1014.968490][T14983] bridge1: entered allmulticast mode [ 1015.379163][T14981] loop6: detected capacity change from 0 to 32768 [ 1015.396563][T14981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2944 (14981) [ 1015.414977][T14981] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1015.426400][T14981] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1015.571646][T14981] BTRFS info (device loop6): enabling ssd optimizations [ 1015.579418][T14981] BTRFS info (device loop6): enabling free space tree [ 1016.664470][T15016] fuse: Bad value for 'rootmode' [ 1017.079120][T15020] overlayfs: missing 'lowerdir' [ 1018.362013][T11800] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1018.862942][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2959'. [ 1018.960395][T15032] loop5: detected capacity change from 0 to 32768 [ 1018.980862][T15032] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 29690064-2f0c-438f-9725-4e6d99548e9a [ 1018.991307][T15032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2957 (15032) [ 1019.022486][T15032] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1019.035732][T15032] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1019.235342][T15032] BTRFS info (device loop5): enabling ssd optimizations [ 1019.243258][T15032] BTRFS info (device loop5): enabling free space tree [ 1020.049363][ T30] audit: type=1800 audit(1760348601.259:187): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2957" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 1020.204436][T15059] fuse: Bad value for 'rootmode' [ 1020.717092][T13494] BTRFS info (device loop5): last unmount of filesystem 29690064-2f0c-438f-9725-4e6d99548e9a [ 1020.792742][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2958'. [ 1020.862095][T15067] overlayfs: missing 'lowerdir' [ 1021.510857][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 1021.571263][T15076] loop3: detected capacity change from 0 to 1024 [ 1021.898564][T15073] loop6: detected capacity change from 0 to 32768 [ 1021.929241][T15073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2968 (15073) [ 1021.955409][T15073] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1021.966927][T15073] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1022.011299][ T4086] hfsplus: b-tree write err: -5, ino 4 [ 1022.149346][T15073] BTRFS info (device loop6): enabling ssd optimizations [ 1022.156593][T15073] BTRFS info (device loop6): enabling free space tree [ 1023.249441][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.256036][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.640215][T15111] fuse: Unknown parameter 'use00000000000000000000' [ 1024.274600][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2978'. [ 1024.364717][T15119] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1024.374088][T15119] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1024.888924][T11800] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1026.114138][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2982'. [ 1026.291536][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2991'. [ 1026.580284][T15152] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1026.589442][T15152] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1026.716477][T15154] loop4: detected capacity change from 0 to 128 [ 1026.974107][T15149] loop5: detected capacity change from 0 to 32768 [ 1027.022063][T15149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2992 (15149) [ 1027.043865][T15149] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1027.054465][T15149] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1027.095516][T15154] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1027.163373][T15154] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.195727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.247435][T15149] BTRFS info (device loop5): enabling ssd optimizations [ 1027.255988][T15149] BTRFS info (device loop5): enabling free space tree [ 1028.510195][T10019] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1029.020269][T15187] loop8: detected capacity change from 0 to 256 [ 1029.931351][T15195] loop6: detected capacity change from 0 to 2048 [ 1029.963893][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1029.981124][T13494] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1030.044403][T15195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.471190][ T14] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1030.503571][ T14] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 17 with error 28 [ 1030.516290][ T14] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1030.516290][ T14] [ 1030.527651][ T14] EXT4-fs (loop6): Total free blocks count 0 [ 1030.535558][ T14] EXT4-fs (loop6): Free/Dirty block details [ 1030.542093][ T14] EXT4-fs (loop6): free_blocks=2415919504 [ 1030.548072][ T14] EXT4-fs (loop6): dirty_blocks=32 [ 1030.553329][ T14] EXT4-fs (loop6): Block reservation details [ 1030.559614][ T14] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 1030.619575][T11800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.728152][T15210] loop8: detected capacity change from 0 to 4096 [ 1030.738462][ T11] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 1030.888855][ T11] usb 4-1: device descriptor read/64, error -71 [ 1031.138513][ T11] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 1031.238866][T15220] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1031.248116][T15220] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1031.308941][ T11] usb 4-1: device descriptor read/64, error -71 [ 1031.439110][ T11] usb usb4-port1: attempt power cycle [ 1031.474749][T15222] loop6: detected capacity change from 0 to 256 [ 1031.542609][T15222] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1031.572612][T15226] loop2: detected capacity change from 0 to 7 [ 1031.582705][T15226] Dev loop2: unable to read RDB block 7 [ 1031.588830][T15226] loop2: unable to read partition table [ 1031.616256][T15226] loop2: partition table beyond EOD, truncated [ 1031.625211][T15226] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1031.798239][ T11] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1031.870079][ T11] usb 4-1: device descriptor read/8, error -71 [ 1031.995242][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3017'. [ 1033.407542][ T11] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 1033.447219][ T11] usb 4-1: device descriptor read/8, error -71 [ 1034.092377][T15243] loop8: detected capacity change from 0 to 2048 [ 1034.228900][T15243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.410058][ T11] usb usb4-port1: unable to enumerate USB device [ 1034.723712][ T8491] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1034.768999][T15250] loop3: detected capacity change from 0 to 4096 [ 1034.780190][ T8491] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 17 with error 28 [ 1034.793055][ T8491] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1034.793055][ T8491] [ 1034.806761][ T8491] EXT4-fs (loop8): Total free blocks count 0 [ 1034.814006][ T8491] EXT4-fs (loop8): Free/Dirty block details [ 1034.820239][ T8491] EXT4-fs (loop8): free_blocks=2415919504 [ 1034.826122][ T8491] EXT4-fs (loop8): dirty_blocks=32 [ 1034.831545][ T8491] EXT4-fs (loop8): Block reservation details [ 1034.837669][ T8491] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 1034.846896][T15250] ntfs3(loop3): ino=3, Correct links count -> 2. [ 1034.862744][T12683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.907997][T15255] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1035.467504][T15263] loop6: detected capacity change from 0 to 256 [ 1035.526637][T15265] loop2: detected capacity change from 0 to 7 [ 1035.545667][T15265] Dev loop2: unable to read RDB block 7 [ 1035.551742][T15265] loop2: unable to read partition table [ 1035.563673][T15263] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1035.576509][T15265] loop2: partition table beyond EOD, truncated [ 1035.583664][T15265] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1035.998055][ T11] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1036.228109][ T1720] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 1036.249471][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.260927][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.329024][ T11] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1036.340345][ T11] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1036.349179][ T11] usb 9-1: Manufacturer: syz [ 1036.518249][ T11] usb 9-1: config 0 descriptor?? [ 1036.588230][ T1720] usb 6-1: device descriptor read/64, error -71 [ 1036.715607][T15287] loop6: detected capacity change from 0 to 64 [ 1036.839345][ T1720] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1037.024744][ T1720] usb 6-1: device descriptor read/64, error -71 [ 1037.162935][ T1720] usb usb6-port1: attempt power cycle [ 1037.231438][T15297] loop2: detected capacity change from 0 to 7 [ 1037.244552][T15297] Dev loop2: unable to read RDB block 7 [ 1037.250877][T15297] loop2: unable to read partition table [ 1037.298741][T15297] loop2: partition table beyond EOD, truncated [ 1037.305301][T15297] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1037.538425][ T1720] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1037.573155][ T1720] usb 6-1: device descriptor read/8, error -71 [ 1037.602282][ T11] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #100: -71 [ 1037.611690][ T11] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 1037.622065][ T11] uclogic 0003:256C:006D.000E: failed probing pen v1 parameters: -71 [ 1037.631848][ T11] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 1037.639936][ T11] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 1037.707246][ T11] usb 9-1: USB disconnect, device number 9 [ 1037.711778][T15301] loop6: detected capacity change from 0 to 256 [ 1037.746468][T15301] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1037.828109][ T1720] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1037.873988][ T1720] usb 6-1: device descriptor read/8, error -71 [ 1038.001674][ T1720] usb usb6-port1: unable to enumerate USB device [ 1038.593701][T15317] loop6: detected capacity change from 0 to 64 [ 1038.876362][T15293] loop3: detected capacity change from 0 to 32768 [ 1038.915074][T15293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3040 (15293) [ 1039.008248][T15293] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1039.019136][T15293] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1039.075040][T15323] loop2: detected capacity change from 0 to 7 [ 1039.102345][T15323] Dev loop2: unable to read RDB block 7 [ 1039.108710][T15323] loop2: unable to read partition table [ 1039.120785][T15323] loop2: partition table beyond EOD, truncated [ 1039.127314][T15323] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1039.148081][T15326] loop4: detected capacity change from 0 to 764 [ 1039.206692][T15326] rock: directory entry would overflow storage [ 1039.213168][T15326] rock: sig=0x4654, size=5, remaining=4 [ 1039.379741][T15293] BTRFS info (device loop3): enabling ssd optimizations [ 1039.387053][T15293] BTRFS info (device loop3): enabling free space tree [ 1039.595160][T15348] loop6: detected capacity change from 0 to 256 [ 1039.634793][T15348] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1040.008524][ T11] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1040.246326][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.257930][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.396753][ T11] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1040.406223][ T11] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1040.415925][ T11] usb 5-1: Manufacturer: syz [ 1040.475304][ T11] usb 5-1: config 0 descriptor?? [ 1041.710096][ T9] IPVS: starting estimator thread 0... [ 1041.809169][ T11] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #100: -71 [ 1041.818602][ T11] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 1041.826846][ T11] uclogic 0003:256C:006D.000F: failed probing pen v1 parameters: -71 [ 1041.835323][ T11] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 1041.843437][ T11] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 1041.896916][T13569] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1041.948270][T15370] IPVS: using max 240 ests per chain, 12000 per kthread [ 1042.083780][ T11] usb 5-1: USB disconnect, device number 32 [ 1042.225561][T15372] netlink: 532 bytes leftover after parsing attributes in process `syz.8.3069'. [ 1042.306796][T15372] loop9: detected capacity change from 0 to 7 [ 1042.332907][T15372] Dev loop9: unable to read RDB block 7 [ 1042.338989][T15372] loop9: unable to read partition table [ 1042.352726][T15372] loop9: partition table beyond EOD, truncated [ 1042.359510][T15372] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1043.457486][T15381] loop6: detected capacity change from 0 to 256 [ 1043.546781][T15381] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1044.430502][T15400] loop5: detected capacity change from 0 to 64 [ 1044.606096][T15402] loop2: detected capacity change from 0 to 7 [ 1044.636418][T15402] Dev loop2: unable to read RDB block 7 [ 1044.642562][T15402] loop2: unable to read partition table [ 1044.675537][T15402] loop2: partition table beyond EOD, truncated [ 1044.682316][T15402] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1045.027512][T15412] netlink: 532 bytes leftover after parsing attributes in process `syz.8.3083'. [ 1045.097029][T15414] loop3: detected capacity change from 0 to 256 [ 1045.109878][T15412] loop9: detected capacity change from 0 to 7 [ 1045.145259][T15412] Dev loop9: unable to read RDB block 7 [ 1045.151434][T15412] loop9: unable to read partition table [ 1045.195065][T15412] loop9: partition table beyond EOD, truncated [ 1045.202011][T15417] loop5: detected capacity change from 0 to 256 [ 1045.208618][T15412] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1045.225355][T15417] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1045.302931][T15414] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1046.138911][T15431] loop6: detected capacity change from 0 to 64 [ 1047.235490][T15423] loop8: detected capacity change from 0 to 65536 [ 1047.331813][T15423] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1047.493226][T15423] XFS (loop8): Ending clean mount [ 1047.515630][T15423] XFS (loop8): Quotacheck needed: Please wait. [ 1047.564853][T15423] XFS (loop8): Quotacheck: Done. [ 1047.705960][T15447] loop2: detected capacity change from 0 to 7 [ 1047.750797][T15447] Dev loop2: unable to read RDB block 7 [ 1047.757158][T15447] loop2: unable to read partition table [ 1047.911381][T15447] loop2: partition table beyond EOD, truncated [ 1047.918234][T15447] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1048.212185][ T11] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1048.428232][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 1048.521498][ T11] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 1048.530711][ T11] usb 4-1: config 0 has no interface number 0 [ 1048.537147][ T11] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1048.632677][ T11] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1048.642199][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.651820][ T11] usb 4-1: Product: syz [ 1048.656307][ T11] usb 4-1: Manufacturer: syz [ 1048.661236][ T11] usb 4-1: SerialNumber: syz [ 1048.728889][ T11] usb 4-1: config 0 descriptor?? [ 1048.879818][T15453] loop6: detected capacity change from 0 to 256 [ 1048.951065][T15453] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1049.162331][ T11] msi2500 4-1:0.246: Registered as swradio24 [ 1049.169155][ T11] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1049.252069][ T11] usb 4-1: USB disconnect, device number 25 [ 1050.001624][T15456] fuse: Unknown parameter 'group_id00000000000000000000' [ 1050.091522][T15459] loop4: detected capacity change from 0 to 256 [ 1050.105834][T15460] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3099'. [ 1050.228630][T15460] loop9: detected capacity change from 0 to 7 [ 1050.238251][T15459] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1050.258279][T15460] Dev loop9: unable to read RDB block 7 [ 1050.269852][T15460] loop9: unable to read partition table [ 1050.312835][T15460] loop9: partition table beyond EOD, truncated [ 1050.319942][T15460] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1051.836154][T15471] loop6: detected capacity change from 0 to 64 [ 1051.903858][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 1052.562445][T12683] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1052.565365][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1053.531718][ T11] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1053.733742][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 1053.754814][ T11] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 1053.763665][ T11] usb 4-1: config 0 has no interface number 0 [ 1053.770199][ T11] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1053.831673][ T11] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1053.841804][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.852039][ T11] usb 4-1: Product: syz [ 1053.856376][ T11] usb 4-1: Manufacturer: syz [ 1053.861748][ T11] usb 4-1: SerialNumber: syz [ 1053.988122][ T11] usb 4-1: config 0 descriptor?? [ 1054.210063][T12151] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1054.410549][T12151] usb 6-1: Using ep0 maxpacket: 16 [ 1054.441593][T12151] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.452617][T12151] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1054.563577][T12151] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1054.574105][T12151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.582440][T12151] usb 6-1: Product: syz [ 1054.586764][T12151] usb 6-1: Manufacturer: syz [ 1054.592071][T12151] usb 6-1: SerialNumber: syz [ 1054.608809][ T11] msi2500 4-1:0.246: Registered as swradio24 [ 1054.614971][ T11] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1054.649103][ T11] usb 4-1: USB disconnect, device number 26 [ 1054.907511][T15505] loop2: detected capacity change from 0 to 7 [ 1054.930719][T12151] usb 6-1: 0:2 : does not exist [ 1054.948175][T15505] Dev loop2: unable to read RDB block 7 [ 1054.954001][T15505] loop2: unable to read partition table [ 1054.995071][T15505] loop2: partition table beyond EOD, truncated [ 1055.002338][T15505] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1055.032885][T12151] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1055.163039][T15508] netlink: 532 bytes leftover after parsing attributes in process `syz.4.3115'. [ 1055.183217][T12151] usb 6-1: USB disconnect, device number 18 [ 1055.534403][T15517] loop4: detected capacity change from 0 to 64 [ 1055.924657][T15523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3121'. [ 1056.899886][T15532] fuse: Bad value for 'user_id' [ 1056.904937][T15532] fuse: Bad value for 'user_id' [ 1056.956939][T15537] loop2: detected capacity change from 0 to 7 [ 1056.970228][T15537] Dev loop2: unable to read RDB block 7 [ 1056.976124][T15537] loop2: unable to read partition table [ 1056.994585][T15537] loop2: partition table beyond EOD, truncated [ 1057.001254][T15537] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1057.268649][ T11] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1057.311103][T15544] netlink: 532 bytes leftover after parsing attributes in process `syz.4.3129'. [ 1057.458790][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 1057.503385][ T11] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 1057.512151][ T11] usb 7-1: config 0 has no interface number 0 [ 1057.518771][ T11] usb 7-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1057.629970][ T11] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1057.643645][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.652524][ T11] usb 7-1: Product: syz [ 1057.656850][ T11] usb 7-1: Manufacturer: syz [ 1057.661790][ T11] usb 7-1: SerialNumber: syz [ 1057.760781][ T11] usb 7-1: config 0 descriptor?? [ 1057.828494][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1058.035199][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1058.063615][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.074030][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1058.141884][ T11] msi2500 7-1:0.246: Registered as swradio24 [ 1058.151548][ T11] msi2500 7-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1058.167906][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1058.177234][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.185650][ T9] usb 4-1: Product: syz [ 1058.190059][ T9] usb 4-1: Manufacturer: syz [ 1058.194816][ T9] usb 4-1: SerialNumber: syz [ 1058.232053][ T11] usb 7-1: USB disconnect, device number 17 [ 1058.457137][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3135'. [ 1058.510893][ T9] usb 4-1: 0:2 : does not exist [ 1058.576295][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1058.665576][ T9] usb 4-1: USB disconnect, device number 27 [ 1059.700986][T15576] fuse: Bad value for 'fd' [ 1060.198759][T15580] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3142'. [ 1060.325190][T15582] 9pnet_fd: Insufficient options for proto=fd [ 1060.629799][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3146'. [ 1060.781577][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 1060.983846][T15599] loop3: detected capacity change from 0 to 256 [ 1061.071869][T15599] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1061.208624][T15603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.267386][ T1720] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1061.442410][T15605] fuse: Bad value for 'fd' [ 1061.448319][ T1720] usb 7-1: Using ep0 maxpacket: 16 [ 1061.489196][ T1720] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.499845][ T1720] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1061.568775][ T1720] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1061.578424][ T1720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.586604][ T1720] usb 7-1: Product: syz [ 1061.591116][ T1720] usb 7-1: Manufacturer: syz [ 1061.595863][ T1720] usb 7-1: SerialNumber: syz [ 1062.030685][ T1720] usb 7-1: 0:2 : does not exist [ 1062.143107][ T1720] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1062.296154][T15609] loop3: detected capacity change from 0 to 32768 [ 1062.315389][T15609] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3154 (15609) [ 1062.360349][T15609] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1062.371338][T15609] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1062.406209][ T1720] usb 7-1: USB disconnect, device number 18 [ 1062.569764][T15609] BTRFS info (device loop3): enabling ssd optimizations [ 1062.579669][T15609] BTRFS info (device loop3): enabling free space tree [ 1063.083913][T15634] netlink: 532 bytes leftover after parsing attributes in process `syz.5.3159'. [ 1063.294639][ T30] audit: type=1800 audit(1760348644.579:188): pid=15636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3154" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 1064.009043][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3163'. [ 1064.206001][T15644] loop4: detected capacity change from 0 to 256 [ 1064.448033][T15640] loop6: detected capacity change from 0 to 32768 [ 1064.471943][T15640] BTRFS info: device /dev/loop6 (7:6) using temp-fsid dbdc5a34-e1ac-4bd2-ab30-40a3db2c73fa [ 1064.473270][T13569] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1064.482357][T15640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3161 (15640) [ 1064.517559][T15640] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1064.528219][T15640] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1064.552328][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3160'. [ 1064.571295][T15644] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1064.756812][T15640] BTRFS info (device loop6): enabling ssd optimizations [ 1064.764120][T15640] BTRFS info (device loop6): enabling free space tree [ 1064.791593][T15664] fuse: Bad value for 'fd' [ 1065.698116][ T30] audit: type=1800 audit(1760348646.809:189): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3161" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 1066.490768][T15673] loop8: detected capacity change from 0 to 64 [ 1066.900588][T11800] BTRFS info (device loop6): last unmount of filesystem dbdc5a34-e1ac-4bd2-ab30-40a3db2c73fa [ 1066.955817][T15666] loop5: detected capacity change from 0 to 65536 [ 1067.071362][T15666] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1067.139450][T15666] XFS (loop5): Ending clean mount [ 1067.148643][T15666] XFS (loop5): Quotacheck needed: Please wait. [ 1067.194240][T15666] XFS (loop5): Quotacheck: Done. [ 1068.072184][T15686] netlink: set zone limit has 8 unknown bytes [ 1072.158288][T15695] loop3: detected capacity change from 0 to 32768 [ 1072.206391][T15695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3175 (15695) [ 1072.226243][T15695] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1072.237289][T15695] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1072.372966][T15711] netlink: 532 bytes leftover after parsing attributes in process `syz.8.3173'. [ 1072.386085][T15695] BTRFS info (device loop3): enabling ssd optimizations [ 1072.393333][T15695] BTRFS info (device loop3): enabling free space tree [ 1072.922938][ T30] audit: type=1800 audit(1760348654.169:190): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3175" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 1073.103554][T13494] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1073.327679][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 1073.570652][T13569] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1073.911792][T15719] fuse: Bad value for 'fd' [ 1075.253326][T15725] loop8: detected capacity change from 0 to 32768 [ 1075.264740][T15725] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3180 (15725) [ 1075.326758][T15725] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1075.337227][T15725] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1075.513321][T15737] loop4: detected capacity change from 0 to 64 [ 1075.565742][T15725] BTRFS info (device loop8): enabling ssd optimizations [ 1075.572972][T15725] BTRFS info (device loop8): enabling free space tree [ 1076.479981][ T30] audit: type=1800 audit(1760348657.629:191): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3180" name="file2" dev="loop8" ino=261 res=0 errno=0 [ 1076.538107][ T11] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1076.778106][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 1076.931546][ T11] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 1076.941424][ T11] usb 7-1: config 0 has no interface number 0 [ 1076.947698][ T11] usb 7-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1076.993694][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 1077.159308][ T11] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1077.168979][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.177150][ T11] usb 7-1: Product: syz [ 1077.181667][ T11] usb 7-1: Manufacturer: syz [ 1077.186420][ T11] usb 7-1: SerialNumber: syz [ 1077.280257][ T11] usb 7-1: config 0 descriptor?? [ 1077.750831][T12683] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1077.948610][T15760] loop3: detected capacity change from 0 to 32768 [ 1077.963295][T15760] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 31f24b99-5845-4565-ae69-11ff226d987b [ 1077.973751][T15760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3188 (15760) [ 1078.002486][T15760] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1078.017346][T15760] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1078.048657][ T9] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1078.092318][ T11] msi2500 7-1:0.246: Registered as swradio24 [ 1078.098968][ T11] msi2500 7-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1078.221647][ T11] usb 7-1: USB disconnect, device number 19 [ 1078.259158][ T9] usb 6-1: device descriptor read/64, error -71 [ 1078.261322][T15760] BTRFS info (device loop3): enabling ssd optimizations [ 1078.272685][T15760] BTRFS info (device loop3): enabling free space tree [ 1078.509122][ T9] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1078.678241][ T9] usb 6-1: device descriptor read/64, error -71 [ 1078.796885][ T9] usb usb6-port1: attempt power cycle [ 1079.019573][ T30] audit: type=1800 audit(1760348660.279:192): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3188" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 1079.178059][ T9] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1079.234381][ T9] usb 6-1: device descriptor read/8, error -71 [ 1079.538305][ T9] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1079.610611][ T9] usb 6-1: device descriptor read/8, error -71 [ 1079.632334][T13569] BTRFS info (device loop3): last unmount of filesystem 31f24b99-5845-4565-ae69-11ff226d987b [ 1079.720105][ T9] usb usb6-port1: unable to enumerate USB device [ 1079.972701][T15782] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3190'. [ 1080.861098][T15787] fuse: Bad value for 'fd' [ 1082.221784][T15799] loop5: detected capacity change from 0 to 32768 [ 1082.327744][T15799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3197 (15799) [ 1082.573988][T15799] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1082.584966][T15799] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1082.737156][T15799] BTRFS info (device loop5): enabling ssd optimizations [ 1082.744637][T15799] BTRFS info (device loop5): enabling free space tree [ 1082.788481][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1083.737740][ T30] audit: type=1800 audit(1760348664.999:193): pid=15822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3197" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 1084.500169][ T9] usb 7-1: config 0 has no interfaces? [ 1084.552270][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1084.562334][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1084.573522][ T9] usb 7-1: Product: syz [ 1084.577958][ T9] usb 7-1: Manufacturer: syz [ 1084.582720][ T9] usb 7-1: SerialNumber: syz [ 1084.701527][ T9] usb 7-1: config 0 descriptor?? [ 1084.719719][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.726281][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1085.300134][T15824] loop4: detected capacity change from 0 to 65536 [ 1085.450804][T15824] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1085.474124][T13494] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1085.602918][T15826] loop3: detected capacity change from 0 to 32768 [ 1085.613794][T15826] BTRFS info: device /dev/loop3 (7:3) using temp-fsid ad6a7c71-8816-4c6c-860a-0d139da45212 [ 1085.624279][T15826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3201 (15826) [ 1085.649579][T15826] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1085.660133][T15826] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1085.702129][T15824] XFS (loop4): Ending clean mount [ 1085.715264][T15824] XFS (loop4): Quotacheck needed: Please wait. [ 1085.816838][T15824] XFS (loop4): Quotacheck: Done. [ 1085.860580][T15826] BTRFS info (device loop3): enabling ssd optimizations [ 1085.867709][T15826] BTRFS info (device loop3): enabling free space tree [ 1086.343988][ T30] audit: type=1800 audit(1760348667.629:194): pid=15850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3201" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 1087.142933][ T1720] usb 7-1: USB disconnect, device number 20 [ 1087.549146][T13569] BTRFS info (device loop3): last unmount of filesystem ad6a7c71-8816-4c6c-860a-0d139da45212 [ 1089.008203][ T1720] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1089.343901][ T1720] usb 7-1: device descriptor read/64, error -71 [ 1089.529046][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1089.598061][ T1720] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1089.722158][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1089.758072][ T1720] usb 7-1: device descriptor read/64, error -71 [ 1089.773471][ T9] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 1089.782883][ T9] usb 6-1: config 0 has no interface number 0 [ 1089.791821][ T9] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1089.880071][ T1720] usb usb7-port1: attempt power cycle [ 1089.908227][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1089.917925][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.926147][ T9] usb 6-1: Product: syz [ 1089.931588][ T9] usb 6-1: Manufacturer: syz [ 1089.936377][ T9] usb 6-1: SerialNumber: syz [ 1090.041254][ T9] usb 6-1: config 0 descriptor?? [ 1090.341192][ T1720] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 1090.499053][ T1720] usb 7-1: device descriptor read/8, error -71 [ 1090.749545][ T1720] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 1090.981193][ T9] msi2500 6-1:0.246: Registered as swradio24 [ 1090.987429][ T9] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1091.026028][ T1720] usb 7-1: device descriptor read/8, error -71 [ 1091.120540][ T9] usb 6-1: USB disconnect, device number 23 [ 1091.148637][ T1720] usb usb7-port1: unable to enumerate USB device [ 1092.490799][T15865] fuse: Bad value for 'fd' [ 1092.500050][T10019] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1093.934378][T15870] loop6: detected capacity change from 0 to 64 [ 1094.081521][T15872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1094.101334][T15872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1094.151241][T15872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1094.183197][T15872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1094.210657][T15872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1095.355797][T15871] chnl_net:caif_netlink_parms(): no params data found [ 1096.302712][T12309] Bluetooth: hci5: command tx timeout [ 1097.345597][T15887] loop6: detected capacity change from 0 to 32768 [ 1097.416781][T15887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3210 (15887) [ 1097.461322][T15887] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1097.474756][T15887] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1097.783129][T15887] BTRFS info (device loop6): enabling ssd optimizations [ 1097.790419][T15887] BTRFS info (device loop6): enabling free space tree [ 1097.857430][T15871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.867196][T15871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.880117][T15871] bridge_slave_0: entered allmulticast mode [ 1097.889470][T15871] bridge_slave_0: entered promiscuous mode [ 1098.509843][T15872] Bluetooth: hci5: command tx timeout [ 1098.582135][T15912] loop5: detected capacity change from 0 to 32768 [ 1098.600485][T15871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.608158][T15871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.609662][ T30] audit: type=1800 audit(1760348679.849:195): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3210" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 1098.615827][T15871] bridge_slave_1: entered allmulticast mode [ 1098.646353][T15871] bridge_slave_1: entered promiscuous mode [ 1098.657082][T15912] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 63edd084-247c-4a9b-9983-1efb3e55b4a1 [ 1098.667506][T15912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3212 (15912) [ 1098.697323][T15912] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1098.708156][T15912] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1099.022413][T15912] BTRFS info (device loop5): enabling ssd optimizations [ 1099.030535][T15912] BTRFS info (device loop5): enabling free space tree [ 1099.221767][T15871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.238254][ T1720] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1099.334561][T15871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.459092][ T1720] usb 5-1: config 0 has no interfaces? [ 1099.541360][ T1720] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1099.551382][ T1720] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1099.560005][ T1720] usb 5-1: Product: syz [ 1099.564364][ T1720] usb 5-1: Manufacturer: syz [ 1099.569614][ T1720] usb 5-1: SerialNumber: syz [ 1099.710297][ T1720] usb 5-1: config 0 descriptor?? [ 1099.782490][T15871] team0: Port device team_slave_0 added [ 1099.799177][T15871] team0: Port device team_slave_1 added [ 1099.853079][ T30] audit: type=1800 audit(1760348681.129:196): pid=15930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3212" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 1099.876093][T11800] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1100.196092][T15911] tipc: Enabling of bearer rejected, failed to enable media [ 1100.255620][T15934] syzkaller0: entered promiscuous mode [ 1100.261471][T15934] syzkaller0: entered allmulticast mode [ 1100.362297][ T9] usb 5-1: USB disconnect, device number 33 [ 1100.491962][T15871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.499252][T15871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.525605][T15871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.566761][T15871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.571837][T12309] Bluetooth: hci5: command tx timeout [ 1100.575400][T15871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.606680][T15871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.759607][T13494] BTRFS info (device loop5): last unmount of filesystem 63edd084-247c-4a9b-9983-1efb3e55b4a1 [ 1101.193806][T15871] hsr_slave_0: entered promiscuous mode [ 1101.206972][T15871] hsr_slave_1: entered promiscuous mode [ 1101.215520][T15871] debugfs: 'hsr0' already exists in 'hsr' [ 1101.221650][T15871] Cannot create hsr debugfs directory [ 1102.552323][T15945] loop3: detected capacity change from 0 to 64 [ 1102.619620][T12309] Bluetooth: hci5: command tx timeout [ 1103.078640][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1103.290672][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1103.328622][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.339259][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1103.387333][T15871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1103.429284][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1103.438714][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.446988][ T9] usb 6-1: Product: syz [ 1103.451484][ T9] usb 6-1: Manufacturer: syz [ 1103.456226][ T9] usb 6-1: SerialNumber: syz [ 1103.486965][T15871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1103.547145][T15871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1103.604423][T15871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1103.758157][ T9] usb 6-1: 0:2 : does not exist [ 1103.841873][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1103.985712][ T9] usb 6-1: USB disconnect, device number 24 [ 1104.604027][T15871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.765145][T15871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.866634][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.874158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.998754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.006197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.758799][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1106.042080][ T9] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1106.053200][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.062234][ T9] usb 6-1: Product: syz [ 1106.068581][ T9] usb 6-1: Manufacturer: syz [ 1106.073339][ T9] usb 6-1: SerialNumber: syz [ 1106.142452][ T9] usb 6-1: config 0 descriptor?? [ 1106.173923][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 1106.180157][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1106.349190][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.400717][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1106.442210][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1106.529842][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1106.538816][ T9] usb 6-1: media controller created [ 1106.593512][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.623132][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1106.945141][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.231685][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.249483][ T9] DVB: Unable to find symbol dib7000p_attach() [ 1107.255906][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1107.701502][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 1107.710823][ T9] Registered IR keymap rc-empty [ 1107.747154][T15871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.917464][ T12] bridge_slave_1: left allmulticast mode [ 1107.923649][ T12] bridge_slave_1: left promiscuous mode [ 1107.930533][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.038377][ T12] bridge_slave_0: left allmulticast mode [ 1108.044280][ T12] bridge_slave_0: left promiscuous mode [ 1108.050934][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.123734][T15970] loop4: detected capacity change from 0 to 32768 [ 1109.208605][T15970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3225 (15970) [ 1109.221135][T15972] loop6: detected capacity change from 0 to 64 [ 1109.244894][T15970] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1109.255548][T15970] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1109.310774][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.420339][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.443309][ T12] bond0 (unregistering): Released all slaves [ 1109.486763][T15970] BTRFS info (device loop4): enabling ssd optimizations [ 1109.498645][T15970] BTRFS info (device loop4): enabling free space tree [ 1110.751808][ T30] audit: type=1800 audit(1760348691.789:197): pid=15990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3225" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 1111.311848][T15989] loop3: detected capacity change from 0 to 65536 [ 1111.447022][T15989] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1111.560273][T10019] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1111.668269][ T12] hsr_slave_0: left promiscuous mode [ 1111.740186][ T12] hsr_slave_1: left promiscuous mode [ 1111.748109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.755642][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.818777][ T9] dvb-usb: could not initialize remote control. [ 1111.822395][T15989] XFS (loop3): Ending clean mount [ 1111.825149][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1111.836073][T15989] XFS (loop3): Quotacheck needed: Please wait. [ 1111.890421][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.898408][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.909320][T15989] XFS (loop3): Quotacheck: Done. [ 1112.004671][ T9] usb 6-1: USB disconnect, device number 25 [ 1112.020671][ T12] veth1_macvtap: left promiscuous mode [ 1112.026352][ T12] veth0_macvtap: left promiscuous mode [ 1112.032286][ T12] veth1_vlan: left promiscuous mode [ 1112.037986][ T12] veth0_vlan: left promiscuous mode [ 1112.475422][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1115.752252][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1115.790132][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1115.972215][T13569] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1116.165572][T15871] veth0_vlan: entered promiscuous mode [ 1116.288589][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1116.323988][T16010] loop6: detected capacity change from 0 to 64 [ 1116.343420][T15871] veth1_vlan: entered promiscuous mode [ 1116.498169][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1116.536320][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.547125][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.572184][T15871] veth0_macvtap: entered promiscuous mode [ 1116.594577][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1116.604010][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.612796][ T9] usb 6-1: Product: syz [ 1116.618702][ T9] usb 6-1: Manufacturer: syz [ 1116.623469][ T9] usb 6-1: SerialNumber: syz [ 1116.654180][T15871] veth1_macvtap: entered promiscuous mode [ 1116.678279][T12151] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1116.846041][T15871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.899588][T12151] usb 5-1: Using ep0 maxpacket: 8 [ 1116.919704][ T9] usb 6-1: 0:2 : does not exist [ 1116.936714][T15871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.959494][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1116.965117][T12151] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1116.976108][T12151] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1116.986423][T12151] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1116.996597][T12151] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1117.006833][T12151] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.020357][T12151] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1117.032915][T12151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.084653][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.095297][ T9] usb 6-1: USB disconnect, device number 26 [ 1117.118970][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.183744][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.194405][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.392937][T12151] usb 5-1: usb_control_msg returned -32 [ 1117.403125][T12151] usbtmc 5-1:16.0: can't read capabilities [ 1119.569664][ T9] usb 5-1: USB disconnect, device number 34 [ 1119.782423][T16039] loop4: detected capacity change from 0 to 8 [ 1120.723714][T16048] loop4: detected capacity change from 0 to 32768 [ 1120.776805][T16048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3237 (16048) [ 1120.803252][T16048] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1120.816562][T16048] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1120.990225][T16048] BTRFS info (device loop4): enabling ssd optimizations [ 1120.997392][T16048] BTRFS info (device loop4): enabling free space tree [ 1121.528355][ T30] audit: type=1800 audit(1760348702.809:198): pid=16065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3237" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 1122.342328][T10019] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1122.398053][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1122.619751][T12452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.628052][T12452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.838952][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1122.848424][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.856612][ T9] usb 4-1: Product: syz [ 1122.864124][ T9] usb 4-1: Manufacturer: syz [ 1122.870018][ T9] usb 4-1: SerialNumber: syz [ 1122.883626][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.892174][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.960728][ T9] usb 4-1: config 0 descriptor?? [ 1122.975783][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 1122.982488][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1123.299205][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1123.329286][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1123.380057][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1123.388965][ T9] usb 4-1: media controller created [ 1123.472018][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1124.325197][T16080] loop4: detected capacity change from 0 to 1024 [ 1124.385798][T16081] fuse: Bad value for 'fd' [ 1124.435870][ T9] DVB: Unable to find symbol dib7000p_attach() [ 1124.442353][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1125.057975][ T3736] hfsplus: b-tree write err: -5, ino 4 [ 1125.069134][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 1125.075367][ T9] Registered IR keymap rc-empty [ 1125.892807][T12151] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1126.199156][T12151] usb 3-1: Using ep0 maxpacket: 16 [ 1128.737108][ T9] dvb-usb: could not initialize remote control. [ 1128.743715][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1129.130038][ T1720] usb 4-1: USB disconnect, device number 28 [ 1129.238366][T12151] usb 3-1: unable to read config index 0 descriptor/all [ 1129.245698][T12151] usb 3-1: can't read configurations, error -71 [ 1129.360151][ T1720] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1129.834274][T16099] loop4: detected capacity change from 0 to 32768 [ 1129.859611][T16099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3248 (16099) [ 1129.889163][T16099] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1129.899777][T16099] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1130.038250][ T1720] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1130.098654][T16099] BTRFS info (device loop4): enabling ssd optimizations [ 1130.105968][T16099] BTRFS info (device loop4): enabling free space tree [ 1130.209139][ T1720] usb 4-1: Using ep0 maxpacket: 8 [ 1130.900320][ T30] audit: type=1800 audit(1760348712.039:199): pid=16120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3248" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 1130.937664][ T1720] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.948459][ T1720] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1130.966137][ T1720] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1130.976711][ T1720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.342883][ T1720] usbtmc 4-1:16.0: bulk endpoints not found [ 1131.491424][T10019] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1131.838830][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1132.040935][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1132.091170][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.101781][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1132.173004][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1132.184627][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.193830][ T9] usb 7-1: Product: syz [ 1132.198284][ T9] usb 7-1: Manufacturer: syz [ 1132.203037][ T9] usb 7-1: SerialNumber: syz [ 1132.345475][T16131] loop2: detected capacity change from 0 to 512 [ 1132.446115][T16131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.549396][ T9] usb 7-1: 0:2 : does not exist [ 1132.662305][T16133] loop5: detected capacity change from 0 to 1024 [ 1132.681837][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1133.023577][ T9] usb 7-1: USB disconnect, device number 25 [ 1133.713840][T16140] loop4: detected capacity change from 0 to 128 [ 1133.842853][T16140] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1133.928252][T16140] hpfs: filesystem error: improperly stopped [ 1133.934464][T16140] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1133.946033][T16140] hpfs: You really don't want any checks? You are crazy... [ 1134.092701][T16140] hpfs: hpfs_map_sector(): read error [ 1134.099150][T16140] hpfs: code page support is disabled [ 1134.183558][T16140] hpfs: hpfs_map_4sectors(): unaligned read [ 1134.208656][ T1720] usb 4-1: USB disconnect, device number 29 [ 1134.268613][T16140] hpfs: hpfs_map_4sectors(): unaligned read [ 1134.274672][T16140] hpfs: filesystem error: unable to find root dir [ 1134.418734][ T3736] hfsplus: b-tree write err: -5, ino 4 [ 1135.293717][T15871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.148706][ T1720] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1136.418293][ T1720] usb 5-1: Using ep0 maxpacket: 16 [ 1136.581157][ T1720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.595692][ T1720] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1136.648846][ T1720] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.658603][ T1720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.666787][ T1720] usb 5-1: Product: syz [ 1136.671313][ T1720] usb 5-1: Manufacturer: syz [ 1136.676072][ T1720] usb 5-1: SerialNumber: syz [ 1136.812011][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1136.877444][T16151] loop5: detected capacity change from 0 to 2048 [ 1137.506415][T16151] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1138.346399][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1138.351337][ T1720] usb 5-1: 0:2 : does not exist [ 1138.355985][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.368945][ T9] usb 3-1: Product: syz [ 1138.373391][ T9] usb 3-1: Manufacturer: syz [ 1138.378535][ T9] usb 3-1: SerialNumber: syz [ 1138.386037][ T1720] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1138.498933][ T1720] usb 5-1: USB disconnect, device number 35 [ 1138.686823][T16154] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1138.712254][ T9] usb 3-1: config 0 descriptor?? [ 1138.791923][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 1138.798730][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1138.991821][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1139.104065][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1139.180981][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1139.190484][ T9] usb 3-1: media controller created [ 1139.330394][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1139.838141][ T9] DVB: Unable to find symbol dib7000p_attach() [ 1139.844583][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1140.464153][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 1140.470871][ T9] Registered IR keymap rc-empty [ 1140.483501][ T9] dvb-usb: could not initialize remote control. [ 1140.490337][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1140.665600][ T9] usb 3-1: USB disconnect, device number 8 [ 1141.712447][T16162] loop5: detected capacity change from 0 to 32768 [ 1141.727650][T16162] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3262 (16162) [ 1141.746999][T16162] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1141.757726][T16162] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1141.799379][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1141.964728][T16162] BTRFS info (device loop5): enabling ssd optimizations [ 1141.971933][T16162] BTRFS info (device loop5): enabling free space tree [ 1142.538573][ T30] audit: type=1800 audit(1760348723.789:200): pid=16185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3262" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 1143.844133][T16192] loop6: detected capacity change from 0 to 32768 [ 1143.855805][T16192] BTRFS warning: excessive commit interval 2147483648, use with care [ 1143.890156][T16192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3266 (16192) [ 1143.892496][T13494] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1143.965657][T16192] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1143.976336][T16192] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 1144.107932][ T4247] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1144.121833][T16192] BTRFS error (device loop6): failed to load root extent [ 1144.129334][T16192] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1144.143127][ T3736] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1144.158300][T16192] BTRFS warning (device loop6): couldn't read tree root [ 1144.167997][T16192] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1144.182304][ T12] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1144.194575][T16192] BTRFS warning (device loop6): couldn't read tree root [ 1144.201954][T16192] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1144.272943][T16192] BTRFS info (device loop6): checking UUID tree [ 1144.292463][T16192] BTRFS info (device loop6): setting nodatasum [ 1144.298999][T16192] BTRFS info (device loop6): setting nodatacow [ 1144.305408][T16192] BTRFS info (device loop6): enabling ssd optimizations [ 1144.312779][T16192] BTRFS info (device loop6): turning on flush-on-commit [ 1144.320017][T16192] BTRFS info (device loop6): turning on async discard [ 1144.326943][T16192] BTRFS info (device loop6): enabling free space tree [ 1144.334052][T16192] BTRFS info (device loop6): enabling auto defrag [ 1144.340727][T16192] BTRFS info (device loop6): trying to use backup root at mount time [ 1145.302596][T16216] loop4: detected capacity change from 0 to 2048 [ 1145.358835][T16216] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1145.438619][T16219] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1145.635802][T11800] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1145.850465][ T1720] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1146.038201][ T1720] usb 3-1: Using ep0 maxpacket: 16 [ 1146.079471][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.086101][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.125010][ T1720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.135425][ T1720] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1146.243198][ T1720] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1146.252696][ T1720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.261027][ T1720] usb 3-1: Product: syz [ 1146.265349][ T1720] usb 3-1: Manufacturer: syz [ 1146.270198][ T1720] usb 3-1: SerialNumber: syz [ 1146.622193][ T1720] usb 3-1: 0:2 : does not exist [ 1146.699080][ T1720] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1146.820874][ T1720] usb 3-1: USB disconnect, device number 9 [ 1147.229012][T12151] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1147.400562][T16226] loop5: detected capacity change from 0 to 1024 [ 1147.982429][T12151] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1147.991843][T12151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.000136][T12151] usb 5-1: Product: syz [ 1148.004458][T12151] usb 5-1: Manufacturer: syz [ 1148.009671][T12151] usb 5-1: SerialNumber: syz [ 1148.031318][T16229] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1148.042731][T16229] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1148.130427][T12151] usb 5-1: config 0 descriptor?? [ 1148.141368][T12151] hub 5-1:0.0: bad descriptor, ignoring hub [ 1148.147465][T12151] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1148.394080][T12151] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1148.429240][T12151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1148.530259][T12151] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1148.539069][T12151] usb 5-1: media controller created [ 1148.621382][T12151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1148.920033][ T4200] hfsplus: b-tree write err: -5, ino 4 [ 1149.442706][T16236] loop3: detected capacity change from 0 to 32768 [ 1149.468497][T12151] DVB: Unable to find symbol dib7000p_attach() [ 1149.474803][T12151] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1149.490221][T16236] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3278 (16236) [ 1149.524474][T16236] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1149.535230][T16236] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1149.644257][T16236] BTRFS info (device loop3): enabling ssd optimizations [ 1149.651770][T16236] BTRFS info (device loop3): enabling free space tree [ 1150.278642][T12151] rc_core: IR keymap rc-dib0700-rc5 not found [ 1150.284890][T12151] Registered IR keymap rc-empty [ 1150.290840][T12151] dvb-usb: could not initialize remote control. [ 1150.297169][T12151] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1150.814156][T12151] usb 5-1: USB disconnect, device number 36 [ 1150.959509][T13569] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1151.004613][T12151] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1151.138117][T16262] fuse: Unknown parameter 'user_i00000000000000000000' [ 1151.692185][T16273] loop6: detected capacity change from 0 to 16 [ 1151.780055][T16273] erofs: Unknown parameter '0x0000000000000000' [ 1154.109681][T16280] loop6: detected capacity change from 0 to 1024 [ 1154.717445][ T4086] hfsplus: b-tree write err: -5, ino 4 [ 1155.471466][T16290] loop2: detected capacity change from 0 to 32768 [ 1155.489068][T16290] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3290 (16290) [ 1155.510024][T16290] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1155.521400][T16290] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1155.750625][T16290] BTRFS info (device loop2): enabling ssd optimizations [ 1155.757990][T16290] BTRFS info (device loop2): enabling free space tree [ 1155.874868][T16293] loop6: detected capacity change from 0 to 4096 [ 1156.377573][T16293] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1156.985719][T16293] ntfs3(loop6): ino=19, mi_enum_attr [ 1156.991590][T16293] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1157.116118][T16293] ntfs3(loop6): failed to convert "c46c" to cp932 [ 1157.139267][T16293] ntfs3(loop6): ino=20, mi_enum_attr [ 1157.180493][T15871] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1158.441451][T16334] loop6: detected capacity change from 0 to 1024 [ 1158.758538][ T4200] hfsplus: b-tree write err: -5, ino 4 [ 1159.311053][T16343] netlink: 'syz.5.3305': attribute type 29 has an invalid length. [ 1159.593410][T16345] loop3: detected capacity change from 0 to 128 [ 1159.660419][T16346] netlink: 'syz.5.3305': attribute type 29 has an invalid length. [ 1159.711009][T16343] netlink: 'syz.5.3305': attribute type 29 has an invalid length. [ 1159.721097][T16345] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1159.798061][T16345] hpfs: filesystem error: improperly stopped [ 1159.804375][T16345] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1159.812571][T16345] hpfs: You really don't want any checks? You are crazy... [ 1159.920160][T16345] hpfs: hpfs_map_sector(): read error [ 1159.925709][T16345] hpfs: code page support is disabled [ 1160.064496][T16345] hpfs: hpfs_map_4sectors(): unaligned read [ 1160.128011][T16345] hpfs: hpfs_map_4sectors(): unaligned read [ 1160.138845][T16345] hpfs: filesystem error: unable to find root dir [ 1165.335537][T16371] loop6: detected capacity change from 0 to 4096 [ 1165.350481][T16371] ntfs3: Unknown parameter 'GPL' [ 1165.750436][T16373] snd_dummy snd_dummy.0: control 0:0:128:syz0:0 is already present [ 1165.837655][T16367] loop5: detected capacity change from 0 to 1024 [ 1165.949719][T16372] fuse: Unknown parameter 'user_id00000000000000000000' [ 1166.350031][T16381] netlink: 'syz.4.3317': attribute type 29 has an invalid length. [ 1166.405566][T16383] netlink: 'syz.4.3317': attribute type 29 has an invalid length. [ 1166.458345][T16381] netlink: 'syz.4.3317': attribute type 29 has an invalid length. [ 1166.499232][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1167.139993][T16388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3321'. [ 1167.395981][T16386] loop2: detected capacity change from 0 to 32768 [ 1167.418255][T16386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3319 (16386) [ 1167.455542][T16386] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1167.466179][T16386] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1167.767941][T16386] BTRFS info (device loop2): enabling ssd optimizations [ 1167.775105][T16386] BTRFS info (device loop2): enabling free space tree [ 1169.363332][T16420] fuse: Unknown parameter 'user_id00000000000000000000' [ 1169.410425][T15871] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1169.729580][T16424] netlink: 'syz.4.3331': attribute type 29 has an invalid length. [ 1169.820676][T16426] netlink: 'syz.4.3331': attribute type 29 has an invalid length. [ 1169.859491][T16424] netlink: 'syz.4.3331': attribute type 29 has an invalid length. [ 1170.048041][T16427] loop6: detected capacity change from 0 to 1024 [ 1170.450498][T12452] hfsplus: b-tree write err: -5, ino 4 [ 1172.374948][T16448] fuse: Unknown parameter 'user_id00000000000000000000' [ 1172.741344][T16450] netlink: 'syz.4.3342': attribute type 29 has an invalid length. [ 1172.789127][T16450] netlink: 'syz.4.3342': attribute type 29 has an invalid length. [ 1172.818858][T16450] netlink: 'syz.4.3342': attribute type 29 has an invalid length. [ 1173.365155][T16453] loop5: detected capacity change from 0 to 1024 [ 1173.476806][T16456] fuse: Unknown parameter '0x0000000000000003' [ 1173.938729][T16454] loop6: detected capacity change from 0 to 32768 [ 1174.015773][T16454] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1174.230449][T16454] XFS (loop6): Ending clean mount [ 1174.274533][ T30] audit: type=1800 audit(1760348755.539:201): pid=16454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3344" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 1174.361550][ T4200] hfsplus: b-tree write err: -5, ino 4 [ 1174.658690][T11800] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1175.755234][T16485] fuse: Bad value for 'fd' [ 1176.186382][T16488] netlink: 'syz.4.3355': attribute type 29 has an invalid length. [ 1176.236765][T16488] netlink: 'syz.4.3355': attribute type 29 has an invalid length. [ 1176.270417][T16488] netlink: 'syz.4.3355': attribute type 29 has an invalid length. [ 1176.816480][T16490] loop4: detected capacity change from 0 to 1024 [ 1176.864284][T16492] fuse: Unknown parameter '0x0000000000000003' [ 1177.187001][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1177.959166][T16494] loop3: detected capacity change from 0 to 32768 [ 1178.063836][T16494] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1178.558428][T16494] XFS (loop3): Ending clean mount [ 1178.702442][T16504] loop2: detected capacity change from 0 to 32768 [ 1178.721915][T16504] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3360 (16504) [ 1178.742054][T16504] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1178.752542][T16504] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1178.764908][ T30] audit: type=1800 audit(1760348759.969:202): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3358" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 1179.158920][T16504] BTRFS info (device loop2): enabling ssd optimizations [ 1179.166432][T16504] BTRFS info (device loop2): enabling free space tree [ 1179.858771][ T30] audit: type=1800 audit(1760348761.029:203): pid=16504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3360" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 1181.105767][T13569] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1182.632445][T15871] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1182.847184][T16593] fuse: Bad value for 'fd' [ 1182.855063][T16594] netlink: 'syz.4.3367': attribute type 29 has an invalid length. [ 1182.889100][T16596] netlink: 'syz.4.3367': attribute type 29 has an invalid length. [ 1182.931614][T16594] netlink: 'syz.4.3367': attribute type 29 has an invalid length. [ 1183.436797][T16598] loop4: detected capacity change from 0 to 1024 [ 1183.672290][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1183.698908][T16603] fuse: Unknown parameter '0x0000000000000003' [ 1185.274751][T16611] loop5: detected capacity change from 0 to 32768 [ 1185.321617][T16611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3374 (16611) [ 1185.520455][T16616] loop6: detected capacity change from 0 to 32768 [ 1185.571927][T16611] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1185.582573][T16611] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1185.691684][T16616] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1185.823981][T16611] BTRFS info (device loop5): enabling ssd optimizations [ 1185.831387][T16611] BTRFS info (device loop5): enabling free space tree [ 1185.859220][T16616] XFS (loop6): Ending clean mount [ 1185.879716][ T30] audit: type=1800 audit(1760348767.159:204): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3373" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 1186.511687][ T30] audit: type=1800 audit(1760348767.799:205): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3374" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 1186.993397][T11800] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1187.243091][T13494] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1190.225175][T16701] netlink: 'syz.5.3379': attribute type 29 has an invalid length. [ 1190.292007][T16701] netlink: 'syz.5.3379': attribute type 29 has an invalid length. [ 1190.345078][T16702] netlink: 'syz.5.3379': attribute type 29 has an invalid length. [ 1191.390070][T16713] fuse: Bad value for 'fd' [ 1191.520324][T16711] loop3: detected capacity change from 0 to 1024 [ 1191.810063][T16718] fuse: Unknown parameter '0x0000000000000003' [ 1192.017168][ T4247] hfsplus: b-tree write err: -5, ino 4 [ 1193.462931][T16731] loop3: detected capacity change from 0 to 32768 [ 1193.549459][T16731] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1193.591875][T16745] netlink: 'syz.6.3392': attribute type 29 has an invalid length. [ 1193.604770][T16745] netlink: 'syz.6.3392': attribute type 29 has an invalid length. [ 1193.627198][T16745] netlink: 'syz.6.3392': attribute type 29 has an invalid length. [ 1193.953635][T16731] XFS (loop3): Ending clean mount [ 1194.018476][ T30] audit: type=1800 audit(1760348775.299:206): pid=16731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3388" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 1194.309493][T16749] loop4: detected capacity change from 0 to 4096 [ 1194.343547][T16749] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1194.508370][T13569] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1194.582948][T16749] ntfs3(loop4): ino=19, mi_enum_attr [ 1194.589191][T16749] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1194.728022][T16749] ntfs3(loop4): failed to convert "c46c" to cp932 [ 1194.768367][T16749] ntfs3(loop4): ino=20, mi_enum_attr [ 1195.593432][T16762] loop4: detected capacity change from 0 to 1024 [ 1195.835493][T16561] hfsplus: b-tree write err: -5, ino 4 [ 1195.900529][T16764] program syz.2.3400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1197.389649][T16775] fuse: Unknown parameter '0x0000000000000003' [ 1197.624622][T16778] netlink: 'syz.6.3404': attribute type 29 has an invalid length. [ 1197.719067][T16778] netlink: 'syz.6.3404': attribute type 29 has an invalid length. [ 1197.799787][T16781] netlink: 'syz.6.3404': attribute type 29 has an invalid length. [ 1198.611505][T16783] loop4: detected capacity change from 0 to 32768 [ 1198.703605][T16783] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1198.906757][T16793] loop3: detected capacity change from 0 to 128 [ 1198.916723][T16793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1198.926955][T16793] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1198.970401][T16793] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1199.020241][T16793] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.200891][T16783] XFS (loop4): Ending clean mount [ 1199.241928][ T30] audit: type=1800 audit(1760348780.519:207): pid=16783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3406" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 1199.533616][T16797] batadv0: entered promiscuous mode [ 1199.539433][T16797] vlan2: entered promiscuous mode [ 1199.750050][T10019] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1200.191226][T16793] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1200.572945][T16810] loop5: detected capacity change from 0 to 8 [ 1200.692506][T16810] SQUASHFS error: zstd decompression error: 10 [ 1200.699104][T16810] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1200.707182][T16810] SQUASHFS error: Failed to read block 0x62b: -5 [ 1200.713863][T16810] SQUASHFS error: Unable to read metadata cache entry [629] [ 1200.721418][T16810] SQUASHFS error: Unable to read directory block [629:ff26] [ 1200.780292][T16808] loop6: detected capacity change from 0 to 1024 [ 1200.927697][T13569] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1201.365329][T16580] hfsplus: b-tree write err: -5, ino 4 [ 1201.533977][T16821] fuse: Unknown parameter '0x0000000000000003' [ 1201.908817][T16826] netlink: 'syz.4.3418': attribute type 29 has an invalid length. [ 1201.958863][T16827] netlink: 'syz.4.3418': attribute type 29 has an invalid length. [ 1201.980367][T16827] netlink: 'syz.4.3418': attribute type 29 has an invalid length. [ 1202.984016][T16837] loop4: detected capacity change from 0 to 1024 [ 1203.463821][T16835] loop3: detected capacity change from 0 to 32768 [ 1203.480647][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'. [ 1203.507387][T16839] vlan2: entered promiscuous mode [ 1203.513025][T16839] bridge0: entered promiscuous mode [ 1203.607131][T16835] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1203.725895][T16835] XFS (loop3): Ending clean mount [ 1203.752931][ T30] audit: type=1800 audit(1760348785.039:208): pid=16835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3420" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 1204.104912][T13569] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1204.128060][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1204.337972][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1204.388404][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1204.399965][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1204.410362][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1204.420892][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.434183][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1204.443527][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.674323][T16855] loop2: detected capacity change from 0 to 1024 [ 1204.928693][ T9] usb 7-1: GET_CAPABILITIES returned f8 [ 1204.934641][ T9] usbtmc 7-1:16.0: can't read capabilities [ 1205.145089][T12452] hfsplus: b-tree write err: -5, ino 4 [ 1205.164910][T12151] usb 7-1: USB disconnect, device number 26 [ 1205.232906][T16859] fuse: Unknown parameter '0x0000000000000003' [ 1205.458712][T16863] loop3: detected capacity change from 0 to 8 [ 1205.527156][T16863] SQUASHFS error: zstd decompression error: 10 [ 1205.533721][T16863] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1205.542051][T16863] SQUASHFS error: Failed to read block 0x62b: -5 [ 1205.548734][T16863] SQUASHFS error: Unable to read metadata cache entry [629] [ 1205.556167][T16863] SQUASHFS error: Unable to read directory block [629:ff26] [ 1206.638962][T16870] loop3: detected capacity change from 0 to 40427 [ 1206.653199][T16870] F2FS-fs (loop3): invalid crc value [ 1206.738099][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1206.913681][T16870] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1206.958197][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1206.983063][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1206.990287][T16870] F2FS-fs (loop3): Start checkpoint disabled! [ 1206.993464][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1207.009090][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1207.019380][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.031985][T16870] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1207.032641][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1207.051851][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.073307][T16870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1207.145799][ T30] audit: type=1800 audit(1760348788.409:209): pid=16870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3432" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1207.166923][ T30] audit: type=1800 audit(1760348788.429:210): pid=16870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3432" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1207.189619][T16870] syz.3.3432: attempt to access beyond end of device [ 1207.189619][T16870] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1207.232154][T16886] syz.3.3432: attempt to access beyond end of device [ 1207.232154][T16886] loop3: rw=2049, sector=45104, nr_sectors = 64 limit=40427 [ 1207.303232][ T9] usb 7-1: GET_CAPABILITIES returned 11 [ 1207.309833][ T9] usbtmc 7-1:16.0: can't read capabilities [ 1207.406087][T12452] kworker/u8:4: attempt to access beyond end of device [ 1207.406087][T12452] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 1207.420991][T12452] CPU: 0 UID: 0 PID: 12452 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(none) [ 1207.421052][T16889] loop2: detected capacity change from 0 to 128 [ 1207.421140][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1207.421259][T12452] Workqueue: writeback wb_workfn (flush-7:3) [ 1207.421507][T12452] Call Trace: [ 1207.421559][T12452] [ 1207.421607][T12452] __dump_stack+0x26/0x30 [ 1207.421759][T12452] dump_stack_lvl+0x1df/0x270 [ 1207.421927][T12452] dump_stack+0x1e/0x25 [ 1207.422064][T12452] f2fs_handle_critical_error+0xa6f/0xc20 [ 1207.422340][T12452] f2fs_stop_checkpoint+0x65/0x80 [ 1207.422499][T12452] f2fs_write_end_io+0x101c/0x1bc0 [ 1207.422700][T12452] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1207.422837][T12452] bio_endio+0xeb4/0x1010 [ 1207.423008][T12452] submit_bio_noacct+0x2009/0x2930 [ 1207.423222][T12452] submit_bio+0x57c/0x630 [ 1207.423371][T12452] f2fs_submit_write_bio+0x92/0x250 [ 1207.423548][T12452] __submit_merged_bio+0x16f/0x6a0 [ 1207.423722][T12452] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1207.423949][T12452] __submit_merged_write_cond+0x458/0x9a0 [ 1207.424148][T12452] f2fs_write_data_pages+0x4bb2/0x5480 [ 1207.424413][T12452] ? f2fs_balance_fs_bg+0x11e7/0x1240 [ 1207.424583][T12452] ? stack_depot_save_flags+0x35/0x7b0 [ 1207.424750][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.424887][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.425025][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.425163][T12452] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1207.425368][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.425506][T12452] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1207.425663][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.425808][T12452] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1207.425953][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.426091][T12452] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1207.426234][T12452] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1207.426364][T12452] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1207.426483][T12452] do_writepages+0x3f2/0x860 [ 1207.426694][T12452] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1207.426848][T12452] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 1207.427006][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.427166][T12452] __writeback_single_inode+0x101/0x1190 [ 1207.427336][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.427489][T12452] writeback_sb_inodes+0xac1/0x1cb0 [ 1207.427726][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.427918][T12452] wb_writeback+0x4ce/0xc00 [ 1207.428088][T12452] ? queue_io+0x491/0x790 [ 1207.428251][T12452] wb_workfn+0x397/0x1910 [ 1207.428388][T12452] ? kmsan_get_metadata+0xfb/0x160 [ 1207.428547][T12452] ? __pfx_wb_workfn+0x10/0x10 [ 1207.428682][T12452] process_scheduled_works+0xb91/0x1d80 [ 1207.428931][T12452] worker_thread+0xedf/0x1590 [ 1207.429129][T12452] kthread+0xd5c/0xf00 [ 1207.429269][T12452] ? __pfx_worker_thread+0x10/0x10 [ 1207.429455][T12452] ? __pfx_kthread+0x10/0x10 [ 1207.429578][T12452] ret_from_fork+0x1f5/0x4c0 [ 1207.429790][T12452] ? __pfx_kthread+0x10/0x10 [ 1207.429911][T12452] ret_from_fork_asm+0x1a/0x30 [ 1207.430104][T12452] [ 1207.430359][T12452] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1207.433889][T16889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1207.527121][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.527360][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.540104][T16891] fuse: Unknown parameter '0x0000000000000003' [ 1207.584669][ T9] usb 7-1: USB disconnect, device number 27 [ 1207.594180][T16889] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1207.841310][T12151] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1207.891053][T16889] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1207.911143][T16889] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.000444][T16895] loop4: detected capacity change from 0 to 8 [ 1208.048210][T12151] usb 6-1: Using ep0 maxpacket: 8 [ 1208.080198][T12151] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1208.090433][T12151] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1208.100561][T12151] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1208.111062][T12151] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.124423][T12151] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1208.133786][T12151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.154954][T16895] SQUASHFS error: zstd decompression error: 10 [ 1208.165826][T16895] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1208.175313][T16895] SQUASHFS error: Failed to read block 0x62b: -5 [ 1208.181925][T16895] SQUASHFS error: Unable to read metadata cache entry [629] [ 1208.189463][T16895] SQUASHFS error: Unable to read directory block [629:ff26] [ 1208.420790][T12151] usb 6-1: GET_CAPABILITIES returned 2f [ 1208.426744][T12151] usbtmc 6-1:16.0: can't read capabilities [ 1208.498644][T15871] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1208.606706][T16897] syzkaller0: entered promiscuous mode [ 1208.613610][T16897] syzkaller0: entered allmulticast mode [ 1208.640856][ T9] usb 6-1: USB disconnect, device number 27 [ 1209.913760][T16905] loop3: detected capacity change from 0 to 32768 [ 1209.942771][T16905] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1210.195893][T16905] XFS (loop3): Ending clean mount [ 1210.211544][T16905] XFS (loop3): Quotacheck needed: Please wait. [ 1210.255497][T16905] XFS (loop3): Quotacheck: Done. [ 1210.607556][T13569] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1210.860487][T16899] loop4: detected capacity change from 0 to 32768 [ 1210.892713][T16926] loop2: detected capacity change from 0 to 4096 [ 1210.937701][T16926] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1210.983293][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3453'. [ 1210.995517][T16899] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1211.208116][T16926] ntfs3(loop2): ino=19, mi_enum_attr [ 1211.213544][T16926] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1211.322948][T16899] XFS (loop4): Ending clean mount [ 1211.385237][ T30] audit: type=1800 audit(1760348792.669:211): pid=16899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3444" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 1211.413715][T16938] loop5: detected capacity change from 0 to 8 [ 1211.529468][T16938] SQUASHFS error: zstd decompression error: 10 [ 1211.535823][T16938] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1211.546683][T16938] SQUASHFS error: Failed to read block 0x62b: -5 [ 1211.554188][T16938] SQUASHFS error: Unable to read metadata cache entry [629] [ 1211.562015][T16938] SQUASHFS error: Unable to read directory block [629:ff26] [ 1211.980373][T10019] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1212.222837][T16944] syzkaller0: entered promiscuous mode [ 1212.228870][T16944] syzkaller0: entered allmulticast mode [ 1212.229002][T16946] fuse: Unknown parameter '0x0000000000000003' [ 1212.318246][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1212.491140][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1212.514466][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1212.524560][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1212.534651][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1212.544898][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.558469][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1212.569989][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.908591][ T11] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1212.941309][ T9] usb 3-1: GET_CAPABILITIES returned 67 [ 1212.947139][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1213.128186][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 1213.140737][ T11] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.150986][ T11] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1213.152354][T12151] usb 3-1: USB disconnect, device number 10 [ 1213.161116][ T11] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1213.179354][ T11] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.193572][ T11] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1213.203075][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.594318][ T11] usb 4-1: GET_CAPABILITIES returned 11 [ 1213.600566][ T11] usbtmc 4-1:16.0: can't read capabilities [ 1213.819338][ T11] usb 4-1: USB disconnect, device number 30 [ 1214.364527][T16963] loop5: detected capacity change from 0 to 32768 [ 1214.473871][T16963] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1214.753172][T16963] XFS (loop5): Ending clean mount [ 1214.770940][T16963] XFS (loop5): Quotacheck needed: Please wait. [ 1214.874163][T16963] XFS (loop5): Quotacheck: Done. [ 1215.692530][T13494] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1215.890520][T16980] loop3: detected capacity change from 0 to 4096 [ 1215.900648][T16980] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1216.349225][T16980] ntfs3(loop3): ino=19, mi_enum_attr [ 1216.359909][T16980] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1216.527620][T16984] fuse: Unknown parameter '0x0000000000000003' [ 1217.226493][T16989] loop5: detected capacity change from 0 to 8 [ 1217.659999][T16989] SQUASHFS error: zstd decompression error: 10 [ 1217.666334][T16989] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1217.674865][T16989] SQUASHFS error: Failed to read block 0x62b: -5 [ 1217.681450][T16989] SQUASHFS error: Unable to read metadata cache entry [629] [ 1217.691417][T16989] SQUASHFS error: Unable to read directory block [629:ff26] [ 1219.577544][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3474'. [ 1219.668739][T12151] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1219.818543][T15872] Bluetooth: hci5: command 0x0406 tx timeout [ 1219.978094][T12151] usb 7-1: device descriptor read/64, error -71 [ 1220.233006][T12151] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1220.418066][T12151] usb 7-1: device descriptor read/64, error -71 [ 1220.488241][ T11] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1220.538257][T12151] usb usb7-port1: attempt power cycle [ 1220.663447][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1220.676109][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.686577][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1220.711436][ T11] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1220.721024][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.729432][ T11] usb 3-1: Product: syz [ 1220.733722][ T11] usb 3-1: Manufacturer: syz [ 1220.738463][ T11] usb 3-1: SerialNumber: syz [ 1220.908134][T12151] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1220.930609][T12151] usb 7-1: device descriptor read/8, error -71 [ 1220.990515][ T11] usb 3-1: 0:2 : does not exist [ 1221.024755][ T11] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1221.083672][ T11] usb 3-1: USB disconnect, device number 11 [ 1221.173862][T12151] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1221.204788][T12151] usb 7-1: device descriptor read/8, error -71 [ 1221.320483][T12151] usb usb7-port1: unable to enumerate USB device [ 1222.688438][T12151] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1222.827396][T17014] vlan2: entered promiscuous mode [ 1222.832623][T17014] gretap0: entered promiscuous mode [ 1222.950488][T12151] usb 3-1: config 0 has no interfaces? [ 1222.956212][T12151] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1222.965826][T12151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.050029][T12151] usb 3-1: config 0 descriptor?? [ 1223.456805][T17031] fuse: Unknown parameter 'fd0x0000000000000003' [ 1224.128265][ T11] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1224.302289][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 1224.323981][ T11] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1224.334257][ T11] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1224.346508][ T11] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1224.357502][ T11] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1224.371272][ T11] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1224.380974][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.678448][ T11] usb 6-1: GET_CAPABILITIES returned 11 [ 1224.684430][ T11] usbtmc 6-1:16.0: can't read capabilities [ 1224.898170][ T11] usb 6-1: USB disconnect, device number 28 [ 1226.405291][T17058] loop6: detected capacity change from 0 to 1024 [ 1226.619907][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3490'. [ 1226.644189][T17061] vlan2: entered promiscuous mode [ 1226.776767][T17064] syzkaller0: entered promiscuous mode [ 1226.782506][T17064] syzkaller0: entered allmulticast mode [ 1227.385183][T17070] fuse: Unknown parameter 'fd0x0000000000000003' [ 1228.118400][ T11] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1228.298067][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 1228.324132][ T11] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1228.336391][ T11] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1228.347395][ T11] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.357582][ T11] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.370851][ T11] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1228.380268][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.015739][ T11] usb 7-1: GET_CAPABILITIES returned 2f [ 1229.021974][ T11] usbtmc 7-1:16.0: can't read capabilities [ 1229.218756][ T11] usb 7-1: USB disconnect, device number 32 [ 1229.248318][ T1720] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1229.438096][ T1720] usb 6-1: Using ep0 maxpacket: 8 [ 1229.479687][ T1720] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1229.489791][ T1720] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1229.499844][ T1720] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1229.510189][ T1720] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1229.523571][ T1720] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1229.532977][ T1720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.956641][ T1720] usb 6-1: GET_CAPABILITIES returned 0 [ 1229.962463][ T1720] usbtmc 6-1:16.0: can't read capabilities [ 1230.054080][ T1720] usb 3-1: USB disconnect, device number 12 [ 1230.184119][T12151] usb 6-1: USB disconnect, device number 29 [ 1231.486113][T17095] loop2: detected capacity change from 0 to 1024 [ 1231.804404][T17100] syzkaller0: entered promiscuous mode [ 1231.810803][T17100] syzkaller0: entered allmulticast mode [ 1232.099442][T17103] fuse: Unknown parameter 'fd0x0000000000000003' [ 1232.818497][ T11] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1233.022625][ T11] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.033110][ T11] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1233.045000][ T11] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.054767][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.334145][T12151] usb 3-1: USB disconnect, device number 13 [ 1233.858108][T12151] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1234.028318][T12151] usb 6-1: Using ep0 maxpacket: 8 [ 1234.042735][T12151] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1234.053099][T12151] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1234.063309][T12151] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1234.077579][T12151] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.093780][T12151] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.103291][T12151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.245575][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'. [ 1234.290172][T17127] syz_tun: entered promiscuous mode [ 1234.309056][T17127] syz_tun: left promiscuous mode [ 1234.419608][T12151] usb 6-1: GET_CAPABILITIES returned 0 [ 1234.425352][T12151] usbtmc 6-1:16.0: can't read capabilities [ 1234.507309][T17129] loop2: detected capacity change from 0 to 1024 [ 1234.646087][T12151] usb 6-1: USB disconnect, device number 30 [ 1234.838200][ T11] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 1235.024084][ T11] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1235.032808][ T11] usb 7-1: config 0 has no interface number 0 [ 1235.040364][ T11] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1235.051651][ T11] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1235.062591][ T11] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1235.074619][ T11] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1235.086007][ T11] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1235.099615][ T11] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1235.114199][ T11] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1235.123772][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.136187][ T11] usb 7-1: config 0 descriptor?? [ 1235.150586][T17132] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1235.173647][T17132] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1235.220967][ T11] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1235.239113][T12151] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1235.409293][T12151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.421022][T12151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.434417][ T11] usb 7-1: USB disconnect, device number 33 [ 1235.442216][T12151] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1235.451923][T12151] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1235.460253][T12151] usb 3-1: Manufacturer: syz [ 1235.471930][ T11] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1235.472958][T12151] usb 3-1: config 0 descriptor?? [ 1236.048045][ T11] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1236.358715][ T11] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.369276][ T11] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.380724][ T11] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1236.393964][ T11] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1236.403524][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.559786][ T11] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1236.659807][ T11] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1236.694481][T12151] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #100: -71 [ 1236.703609][T12151] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 1236.712229][T12151] uclogic 0003:256C:006D.0010: failed probing pen v1 parameters: -71 [ 1236.720540][T12151] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 1236.728396][T12151] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 1236.789843][T12151] usb 3-1: USB disconnect, device number 14 [ 1236.800049][ T11] usb 5-1: USB disconnect, device number 37 [ 1237.633910][T17164] loop3: detected capacity change from 0 to 40427 [ 1237.678237][T17164] F2FS-fs (loop3): invalid crc value [ 1237.908539][T17164] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1237.952183][T17164] F2FS-fs (loop3): Start checkpoint disabled! [ 1237.968104][T17164] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1237.976722][T17164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1238.724353][T17174] loop2: detected capacity change from 0 to 64 [ 1238.729553][ T11] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1238.934965][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 1238.968061][ T11] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.976371][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.989151][ T11] usb 7-1: config 0 has no interface number 0 [ 1239.116907][ T11] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1239.126319][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.134690][ T11] usb 7-1: Product: syz [ 1239.139119][ T11] usb 7-1: Manufacturer: syz [ 1239.143870][ T11] usb 7-1: SerialNumber: syz [ 1239.248736][ T11] usb 7-1: config 0 descriptor?? [ 1239.274810][T17181] netlink: 'syz.2.3538': attribute type 1 has an invalid length. [ 1239.288135][ T11] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1239.300498][ T11] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input34 [ 1239.396040][T17181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1239.515400][T17172] netlink: set zone limit has 8 unknown bytes [ 1239.536383][ T11] usb 7-1: USB disconnect, device number 34 [ 1239.625700][T17181] bond1: entered allmulticast mode [ 1239.692635][T17181] bond1: (slave ip6gretap1): making interface the new active one [ 1239.703628][T17181] ip6gretap1: entered allmulticast mode [ 1239.714673][T17181] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1240.112649][T17187] loop3: detected capacity change from 0 to 1024 [ 1240.447039][T12309] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1240.978250][T12151] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1241.088292][ T1720] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1241.185293][T12151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.196722][T12151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.264464][ T1720] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.275189][ T1720] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1241.286373][ T1720] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.299791][ T1720] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1241.309149][ T1720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.328817][T12151] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1241.342475][T12151] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1241.351960][T12151] usb 4-1: Manufacturer: syz [ 1241.361842][T12151] usb 4-1: config 0 descriptor?? [ 1241.393583][ T1720] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1241.429456][ T1720] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1241.587609][ T1720] usb 7-1: USB disconnect, device number 35 [ 1242.457667][T12151] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #100: -71 [ 1242.473482][T12151] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71 [ 1242.483548][T12151] uclogic 0003:256C:006D.0011: failed probing pen v1 parameters: -71 [ 1242.492068][T12151] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 1242.499966][T12151] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71 [ 1242.603662][T12151] usb 4-1: USB disconnect, device number 31 [ 1243.157214][T17223] loop4: detected capacity change from 0 to 1024 [ 1244.848256][T12151] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1245.012629][T12151] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.023421][T12151] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1245.037611][T12151] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.051859][T12151] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1245.061113][T12151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.189556][T12151] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1245.320596][T12151] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1245.399891][T12151] usb 3-1: USB disconnect, device number 15 [ 1245.488162][ T11] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1245.695036][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.706559][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.781672][ T11] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1245.791261][ T11] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1245.799634][ T11] usb 7-1: Manufacturer: syz [ 1245.832178][T17260] loop5: detected capacity change from 0 to 1024 [ 1245.863135][ T11] usb 7-1: config 0 descriptor?? [ 1246.966973][ T11] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #100: -71 [ 1246.980889][ T11] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 1246.989526][ T11] uclogic 0003:256C:006D.0012: failed probing pen v1 parameters: -71 [ 1246.998097][ T11] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 1247.006042][ T11] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 1247.168162][ T11] usb 7-1: USB disconnect, device number 36 [ 1247.488058][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1247.702427][ T9] usb 5-1: config 0 has no interfaces? [ 1247.768381][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1247.777646][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1247.786056][ T9] usb 5-1: Product: syz [ 1247.792796][ T9] usb 5-1: Manufacturer: syz [ 1247.798420][ T9] usb 5-1: SerialNumber: syz [ 1247.901651][ T9] usb 5-1: config 0 descriptor?? [ 1248.212546][T17282] syzkaller0: entered promiscuous mode [ 1248.218865][T17282] syzkaller0: entered allmulticast mode [ 1248.244972][ T9] usb 5-1: USB disconnect, device number 38 [ 1249.768911][T12151] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1249.954714][T12151] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.965673][T12151] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1249.977033][T12151] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1249.990468][T12151] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1249.999838][T12151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.116077][T12151] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1250.124494][T12151] usb 6-1: invalid MIDI out EP 0 [ 1250.347678][T12151] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1250.482362][T12151] usb 6-1: USB disconnect, device number 31 [ 1251.528111][T12151] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1251.699252][T12151] usb 4-1: Using ep0 maxpacket: 32 [ 1251.719612][T12151] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1251.728957][T12151] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1251.740720][T12151] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1251.752208][T12151] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1251.765652][T12151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1251.821880][T12151] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1251.831439][T12151] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1251.840212][T12151] usb 4-1: Product: syz [ 1251.844532][T12151] usb 4-1: Manufacturer: syz [ 1251.849454][T12151] usb 4-1: SerialNumber: syz [ 1251.876266][T12151] usb 4-1: config 0 descriptor?? [ 1251.904804][T12151] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1251.954403][T12151] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1252.251305][T17321] netlink: 'syz.3.3588': attribute type 8 has an invalid length. [ 1252.459333][T17321] bridge0: port 3(syz_tun) entered blocking state [ 1252.466213][T17321] bridge0: port 3(syz_tun) entered disabled state [ 1252.473654][T17321] syz_tun: entered allmulticast mode [ 1252.482013][T17321] syz_tun: entered promiscuous mode [ 1252.489305][T17321] bridge0: port 3(syz_tun) entered blocking state [ 1252.496084][T17321] bridge0: port 3(syz_tun) entered forwarding state [ 1252.589509][T12151] usb 4-1: USB disconnect, device number 32 [ 1252.629657][T12151] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1253.558433][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1253.754114][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.754209][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1253.754304][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.754435][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1253.754523][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.787479][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1253.788692][ T9] usb 3-1: invalid MIDI out EP 0 [ 1253.984663][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1254.095795][ T9] usb 3-1: USB disconnect, device number 16 [ 1255.625847][T17377] loop4: detected capacity change from 0 to 32768 [ 1255.654872][T17377] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3607 (17377) [ 1255.704873][T17377] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1255.718734][T17377] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1255.928306][T17377] BTRFS info (device loop4): enabling ssd optimizations [ 1255.935557][T17377] BTRFS info (device loop4): enabling free space tree [ 1257.883397][T12151] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1258.058858][T12151] usb 3-1: Using ep0 maxpacket: 32 [ 1258.081659][T10019] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1258.102904][T12151] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1258.112601][T12151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.255477][T12151] usb 3-1: config 0 descriptor?? [ 1258.478406][T12151] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1258.502419][T12151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1258.536860][T12151] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1258.551301][T12151] usb 3-1: media controller created [ 1258.630226][T12151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.809430][T17396] ===================================================== [ 1258.816734][T17396] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1258.824359][T17396] _copy_to_user+0xcc/0x120 [ 1258.829522][T17396] i2cdev_ioctl_smbus+0x586/0x660 [ 1258.834685][T17396] i2cdev_ioctl+0xa14/0xf40 [ 1258.839499][T17396] __se_sys_ioctl+0x23c/0x400 [ 1258.844427][T17396] __x64_sys_ioctl+0x97/0xe0 [ 1258.851589][T17396] x64_sys_call+0x1cbc/0x3e30 [ 1258.856445][T17396] do_syscall_64+0xd9/0xfa0 [ 1258.862144][T17396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.868682][T17396] [ 1258.871073][T17396] Uninit was stored to memory at: [ 1258.876292][T17396] __i2c_smbus_xfer+0x2561/0x2f60 [ 1258.881786][T17396] i2c_smbus_xfer+0x31d/0x4d0 [ 1258.886617][T17396] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1258.891831][T17396] i2cdev_ioctl+0xa14/0xf40 [ 1258.896429][T17396] __se_sys_ioctl+0x23c/0x400 [ 1258.901277][T17396] __x64_sys_ioctl+0x97/0xe0 [ 1258.905946][T17396] x64_sys_call+0x1cbc/0x3e30 [ 1258.910825][T17396] do_syscall_64+0xd9/0xfa0 [ 1258.915502][T17396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.922686][T17396] [ 1258.925085][T17396] Local variable msgbuf1.i created at: [ 1258.930779][T17396] __i2c_smbus_xfer+0x86a/0x2f60 [ 1258.935824][T17396] i2c_smbus_xfer+0x31d/0x4d0 [ 1258.940663][T17396] [ 1258.943028][T17396] Byte 0 of 1 is uninitialized [ 1258.948045][T17396] Memory access of size 1 starts at ffff888027d8bcf6 [ 1258.956273][T17396] Data copied to user address 0000200000000040 [ 1258.963199][T17396] [ 1258.965579][T17396] CPU: 0 UID: 0 PID: 17396 Comm: syz.2.3609 Not tainted syzkaller #0 PREEMPT(none) [ 1258.975103][T17396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1258.985342][T17396] ===================================================== [ 1258.992392][T17396] Disabling lock debugging due to kernel taint [ 1258.998658][T17396] Kernel panic - not syncing: kmsan.panic set ... [ 1259.005131][T17396] CPU: 0 UID: 0 PID: 17396 Comm: syz.2.3609 Tainted: G B syzkaller #0 PREEMPT(none) [ 1259.016151][T17396] Tainted: [B]=BAD_PAGE [ 1259.020339][T17396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1259.030442][T17396] Call Trace: [ 1259.033768][T17396] [ 1259.036730][T17396] __dump_stack+0x26/0x30 [ 1259.041154][T17396] dump_stack_lvl+0x53/0x270 [ 1259.045831][T17396] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1259.051724][T17396] dump_stack+0x1e/0x25 [ 1259.055965][T17396] vpanic+0x435/0xd30 [ 1259.060109][T17396] panic+0x15d/0x160 [ 1259.064116][T17396] kmsan_report+0x31c/0x320 [ 1259.068692][T17396] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1259.074776][T17396] ? kmsan_copy_to_user+0xf1/0x190 [ 1259.079955][T17396] ? _copy_to_user+0xcc/0x120 [ 1259.084714][T17396] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1259.089995][T17396] ? i2cdev_ioctl+0xa14/0xf40 [ 1259.094767][T17396] ? __se_sys_ioctl+0x23c/0x400 [ 1259.099700][T17396] ? __x64_sys_ioctl+0x97/0xe0 [ 1259.104547][T17396] ? x64_sys_call+0x1cbc/0x3e30 [ 1259.109484][T17396] ? do_syscall_64+0xd9/0xfa0 [ 1259.114248][T17396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.120401][T17396] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1259.125797][T17396] ? __i2c_transfer+0x11cd/0x3110 [ 1259.130915][T17396] ? kmsan_get_metadata+0xfb/0x160 [ 1259.136101][T17396] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1259.142537][T17396] ? kmsan_get_metadata+0xfb/0x160 [ 1259.147720][T17396] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1259.153647][T17396] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1259.158931][T17396] ? kmsan_get_metadata+0xfb/0x160 [ 1259.164125][T17396] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1259.170018][T17396] kmsan_internal_check_memory+0x1e1/0x230 [ 1259.175946][T17396] kmsan_copy_to_user+0xf1/0x190 [ 1259.180953][T17396] _copy_to_user+0xcc/0x120 [ 1259.185537][T17396] i2cdev_ioctl_smbus+0x586/0x660 [ 1259.190643][T17396] i2cdev_ioctl+0xa14/0xf40 [ 1259.195247][T17396] ? kmsan_get_metadata+0x9/0x160 [ 1259.200349][T17396] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1259.205468][T17396] __se_sys_ioctl+0x23c/0x400 [ 1259.210241][T17396] __x64_sys_ioctl+0x97/0xe0 [ 1259.214929][T17396] x64_sys_call+0x1cbc/0x3e30 [ 1259.219702][T17396] do_syscall_64+0xd9/0xfa0 [ 1259.224296][T17396] ? irqentry_exit+0x16/0x60 [ 1259.228975][T17396] ? clear_bhb_loop+0x40/0x90 [ 1259.233730][T17396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.239693][T17396] RIP: 0033:0x7fec1dd8eec9 [ 1259.244190][T17396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.263880][T17396] RSP: 002b:00007fec1bff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.272372][T17396] RAX: ffffffffffffffda RBX: 00007fec1dfe5fa0 RCX: 00007fec1dd8eec9 [ 1259.280412][T17396] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 1259.288446][T17396] RBP: 00007fec1de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1259.296479][T17396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.304507][T17396] R13: 00007fec1dfe6038 R14: 00007fec1dfe5fa0 R15: 00007fffdcba6608 [ 1259.312560][T17396] [ 1259.315907][T17396] Kernel Offset: disabled [ 1259.320272][T17396] Rebooting in 86400 seconds..