last executing test programs: 4m15.84356147s ago: executing program 2 (id=623): creat(&(0x7f0000000000)='./file0\x00', 0x78) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x60a20) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x203, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 4m15.807323731s ago: executing program 2 (id=624): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x6048800) 4m15.751327552s ago: executing program 2 (id=625): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x8a, 0x7fffffffffffe, 0x5, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x210001, 0x1000000000000010, 0x2, 0x4, 0x0, 0x2, 0x4000000000000000], 0x70000, 0x2200}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1ffffff, 0x4, 0xc4, 0x53, 0x3e, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x6, 0x5, 0x800000001}, {0xb, 0xa7f2, 0x8, 0x88, 0x8, 0xfd, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x40000000000001}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x11, 0x7, 0xb3, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m15.595399326s ago: executing program 2 (id=628): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000200001032abd7000ffdfdfe154a905000500000000050013000100000053063e07b7e6c1f2835711a0b15115066c2572deb8dec4afcffcbd4863d7a48becc23992705b46253ba9ce02f65c350acea212cb6aab2e2bab79fd1d71ef7f4a579d5a06a8fde5fcb7f80864b8fb6de71d"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0xdc82964405a8d329) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 4m14.897555262s ago: executing program 1 (id=630): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m14.748819805s ago: executing program 1 (id=631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, 0x0, 0x0) 4m14.634380218s ago: executing program 2 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4m14.516153311s ago: executing program 2 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 4m14.467558172s ago: executing program 1 (id=635): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c68", 0x4b}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f4069", 0x1d}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m13.531467363s ago: executing program 1 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000200)="374990d72432", 0x6}], 0x2) 4m13.311466288s ago: executing program 1 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4m13.24184015s ago: executing program 1 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, 0x0, 0x0) 3m59.407611508s ago: executing program 32 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 3m57.543671261s ago: executing program 33 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, 0x0, 0x0) 2m59.212296771s ago: executing program 5 (id=1045): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34814c40, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1000003}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x500) 2m58.255402584s ago: executing program 5 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0xa, 0x0, 0xbf, 0x8, 0x401}) 2m58.173168665s ago: executing program 5 (id=1057): socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x4e25, @remote}}) 2m58.011724039s ago: executing program 5 (id=1060): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m57.849109763s ago: executing program 5 (id=1061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x11, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffffb, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2m57.459643862s ago: executing program 5 (id=1064): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m57.08981534s ago: executing program 34 (id=1064): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m48.355344251s ago: executing program 3 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = getpid() syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x6b, 0x56, 0x10, 0x10, 0x5ac, 0x236, 0x3e2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xc9, 0x10, 0x8, "", [{{0x9, 0x4, 0xcc, 0x8, 0x0, 0x3, 0x83, 0x2, 0x8b}}]}}]}}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0xf006, 0x8000000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r5}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000240)={0x5, 0x0, [{0xacf, 0x0, 0xff}, {0x2e7, 0x0, 0x100000000000000}, {0x298, 0x0, 0x4}, {0xbf1, 0x0, 0x7}, {0x40000091, 0x0, 0xfffffffffffffffa}]}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xb03, 0x3000, 0x4, r5}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0x6, 0x800}}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000040)=0x1) r9 = dup2(r8, r8) read$FUSE(r9, &(0x7f0000000440)={0x2020}, 0x2020) r10 = fspick(r2, &(0x7f00000003c0)='./file0\x00', 0x0) fsmount(r10, 0x0, 0x5) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42085180}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r11, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x480a0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 2m47.681832096s ago: executing program 6 (id=1110): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc030109021200"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) connect$802154_dgram(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c91022001e000100"], 0x27) 2m46.506106823s ago: executing program 6 (id=1119): creat(&(0x7f0000000000)='./file0\x00', 0x78) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x60a20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x203, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 2m46.043181194s ago: executing program 6 (id=1121): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2m45.76107251s ago: executing program 6 (id=1123): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018658, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@noblock_validity}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodiscard}, {@sb={'sb', 0x3d, 0xfffffffffffffffc}}, {@errors_continue}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 2m45.399706149s ago: executing program 6 (id=1127): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc030109021200"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) connect$802154_dgram(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c91022001e000100"], 0x27) 2m44.199598946s ago: executing program 3 (id=1131): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/138) 2m43.992257391s ago: executing program 6 (id=1133): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 2m43.536549371s ago: executing program 35 (id=1133): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 2m41.932233478s ago: executing program 3 (id=1142): creat(&(0x7f0000000000)='./file0\x00', 0x78) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x60a20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x203, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 2m41.650753255s ago: executing program 3 (id=1145): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018658, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@noblock_validity}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodiscard}, {@sb={'sb', 0x3d, 0xfffffffffffffffc}}, {@errors_continue}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 2m41.461401809s ago: executing program 3 (id=1147): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') openat(r0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x11, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x180000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m40.890177822s ago: executing program 3 (id=1150): socket(0x2, 0x3, 0xff) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r0], 0x22) syz_socket_connect_nvme_tcp() 2m40.640139608s ago: executing program 36 (id=1150): socket(0x2, 0x3, 0xff) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r0], 0x22) syz_socket_connect_nvme_tcp() 3.827668062s ago: executing program 8 (id=2010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 3.826426602s ago: executing program 0 (id=2019): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)={0x1, 0x0, [{0x0, 0x32, &(0x7f0000000200)=""/50}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffdf6, 0x0, 0x100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xfffff257, 0x15, 0x1a0, &(0x7f0000000000)="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"}) 3.680120866s ago: executing program 0 (id=2011): io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x50, 0x1e, 0x109, 0x70bd26, 0x25dfdc01, {}, [{0x3c, 0x1, [@m_mirred={0x38, 0x5, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0xb, 0x6, "6e901a7ed0c22f"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x50}, 0x1, 0x2b1e}, 0x8058) 3.642277626s ago: executing program 8 (id=2012): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0xc, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x600}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 3.416843631s ago: executing program 4 (id=2013): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') openat(r0, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x11, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x180000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.267711525s ago: executing program 8 (id=2014): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5be, &(0x7f0000000000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x240, 0x19) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xfffffffc, 0x14c0348, 0xc0be, 0x2, 0xf296, 0x2e64, 0x0, 0x0, 0x10, 0x3}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.882741944s ago: executing program 8 (id=2015): socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80402, 0x0) syz_open_pts(r0, 0x0) r1 = creat(0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x3) fchdir(r3) r4 = fanotify_init(0x1a, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xf0) fanotify_mark(r4, 0x541, 0x1023, r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 2.863613524s ago: executing program 4 (id=2016): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0xfffffffffffffffc) 2.475569163s ago: executing program 0 (id=2020): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) 1.914816806s ago: executing program 8 (id=2021): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c68", 0x4b}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f4069", 0x1d}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.908133077s ago: executing program 4 (id=2022): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)={0x1, 0x0, [{0x0, 0x32, &(0x7f0000000200)=""/50}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffdf6, 0x0, 0x100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xfffff257, 0x15, 0x1a0, &(0x7f0000000000)="0f333755fc523cf6d809533b47dd20cf85198a8619c67f34468ff053bd304ed5f9a17c4d41b329752d6eec4b649b27db825787b38637cea3ec94782612f698b3c5fa5e34d35f2c87f149da12fd58349e2ae51df83ef61d360cfae5e2d37b5a70225d831b5f29ea9a4eca96813cd7a2665f9f2617e7bcb684a77206b955839c6edd0ab6c106e899f6a07869686ad659d8f2c42fb74f9bb570eb7f8cf5237288315cb04869e8dbffc734eb36af2819e310f5cd6880379b138bcb43a6e05e8a7e631562617dcfe2d691cd051f8f5ef94d12bb0c7d0528a694bb22945408f1ad817036bf0807798e877dfb19512105ae6a3d8eda73c8201e5afb1f486f93009736b738188381c72a923d869aa2bf8266393159ae6df95ee99b5bda2679e8ff56537e0afde5ee313d5b10c1989202c1ada573a48f9298dedc0e877627748050e25270f9dbff8512f2dfe276190646da4800ca4a4ed79f6f728856b4d8e443dda46b0703ed1cdefd2b407c617afd887bd5eee97e4c0ccbcb6276bb14eb3c2c300801362ed81735141a1881a17886883742276d8a7e3cccbf3267f9d49ca30ecc73623c9b85f69a647e81c6ccad607583a7f4b097996dc3524ab04b29914536b4b40c4d0ef062e8fa786455f66448f909a20e700a84b50f6f024bfce6da156c71235c0095b5c50caab012ad38d91a6fed8a185b6fcac407fb01063c6e18a3e96ce5e68b2551b482bdf14ac863944592110f7d6f0b62685be902a42098ae66e27097a91fe6f3ad35534ac8048bff09674d6af691129b11ad1e2b9c71fd17236958ead13b05971e7b800db1032f6cce65b759012e2080bf07e3fbb8a943f0091e9e25f610fd82a3d3f2ab68616007132c21fe74f0208d7436a57c5f870b52cdbbb8c9aae78afb994e7ef5d7a4290037a1c757e4848eb58b9d6de3bd04161a9e997fcff6ed67e8b20f2cecb95943aeaea16700128d21b97e349081b48ec0b29033f1de18160d1bb5cdec3de5ff16bf12820e561b6bec340749a5b1fc0cc8fc1d9d7ca611eb7bc145bbf708f9eb7550428042cbfc4fc5c46c14a75f21fd2cc5cf3de276bb750bb734ace2fbc83a27a4c7cb0250f5db598ed2ec1dd17d160c0974a31c8f7393d26cdf383ec0937225b73dc4dcbea9642b64f9d5dbe806eb98df07fb14cfdb2c501aa28a3ca6a8988a4f392817c2285f15795f3f99db09d04c9e00cefced103a47a301863276383f44e5af8b85d85650be6b7b02bd8d074287d9ef1382747d7eed067ca673008d201f9d548e695e3c4e771c93772a8d7d4dcc9e8187831ac7de5f8e3b9d904cc6331e1c6179e17f99403b3e872281b4426e3127f18c45d208167a3e977c5fd1fd1608be3a0b09dfc796631ae6803062f9f9ea52ec438b0f8d4944046a1c64be329e844e8554e0a4139b6ab78d04ed5f01ce88195f0ef3a40798"}) 1.869173137s ago: executing program 0 (id=2023): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x1, 0x8}, 0x3f, [0x9, 0x2, 0x18, 0x10002, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x1, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x100000, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xcdd60000, 0x0, 0x2, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0xf, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x4, 0xf, 0x5, 0x0, 0x8, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x4, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x2, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0xfffff800, 0x2, 0x411, 0xc, 0x3, 0x2, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x30, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8004, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0x2, 0x4, 0x3, 0x7, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x1fd, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 1.681178042s ago: executing program 7 (id=2024): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0xc, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x600}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 1.658132322s ago: executing program 4 (id=2025): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x4af, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xe0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 1.519454395s ago: executing program 7 (id=2026): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') openat(r0, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x11, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x180000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.29569042s ago: executing program 4 (id=2027): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 1.106634024s ago: executing program 7 (id=2028): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 963.307698ms ago: executing program 7 (id=2029): socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80402, 0x0) syz_open_pts(r0, 0x0) r1 = creat(0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x3) fchdir(r3) r4 = fanotify_init(0x1a, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xf0) fanotify_mark(r4, 0x541, 0x1023, r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 899.648249ms ago: executing program 0 (id=2030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000c00)="$eJzs3c9vI1cdAPDvTH42u212oQeogF2gsKDV2htvu6p6abmAUFWpouLEYRsSbxTWXi+xU5oQifRvAAkkTvAncEDigNQTB24ckTgAohyQCkSgDRIHoxlPEjdxWLN2bDb+fKTZ+fFm5vuevTPv+dmZF8DEuhoRuxExGxFvRcRisT0ppni1M2X7PdzbWdnf21lJot1+829Jnp5ti65jMheKc85HxNe+EvHN5GTc5tb2veVarbpRrJdb9Qfl5tb2jfX68lp1rXq/Urm9dPvmS7derAytrFfqP/vgy+uvff2Xv/jk+7/Z/eJ3s2xdLNK6yzFMnaLPHMbJTEfEa2cRbAymivnsmPPB40kj4iMR8Zn8+l+Mqfx/JwBwnrXbi9Fe7F4HAM67NO8DS9JSRKRp0Qgodfrwno2FtNZotq7fbWzeX+30lV2KmfTueq168/Lc776d7zyTZOtLeVqenq9Xjq3fiojLEfGDuafy9dJKo7Y6niYPAEy8C931f0T8cy5NS6W+Du3xrR4A8MSYH3cGAICRU/8DwORR/wPA5Omj/i++7N8987wAAKPh8z8ATB71PwBMHvU/AEyUN15/PZva+8Xzr1ff3tq813j7xmq1ea9U31wprTQ2HpTWGo21/Jk99Uedr9ZoPFh6ITbfKbeqzVa5ubV9p97YvN+6kz/X+051ZiSlAgD+m8tX3vttEhG7Lz+VT9E1loO6Gs63dIh7AU+WqUEO1kCAJ5rRvmBy9VWF542EX595XoDx6Pkw7/meix/2o/8hiN8Zwf+Vax/vv//fGM9wvujZh8n1eP3/rww9H8DoPXb//x+Gmw9g9Nrt5PiY/7OHSd3eGOWoxADAWRrgJ3zt7w2rEQKM1aMG8x7K9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzlyMiG9FkpbyscDT7N+0VIp4OiIuxUxyd71WvRkRz8SViJiZy9aXxp1pAGBA6V+SYvyva4vPXzyeOpv8ay6fR8R3fvzmD99ZbrU2lrLtfz/cPncwfFjl6LgBxhUEAPr3p352yuvvSjHv+iD/cG9n5WA6wzye8MGXDgcfXdnf28mnTsp0tNvtdsR83pZY+EcS08Ux8xHxXERMDSH+7rsR8bFe5U/yvpFLxcin3fGjiP30SOOnH4qf5mmdefbyfXQIeYFJ8152/3m11/WXxtV83vv6n8/vUIPL73/zEQf3vv2u+NNFpKke8bNr/mq/MV741VdPbGwvdtLejXhuulf85DB+ckr85/uM//tPfOr7r5yS1v5JxLXoHb87VrlVf1Bubm3fWK8vr1XXqvcrldtLt2++dOvFSjnvoy4f9FSf9NeXrz9zWt6y8i+cEr/zzl84Vv7Zw2M/12f5f/rvt77x6aPVuePxv/DZ3u//s/m89+uf1Ymf7zP+8sLPTx2+O4u/ekr5H/X+X+8z/vt/3l7tc1cAYASaW9v3lmu16sZAC9mn0GGc58RClsX+dj5oLg4W9I+RLxy9LEkkMexyZY2xfnaeOatX9cwXpg/bisM44VRnYaE45YiLkw6pFIMtxKVi4eGogo7nfgSMztFFP+6cAAAAAAAAAAAAAAAApxnF3zCNu4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8JAAD//7a0vsc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) fchmodat(r0, &(0x7f0000000300)='.\x00', 0xffffffd7) 754.779883ms ago: executing program 7 (id=2031): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5be, &(0x7f0000000000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x240, 0x19) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xfffffffc, 0x14c0348, 0xc0be, 0x2, 0xf296, 0x2e64, 0x0, 0x0, 0x10, 0x3}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 714.624384ms ago: executing program 8 (id=2032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 378.798581ms ago: executing program 0 (id=2033): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)={0x1, 0x0, [{0x0, 0x32, &(0x7f0000000200)=""/50}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffdf6, 0x0, 0x100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xfffff257, 0x15, 0x1a0, &(0x7f0000000000)="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"}) 377.688221ms ago: executing program 7 (id=2034): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0xc, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x600}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 377.526751ms ago: executing program 4 (id=2035): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x6, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc, 0xc0000000}, @sadb_ident={0x2, 0xb, 0x8, 0x0, 0x7}]}, 0x30}, 0x1, 0x7}, 0x0) 0s ago: executing program 37 (id=2035): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x6, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc, 0xc0000000}, @sadb_ident={0x2, 0xb, 0x8, 0x0, 0x7}]}, 0x30}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): idge0: port 1(bridge_slave_0) entered forwarding state [ 250.549818][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.557026][ T7874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.568137][ T9812] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 250.579403][ T9812] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 250.588293][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 250.602243][ T9812] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 250.656547][ T9812] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 250.714988][ T9898] loop0: detected capacity change from 0 to 1024 [ 250.793888][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 250.820756][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 250.836665][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 250.846784][ T8] usb 5-1: can't read configurations, error -71 [ 250.945238][ T9901] netlink: 'syz.0.1171': attribute type 9 has an invalid length. [ 250.973749][ T9901] netlink: 'syz.0.1171': attribute type 6 has an invalid length. [ 250.981519][ T9901] netlink: 'syz.0.1171': attribute type 7 has an invalid length. [ 250.990577][ T9901] netlink: 'syz.0.1171': attribute type 8 has an invalid length. [ 251.175427][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.247020][ T7606] hsr_slave_0: left promiscuous mode [ 251.287954][ T7606] hsr_slave_1: left promiscuous mode [ 251.309752][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.321049][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.352094][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.367216][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.392028][ T7606] bridge_slave_1: left allmulticast mode [ 251.407958][ T7606] bridge_slave_1: left promiscuous mode [ 251.425662][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.451076][ T9918] loop4: detected capacity change from 0 to 256 [ 251.465321][ T7606] bridge_slave_0: left allmulticast mode [ 251.468614][ T9918] exfat: Deprecated parameter 'namecase' [ 251.471099][ T7606] bridge_slave_0: left promiscuous mode [ 251.478524][ T51] Bluetooth: hci3: command tx timeout [ 251.496580][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.510760][ T9918] exfat: Deprecated parameter 'namecase' [ 251.531471][ T9918] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 251.608292][ T7606] veth1_macvtap: left promiscuous mode [ 251.625596][ T7606] veth0_macvtap: left promiscuous mode [ 251.642917][ T7606] veth1_vlan: left promiscuous mode [ 251.656573][ T9918] syz.4.1173: attempt to access beyond end of device [ 251.656573][ T9918] loop4: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 251.673763][ T7606] veth0_vlan: left promiscuous mode [ 251.686843][ T9918] syz.4.1173: attempt to access beyond end of device [ 251.686843][ T9918] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 251.765380][ T28] audit: type=1800 audit(1786693435.830:8): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1173" name="file1" dev="loop4" ino=1048608 res=0 errno=0 [ 252.032064][ T7606] team0 (unregistering): Port device vlan2 removed [ 252.066859][ T7606] bond1 (unregistering): Released all slaves [ 252.190988][ T51] Bluetooth: hci0: command tx timeout [ 252.433686][ T8] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 252.583847][ T7606] team0 (unregistering): Port device team_slave_1 removed [ 252.583977][ T8] usb 1-1: device descriptor read/64, error -71 [ 252.628500][ T7606] team0 (unregistering): Port device team_slave_0 removed [ 252.666543][ T7606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.707912][ T7606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.876793][ T8] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 253.002318][ T7606] bond0 (unregistering): Released all slaves [ 253.052667][ T8] usb 1-1: device descriptor read/64, error -71 [ 253.080420][ T9812] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.145839][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.153010][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.162251][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.169382][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.174562][ T8] usb usb1-port1: attempt power cycle [ 253.216183][ T9739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.594388][ T8] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 253.666593][ T8] usb 1-1: device descriptor read/8, error -71 [ 253.811245][ T9739] veth0_vlan: entered promiscuous mode [ 253.842673][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.878153][ T9739] veth1_vlan: entered promiscuous mode [ 253.931444][ T9739] veth0_macvtap: entered promiscuous mode [ 253.945860][ T9739] veth1_macvtap: entered promiscuous mode [ 253.963720][ T8] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 253.985952][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.996648][ T8] usb 1-1: device descriptor read/8, error -71 [ 254.003698][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.020113][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.042556][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.057724][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.074110][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.092888][ T9739] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.102762][ T9739] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.114387][ T8] usb usb1-port1: unable to enumerate USB device [ 254.127718][ T9739] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.139973][ T9739] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.260841][ T7600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.273757][ T51] Bluetooth: hci0: command tx timeout [ 254.289838][ T7600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.350276][ T7623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.380032][ T7623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.408084][ T9812] veth0_vlan: entered promiscuous mode [ 254.437038][ T9812] veth1_vlan: entered promiscuous mode [ 254.489020][ T9812] veth0_macvtap: entered promiscuous mode [ 254.535879][ T9812] veth1_macvtap: entered promiscuous mode [ 254.582306][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.613695][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.643696][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.663605][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.677142][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.722574][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.744857][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.754853][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.765604][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.779998][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.811607][ T9812] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.824930][ T9812] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.834560][ T9812] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.843358][ T9812] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.950590][ T7623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.970940][ T7623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.040454][ T9987] loop7: detected capacity change from 0 to 8 [ 255.057658][ T9987] squashfs image failed sanity check [ 255.083910][ T9985] netlink: 'syz.4.1178': attribute type 9 has an invalid length. [ 255.103832][ T9985] netlink: 'syz.4.1178': attribute type 6 has an invalid length. [ 255.127579][ T9985] netlink: 'syz.4.1178': attribute type 7 has an invalid length. [ 255.154775][ T9985] netlink: 'syz.4.1178': attribute type 8 has an invalid length. [ 255.196972][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.244129][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.515262][ T5834] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 255.676641][T10006] loop8: detected capacity change from 0 to 1024 [ 255.714615][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 255.744865][ T51] Bluetooth: Unexpected continuation frame (len 34) [ 255.857565][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.864528][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.874311][T10006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 255.959202][ T5834] usb 8-1: unable to get BOS descriptor or descriptor too short [ 256.145286][T10006] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.239037][ T5834] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 256.402886][ T5834] usb 8-1: can't read configurations, error -71 [ 256.624122][ T7874] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: comm kworker/u4:42: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.659566][ T7874] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 256.673347][ T7874] EXT4-fs (loop8): This should not happen!! Data will be lost [ 256.673347][ T7874] [ 256.692093][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 256.794832][T10026] loop0: detected capacity change from 0 to 512 [ 256.820860][T10026] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 256.852855][T10026] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 256.889807][T10026] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 256.923674][T10026] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 257.028832][T10026] loop0: detected capacity change from 0 to 128 [ 257.058630][T10026] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.072442][T10037] netlink: 'syz.8.1189': attribute type 9 has an invalid length. [ 257.080639][T10037] netlink: 'syz.8.1189': attribute type 6 has an invalid length. [ 257.091078][T10037] netlink: 'syz.8.1189': attribute type 7 has an invalid length. [ 257.099630][T10037] netlink: 'syz.8.1189': attribute type 8 has an invalid length. [ 257.117429][ T28] audit: type=1800 audit(1786693441.180:9): pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1187" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 257.344657][ T5834] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 257.523494][ T5834] usb 8-1: device descriptor read/64, error -71 [ 257.621860][T10053] loop0: detected capacity change from 0 to 1024 [ 257.654759][ T5834] usb usb8-port1: attempt power cycle [ 257.779542][ T28] audit: type=1800 audit(1786693441.840:10): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1193" name="file1" dev="loop0" ino=3 res=0 errno=0 [ 257.817173][T10053] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 257.941088][ T3464] hfsplus: b-tree write err: -5, ino 3 [ 257.967311][ T5776] hfsplus: node 4:3 still has 1 user(s)! [ 258.073736][ T5834] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 258.114727][ T5834] usb 8-1: device descriptor read/8, error -71 [ 258.403772][ T5834] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 258.447498][ T5834] usb 8-1: device descriptor read/8, error -71 [ 258.594566][ T5834] usb usb8-port1: unable to enumerate USB device [ 258.626439][T10080] loop8: detected capacity change from 0 to 2048 [ 258.647409][T10080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.286553][T10113] Bluetooth: MGMT ver 1.22 [ 260.307833][ T5834] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 260.361097][T10118] loop7: detected capacity change from 0 to 136 [ 260.420583][ T5767] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.448087][T10120] loop8: detected capacity change from 0 to 512 [ 260.477895][T10120] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 260.503619][T10120] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 260.504413][ T5834] usb 1-1: device descriptor read/64, error -71 [ 260.541863][T10120] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 260.564389][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 260.569586][T10120] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 260.812824][T10120] loop8: detected capacity change from 0 to 128 [ 260.836656][T10120] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.427306][ T28] audit: type=1800 audit(1786693445.480:11): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1207" name="file1" dev="loop8" ino=1048616 res=0 errno=0 [ 261.583644][ T5834] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 261.613607][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 261.647035][T10134] loop7: detected capacity change from 0 to 1024 [ 261.655849][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.674818][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 261.682426][ T23] usb 5-1: can't read configurations, error -71 [ 261.690234][T10134] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 261.734411][ T5834] usb 1-1: device descriptor read/64, error -71 [ 261.875072][ T5834] usb usb1-port1: attempt power cycle [ 262.101329][T10151] loop7: detected capacity change from 0 to 2048 [ 262.143311][T10151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.304000][ T5834] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 262.348246][ T5834] usb 1-1: device descriptor read/8, error -71 [ 262.643799][ T5834] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 262.696323][ T5834] usb 1-1: device descriptor read/8, error -71 [ 262.833934][ T23] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 262.853883][ T5834] usb usb1-port1: unable to enumerate USB device [ 263.014045][ T23] usb 5-1: device descriptor read/64, error -71 [ 263.163874][ T23] usb usb5-port1: attempt power cycle [ 263.360818][T10190] loop7: detected capacity change from 0 to 512 [ 263.427017][T10190] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 263.604977][ T23] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 263.617126][T10190] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 263.745963][ T23] usb 5-1: device descriptor read/8, error -71 [ 263.783170][T10190] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 263.963298][T10190] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 264.318007][T10200] loop0: detected capacity change from 0 to 136 [ 264.777064][ T23] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 264.904467][ T23] usb 5-1: device descriptor read/8, error -71 [ 265.028534][ T23] usb usb5-port1: unable to enumerate USB device [ 265.293874][ T5781] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 265.607320][ T5781] usb 1-1: device descriptor read/64, error -71 [ 265.845707][T10239] netlink: 'syz.8.1230': attribute type 9 has an invalid length. [ 265.853484][T10239] netlink: 'syz.8.1230': attribute type 6 has an invalid length. [ 265.862285][T10239] netlink: 'syz.8.1230': attribute type 7 has an invalid length. [ 265.870192][T10239] netlink: 'syz.8.1230': attribute type 8 has an invalid length. [ 266.110693][T10243] loop7: detected capacity change from 0 to 136 [ 266.860459][ T5781] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 266.982412][T10248] loop4: detected capacity change from 0 to 512 [ 267.016621][T10248] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 267.049245][T10248] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 267.064723][ T5781] usb 1-1: device descriptor read/64, error -71 [ 267.081289][T10248] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 267.101395][T10248] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 267.194618][ T5781] usb usb1-port1: attempt power cycle [ 267.284755][T10248] loop4: detected capacity change from 0 to 128 [ 267.323168][T10248] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.346504][ T28] audit: type=1800 audit(1786693451.410:12): pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1234" name="file1" dev="loop4" ino=1048617 res=0 errno=0 [ 267.663679][ T5781] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 267.715575][ T5781] usb 1-1: device descriptor read/8, error -71 [ 267.835563][T10281] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 267.903968][ T6440] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 267.994431][ T5781] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 268.032279][ T5781] usb 1-1: device descriptor read/8, error -71 [ 268.064016][ T6440] usb 8-1: device descriptor read/64, error -71 [ 268.173849][ T5781] usb usb1-port1: unable to enumerate USB device [ 268.544441][T10303] netlink: 'syz.8.1243': attribute type 9 has an invalid length. [ 268.552246][T10303] netlink: 'syz.8.1243': attribute type 6 has an invalid length. [ 268.560029][T10303] netlink: 'syz.8.1243': attribute type 7 has an invalid length. [ 268.567818][T10303] netlink: 'syz.8.1243': attribute type 8 has an invalid length. [ 269.169266][ T6440] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 269.323589][ T6440] usb 8-1: device descriptor read/64, error -71 [ 269.348548][T10310] loop4: detected capacity change from 0 to 256 [ 269.415810][T10310] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 269.474146][ T6440] usb usb8-port1: attempt power cycle [ 269.893792][ T6440] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 269.946179][T10335] loop8: detected capacity change from 0 to 136 [ 269.970272][ T6440] usb 8-1: device descriptor read/8, error -71 [ 270.423841][ T6440] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 270.783890][ T6440] usb 8-1: device descriptor read/8, error -71 [ 270.911107][T10347] loop4: detected capacity change from 0 to 2048 [ 270.921862][ T6440] usb usb8-port1: unable to enumerate USB device [ 270.960869][T10347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.359700][T10365] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 271.379269][T10365] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 271.459079][T10368] netlink: 'syz.7.1256': attribute type 9 has an invalid length. [ 271.467159][T10368] netlink: 'syz.7.1256': attribute type 6 has an invalid length. [ 271.474946][T10368] netlink: 'syz.7.1256': attribute type 7 has an invalid length. [ 271.482669][T10368] netlink: 'syz.7.1256': attribute type 8 has an invalid length. [ 272.633690][ T6440] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 272.793701][ T6440] usb 1-1: device descriptor read/64, error -71 [ 272.935357][T10399] loop8: detected capacity change from 0 to 136 [ 273.740287][ T6440] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 273.936522][ T6440] usb 1-1: device descriptor read/64, error -71 [ 274.054743][ T6440] usb usb1-port1: attempt power cycle [ 274.060780][T10416] netlink: 'syz.7.1269': attribute type 9 has an invalid length. [ 274.069132][T10416] netlink: 'syz.7.1269': attribute type 6 has an invalid length. [ 274.077020][T10416] netlink: 'syz.7.1269': attribute type 7 has an invalid length. [ 274.084839][T10416] netlink: 'syz.7.1269': attribute type 8 has an invalid length. [ 275.183608][ T6440] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 275.228514][ T6440] usb 1-1: device descriptor read/8, error -71 [ 275.367123][T10441] loop7: detected capacity change from 0 to 256 [ 275.409163][T10441] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 275.538369][T10450] loop0: detected capacity change from 0 to 256 [ 275.549456][T10450] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.590327][T10450] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 275.627699][T10450] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 275.676750][T10450] exFAT-fs (loop0): failed to load alloc-bitmap [ 275.683102][T10450] exFAT-fs (loop0): failed to recognize exfat type [ 275.990046][T10459] netlink: 'syz.7.1280': attribute type 9 has an invalid length. [ 276.001102][T10459] netlink: 'syz.7.1280': attribute type 6 has an invalid length. [ 276.014238][T10461] fuse: Unknown parameter '00000000000000000000' [ 277.062234][T10497] loop4: detected capacity change from 0 to 2048 [ 277.099054][T10497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.299801][T10503] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 278.493079][T10531] validate_nla: 2 callbacks suppressed [ 278.493095][T10531] netlink: 'syz.0.1296': attribute type 9 has an invalid length. [ 278.506571][T10531] netlink: 'syz.0.1296': attribute type 6 has an invalid length. [ 278.514399][T10531] netlink: 'syz.0.1296': attribute type 7 has an invalid length. [ 278.522143][T10531] netlink: 'syz.0.1296': attribute type 8 has an invalid length. [ 278.569827][T10534] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 278.577169][T10534] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 278.753281][T10541] loop8: detected capacity change from 0 to 256 [ 278.815766][T10541] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 279.465835][ T177] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 279.680054][ T177] usb 5-1: unable to get BOS descriptor or descriptor too short [ 279.696284][ T177] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 279.733709][ T177] usb 5-1: config 100 has an invalid descriptor of length 157, skipping remainder of the config [ 279.766226][ T177] usb 5-1: config 100 has no interface number 0 [ 279.789422][ T177] usb 5-1: config 100 interface 173 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.828076][ T177] usb 5-1: config 100 interface 173 has no altsetting 0 [ 279.878190][ T177] usb 5-1: string descriptor 0 read error: -22 [ 279.903123][ T177] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 279.975215][ T177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.058624][ T177] metro_usb 5-1:100.173: required endpoints missing [ 280.280706][ T5833] usb 5-1: USB disconnect, device number 17 [ 280.412495][T10579] loop7: detected capacity change from 0 to 2048 [ 280.517085][T10579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.675873][T10590] fuse: Unknown parameter 'user00000000000000000000' [ 281.633559][T10624] loop8: detected capacity change from 0 to 136 [ 281.797897][T10625] capability: warning: `syz.4.1321' uses deprecated v2 capabilities in a way that may be insecure [ 282.454258][T10635] loop0: detected capacity change from 0 to 2048 [ 282.474126][T10635] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 282.502687][T10635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.557152][T10637] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1325'. [ 282.602153][T10640] loop8: detected capacity change from 0 to 256 [ 282.603839][ T5833] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 282.835716][ T5833] usb 8-1: unable to get BOS descriptor or descriptor too short [ 282.847599][ T5833] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 282.867024][ T5833] usb 8-1: config 100 has an invalid descriptor of length 157, skipping remainder of the config [ 282.913154][ T5833] usb 8-1: config 100 has no interface number 0 [ 282.939908][ T5833] usb 8-1: config 100 interface 173 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.958403][T10650] fuse: Unknown parameter 'user00000000000000000000' [ 282.984412][ T5833] usb 8-1: config 100 interface 173 has no altsetting 0 [ 283.007915][ T5833] usb 8-1: string descriptor 0 read error: -22 [ 283.016822][ T5833] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 283.037301][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.062962][ T5833] metro_usb 8-1:100.173: required endpoints missing [ 283.276452][ T5833] usb 8-1: USB disconnect, device number 10 [ 283.624680][T10668] loop0: detected capacity change from 0 to 136 [ 284.516798][T10675] loop7: detected capacity change from 0 to 1024 [ 284.524483][T10677] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1336'. [ 284.822553][ T7606] hfsplus: b-tree write err: -5, ino 8 [ 285.137634][T10703] loop7: detected capacity change from 0 to 1024 [ 285.253269][T10706] loop4: detected capacity change from 0 to 136 [ 285.984075][ T8011] hfsplus: b-tree write err: -5, ino 25 [ 285.984119][ T789] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 285.989837][ T8011] hfsplus: b-tree write err: -5, ino 4 [ 286.021695][ T8011] hfsplus: b-tree write err: -5, ino 2 [ 286.027760][T10712] fuse: Unknown parameter 'user_i00000000000000000000' [ 286.216851][ T789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.232646][ T789] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 286.260235][ T789] usb 1-1: config 100 has an invalid descriptor of length 157, skipping remainder of the config [ 286.272265][ T789] usb 1-1: config 100 has no interface number 0 [ 286.280890][ T789] usb 1-1: config 100 interface 173 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.313582][ T789] usb 1-1: config 100 interface 173 has no altsetting 0 [ 286.327749][T10722] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1347'. [ 286.342369][ T789] usb 1-1: string descriptor 0 read error: -22 [ 286.358681][ T789] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 286.377086][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.421251][ T789] metro_usb 1-1:100.173: required endpoints missing [ 286.627328][ T5814] usb 1-1: USB disconnect, device number 56 [ 286.645898][T10735] loop7: detected capacity change from 0 to 256 [ 286.663447][T10737] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 286.683396][T10735] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 287.230570][T10749] loop7: detected capacity change from 0 to 136 [ 288.164950][T10762] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1357'. [ 288.199226][T10770] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 288.224692][T10770] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 288.407192][T10777] fuse: Unknown parameter 'user_i00000000000000000000' [ 288.458179][T10780] loop0: detected capacity change from 0 to 1024 [ 289.347011][ T12] hfsplus: b-tree write err: -5, ino 8 [ 289.439168][T10792] loop8: detected capacity change from 0 to 512 [ 289.489628][T10792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.522829][T10792] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.630434][T10792] EXT4-fs error (device loop8): ext4_get_verity_descriptor_location:335: inode #15: comm syz.8.1364: verity file corrupted; can't find descriptor [ 289.689515][T10792] fs-verity (loop8, inode 15): Error -117 getting verity descriptor size [ 289.734358][ T5814] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 289.762656][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.871753][T10804] loop7: detected capacity change from 0 to 136 [ 290.019620][ T5767] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.608282][T10807] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1368'. [ 290.645882][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 290.669246][ T5814] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 290.698438][ T5814] usb 1-1: config 100 has an invalid descriptor of length 81, skipping remainder of the config [ 290.745121][ T5814] usb 1-1: config 100 has no interface number 0 [ 290.771817][ T5814] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 290.988185][T10818] netlink: 'syz.7.1370': attribute type 9 has an invalid length. [ 290.996059][T10818] netlink: 'syz.7.1370': attribute type 6 has an invalid length. [ 291.003859][T10818] netlink: 'syz.7.1370': attribute type 7 has an invalid length. [ 291.011582][T10818] netlink: 'syz.7.1370': attribute type 8 has an invalid length. [ 291.048620][ T5814] usb 1-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.071379][ T5814] usb 1-1: config 100 interface 173 has no altsetting 0 [ 291.081591][T10817] fuse: Unknown parameter 'user_i00000000000000000000' [ 291.103663][ T5814] usb 1-1: string descriptor 0 read error: -22 [ 291.118735][ T5814] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 291.133199][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.169146][T10794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.193868][ T5814] metro_usb 1-1:100.173: required endpoints missing [ 291.400560][ T6440] usb 1-1: USB disconnect, device number 57 [ 292.221642][T10831] loop4: detected capacity change from 0 to 512 [ 292.519377][T10831] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1374: bad orphan inode 15 [ 292.573761][T10831] ext4_test_bit(bit=14, block=18) = 1 [ 292.592625][T10831] is_bad_inode(inode)=0 [ 292.602725][T10831] NEXT_ORPHAN(inode)=1023 [ 292.613206][T10831] max_ino=32 [ 292.623475][T10831] i_nlink=0 [ 292.639037][T10831] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #15: comm syz.4.1374: corrupted xattr block 19: invalid header [ 292.659831][T10831] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 292.679565][T10831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 292.696855][T10831] ext4 filesystem being mounted at /177/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 292.747902][T10831] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.1374: Directory hole found for htree leaf block 0 [ 292.812266][T10831] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1374: path /177/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 292.856017][T10852] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1380'. [ 293.134985][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 293.138689][T10865] fuse: Unknown parameter 'user_id00000000000000000000' [ 293.196202][T10868] netlink: 'syz.8.1381': attribute type 9 has an invalid length. [ 293.205287][T10868] netlink: 'syz.8.1381': attribute type 6 has an invalid length. [ 293.213015][T10868] netlink: 'syz.8.1381': attribute type 7 has an invalid length. [ 293.220834][T10868] netlink: 'syz.8.1381': attribute type 8 has an invalid length. [ 293.623684][ T6440] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 293.816152][ T6440] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.834156][ T6440] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 293.849876][ T6440] usb 1-1: config 100 has an invalid descriptor of length 81, skipping remainder of the config [ 293.862257][ T6440] usb 1-1: config 100 has no interface number 0 [ 293.872898][ T6440] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 293.890812][ T6440] usb 1-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.905178][ T6440] usb 1-1: config 100 interface 173 has no altsetting 0 [ 293.923072][ T6440] usb 1-1: string descriptor 0 read error: -22 [ 293.929748][ T6440] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 293.939446][ T6440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.952147][T10871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.963613][ T6440] metro_usb 1-1:100.173: required endpoints missing [ 294.706948][ T177] usb 1-1: USB disconnect, device number 58 [ 295.182418][T10901] loop8: detected capacity change from 0 to 16 [ 295.270138][T10902] loop4: detected capacity change from 0 to 136 [ 295.502444][T10901] erofs: (device loop8): mounted with root inode @ nid 36. [ 295.894481][T10901] erofs: (device loop8): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 295.993328][T10901] syz.8.1392: attempt to access beyond end of device [ 295.993328][T10901] loop8: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 296.070850][T10901] erofs: (device loop8): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 296.293844][T10901] syz.8.1392: attempt to access beyond end of device [ 296.293844][T10901] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 296.321833][T10901] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 296.339093][ T28] audit: type=1800 audit(1786693480.400:13): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1392" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 296.698760][T10916] netlink: 'syz.0.1393': attribute type 9 has an invalid length. [ 296.706605][T10916] netlink: 'syz.0.1393': attribute type 6 has an invalid length. [ 296.714391][T10916] netlink: 'syz.0.1393': attribute type 7 has an invalid length. [ 296.722112][T10916] netlink: 'syz.0.1393': attribute type 8 has an invalid length. [ 296.856514][T10901] syz.8.1392 (10901) used greatest stack depth: 18576 bytes left [ 296.861602][T10921] fuse: Unknown parameter 'user_id00000000000000000000' [ 297.803725][ T5814] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 298.063418][T10957] netlink: 'syz.8.1405': attribute type 9 has an invalid length. [ 298.071621][T10957] netlink: 'syz.8.1405': attribute type 6 has an invalid length. [ 298.079793][T10957] netlink: 'syz.8.1405': attribute type 7 has an invalid length. [ 298.087569][T10957] netlink: 'syz.8.1405': attribute type 8 has an invalid length. [ 298.142514][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 298.183309][ T5814] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 298.234552][T10965] loop7: detected capacity change from 0 to 16 [ 298.273295][T10965] erofs: (device loop7): mounted with root inode @ nid 36. [ 298.288261][T10967] loop8: detected capacity change from 0 to 1024 [ 298.422753][ T5814] usb 5-1: config 100 has an invalid descriptor of length 81, skipping remainder of the config [ 298.441485][ T5814] usb 5-1: config 100 has no interface number 0 [ 298.448040][ T5814] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 298.461456][ T5814] usb 5-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.478456][ T5814] usb 5-1: config 100 interface 173 has no altsetting 0 [ 299.104959][ T5814] usb 5-1: string descriptor 0 read error: -22 [ 299.111466][ T5814] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 299.121363][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.158030][T10945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.193139][ T5814] metro_usb 5-1:100.173: required endpoints missing [ 299.426258][ T5814] usb 5-1: USB disconnect, device number 18 [ 299.471520][T10987] fuse: Unknown parameter 'user_id00000000000000000000' [ 299.826015][T11001] loop0: detected capacity change from 0 to 1024 [ 299.844680][T11001] ext4: Unknown parameter 'noacl' [ 300.070454][T11007] loop0: detected capacity change from 0 to 128 [ 300.100828][T11007] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 300.154320][T11007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.997959][T11050] fuse: Bad value for 'fd' [ 301.004122][T11049] loop7: detected capacity change from 0 to 1024 [ 301.043390][T11049] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 301.109015][T11055] loop8: detected capacity change from 0 to 1764 [ 301.503255][T11063] netlink: 'syz.8.1432': attribute type 9 has an invalid length. [ 301.511104][T11063] netlink: 'syz.8.1432': attribute type 6 has an invalid length. [ 302.175825][T11098] loop0: detected capacity change from 0 to 512 [ 302.236602][T11098] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1439: bad orphan inode 15 [ 302.305943][T11098] ext4_test_bit(bit=14, block=18) = 1 [ 302.311361][T11098] is_bad_inode(inode)=0 [ 302.357555][T11098] NEXT_ORPHAN(inode)=1023 [ 302.361924][T11098] max_ino=32 [ 302.404694][T11098] i_nlink=0 [ 302.408577][T11098] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #15: comm syz.0.1439: corrupted xattr block 19: invalid header [ 302.459528][T11098] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 302.497971][T11098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 302.557756][T11098] ext4 filesystem being mounted at /364/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 302.708921][T11112] validate_nla: 2 callbacks suppressed [ 302.708936][T11112] netlink: 'syz.7.1442': attribute type 9 has an invalid length. [ 302.722327][T11112] netlink: 'syz.7.1442': attribute type 6 has an invalid length. [ 302.730124][T11112] netlink: 'syz.7.1442': attribute type 7 has an invalid length. [ 302.738038][T11112] netlink: 'syz.7.1442': attribute type 8 has an invalid length. [ 302.768523][T11098] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.1439: Directory hole found for htree leaf block 0 [ 302.942482][T11098] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1439: path /364/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 303.175285][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 303.346923][T11122] fuse: Bad value for 'fd' [ 304.847248][T11162] loop7: detected capacity change from 0 to 16 [ 304.897224][T11163] netlink: 'syz.0.1452': attribute type 9 has an invalid length. [ 304.908145][T11163] netlink: 'syz.0.1452': attribute type 6 has an invalid length. [ 304.915962][T11163] netlink: 'syz.0.1452': attribute type 7 has an invalid length. [ 304.923740][T11163] netlink: 'syz.0.1452': attribute type 8 has an invalid length. [ 304.939535][T11162] erofs: (device loop7): mounted with root inode @ nid 36. [ 304.991628][T11162] erofs: (device loop7): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 305.132592][T11162] syz.7.1453: attempt to access beyond end of device [ 305.132592][T11162] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 305.320281][T11162] erofs: (device loop7): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 305.358780][T11162] syz.7.1453: attempt to access beyond end of device [ 305.358780][T11162] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 305.484238][T11162] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 305.593598][ T28] audit: type=1800 audit(1786693489.650:14): pid=11162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1453" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 305.677275][T11182] fuse: Bad value for 'fd' [ 305.718121][T11189] loop8: detected capacity change from 0 to 512 [ 307.452101][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 307.561864][T11233] loop7: detected capacity change from 0 to 512 [ 307.657428][T11233] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.1471: corrupted in-inode xattr: invalid ea_ino [ 307.721388][T11233] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1471: couldn't read orphan inode 15 (err -117) [ 307.776356][T11233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.832011][T11240] netlink: 'syz.4.1470': attribute type 9 has an invalid length. [ 307.839859][T11240] netlink: 'syz.4.1470': attribute type 6 has an invalid length. [ 307.847987][T11240] netlink: 'syz.4.1470': attribute type 7 has an invalid length. [ 307.855943][T11240] netlink: 'syz.4.1470': attribute type 8 has an invalid length. [ 308.206829][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.334812][T11248] fuse: Unknown parameter '0x0000000000000003' [ 309.089784][T11271] loop7: detected capacity change from 0 to 128 [ 309.175428][ T9731] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.406140][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1480'. [ 309.795178][T11298] loop0: detected capacity change from 0 to 512 [ 309.962247][T11298] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1484: corrupted in-inode xattr: invalid ea_ino [ 310.054195][T11298] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1484: couldn't read orphan inode 15 (err -117) [ 310.117443][T11298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.311623][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.441328][T11314] fuse: Unknown parameter '0x0000000000000003' [ 310.837305][T11327] loop8: detected capacity change from 0 to 136 [ 311.711164][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1491'. [ 312.406266][T11365] fuse: Unknown parameter '0x0000000000000003' [ 313.703761][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 313.905309][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.916111][ T8] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.942102][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.956117][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 313.979601][ T8] usb 9-1: SerialNumber: syz [ 314.007194][ T8] usb 9-1: bad CDC descriptors [ 314.226457][ T8] usb 9-1: USB disconnect, device number 2 [ 314.449273][T11415] loop4: detected capacity change from 0 to 512 [ 314.504855][T11415] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1507: corrupted in-inode xattr: invalid ea_ino [ 314.545728][T11415] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1507: couldn't read orphan inode 15 (err -117) [ 315.436063][T11415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.810940][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.849665][T11436] loop7: detected capacity change from 0 to 16 [ 315.900204][T11436] erofs: (device loop7): mounted with root inode @ nid 36. [ 316.148517][T11449] bridge_slave_0: left allmulticast mode [ 316.163638][T11449] bridge_slave_0: left promiscuous mode [ 316.181231][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.235669][T11449] bridge_slave_1: left allmulticast mode [ 316.262538][T11449] bridge_slave_1: left promiscuous mode [ 316.288976][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.347216][T11449] bond0: (slave bond_slave_0): Releasing backup interface [ 316.392472][T11449] bond0: (slave bond_slave_1): Releasing backup interface [ 316.462120][T11449] team0: Port device team_slave_0 removed [ 316.499554][T11449] team0: Port device team_slave_1 removed [ 316.531538][T11449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.566303][T11449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.638712][T11449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.669188][T11449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.753756][T11459] netlink: 'syz.7.1514': attribute type 9 has an invalid length. [ 316.761568][T11459] netlink: 'syz.7.1514': attribute type 6 has an invalid length. [ 316.769529][T11459] netlink: 'syz.7.1514': attribute type 7 has an invalid length. [ 316.777335][T11459] netlink: 'syz.7.1514': attribute type 8 has an invalid length. [ 317.234044][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.240484][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.011942][ T23] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 318.205261][ T23] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.225943][ T23] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 318.246083][ T23] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 318.272616][ T23] usb 9-1: Product: syz [ 318.278230][ T23] usb 9-1: Manufacturer: syz [ 318.282854][ T23] usb 9-1: SerialNumber: syz [ 318.291086][ T23] usb 9-1: config 0 descriptor?? [ 318.369567][T11486] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1520'. [ 318.527812][ T23] usb 9-1: USB disconnect, device number 3 [ 319.242919][T11515] loop7: detected capacity change from 0 to 256 [ 319.412844][T11523] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1529'. [ 319.977689][T11540] netlink: 'syz.4.1531': attribute type 9 has an invalid length. [ 319.985587][T11540] netlink: 'syz.4.1531': attribute type 6 has an invalid length. [ 319.993332][T11540] netlink: 'syz.4.1531': attribute type 7 has an invalid length. [ 320.001184][T11540] netlink: 'syz.4.1531': attribute type 8 has an invalid length. [ 321.425778][ T23] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 321.689155][ T23] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.740925][ T23] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 321.763713][ T23] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 321.766456][T11570] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.1539'. [ 321.771816][ T23] usb 9-1: Product: syz [ 321.771834][ T23] usb 9-1: Manufacturer: syz [ 321.771847][ T23] usb 9-1: SerialNumber: syz [ 321.784725][ T23] usb 9-1: config 0 descriptor?? [ 321.818086][T11573] fuse: Unknown parameter 'fd0x0000000000000003' [ 322.190260][ T5778] usb 9-1: USB disconnect, device number 4 [ 323.223486][ C0] sched: RT throttling activated [ 323.744373][T11594] loop8: detected capacity change from 0 to 136 [ 324.212548][T11603] loop7: detected capacity change from 0 to 2048 [ 324.258815][T11603] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 324.324018][T11603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.488484][ T96] device offline error, dev sda, sector 729398 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 324.499465][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2031 starting block 91174) [ 324.511478][ T96] Buffer I/O error on device sda1, logical block 91136 [ 324.520125][ T96] Buffer I/O error on device sda1, logical block 91137 [ 324.527177][ T96] Buffer I/O error on device sda1, logical block 91138 [ 324.535557][ T96] device offline error, dev sda, sector 733494 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 324.546137][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 91686) [ 324.557853][ T96] Buffer I/O error on device sda1, logical block 91648 [ 324.564859][ T96] Buffer I/O error on device sda1, logical block 91649 [ 324.572492][ T96] Buffer I/O error on device sda1, logical block 91650 [ 324.579545][ T96] device offline error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 324.590081][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2027 starting block 90150) [ 324.601695][ T96] Buffer I/O error on device sda1, logical block 90112 [ 324.609816][ T96] Buffer I/O error on device sda1, logical block 90113 [ 324.611508][ T3464] device offline error, dev sda, sector 708078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 324.616934][ T96] Buffer I/O error on device sda1, logical block 90114 [ 324.634922][ T96] device offline error, dev sda, sector 704862 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 324.645666][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88107) [ 324.657253][ T96] Buffer I/O error on device sda1, logical block 88069 [ 324.664280][ T96] device offline error, dev sda, sector 705014 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 324.674829][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88126) [ 324.686451][ T96] device offline error, dev sda, sector 705046 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 324.697000][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88130) [ 324.708651][ T96] device offline error, dev sda, sector 705078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 324.713640][ T3464] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88509) [ 324.719154][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88134) [ 324.742343][ T96] device offline error, dev sda, sector 705094 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 324.758815][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88136) [ 324.770540][ T96] device offline error, dev sda, sector 705110 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 324.781121][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88138) [ 324.809208][ T5104] Aborting journal on device sda1-8. [ 324.809398][T11607] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 324.818559][ T96] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 324.832887][ T5763] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 324.835678][ T5104] JBD2: I/O error when updating journal superblock for sda1-8. [ 324.852749][T11611] loop4: detected capacity change from 0 to 2048 [ 324.860859][T11607] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 324.887486][T11599] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.7.1546: Detected aborted journal [ 324.894174][T11601] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.0.1547: Detected aborted journal [ 324.901432][ T96] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 324.918924][T11599] EXT4-fs (sda1): I/O error while writing superblock [ 324.925748][ T5763] EXT4-fs (sda1): previous I/O error to superblock detected [ 324.927088][T11599] EXT4-fs (sda1): Remounting filesystem read-only [ 324.953653][ T55] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 324.962470][T11601] EXT4-fs (sda1): previous I/O error to superblock detected [ 324.990913][ T96] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 324.999712][ T5763] EXT4-fs (sda1): I/O error while writing superblock [ 325.011924][T11601] EXT4-fs (sda1): I/O error while writing superblock [ 325.018962][ T5763] EXT4-fs (sda1): Remounting filesystem read-only [ 325.025405][T11611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.042910][T11611] EXT4-fs error (device loop4): ext4_ext_precache:657: inode #2: comm syz.4.1548: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 325.053588][T11601] EXT4-fs (sda1): Remounting filesystem read-only [ 325.143402][T11619] fuse: Unknown parameter 'fd0x0000000000000003' [ 325.158622][T11611] EXT4-fs (loop4): Remounting filesystem read-only [ 325.385043][T11607] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 325.503755][ T23] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 325.620736][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.700076][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 325.709588][ T23] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 325.720372][ T23] usb 1-1: Product: syz [ 325.725037][ T23] usb 1-1: Manufacturer: syz [ 325.729752][ T23] usb 1-1: SerialNumber: syz [ 325.739176][ T23] usb 1-1: config 0 descriptor?? [ 325.964233][ T23] usb 1-1: USB disconnect, device number 59 [ 327.690647][T11655] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1561' sets config #1 [ 327.912139][T11661] fuse: Unknown parameter 'fd0x0000000000000003' [ 329.014457][T11678] loop0: detected capacity change from 0 to 512 [ 329.040412][T11678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 329.078118][T11678] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 329.093062][T11678] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 329.113614][ T5781] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 329.114683][T11678] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 329.135593][T11678] EXT4-fs (loop0): 1 truncate cleaned up [ 329.143364][T11678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.257715][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.401808][ T5781] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 329.424954][ T5781] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 329.433135][ T5781] usb 8-1: Product: syz [ 329.441256][ T5781] usb 8-1: Manufacturer: syz [ 329.447118][ T5781] usb 8-1: SerialNumber: syz [ 329.465191][ T5781] usb 8-1: config 0 descriptor?? [ 329.473284][T11683] loop8: detected capacity change from 0 to 512 [ 329.534275][T11683] EXT4-fs (loop8): orphan cleanup on readonly fs [ 329.557064][T11683] Quota error (device loop8): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 329.585329][T11683] EXT4-fs warning (device loop8): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.603842][T11683] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 329.614840][T11683] EXT4-fs error (device loop8): ext4_orphan_get:1430: comm syz.8.1571: bad orphan inode 14 [ 329.626390][T11683] ext4_test_bit(bit=13, block=18) = 1 [ 329.631790][T11683] is_bad_inode(inode)=0 [ 329.640199][T11683] NEXT_ORPHAN(inode)=0 [ 329.649224][T11683] max_ino=32 [ 329.661727][T11683] i_nlink=1 [ 329.671883][T11683] EXT4-fs (loop8): 1 truncate cleaned up [ 329.702397][T11683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.708319][ T5781] usb 8-1: USB disconnect, device number 11 [ 329.822530][T11690] loop4: detected capacity change from 0 to 1024 [ 329.834290][T11690] EXT4-fs: Ignoring removed orlov option [ 329.840318][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.891689][T11690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.002806][T11690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1573: bg 0: block 457: padding at end of block bitmap is not set [ 330.757928][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.682057][T11731] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1587'. [ 331.716894][T11725] loop7: detected capacity change from 0 to 136 [ 331.765919][ T9731] blk_print_req_error: 61 callbacks suppressed [ 331.765934][ T9731] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.933628][ T5781] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 332.139678][ T5781] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 332.162697][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 332.193743][ T5781] usb 5-1: Product: syz [ 332.203151][ T5781] usb 5-1: Manufacturer: syz [ 332.211643][ T5781] usb 5-1: SerialNumber: syz [ 332.223917][ T5781] usb 5-1: config 0 descriptor?? [ 332.253239][T11750] loop8: detected capacity change from 0 to 1764 [ 332.278886][T11750] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 332.455102][ T5781] usb 5-1: USB disconnect, device number 19 [ 332.693816][ T8] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 332.871896][T11761] loop8: detected capacity change from 0 to 136 [ 332.895098][ T8] usb 8-1: not running at top speed; connect to a high speed hub [ 332.920333][ T8] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 332.935284][ T9731] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.937953][ T8] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 333.058607][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.066997][ T8] usb 8-1: Product: syz [ 333.071196][ T8] usb 8-1: Manufacturer: syz [ 333.075972][ T8] usb 8-1: SerialNumber: syz [ 333.091987][ T8] oti6858 8-1:1.0: oti6858 converter detected [ 333.111778][ T8] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 333.187152][T11768] loop4: detected capacity change from 0 to 1024 [ 333.256023][T11768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.537642][ T5834] usb 8-1: USB disconnect, device number 12 [ 333.567846][ T5834] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 333.586682][ T5834] oti6858 8-1:1.0: device disconnected [ 333.686449][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.857728][T11786] loop4: detected capacity change from 0 to 512 [ 333.876045][T11786] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.909033][T11786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 333.945395][T11786] EXT4-fs (loop4): 1 truncate cleaned up [ 333.953200][T11786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.018545][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.029652][T11792] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 334.334609][T11794] loop4: detected capacity change from 0 to 136 [ 334.593658][ T8] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 334.673691][ T5834] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 334.856109][ T5834] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.861091][ T8] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 334.884165][ T8] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 334.897763][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 334.901772][ T8] usb 8-1: Product: syz [ 334.915680][ T8] usb 8-1: Manufacturer: syz [ 334.918934][ T5834] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.920303][ T8] usb 8-1: SerialNumber: syz [ 334.952582][ T5834] usb 9-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=a0.27 [ 334.954352][ T8] usb 8-1: config 0 descriptor?? [ 334.966921][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.976056][ T5834] usb 9-1: Product: syz [ 334.997676][ T5834] usb 9-1: Manufacturer: syz [ 335.007100][ T5834] usb 9-1: SerialNumber: syz [ 335.025246][ T5834] usb 9-1: config 0 descriptor?? [ 335.209474][ T8] usb 8-1: USB disconnect, device number 13 [ 335.595212][T11827] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 335.969479][T11831] loop4: detected capacity change from 0 to 136 [ 335.984190][T11835] loop7: detected capacity change from 0 to 512 [ 335.992352][T11835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.068892][ T9731] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 336.104053][T11835] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.1618: corrupted in-inode xattr: invalid ea_ino [ 336.147537][T11835] EXT4-fs (loop7): Remounting filesystem read-only [ 336.168117][T11835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.222295][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.415113][ T5815] usb 9-1: USB disconnect, device number 5 [ 337.689300][T11872] loop4: detected capacity change from 0 to 128 [ 337.725964][T11872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 337.743846][T11872] System zones: 1-3, 19-19, 35-36 [ 337.764041][T11868] loop0: detected capacity change from 0 to 136 [ 337.769945][T11872] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.794425][T11872] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 337.828605][ T9731] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.916024][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 337.993781][ T5815] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 338.186805][T11882] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1631'. [ 338.205110][ T5815] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 338.220711][ T7778] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.231620][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 338.245390][ T5815] usb 9-1: Product: syz [ 338.249582][ T5815] usb 9-1: Manufacturer: syz [ 338.263767][ T5815] usb 9-1: SerialNumber: syz [ 338.270704][ T5815] usb 9-1: config 0 descriptor?? [ 338.499514][ T5834] usb 9-1: USB disconnect, device number 6 [ 338.529019][T11889] loop7: detected capacity change from 0 to 1024 [ 338.538599][T11889] EXT4-fs: Ignoring removed orlov option [ 338.588712][T11889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.622942][T11889] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1634: bg 0: block 457: padding at end of block bitmap is not set [ 338.623547][ T5815] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 338.672277][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.743138][T11893] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 338.826363][ T5815] usb 5-1: unable to get BOS descriptor or descriptor too short [ 338.835415][ T5815] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 338.844159][ T5815] usb 5-1: config 100 has no interface number 0 [ 338.850495][ T5815] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 338.861017][ T5815] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 338.874591][ T5815] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 338.889105][ T5815] usb 5-1: config 100 interface 173 has no altsetting 0 [ 339.064865][T11899] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 339.365791][T11901] loop8: detected capacity change from 0 to 136 [ 339.415471][ T9731] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.696524][T11909] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1641'. [ 339.837480][T11911] loop8: detected capacity change from 0 to 1024 [ 339.886799][T11911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.035198][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.843897][ T5834] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 341.037140][ T5834] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 341.049090][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 341.066264][ T5834] usb 8-1: Product: syz [ 341.070457][ T5834] usb 8-1: Manufacturer: syz [ 341.078413][ T5834] usb 8-1: SerialNumber: syz [ 341.085979][ T5834] usb 8-1: config 0 descriptor?? [ 341.309829][ T5814] usb 8-1: USB disconnect, device number 14 [ 341.392560][ T5815] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 341.417150][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.450699][ T5815] usb 5-1: can't set config #100, error -71 [ 341.488666][ T5815] usb 5-1: USB disconnect, device number 20 [ 341.955166][T11944] loop7: detected capacity change from 0 to 1024 [ 342.004077][T11944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.596949][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.717813][T11961] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 343.223675][ T5834] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 343.415874][ T5834] usb 8-1: unable to get BOS descriptor or descriptor too short [ 343.426278][ T5834] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 343.437187][ T5834] usb 8-1: config 100 has no interface number 0 [ 343.443672][ T5834] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 343.474109][ T5834] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 343.485852][ T5834] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 343.501726][ T5834] usb 8-1: config 100 interface 173 has no altsetting 0 [ 343.522354][ T5834] usb 8-1: string descriptor 0 read error: -22 [ 343.545318][ T5834] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 344.183584][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.214361][T11972] loop8: detected capacity change from 0 to 128 [ 344.266753][T11966] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 344.329046][ T5834] metro_usb 8-1:100.173: Metrologic USB to Serial converter detected [ 344.359833][ T5834] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 344.411367][T11972] syz.8.1661: attempt to access beyond end of device [ 344.411367][T11972] loop8: rw=2049, sector=145, nr_sectors = 384 limit=128 [ 344.523145][T11972] syz.8.1661: attempt to access beyond end of device [ 344.523145][T11972] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 344.568911][ T5834] usb 8-1: USB disconnect, device number 15 [ 344.571762][T11980] loop0: detected capacity change from 0 to 2048 [ 344.587046][T11977] syz.8.1661: attempt to access beyond end of device [ 344.587046][T11977] loop8: rw=0, sector=150, nr_sectors = 1 limit=128 [ 344.587135][ T5834] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 344.587633][ T5834] metro_usb 8-1:100.173: device disconnected [ 344.619982][T11980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.636598][T11972] syz.8.1661: attempt to access beyond end of device [ 344.636598][T11972] loop8: rw=0, sector=145, nr_sectors = 1 limit=128 [ 344.674250][T11980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.712462][T11972] Buffer I/O error on dev loop8, logical block 145, async page read [ 344.764247][T11972] syz.8.1661: attempt to access beyond end of device [ 344.764247][T11972] loop8: rw=0, sector=146, nr_sectors = 1 limit=128 [ 344.800379][T11972] Buffer I/O error on dev loop8, logical block 146, async page read [ 344.817812][T11980] process 'syz.0.1663' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 344.835509][T11972] syz.8.1661: attempt to access beyond end of device [ 344.835509][T11972] loop8: rw=0, sector=147, nr_sectors = 1 limit=128 [ 344.952299][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.997898][T11972] Buffer I/O error on dev loop8, logical block 147, async page read [ 345.016832][T11972] syz.8.1661: attempt to access beyond end of device [ 345.016832][T11972] loop8: rw=0, sector=148, nr_sectors = 1 limit=128 [ 345.061154][T11972] Buffer I/O error on dev loop8, logical block 148, async page read [ 345.096616][T11972] syz.8.1661: attempt to access beyond end of device [ 345.096616][T11972] loop8: rw=0, sector=149, nr_sectors = 1 limit=128 [ 345.124634][T11972] Buffer I/O error on dev loop8, logical block 149, async page read [ 345.139377][T11972] syz.8.1661: attempt to access beyond end of device [ 345.139377][T11972] loop8: rw=0, sector=150, nr_sectors = 1 limit=128 [ 345.153675][T11972] Buffer I/O error on dev loop8, logical block 150, async page read [ 345.217604][T11972] syz.8.1661: attempt to access beyond end of device [ 345.217604][T11972] loop8: rw=0, sector=151, nr_sectors = 1 limit=128 [ 345.232895][T11972] Buffer I/O error on dev loop8, logical block 151, async page read [ 345.241291][T11972] Buffer I/O error on dev loop8, logical block 152, async page read [ 345.323703][ T8] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 345.342077][T11988] loop4: detected capacity change from 0 to 1024 [ 345.533745][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 345.545307][ T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 345.567481][ T8] usb 1-1: config 0 has no interface number 0 [ 345.590606][T11990] loop8: detected capacity change from 0 to 136 [ 345.591127][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 345.617751][T11988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.630630][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.638789][ T8] usb 1-1: Product: syz [ 345.643122][ T8] usb 1-1: Manufacturer: syz [ 345.647882][ T8] usb 1-1: SerialNumber: syz [ 345.657666][ T8] usb 1-1: config 0 descriptor?? [ 345.657759][ T9731] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.666495][ T8] smsc95xx v2.0.0 [ 345.972074][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.319475][T12003] loop7: detected capacity change from 0 to 128 [ 346.483812][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 346.532992][T12003] Buffer I/O error on dev loop7, logical block 145, async page read [ 346.546464][T12003] Buffer I/O error on dev loop7, logical block 146, async page read [ 346.885823][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 346.913785][ T8] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 346.945392][ T8] usb 1-1: USB disconnect, device number 60 [ 347.192788][T12008] loop4: detected capacity change from 0 to 256 [ 347.223345][T12008] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.466814][T12014] loop4: detected capacity change from 0 to 2048 [ 347.481359][T12014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.542258][T12014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.634189][ T5834] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 347.842513][ T5834] usb 8-1: unable to get BOS descriptor or descriptor too short [ 347.886325][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.895788][ T5834] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 347.895863][ T5834] usb 8-1: config 100 has no interface number 0 [ 347.896070][ T5834] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 347.896142][ T5834] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 347.896215][ T5834] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 347.896292][ T5834] usb 8-1: config 100 interface 173 has no altsetting 0 [ 348.004257][ T5834] usb 8-1: string descriptor 0 read error: -22 [ 348.016998][ T5834] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 348.034234][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.055736][T12012] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 348.082827][ T5834] metro_usb 8-1:100.173: Metrologic USB to Serial converter detected [ 348.100747][T12025] loop0: detected capacity change from 0 to 2048 [ 348.118987][ T5834] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 348.160517][T12025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.293917][ T5834] usb 8-1: USB disconnect, device number 16 [ 348.334082][ T5834] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 348.360322][ T5834] metro_usb 8-1:100.173: device disconnected [ 348.495791][T12034] xt_hashlimit: size too large, truncated to 1048576 [ 349.279300][T12043] input: syz1 as /devices/virtual/input/input10 [ 349.510462][T12050] loop7: detected capacity change from 0 to 16 [ 349.552255][T12050] erofs: (device loop7): mounted with root inode @ nid 36. [ 349.831325][T12054] loop7: detected capacity change from 0 to 2048 [ 349.855829][T12054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.901181][T12054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.363571][ T5834] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 350.511533][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.645812][ T5834] usb 9-1: unable to get BOS descriptor or descriptor too short [ 350.668753][ T5834] usb 9-1: config 100 has an invalid interface number: 173 but max is 0 [ 350.687989][ T5834] usb 9-1: config 100 has no interface number 0 [ 350.703802][ T5834] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 350.738948][ T5834] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 350.780423][ T5834] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 350.781586][T12069] loop7: detected capacity change from 0 to 256 [ 350.829228][ T5834] usb 9-1: config 100 interface 173 has no altsetting 0 [ 350.830299][T12069] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.846265][ T5834] usb 9-1: string descriptor 0 read error: -22 [ 350.859557][ T5834] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 350.873558][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.901011][T12059] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 350.924515][ T5834] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected [ 350.973697][ T5834] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 351.132929][ T27] usb 9-1: USB disconnect, device number 7 [ 351.156079][ T27] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 351.185760][ T27] metro_usb 9-1:100.173: device disconnected [ 351.393695][ T5815] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 351.607946][ T5815] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 351.625105][ T5815] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 351.679809][ T5815] usb 8-1: config 220 has no interface number 2 [ 351.686698][ T5815] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 351.709958][ T5815] usb 8-1: config 220 interface 0 has no altsetting 0 [ 351.722222][ T5815] usb 8-1: config 220 interface 76 has no altsetting 0 [ 351.747101][ T5815] usb 8-1: config 220 interface 1 has no altsetting 0 [ 351.761868][ T5815] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 351.773746][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.792074][ T5815] usb 8-1: Product: syz [ 351.802203][ T5815] usb 8-1: Manufacturer: syz [ 351.809541][ T5815] usb 8-1: SerialNumber: syz [ 351.830402][T12081] loop0: detected capacity change from 0 to 1024 [ 351.899691][T12081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.053253][T12086] netlink: 'syz.8.1698': attribute type 9 has an invalid length. [ 352.061260][T12086] netlink: 'syz.8.1698': attribute type 6 has an invalid length. [ 352.069307][T12086] netlink: 'syz.8.1698': attribute type 7 has an invalid length. [ 352.077613][T12086] netlink: 'syz.8.1698': attribute type 8 has an invalid length. [ 352.288849][ T5815] usb 8-1: selecting invalid altsetting 0 [ 352.510828][ T5815] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 352.529009][ T5815] usb 8-1: No valid video chain found. [ 352.554427][T12089] loop4: detected capacity change from 0 to 512 [ 352.557297][ T5815] usb 8-1: selecting invalid altsetting 0 [ 352.561569][T12089] EXT4-fs: Ignoring removed oldalloc option [ 352.601500][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.624496][T12089] EXT4-fs (loop4): Test dummy encryption mode enabled [ 352.692796][ T5815] usbtest: probe of 8-1:220.1 failed with error -22 [ 352.715930][ T5815] usb 8-1: USB disconnect, device number 17 [ 352.736163][T12089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.779370][T12089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.920698][T12096] loop0: detected capacity change from 0 to 136 [ 352.959045][ T5767] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.992517][T12099] loop8: detected capacity change from 0 to 2048 [ 353.065056][T12099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.122719][T12099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.315221][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.393951][T12114] loop0: detected capacity change from 0 to 1024 [ 353.429168][T12114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.445361][ T5815] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 353.649709][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.669856][ T5815] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.680657][ T5815] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 353.689423][ T5815] usb 5-1: config 100 has no interface number 0 [ 353.696886][ T5815] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 353.718197][ T5815] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 353.731160][ T5815] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 353.761206][T12127] netlink: 'syz.8.1710': attribute type 9 has an invalid length. [ 353.769499][T12127] netlink: 'syz.8.1710': attribute type 6 has an invalid length. [ 353.777344][T12127] netlink: 'syz.8.1710': attribute type 7 has an invalid length. [ 353.785365][T12127] netlink: 'syz.8.1710': attribute type 8 has an invalid length. [ 353.891882][ T5815] usb 5-1: config 100 interface 173 has no altsetting 0 [ 354.011211][ T5815] usb 5-1: string descriptor 0 read error: -22 [ 354.065518][ T5815] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 354.152621][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.264461][T12107] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.300322][ T5815] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 354.321170][ T5815] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 354.388575][T12129] loop7: detected capacity change from 0 to 136 [ 354.451573][ T9731] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.492082][T12134] loop8: detected capacity change from 0 to 512 [ 354.530626][ T5815] usb 5-1: USB disconnect, device number 21 [ 354.531022][T12134] EXT4-fs: Ignoring removed oldalloc option [ 354.584272][T12134] EXT4-fs (loop8): unsupported inode size: 0 [ 354.593998][T12134] EXT4-fs (loop8): blocksize: 1024 [ 354.594729][ T5815] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 354.640354][ T5815] metro_usb 5-1:100.173: device disconnected [ 355.044960][T12147] loop8: detected capacity change from 0 to 1024 [ 355.320278][T12147] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.795185][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.369294][T12171] netlink: 'syz.0.1725': attribute type 9 has an invalid length. [ 356.377471][T12171] netlink: 'syz.0.1725': attribute type 6 has an invalid length. [ 357.213028][T12162] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 357.643794][T12183] loop8: detected capacity change from 0 to 512 [ 357.657419][T12183] EXT4-fs: Ignoring removed oldalloc option [ 357.682599][T12183] EXT4-fs (loop8): Test dummy encryption mode enabled [ 357.735978][T12183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.769394][T12183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.867232][T12191] loop7: detected capacity change from 0 to 1024 [ 357.903789][T12191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.023546][ T5781] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 358.106411][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.213207][T12211] loop7: detected capacity change from 0 to 512 [ 358.221480][T12211] EXT4-fs: Ignoring removed oldalloc option [ 358.228410][T12211] EXT4-fs (loop7): unsupported inode size: 0 [ 358.232147][ T5781] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.234469][T12211] EXT4-fs (loop7): blocksize: 1024 [ 358.251870][ T5781] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 358.277124][ T5781] usb 5-1: config 100 has no interface number 0 [ 358.296956][ T5781] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 358.317328][ T5781] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 358.329418][ T5781] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 358.349246][ T5781] usb 5-1: config 100 interface 173 has no altsetting 0 [ 358.366639][ T5781] usb 5-1: string descriptor 0 read error: -22 [ 358.372863][ T5781] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 358.392151][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.403801][ T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 358.415230][T12189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 358.455708][ T5781] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 358.523928][ T5781] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 358.641762][ T8] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 358.652396][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.703089][ T8] usb 9-1: config 0 descriptor?? [ 358.707142][ T5781] usb 5-1: USB disconnect, device number 22 [ 358.732354][ T8] cp210x 9-1:0.0: cp210x converter detected [ 358.800061][ T5781] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 358.839400][ T5781] metro_usb 5-1:100.173: device disconnected [ 359.140354][ T8] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 359.159372][ T8] usb 9-1: cp210x converter now attached to ttyUSB0 [ 359.376968][ T8] usb 9-1: USB disconnect, device number 8 [ 359.401194][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 359.422009][ T8] cp210x 9-1:0.0: device disconnected [ 359.980212][T12226] loop7: detected capacity change from 0 to 512 [ 359.994604][T12226] EXT4-fs: Ignoring removed oldalloc option [ 360.027112][T12226] EXT4-fs (loop7): Test dummy encryption mode enabled [ 360.077336][T12226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.093098][T12233] loop8: detected capacity change from 0 to 1024 [ 360.191855][T12226] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.222128][T12233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.334414][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.161112][T12206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.183172][T12255] loop0: detected capacity change from 0 to 736 [ 362.269059][T12257] kvm: pic: non byte read [ 362.286810][T12257] kvm: pic: non byte read [ 362.291179][T12257] kvm: pic: non byte read [ 362.332793][T12257] kvm: pic: non byte read [ 362.353595][T12257] kvm: pic: non byte read [ 362.357960][T12257] kvm: pic: non byte read [ 362.362301][T12257] kvm: pic: non byte read [ 362.399015][T12257] kvm: pic: non byte read [ 362.403688][T12257] kvm: pic: non byte read [ 362.414448][T12257] kvm: pic: non byte read [ 362.593852][ T5815] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 362.704167][T12279] loop7: detected capacity change from 0 to 1024 [ 362.750939][T12279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.793152][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.803649][ T5815] usb 9-1: Using ep0 maxpacket: 8 [ 363.530376][ T5815] usb 9-1: config 106 has no interfaces? [ 363.551214][ T5815] usb 9-1: string descriptor 0 read error: -22 [ 363.565136][ T5815] usb 9-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=16.11 [ 363.579707][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.826611][ T5834] usb 9-1: USB disconnect, device number 9 [ 364.398264][T12309] loop4: detected capacity change from 0 to 2048 [ 364.450109][T12309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.510116][T12309] EXT4-fs error (device loop4): ext4_find_extent:911: inode #2: comm syz.4.1770: inode has invalid extent depth: 8 [ 364.535707][T12309] EXT4-fs (loop4): Remounting filesystem read-only [ 364.615817][T12315] loop7: detected capacity change from 0 to 1024 [ 364.659829][T12315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.742006][ T28] audit: type=1800 audit(1786693548.800:15): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1772" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 364.886409][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.903316][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.178497][T12334] loop7: detected capacity change from 0 to 256 [ 365.228431][ T28] audit: type=1800 audit(1786693549.290:16): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1777" name="bus" dev="loop7" ino=1048646 res=0 errno=0 [ 365.383553][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 365.582519][T12344] loop7: detected capacity change from 0 to 256 [ 365.622499][T12344] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 365.640875][T12273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.680194][T12344] exFAT-fs (loop7): error, broken FAT chain. [ 365.686671][T12344] exFAT-fs (loop7): Filesystem has been set read-only [ 365.703187][T12344] exFAT-fs (loop7): error, failed to bmap (inode : ffff88805c302ee0 iblock : 0, err : -5) [ 365.948092][T12351] loop8: detected capacity change from 0 to 1024 [ 365.974212][T12351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.000323][ T28] audit: type=1800 audit(1786693550.060:17): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1783" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 366.192959][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.606191][T12372] loop8: detected capacity change from 0 to 256 [ 366.656579][T12372] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.667384][T12372] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 366.723502][T12372] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 366.738419][T12372] exFAT-fs (loop8): failed to load alloc-bitmap [ 366.745191][T12372] exFAT-fs (loop8): failed to recognize exfat type [ 366.952169][T12372] loop8: detected capacity change from 0 to 256 [ 367.026379][T12372] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 367.736369][T12394] loop0: detected capacity change from 0 to 1024 [ 367.798773][T12394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.845124][ T28] audit: type=1800 audit(1786693551.900:18): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1794" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 367.985230][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.075353][T12408] loop0: detected capacity change from 0 to 256 [ 369.364808][T12416] validate_nla: 2 callbacks suppressed [ 369.364906][T12416] netlink: 'syz.7.1799': attribute type 9 has an invalid length. [ 369.385131][T12416] netlink: 'syz.7.1799': attribute type 6 has an invalid length. [ 369.395908][T12416] netlink: 'syz.7.1799': attribute type 7 has an invalid length. [ 369.406310][T12416] netlink: 'syz.7.1799': attribute type 8 has an invalid length. [ 369.623996][ T5814] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 369.895863][ T5814] usb 9-1: unable to get BOS descriptor or descriptor too short [ 369.926544][ T5814] usb 9-1: config 100 has an invalid interface number: 173 but max is 0 [ 369.936581][ T5814] usb 9-1: config 100 has no interface number 0 [ 369.942939][ T5814] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 369.965634][ T5814] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 369.978954][ T5814] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 369.991940][ T5814] usb 9-1: config 100 interface 173 has no altsetting 0 [ 370.018597][ T5814] usb 9-1: string descriptor 0 read error: -22 [ 370.031841][ T5814] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 370.043426][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.057169][T12415] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 370.081194][ T5814] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected [ 370.102371][ T5814] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 370.163016][T12375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.322008][ T5781] usb 9-1: USB disconnect, device number 10 [ 370.345310][ T5781] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 370.368835][ T5781] metro_usb 9-1:100.173: device disconnected [ 370.410266][T12427] picdev_read: 1527 callbacks suppressed [ 370.410282][T12427] kvm: pic: non byte read [ 370.430581][T12427] kvm: pic: non byte read [ 370.435317][T12427] kvm: pic: non byte read [ 370.439734][T12427] kvm: pic: non byte read [ 370.447613][T12427] kvm: pic: non byte read [ 370.452034][T12427] kvm: pic: non byte read [ 370.457016][T12427] kvm: pic: non byte read [ 370.463776][T12427] kvm: pic: non byte read [ 370.470122][T12427] kvm: pic: non byte read [ 370.480827][T12427] kvm: pic: non byte read [ 370.743644][ T5814] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 370.963584][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 370.972397][ T5814] usb 5-1: config 106 has no interfaces? [ 370.997274][ T5814] usb 5-1: string descriptor 0 read error: -22 [ 371.023205][ T5814] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=16.11 [ 371.042833][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.312268][ T8] usb 5-1: USB disconnect, device number 23 [ 371.465821][T12445] loop8: detected capacity change from 0 to 256 [ 372.063040][T12453] loop4: detected capacity change from 0 to 136 [ 372.115800][ T9731] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 372.143649][ T8] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 372.228448][T12456] netlink: 'syz.8.1812': attribute type 9 has an invalid length. [ 372.262358][T12456] netlink: 'syz.8.1812': attribute type 6 has an invalid length. [ 372.281210][T12456] netlink: 'syz.8.1812': attribute type 7 has an invalid length. [ 372.301425][T12456] netlink: 'syz.8.1812': attribute type 8 has an invalid length. [ 372.346701][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 372.356382][ T8] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 372.367340][ T8] usb 1-1: config 100 has no interface number 0 [ 372.380603][ T8] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 372.401505][ T8] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 372.423387][ T8] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 372.438257][ T8] usb 1-1: config 100 interface 173 has no altsetting 0 [ 372.461840][ T8] usb 1-1: string descriptor 0 read error: -22 [ 372.468660][ T8] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 372.495900][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.520075][T12451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.537937][ T8] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 372.578347][ T8] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 372.744585][ T8] usb 1-1: USB disconnect, device number 61 [ 372.774834][ T8] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 372.813087][ T8] metro_usb 1-1:100.173: device disconnected [ 373.406209][ T5814] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 373.604652][ T5814] usb 8-1: Using ep0 maxpacket: 8 [ 373.623345][ T5814] usb 8-1: config 106 has no interfaces? [ 373.636131][ T5814] usb 8-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=16.11 [ 373.653587][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.671837][ T5814] usb 8-1: Product: syz [ 373.681923][ T5814] usb 8-1: Manufacturer: syz [ 373.687086][ T5814] usb 8-1: SerialNumber: syz [ 373.914208][ T5814] usb 8-1: USB disconnect, device number 18 [ 374.295807][T12491] loop4: detected capacity change from 0 to 256 [ 374.398858][T12491] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.409663][T12491] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 374.457466][T12491] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 374.472429][T12491] exFAT-fs (loop4): failed to load alloc-bitmap [ 374.479153][T12491] exFAT-fs (loop4): failed to recognize exfat type [ 374.673416][T12491] loop4: detected capacity change from 0 to 256 [ 374.739303][T12491] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 375.311669][T12501] loop7: detected capacity change from 0 to 2048 [ 375.362491][T12501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.415798][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.582392][T12511] loop4: detected capacity change from 0 to 256 [ 375.599923][T12511] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 375.643035][T12511] exFAT-fs (loop4): error, broken FAT chain. [ 375.650310][T12511] exFAT-fs (loop4): Filesystem has been set read-only [ 375.659909][T12511] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880782bf660 iblock : 0, err : -5) [ 375.703027][T12515] loop7: detected capacity change from 0 to 2048 [ 375.789163][T12515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.829362][T12519] loop8: detected capacity change from 0 to 128 [ 375.921095][T12519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 375.956489][T12519] System zones: 1-3, 19-19, 35-36 [ 375.963111][T12519] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 376.006666][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.021823][T12519] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.187851][ T9812] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.704794][T12524] picdev_read: 3576 callbacks suppressed [ 376.704811][T12524] kvm: pic: non byte read [ 376.722931][T12524] kvm: pic: non byte read [ 376.727790][T12524] kvm: pic: non byte read [ 376.732152][T12524] kvm: pic: non byte read [ 376.740374][T12524] kvm: pic: non byte read [ 376.781489][T12524] kvm: pic: non byte read [ 376.787057][T12524] kvm: pic: non byte read [ 376.803637][T12524] kvm: pic: non byte read [ 376.808098][T12524] kvm: pic: non byte read [ 376.812438][T12524] kvm: pic: non byte read [ 377.304673][ T23] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 377.565218][ T23] usb 9-1: unable to get BOS descriptor or descriptor too short [ 377.574799][ T23] usb 9-1: config 100 has an invalid interface number: 173 but max is 0 [ 377.586787][ T23] usb 9-1: config 100 has no interface number 0 [ 377.594292][ T23] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 377.604881][ T23] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 377.616639][ T23] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 377.628160][ T23] usb 9-1: config 100 interface 173 has no altsetting 0 [ 377.638821][ T23] usb 9-1: string descriptor 0 read error: -22 [ 377.648279][ T23] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 377.703714][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.703798][ T5778] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 377.742873][T12542] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 377.774579][ T23] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected [ 377.784106][T12544] loop7: detected capacity change from 0 to 136 [ 377.812416][ T23] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 377.832645][ T9731] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.927193][ T5778] usb 1-1: Using ep0 maxpacket: 8 [ 377.935988][ T5778] usb 1-1: config 106 has no interfaces? [ 377.939027][T12549] loop7: detected capacity change from 0 to 1024 [ 377.948130][ T5778] usb 1-1: string descriptor 0 read error: -22 [ 377.948247][ T5778] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=16.11 [ 377.948271][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.997767][T12549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.000020][ T5778] usb 9-1: USB disconnect, device number 11 [ 378.039525][ T28] audit: type=1800 audit(1786693562.100:19): pid=12549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1847" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 378.078308][ T5778] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 378.108078][ T5778] metro_usb 9-1:100.173: device disconnected [ 378.183001][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.218275][ T23] usb 1-1: USB disconnect, device number 62 [ 378.396308][T12557] loop0: detected capacity change from 0 to 256 [ 378.491612][T12559] loop7: detected capacity change from 0 to 256 [ 378.614028][T12559] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 378.625143][T12559] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 378.674692][T12557] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 378.748251][T12559] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 378.763005][T12559] exFAT-fs (loop7): failed to load alloc-bitmap [ 378.769765][T12559] exFAT-fs (loop7): failed to recognize exfat type [ 378.946510][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.966500][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.663364][T12578] loop7: detected capacity change from 0 to 1024 [ 379.691624][T12578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.183812][ T28] audit: type=1800 audit(1786693564.150:20): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1857" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 380.452449][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.684754][T12591] loop7: detected capacity change from 0 to 128 [ 380.708231][T12591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 380.731587][T12591] System zones: 1-3, 19-19, 35-36 [ 380.756020][T12591] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 380.780711][T12591] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.792122][T12596] loop4: detected capacity change from 0 to 256 [ 380.899416][ T9739] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.963711][ T27] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 381.167739][T12609] loop7: detected capacity change from 0 to 1024 [ 381.193978][ T27] usb 9-1: unable to get BOS descriptor or descriptor too short [ 381.213723][ T27] usb 9-1: config 100 has an invalid interface number: 173 but max is 0 [ 381.222105][ T27] usb 9-1: config 100 has no interface number 0 [ 381.248554][T12609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.264448][ T27] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 381.287091][ T27] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 381.300037][ T27] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 381.307944][ T28] audit: type=1800 audit(1786693565.370:21): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1868" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 381.311236][ T27] usb 9-1: config 100 interface 173 has no altsetting 0 [ 381.344720][ T27] usb 9-1: string descriptor 0 read error: -22 [ 381.353764][ T27] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 381.362829][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.385696][T12593] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 381.395722][ T27] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected [ 381.406533][ T27] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 381.469911][T12614] loop0: detected capacity change from 0 to 136 [ 381.651841][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.652320][ T5778] usb 9-1: USB disconnect, device number 12 [ 382.414428][ T5778] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 382.442451][ T5778] metro_usb 9-1:100.173: device disconnected [ 382.563646][T12627] loop4: detected capacity change from 0 to 2048 [ 382.654114][T12627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.793639][T12638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.845474][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.029645][T12649] loop4: detected capacity change from 0 to 136 [ 384.100183][T12669] loop7: detected capacity change from 0 to 512 [ 384.108403][T12669] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 384.139384][T12669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 384.173689][T12669] System zones: 1-12 [ 384.177797][T12669] EXT4-fs (loop7): orphan cleanup on readonly fs [ 384.212375][T12669] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1886: bg 0: block 361: padding at end of block bitmap is not set [ 384.322410][T12675] loop0: detected capacity change from 0 to 2048 [ 384.330010][T12677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.330375][T12669] EXT4-fs (loop7): Remounting filesystem read-only [ 384.393848][T12669] EXT4-fs (loop7): 1 truncate cleaned up [ 384.405458][T12669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 384.420829][T12675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.565113][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.586475][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 384.647090][T12688] loop4: detected capacity change from 0 to 1024 [ 384.725759][T12688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.834789][T12696] loop7: detected capacity change from 0 to 16 [ 385.058655][T12696] erofs: (device loop7): mounted with root inode @ nid 36. [ 385.410376][T12698] loop0: detected capacity change from 0 to 136 [ 385.438731][T12696] erofs: (device loop7): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 385.476086][ T9731] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 385.573662][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.079429][T12725] loop7: detected capacity change from 0 to 1024 [ 386.133093][T12725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.948335][T12737] loop0: detected capacity change from 0 to 16 [ 386.967425][T12737] erofs: (device loop0): mounted with root inode @ nid 36. [ 387.012515][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.021321][T12737] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 387.170067][T12742] loop7: detected capacity change from 0 to 136 [ 388.399166][T12770] loop4: detected capacity change from 0 to 1024 [ 388.452554][T12770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.305587][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.349488][T12787] loop0: detected capacity change from 0 to 512 [ 389.450864][T12787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.624086][T12793] loop8: detected capacity change from 0 to 136 [ 389.691185][ T9731] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.798802][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.049824][T12803] input: syz1 as /devices/virtual/input/input11 [ 390.232024][T12812] netlink: 'syz.8.1926': attribute type 9 has an invalid length. [ 390.240405][T12812] netlink: 'syz.8.1926': attribute type 6 has an invalid length. [ 390.248216][T12812] netlink: 'syz.8.1926': attribute type 7 has an invalid length. [ 390.255994][T12812] netlink: 'syz.8.1926': attribute type 8 has an invalid length. [ 390.431093][T12814] loop7: detected capacity change from 0 to 1024 [ 390.481735][T12814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.656012][T12822] loop0: detected capacity change from 0 to 2048 [ 390.719526][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.753636][T12822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.978408][T12830] loop7: detected capacity change from 0 to 136 [ 391.104953][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.577238][T12850] input: syz1 as /devices/virtual/input/input12 [ 392.625252][T12852] loop4: detected capacity change from 0 to 1024 [ 392.672883][T12852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.762899][T12857] loop0: detected capacity change from 0 to 1024 [ 392.839218][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.955793][T12857] hfsplus: xattr searching failed [ 393.219937][T12862] No such timeout policy "syz1" [ 394.239867][T12886] loop7: detected capacity change from 0 to 1024 [ 394.289165][T12886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.396644][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.816149][T12899] No such timeout policy "syz1" [ 395.491764][T12902] loop0: detected capacity change from 0 to 256 [ 395.543117][T12902] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 395.666148][T12904] loop7: detected capacity change from 0 to 1024 [ 395.799297][T12904] hfsplus: xattr searching failed [ 395.946477][T12917] loop4: detected capacity change from 0 to 2048 [ 396.023689][T12917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.034149][T12904] hfsplus: xattr searching failed [ 396.127710][T12924] loop8: detected capacity change from 0 to 1024 [ 396.184269][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.208501][T12926] loop0: detected capacity change from 0 to 512 [ 396.258075][T12924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.307997][T12926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.366617][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.412953][T12926] fs-verity: sha512 using implementation "sha512-avx2" [ 396.421257][T12926] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #15: comm syz.0.1971: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 396.475462][ T7600] hfsplus: b-tree write err: -5, ino 3 [ 396.671076][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.367135][T12946] input: syz1 as /devices/virtual/input/input13 [ 397.887009][T12964] loop0: detected capacity change from 0 to 1024 [ 397.963514][T12959] netlink: 'syz.8.1980': attribute type 9 has an invalid length. [ 397.971292][T12959] netlink: 'syz.8.1980': attribute type 6 has an invalid length. [ 397.979113][T12959] netlink: 'syz.8.1980': attribute type 7 has an invalid length. [ 397.986891][T12959] netlink: 'syz.8.1980': attribute type 8 has an invalid length. [ 397.988500][T12964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.169611][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.715515][T12987] loop7: detected capacity change from 0 to 128 [ 398.877610][T12987] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x610000ff (sector = 1) [ 399.361488][T12994] loop7: detected capacity change from 0 to 1024 [ 399.440796][T12994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.551218][T12999] loop4: detected capacity change from 0 to 2048 [ 399.575192][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.665105][T12999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.829199][ T28] audit: type=1800 audit(1786693583.890:22): pid=13012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1998" name="idVendor" dev="configfs" ino=58682 res=0 errno=0 [ 399.907992][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.935466][T13016] loop0: detected capacity change from 0 to 1024 [ 400.074858][T13016] hfsplus: xattr searching failed [ 401.013751][T13028] loop4: detected capacity change from 0 to 1024 [ 401.059388][T13028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.193110][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.356880][T13046] loop4: detected capacity change from 0 to 128 [ 401.370487][ T28] audit: type=1800 audit(1786693585.440:23): pid=13047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2010" name="idVendor" dev="configfs" ino=57897 res=0 errno=0 [ 401.409837][T13046] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x610000ff (sector = 1) [ 401.845399][T13059] netlink: 'syz.0.2011': attribute type 9 has an invalid length. [ 401.853221][T13059] netlink: 'syz.0.2011': attribute type 6 has an invalid length. [ 401.861334][T13059] netlink: 'syz.0.2011': attribute type 7 has an invalid length. [ 401.869144][T13059] netlink: 'syz.0.2011': attribute type 8 has an invalid length. [ 401.927603][T13061] loop8: detected capacity change from 0 to 512 [ 402.001707][T13061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.162276][T13061] EXT4-fs error (device loop8): ext4_ind_map_blocks:604: inode #15: comm syz.8.2014: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 402.202384][ T9812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.097543][T13072] loop7: detected capacity change from 0 to 1024 [ 403.190268][T13072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.258386][T13080] input: syz1 as /devices/virtual/input/input14 [ 403.371771][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.490815][T13087] loop4: detected capacity change from 0 to 512 [ 403.509324][T13087] EXT4-fs: Ignoring removed bh option [ 403.541557][T13087] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 403.572928][T13087] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2025: iget: bad i_size value: 3298534883338 [ 403.592945][T13087] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2025: couldn't read orphan inode 15 (err -117) [ 403.622916][T13087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.748778][ T7778] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 403.783951][ T7778] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 403.814190][ T7778] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 403.855571][ T7778] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 403.898677][ T7778] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 403.924744][ T7778] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 403.948959][ T7778] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 403.975696][ T7778] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 404.002051][ T7778] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 404.028071][ T7778] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 404.246788][T13098] loop0: detected capacity change from 0 to 512 [ 404.318713][T13098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.366092][T13098] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.380796][T13104] loop7: detected capacity change from 0 to 512 [ 404.444982][T13104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.461972][T13098] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2030: corrupted inode contents [ 404.506869][T13110] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 404.513869][T13098] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #2: comm syz.0.2030: mark_inode_dirty error [ 404.537754][T13098] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2030: corrupted inode contents [ 404.554843][T13109] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2030: corrupted inode contents [ 404.564391][T13104] EXT4-fs error (device loop7): ext4_ind_map_blocks:604: inode #15: comm syz.7.2031: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 404.591793][T13109] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #2: comm syz.0.2030: mark_inode_dirty error [ 404.598918][ T7778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.617070][T13109] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2030: corrupted inode contents [ 404.691900][ T7606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.712600][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.749926][ T9739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.885564][ T7606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.016839][ T7606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 405.138770][ T7606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.602744][ T7606] hsr_slave_0: left promiscuous mode [ 406.608684][ T7606] hsr_slave_1: left promiscuous mode [ 406.628146][ T7606] veth1_macvtap: left promiscuous mode [ 406.633824][ T7606] veth0_macvtap: left promiscuous mode [ 406.640397][ T7606] veth1_vlan: left promiscuous mode [ 406.645968][ T7606] veth0_vlan: left promiscuous mode [ 407.545529][ T7606] bond0 (unregistering): Released all slaves [ 407.954659][ T7606] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.992530][ T7606] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.049173][ T7606] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.120076][ T7606] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.268334][ T7606] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.357056][ T7606] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.422842][ T7606] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.501793][ T7606] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.720703][ T7606] hsr_slave_0: left promiscuous mode [ 409.726639][ T7606] hsr_slave_1: left promiscuous mode [ 409.732551][ T7606] bridge_slave_1: left allmulticast mode [ 409.738396][ T7606] bridge_slave_1: left promiscuous mode [ 409.745895][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.754634][ T7606] bridge_slave_0: left allmulticast mode [ 409.760282][ T7606] bridge_slave_0: left promiscuous mode [ 409.766247][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.778551][ T7606] hsr_slave_0: left promiscuous mode [ 409.786039][ T7606] hsr_slave_1: left promiscuous mode [ 409.791763][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.799895][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.807895][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.815883][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.823387][ T7606] bridge_slave_1: left allmulticast mode [ 409.831297][ T7606] bridge_slave_1: left promiscuous mode [ 409.837370][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.849240][ T7606] bridge_slave_0: left allmulticast mode [ 409.855780][ T7606] bridge_slave_0: left promiscuous mode [ 409.861553][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.902016][ T7606] veth1_macvtap: left promiscuous mode [ 409.907688][ T7606] veth0_macvtap: left promiscuous mode [ 409.913220][ T7606] veth1_vlan: left promiscuous mode [ 409.919176][ T7606] veth0_vlan: left promiscuous mode [ 409.926056][ T7606] veth1_macvtap: left promiscuous mode [ 409.931546][ T7606] veth0_macvtap: left promiscuous mode [ 409.937633][ T7606] veth1_vlan: left promiscuous mode [ 409.942915][ T7606] veth0_vlan: left promiscuous mode [ 410.605412][ T7606] team0 (unregistering): Port device team_slave_1 removed [ 410.649657][ T7606] team0 (unregistering): Port device team_slave_0 removed [ 410.697937][ T7606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.740703][ T7606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.036121][ T7606] bond0 (unregistering): Released all slaves [ 411.639724][ T7606] team0 (unregistering): Port device team_slave_1 removed [ 411.678918][ T7606] team0 (unregistering): Port device team_slave_0 removed [ 411.738086][ T7606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.783063][ T7606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.082269][ T7606] bond0 (unregistering): Released all slaves