last executing test programs: 3m36.446398636s ago: executing program 1 (id=1267): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 3m34.041035318s ago: executing program 1 (id=1275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3m32.935094931s ago: executing program 1 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3m32.653679947s ago: executing program 1 (id=1287): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 3m30.85543031s ago: executing program 1 (id=1295): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 3m30.332690486s ago: executing program 1 (id=1303): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 3m13.063332971s ago: executing program 32 (id=1303): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 17.746095066s ago: executing program 0 (id=1985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17.569652797s ago: executing program 5 (id=1986): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2a00001, &(0x7f0000000140)=ANY=[@ANYBLOB="10e31ae92cd369ccb14419025e32a93f3f0221ad17cb8e7276b38f1bff5550ead98d8d3e00d73a2ec5d0b64fb4634618cbc6b75af5203017413b923f3456ea8c47aba9e8e625892c695e4746fb02b3c3b4aa00000000000000"], 0x1, 0x198, &(0x7f0000000240)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0xfffd, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) 16.31212616s ago: executing program 5 (id=1992): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000180)="02ab0f0203e04a186b3ede6a4decdbde291cb9f53ea4b1cea0952cf39e78e6c2b7ba21d2f307327c2b851b1213336b", 0x0, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) 14.998968662s ago: executing program 5 (id=1997): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 13.817573178s ago: executing program 0 (id=2000): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x6) 13.68515519s ago: executing program 5 (id=2001): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003f", 0xb}], 0x1) 13.554056788s ago: executing program 0 (id=2002): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000001400078008000640000002000800084000000041982f"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 13.129477173s ago: executing program 2 (id=2004): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2a00001, &(0x7f0000000140)=ANY=[@ANYBLOB="10e31ae92cd369ccb14419025e32a93f3f0221ad17cb8e7276b38f1bff5550ead98d8d3e00d73a2ec5d0b64fb4634618cbc6b75af5203017413b923f3456ea8c47aba9e8e625892c695e4746fb02b3c3b4aa00000000000000"], 0x1, 0x198, &(0x7f0000000240)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0xfffd, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) 12.446963341s ago: executing program 3 (id=2006): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@errors_remount}, {@nomblk_io_submit}, {@bh}, {@prjquota}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x74}}, 0x0) 11.810119361s ago: executing program 2 (id=2007): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4a", 0x49}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf74", 0x92}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad", 0x1c}, {&(0x7f00000000c0)}], 0x5}}], 0x1, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.489093123s ago: executing program 6 (id=2008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 9.641398053s ago: executing program 5 (id=2009): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000180)="02ab0f0203e04a186b3ede6a4decdbde291cb9f53ea4b1cea0952cf39e78e6c2b7ba21d2f307327c2b851b1213336b", 0x0, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) 9.553633406s ago: executing program 6 (id=2010): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x31) 9.523433758s ago: executing program 2 (id=2011): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.504599081s ago: executing program 4 (id=2012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) sendmsg$rds(r3, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 9.376750843s ago: executing program 2 (id=2013): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 8.228388175s ago: executing program 6 (id=2014): setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x255fdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 8.2277958s ago: executing program 3 (id=2015): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xa6, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e45"}, 0x50) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r7}, 0x8) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 8.2275287s ago: executing program 4 (id=2016): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace(0x10, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="d3d264a14245898a46fc5c184c4e1c42d0f170ab273ad0d6c7ad53d868c7e858d4f99ef4630262fbaf0a264702882803ed6491beeea68710ef3942a9f51926a353715ab607dd89df48139d300fb46634d79d91aba97aa09f4b51fda6e9e9907bbee951267731ae5f19e1e1cdc398d406c3857d2a5469b9f16b999b4177cc59", @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB="ebb034b1", @ANYRES32=r5], 0x22, 0x150b, &(0x7f0000002780)="$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") creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r6, r6, &(0x7f0000001000)=0x10000000000000, 0xffff) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x4) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) 8.150691293s ago: executing program 0 (id=2017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = getpid() r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r4, 0x0, 0x3, 'syz0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06010000040002", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000040c0)=r0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x1000) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, &(0x7f0000000000)={0x2020}, 0x96) close(r6) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x0, 0x1, 0x9, 0xf7, 0x75, 0x8, 0x1, 0xdc, 0xfe, 0x100, 0x8, 0x6, 0x8, 0x8, 0x4, [0x3, 0x7]}}) read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2020) 7.851550161s ago: executing program 3 (id=2018): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x3}}, 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 3.250832951s ago: executing program 4 (id=2019): openat$rtc(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/177, 0x0, 0xc000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.157615429s ago: executing program 2 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0xffffffffffffffc3}, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x800000000001}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2f}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 2.739157655s ago: executing program 3 (id=2021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {r2}, 0xfffffffc, 0x80000001}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.738821606s ago: executing program 4 (id=2022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.681144392s ago: executing program 2 (id=2023): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4a", 0x49}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf74", 0x92}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad", 0x1c}, {&(0x7f00000000c0)}], 0x5}}], 0x1, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.56603781s ago: executing program 0 (id=2024): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000440)="93685241eca94a", 0x7}], 0x1) 2.311075745s ago: executing program 6 (id=2025): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.614175345s ago: executing program 4 (id=2026): socketpair$unix(0x2d, 0x2, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x458c, &(0x7f00000001c0)={0x0, 0xbd25, 0x40, 0x2, 0x30b}) syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r4 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1.419744426s ago: executing program 6 (id=2027): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x31) 1.417758423s ago: executing program 3 (id=2028): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@errors_remount}, {@nomblk_io_submit}, {@bh}, {@prjquota}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x74}}, 0x0) 1.281173542s ago: executing program 0 (id=2029): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000001400078008000640000002000800084000000041982f"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 421.401565ms ago: executing program 6 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xa6, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e45"}, 0x50) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r7}, 0x8) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 197.294376ms ago: executing program 3 (id=2031): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 126.159968ms ago: executing program 4 (id=2032): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 0s ago: executing program 5 (id=2033): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="230800000000030000000b00000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000010000200050800500020002000000090001007ee5d52ffd0000000800030001ac0f"], 0x48}}, 0x40000) kernel console output (not intermixed with test programs): x85 has invalid maxpacket 1024 [ 221.202928][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 221.231160][ T10] go7007 6-1:253.184: probe with driver go7007 failed with error -12 [ 221.235182][ T24] usb 5-1: string descriptor 0 read error: -22 [ 221.261271][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 221.291572][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 221.318807][ T24] usb 5-1: config 0 descriptor?? [ 221.338671][ T8354] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.355147][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 221.371455][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 221.446446][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.471920][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.487924][ T10] usb 6-1: USB disconnect, device number 23 [ 221.569299][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.587680][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.612534][ T5771] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 221.702479][ T24] usb 5-1: USB disconnect, device number 15 [ 221.752233][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 221.774190][ T5771] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 221.784510][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.796155][ T5771] usb 2-1: config 0 descriptor?? [ 221.924348][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 221.934447][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 221.943920][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 221.955494][ T9] usb 4-1: config 220 has no interface number 2 [ 221.971761][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 222.003578][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 222.023000][ T5771] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 222.033156][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 222.040247][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 222.048034][ T5771] [drm:udl_init] *ERROR* Selecting channel failed [ 222.073651][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 222.097358][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.130018][ T9] usb 4-1: Product: syz [ 222.134809][ T5771] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 222.145763][ T9] usb 4-1: Manufacturer: syz [ 222.157014][ T9] usb 4-1: SerialNumber: syz [ 222.161665][ T5771] [drm] Initialized udl on minor 2 [ 222.170982][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 222.172470][ T5771] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.215800][ T5771] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 222.226116][ T5772] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.247347][ T5771] usb 2-1: USB disconnect, device number 19 [ 222.256633][ T5772] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 222.353150][ T8438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.398164][ T8442] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 222.419092][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 222.426994][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 222.433844][ T9] usb 4-1: selecting invalid altsetting 0 [ 222.447359][ T9] usb 4-1: selecting invalid altsetting 0 [ 222.465904][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 222.509372][ T9] usb 4-1: USB disconnect, device number 17 [ 222.883847][ T8464] netlink: 212 bytes leftover after parsing attributes in process `syz.0.827'. [ 223.340274][ T8472] loop3: detected capacity change from 0 to 32768 [ 223.368354][ T8472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.830 (8472) [ 223.401348][ T8472] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.411654][ T8472] BTRFS info (device loop3): using sha256 checksum algorithm [ 223.515250][ T8472] BTRFS info (device loop3): enabling ssd optimizations [ 223.522288][ T8472] BTRFS info (device loop3): turning on async discard [ 223.530624][ T8472] BTRFS info (device loop3): enabling free space tree [ 224.884915][ T8501] netlink: 32 bytes leftover after parsing attributes in process `syz.5.836'. [ 225.600032][ T8505] process 'syz.1.838' launched '/dev/fd/5' with NULL argv: empty string added [ 225.641458][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 225.813952][ T5628] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.146282][ T8521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.844'. [ 230.692404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 230.859000][ T8551] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 230.868258][ T8551] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.012347][ T5750] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 231.654370][ T5750] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 231.676378][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.726545][ T5750] usb 3-1: config 0 descriptor?? [ 231.892861][ T8564] netlink: 212 bytes leftover after parsing attributes in process `syz.5.859'. [ 231.966085][ T5750] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 231.989466][ T8566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.862'. [ 232.001695][ T5750] [drm:udl_init] *ERROR* Selecting channel failed [ 232.052854][ T8568] loop1: detected capacity change from 0 to 2048 [ 232.099591][ T5750] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 232.099688][ T8568] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 232.136826][ T8568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.155702][ T5750] [drm] Initialized udl on minor 2 [ 232.164872][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 232.164890][ T30] audit: type=1800 audit(1778151091.638:174): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.861" name=".log" dev="loop1" ino=1367 res=0 errno=0 [ 232.201520][ T8570] loop3: detected capacity change from 0 to 128 [ 232.255319][ T8570] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 232.294612][ T8570] hpfs: filesystem error: improperly stopped [ 232.318998][ T8570] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 232.349579][ T8570] hpfs: You really don't want any checks? You are crazy... [ 232.379240][ T8570] hpfs: Code page index out of array [ 232.396821][ T8570] hpfs: code page support is disabled [ 232.407831][ T5750] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.435426][ T5750] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 232.443530][ T29] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.450041][ T8570] hpfs: hpfs_map_4sectors(): unaligned read [ 232.461761][ T29] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.488029][ T5750] usb 3-1: USB disconnect, device number 14 [ 232.587287][ T8570] hpfs: hpfs_map_4sectors(): unaligned read [ 232.663501][ T29] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 232.767585][ T8570] hpfs: filesystem error: unable to find root dir [ 233.152973][ T8570] hpfs: hpfs_map_4sectors(): unaligned read [ 235.179614][ T5772] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 235.545310][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 236.716420][ T5772] usb 2-1: config 0 has no interfaces? [ 238.124670][ T5772] usb 2-1: string descriptor 0 read error: -71 [ 238.144436][ T5772] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 238.178145][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.216545][ T8621] bond_slave_0: Caught tx_queue_len zero misconfig [ 238.234583][ T5772] usb 2-1: config 0 descriptor?? [ 238.250633][ T8622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.877'. [ 238.277241][ T5772] usb 2-1: can't set config #0, error -71 [ 238.295457][ T5772] usb 2-1: USB disconnect, device number 20 [ 239.044832][ T8646] loop5: detected capacity change from 0 to 2048 [ 239.059919][ T8646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.364868][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 240.373715][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 240.382532][ T8676] netlink: 'syz.4.898': attribute type 13 has an invalid length. [ 240.390252][ T8676] netlink: 'syz.4.898': attribute type 12 has an invalid length. [ 243.473698][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 244.532479][ T5771] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 244.864326][ T5771] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 244.888240][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.483064][ T5771] usb 2-1: config 0 descriptor?? [ 245.492722][ T5771] cp210x 2-1:0.0: cp210x converter detected [ 245.712448][ T5771] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 245.739330][ T5771] cp210x 2-1:0.0: querying part number failed [ 245.821872][ T5771] usb 2-1: cp210x converter now attached to ttyUSB0 [ 247.023075][ T5793] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 247.316196][ T5793] usb 6-1: Using ep0 maxpacket: 16 [ 247.334069][ T5793] usb 6-1: config 253 has an invalid interface number: 184 but max is 0 [ 247.358951][ T5793] usb 6-1: config 253 has no interface number 0 [ 247.374658][ T5793] usb 6-1: config 253 interface 184 has no altsetting 0 [ 247.391814][ T5793] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 247.415627][ T5771] usb 2-1: USB disconnect, device number 21 [ 247.444024][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.486204][ T5793] usb 6-1: Product: syz [ 247.493261][ T5771] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 247.526908][ T5793] usb 6-1: Manufacturer: syz [ 247.541033][ T5771] cp210x 2-1:0.0: device disconnected [ 247.549912][ T5793] usb 6-1: SerialNumber: syz [ 247.619966][ T5793] go7007 6-1:253.184: probe with driver go7007 failed with error -12 [ 247.802987][ T8704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.979460][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 247.988366][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 247.998334][ T8719] netlink: 'syz.1.911': attribute type 13 has an invalid length. [ 248.006772][ T8719] netlink: 'syz.1.911': attribute type 12 has an invalid length. [ 248.595443][ T8704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.739436][ T5793] usb 6-1: USB disconnect, device number 24 [ 252.723202][ T8742] loop5: detected capacity change from 0 to 256 [ 252.887325][ T8742] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22de60d6, utbl_chksum : 0xe619d30d) [ 253.114031][ T5630] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 253.172223][ T5772] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 253.392520][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 253.513804][ T5772] usb 2-1: config 0 has no interfaces? [ 253.627150][ T5772] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 253.672847][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.713093][ T5772] usb 2-1: Product: syz [ 253.742142][ T5772] usb 2-1: Manufacturer: syz [ 253.758641][ T5772] usb 2-1: SerialNumber: syz [ 253.790254][ T5772] usb 2-1: config 0 descriptor?? [ 253.801422][ T30] audit: type=1800 audit(1778151113.268:175): pid=8746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.921" name="bus" dev="ramfs" ino=17908 res=0 errno=0 [ 255.472698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 255.699074][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.711138][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.990841][ T5630] Bluetooth: hci4: unexpected event for opcode 0x0c23 [ 259.359946][ T8793] loop2: detected capacity change from 0 to 1024 [ 259.586714][ T8793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.651745][ T10] usb 2-1: USB disconnect, device number 22 [ 259.666215][ T8793] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.683825][ T8802] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 259.769701][ T8802] EXT4-fs (loop2): Remounting filesystem read-only [ 259.933951][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.947664][ T8810] syzkaller0: entered promiscuous mode [ 259.972823][ T8810] syzkaller0: entered allmulticast mode [ 260.344266][ T5630] Bluetooth: hci5: unexpected event for opcode 0x0c23 [ 261.457550][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 261.664368][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.697014][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.769616][ T24] usb 6-1: config 0 descriptor?? [ 262.743067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 263.152634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 263.564747][ T24] cp210x 6-1:0.0: cp210x converter detected [ 264.096605][ T24] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 264.136679][ T24] cp210x 6-1:0.0: querying part number failed [ 264.197501][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 265.483287][ T5772] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 265.493926][ T5630] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 265.503152][ T5743] usb 6-1: USB disconnect, device number 25 [ 265.530430][ T5743] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 265.541175][ T5743] cp210x 6-1:0.0: device disconnected [ 265.713309][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 265.770236][ T5772] usb 4-1: config 0 has no interfaces? [ 265.811802][ T5772] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 265.866480][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.911674][ T5772] usb 4-1: Product: syz [ 265.937496][ T5772] usb 4-1: Manufacturer: syz [ 265.966931][ T5772] usb 4-1: SerialNumber: syz [ 266.000620][ T5772] usb 4-1: config 0 descriptor?? [ 266.691541][ T8891] loop5: detected capacity change from 0 to 2048 [ 267.183237][ T8893] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.265263][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 269.306357][ T8915] mmap: syz.5.986 (8915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 270.106619][ T5630] Bluetooth: hci5: unexpected event for opcode 0x0c23 [ 270.698119][ T8931] loop5: detected capacity change from 0 to 2048 [ 271.206198][ T8932] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.520535][ T10] usb 4-1: USB disconnect, device number 18 [ 271.691175][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 271.895242][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 272.851226][ T8951] netlink: 'syz.5.1001': attribute type 29 has an invalid length. [ 272.965174][ T8951] netlink: 'syz.5.1001': attribute type 29 has an invalid length. [ 273.011192][ T8951] netlink: 'syz.5.1001': attribute type 29 has an invalid length. [ 273.424645][ T5630] Bluetooth: hci5: unexpected event for opcode 0x0c23 [ 274.612246][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 274.805977][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.834015][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.852479][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 274.862951][ T24] usb 3-1: config 0 descriptor?? [ 274.876952][ T24] cp210x 3-1:0.0: cp210x converter detected [ 275.102935][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 276.194322][ T9002] loop1: detected capacity change from 0 to 1024 [ 276.323651][ T9002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.636478][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.680677][ T9018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1027'. [ 276.686537][ T9020] loop9: detected capacity change from 0 to 7 [ 276.707894][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.727831][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.746376][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.759471][ T5771] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.770532][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.803084][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.823067][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.831218][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.840694][ T9020] ldm_validate_partition_table(): Disk read failed. [ 276.864821][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.883084][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.888931][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 276.897560][ T9020] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.910879][ T9020] Dev loop9: unable to read RDB block 0 [ 276.920071][ T5771] usb 5-1: config 0 has no interfaces? [ 276.929420][ T5771] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 276.938967][ T9020] loop9: unable to read partition table [ 276.944735][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 276.953260][ T9020] loop9: partition table beyond EOD, truncated [ 276.959468][ T5771] usb 5-1: Product: syz [ 276.964020][ T9020] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 276.964020][ T9020] ) failed (rc=-5) [ 276.978839][ T5771] usb 5-1: Manufacturer: syz [ 276.984220][ T5771] usb 5-1: SerialNumber: syz [ 277.001460][ T5771] usb 5-1: config 0 descriptor?? [ 277.036149][ T9023] ldm_validate_partition_table(): Disk read failed. [ 277.052935][ T9023] Dev loop9: unable to read RDB block 0 [ 277.058884][ T9023] loop9: unable to read partition table [ 277.065467][ T9023] loop9: partition table beyond EOD, truncated [ 277.184697][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 277.228130][ T5771] usb 5-1: USB disconnect, device number 16 [ 277.316547][ T9037] loop3: detected capacity change from 0 to 2048 [ 277.328590][ T9037] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 277.350512][ T9037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.380932][ T5772] usb 3-1: USB disconnect, device number 16 [ 277.405062][ T30] audit: type=1800 audit(1778151136.868:176): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1036" name=".log" dev="loop3" ino=1367 res=0 errno=0 [ 277.575190][ T5772] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 277.610541][ T5772] cp210x 3-1:0.0: device disconnected [ 279.644757][ T9063] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1045'. [ 279.709972][ T9063] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 279.738788][ T9067] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1047'. [ 279.748665][ T5804] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 279.915938][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 279.926582][ T9069] netlink: 'syz.2.1048': attribute type 13 has an invalid length. [ 279.944541][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.980153][ T9076] syzkaller0: entered promiscuous mode [ 279.984838][ T5804] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 280.000391][ T9076] syzkaller0: entered allmulticast mode [ 280.002594][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.024636][ T5804] usb 5-1: Product: syz [ 280.038067][ T5804] usb 5-1: Manufacturer: syz [ 280.043008][ T5804] usb 5-1: SerialNumber: syz [ 280.075192][ T5804] usb 5-1: config 0 descriptor?? [ 280.116394][ T5804] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 280.154231][ T29] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 280.158985][ T5804] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 280.250209][ T9059] loop1: detected capacity change from 0 to 32768 [ 280.313214][ T29] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.337697][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.393794][ T29] usb 4-1: config 0 descriptor?? [ 280.421916][ T29] cp210x 4-1:0.0: cp210x converter detected [ 280.442762][ T9059] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 280.543017][ T9089] loop5: detected capacity change from 0 to 256 [ 280.557065][ T9089] vfat: Bad value for 'dmask' [ 281.052838][ T9089] loop5: detected capacity change from 0 to 8192 [ 281.176078][ T9089] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.234647][ T29] usb 4-1: cp210x converter now attached to ttyUSB0 [ 281.284487][ T9076] tipc: Enabled bearer , priority 0 [ 281.317336][ T9068] tipc: Resetting bearer [ 281.448518][ T9068] tipc: Disabling bearer [ 281.457595][ T9059] XFS (loop1): Ending clean mount [ 281.461869][ T5804] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 281.808190][ T5625] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 282.674552][ T5804] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 282.706689][ T5804] em28xx 5-1:0.0: board has no eeprom [ 282.818450][ T5804] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 282.827950][ T5804] em28xx 5-1:0.0: dvb set to bulk mode. [ 282.845303][ T5772] em28xx 5-1:0.0: Binding DVB extension [ 282.867668][ T5804] usb 5-1: USB disconnect, device number 17 [ 282.939951][ T5804] em28xx 5-1:0.0: Disconnecting em28xx [ 282.949775][ T5750] usb 4-1: USB disconnect, device number 19 [ 283.011849][ T5750] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 283.054195][ T5750] cp210x 4-1:0.0: device disconnected [ 283.060371][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 283.113486][ T5772] em28xx 5-1:0.0: Registering input extension [ 283.121260][ T5804] em28xx 5-1:0.0: Closing input extension [ 283.379023][ T5804] em28xx 5-1:0.0: Freeing device [ 284.056666][ T24] usb 6-1: device descriptor read/64, error -71 [ 284.312206][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 284.462605][ T24] usb 6-1: device descriptor read/64, error -71 [ 284.622645][ T24] usb usb6-port1: attempt power cycle [ 284.666185][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1067'. [ 284.992282][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 285.041987][ T24] usb 6-1: device descriptor read/8, error -71 [ 285.153594][ T5750] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 285.545264][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 285.592614][ T5750] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 285.635611][ T24] usb 6-1: device descriptor read/8, error -71 [ 285.655009][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.709362][ T5750] usb 5-1: Product: syz [ 285.729675][ T5750] usb 5-1: Manufacturer: syz [ 285.750950][ T5750] usb 5-1: SerialNumber: syz [ 285.784576][ T24] usb usb6-port1: unable to enumerate USB device [ 285.807222][ T5750] usb 5-1: config 0 descriptor?? [ 285.937654][ T9155] loop5: detected capacity change from 0 to 256 [ 285.982672][ T5772] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 286.124528][ T5771] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 286.354269][ T5772] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 286.372553][ T5772] usb 2-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 286.402111][ T5772] usb 2-1: config 160 has no interface number 0 [ 286.410124][ T5772] usb 2-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.428787][ T5772] usb 2-1: config 160 interface 200 has no altsetting 0 [ 286.443960][ T5771] usb 4-1: Using ep0 maxpacket: 8 [ 286.483218][ T5771] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 286.494127][ T5772] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 286.507160][ T5771] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.517723][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.530963][ T5771] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.534661][ T9127] loop2: detected capacity change from 0 to 32768 [ 286.540884][ T5772] usb 2-1: Product: syz [ 286.554268][ T5771] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.558689][ T9127] xfs: Deprecated parameter 'noikeep' [ 286.574489][ T9127] XFS: noikeep mount option is deprecated. [ 286.604679][ T5772] usb 2-1: Manufacturer: syz [ 286.676094][ T5772] usb 2-1: SerialNumber: syz [ 286.729919][ T5771] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.810572][ T5750] usb 5-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (112) [ 286.826792][ T9127] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 286.841814][ T5771] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.863392][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.958230][ T9127] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 286.996918][ T9127] XFS (loop2): Starting recovery (logdev: internal) [ 287.023713][ T5750] usb 5-1: failed to fetch extended address, random address set [ 287.036843][ T5750] usb 5-1: atusb_probe: initialization failed, error = -524 [ 287.049208][ T5750] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 287.069599][ T5772] usb 2-1: USB disconnect, device number 23 [ 287.089954][ T9127] XFS (loop2): Ending recovery (logdev: internal) [ 287.099619][ T5750] usb 5-1: USB disconnect, device number 18 [ 287.124756][ T5771] usb 4-1: usb_control_msg returned -32 [ 287.136856][ T9127] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d6/0x510, xfs_finobt block 0x20 [ 287.141300][ T5771] usbtmc 4-1:16.0: can't read capabilities [ 287.184088][ T9127] XFS (loop2): Unmount and run xfs_repair [ 287.201052][ T5771] usb 4-1: USB disconnect, device number 20 [ 287.211419][ T9127] loop2: lost filesystem error report for type 5 error -117 [ 287.222744][ T9127] XFS (loop2): Failed to initialize disk quotas, err -117. [ 287.289996][ T5631] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 287.301851][ T5631] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 287.495895][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1081'. [ 287.508658][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1081'. [ 287.747710][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 287.768789][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 287.854283][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1084'. [ 287.927117][ T9181] netlink: 'syz.2.1079': attribute type 2 has an invalid length. [ 288.907020][ T9198] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1090'. [ 289.535024][ T5771] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 289.780139][ T9223] loop3: detected capacity change from 0 to 1024 [ 289.946280][ T5771] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 290.099914][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.255502][ T5771] usb 6-1: Product: syz [ 290.337501][ T5771] usb 6-1: Manufacturer: syz [ 290.447109][ T5771] usb 6-1: SerialNumber: syz [ 290.526895][ T5771] usb 6-1: config 0 descriptor?? [ 291.275619][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1107'. [ 291.473682][ T9243] loop4: detected capacity change from 0 to 2048 [ 291.651793][ T9244] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.776507][ T9243] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 291.820612][ T9243] Remounting filesystem read-only [ 291.908550][ T5771] usb 6-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (112) [ 292.045021][ T5804] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 292.054321][ T5771] usb 6-1: failed to fetch extended address, random address set [ 292.065636][ T5771] usb 6-1: atusb_probe: initialization failed, error = -524 [ 292.073754][ T5771] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 292.139493][ T5771] usb 6-1: USB disconnect, device number 30 [ 292.193328][ T5804] usb 4-1: device descriptor read/64, error -71 [ 292.394093][ T9256] loop0: detected capacity change from 0 to 8 [ 292.452169][ T5804] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 292.534375][ T9256] SQUASHFS error: lzo decompression failed, data probably corrupt [ 292.580942][ T9256] SQUASHFS error: Failed to read block 0x0: -5 [ 292.625642][ T9256] SQUASHFS error: Failed to read block 0xff: -5 [ 292.632143][ T5804] usb 4-1: device descriptor read/64, error -71 [ 292.645633][ T9256] SQUASHFS error: lzo decompression failed, data probably corrupt [ 292.653783][ T9256] SQUASHFS error: Failed to read block 0x0: -5 [ 292.660638][ T30] audit: type=1800 audit(1778151152.138:177): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1113" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 292.744519][ T5804] usb usb4-port1: attempt power cycle [ 292.752862][ T30] audit: type=1804 audit(1778151152.208:178): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1116" name="/newroot/192/file0" dev="tmpfs" ino=1023 res=1 errno=0 [ 292.968321][ T9272] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1120'. [ 293.144866][ T5804] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 293.189974][ T5804] usb 4-1: device descriptor read/8, error -71 [ 293.442604][ T5804] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 293.503162][ T5804] usb 4-1: device descriptor read/8, error -71 [ 293.635253][ T5804] usb usb4-port1: unable to enumerate USB device [ 293.675355][ T9289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1123'. [ 293.696687][ T9289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1123'. [ 293.734622][ T9289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1123'. [ 293.964596][ T9296] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1126'. [ 293.997298][ T9296] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 294.234189][ T9305] loop1: detected capacity change from 0 to 512 [ 295.015324][ T9305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.123945][ T9305] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.1129: No space for directory leaf checksum. Please run e2fsck -D. [ 295.199601][ T9305] EXT4-fs error (device loop1): ext4_readdir:225: inode #2: comm syz.1.1129: path /198/file1: directory fails checksum at offset 0 [ 295.734451][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 295.743475][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 295.752459][ T9331] netlink: 'syz.0.1133': attribute type 13 has an invalid length. [ 295.760477][ T9331] netlink: 'syz.0.1133': attribute type 12 has an invalid length. [ 295.963691][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.193247][ T9343] binder: 9342:9343 ioctl c0306201 200000000080 returned -14 [ 297.230367][ T9346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 297.334023][ T9351] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1142'. [ 297.371530][ T9351] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 297.581063][ T9357] loop4: detected capacity change from 0 to 1024 [ 297.616343][ T9357] EXT4-fs: Ignoring removed orlov option [ 297.652036][ T9357] EXT4-fs: Ignoring removed orlov option [ 297.793206][ T9357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.893415][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.905758][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 298.149767][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 298.176366][ T9] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 298.215121][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.251143][ T9] usb 6-1: config 0 descriptor?? [ 298.277579][ T9362] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 299.466088][ T9385] binder: 9384:9385 ioctl c0306201 200000000080 returned -14 [ 299.476207][ T9385] binder: 9384:9385 ioctl c0306201 2000000003c0 returned -14 [ 299.482748][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 299.512255][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 299.528228][ T9385] binder: 9384:9385 ioctl c0306201 0 returned -14 [ 299.556483][ T9] usb 6-1: USB disconnect, device number 31 [ 299.971698][ T9389] loop2: detected capacity change from 0 to 512 [ 300.082544][ T9389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.208670][ T30] audit: type=1804 audit(1778151159.678:179): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1154" name="/newroot/180/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 300.347434][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.498945][ T9407] loop3: detected capacity change from 0 to 64 [ 303.403802][ T9439] binder: 9425:9439 ioctl c0306201 200000000080 returned -14 [ 303.415874][ T9439] binder: 9425:9439 ioctl c0306201 2000000003c0 returned -14 [ 303.427232][ T9439] binder: 9425:9439 ioctl c0306201 0 returned -14 [ 303.662224][ T5771] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 303.776286][ T5804] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 303.865813][ T5771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 303.919533][ T5771] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 303.964949][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.992204][ T5804] usb 6-1: device descriptor read/64, error -71 [ 304.017165][ T5771] usb 2-1: config 0 descriptor?? [ 304.047676][ T9440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.264379][ T5804] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 304.424977][ T5804] usb 6-1: device descriptor read/64, error -71 [ 304.501619][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 304.528965][ T5771] usbhid 2-1:0.0: can't add hid device: -71 [ 304.555949][ T5771] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.565078][ T5804] usb usb6-port1: attempt power cycle [ 304.601971][ T5771] usb 2-1: USB disconnect, device number 24 [ 304.924018][ T5804] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 305.028161][ T5804] usb 6-1: device descriptor read/8, error -71 [ 305.403229][ T5804] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 305.592426][ T5804] usb 6-1: device descriptor read/8, error -71 [ 305.783433][ T5804] usb usb6-port1: unable to enumerate USB device [ 305.982244][ T9470] IPVS: length: 232 != 8 [ 306.672501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 306.823041][ T5804] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 307.026315][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 307.071562][ T5804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 307.842469][ T5804] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 307.854716][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 307.911682][ T9463] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1173'. [ 307.937751][ T5804] usb 2-1: Product: syz [ 307.971837][ T5804] usb 2-1: Manufacturer: syz [ 307.987591][ T9485] binder: 9480:9485 ioctl c0306201 200000000080 returned -14 [ 308.000483][ T5804] usb 2-1: SerialNumber: syz [ 308.041658][ T9485] binder: 9480:9485 ioctl c0306201 2000000003c0 returned -14 [ 308.076620][ T5804] usb 2-1: config 0 descriptor?? [ 308.091086][ T9485] binder: 9480:9485 ioctl c0306201 0 returned -14 [ 308.108512][ T9472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 308.348328][ T5804] hub 2-1:0.0: bad descriptor, ignoring hub [ 308.356766][ T5804] hub 2-1:0.0: probe with driver hub failed with error -5 [ 309.345016][ T5750] usb 2-1: USB disconnect, device number 25 [ 309.830676][ T9509] loop1: detected capacity change from 0 to 32768 [ 309.882202][ T9509] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.934202][ T9509] XFS (loop1): Ending clean mount [ 309.947676][ T9509] XFS (loop1): Quotacheck needed: Please wait. [ 310.152807][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 310.197983][ T9509] XFS (loop1): Quotacheck: Done. [ 310.312195][ T9] usb 4-1: device descriptor read/64, error -71 [ 311.414928][ T5625] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.704831][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 311.875041][ T9] usb 4-1: device descriptor read/64, error -71 [ 311.947844][ T9545] binder: 9543:9545 ioctl c0306201 200000000080 returned -14 [ 312.000677][ T9545] binder: 9543:9545 ioctl c0306201 2000000003c0 returned -14 [ 312.035074][ T9550] IPVS: length: 232 != 8 [ 312.056626][ T9] usb usb4-port1: attempt power cycle [ 312.519936][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 312.615960][ T9] usb 4-1: device descriptor read/8, error -71 [ 312.883117][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 312.971059][ T9] usb 4-1: device descriptor read/8, error -71 [ 313.102537][ T9] usb usb4-port1: unable to enumerate USB device [ 314.042520][ T5771] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 314.307123][ T5771] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 316.367329][ T5771] usb 6-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 316.433747][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.457276][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.778048][ T5771] usb 6-1: config 160 has no interface number 0 [ 316.784516][ T5771] usb 6-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.798131][ T5771] usb 6-1: config 160 interface 200 has no altsetting 0 [ 316.829561][ T5771] usb 6-1: string descriptor 0 read error: -71 [ 316.838190][ T5771] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 316.843617][ T9599] binder_alloc: 9598: binder_alloc_buf size -488 failed, no address space [ 316.847326][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.871071][ T5771] usb 6-1: can't set config #160, error -71 [ 316.889907][ T5771] usb 6-1: USB disconnect, device number 36 [ 316.955871][ T9599] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 318.667034][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 320.189817][ T9644] binder_alloc: 9642: binder_alloc_buf size -488 failed, no address space [ 320.213352][ T9644] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 320.363537][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 322.032618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 322.174116][ T10] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 322.226775][ T10] usb 2-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 322.305004][ T10] usb 2-1: config 160 has no interface number 0 [ 322.334941][ T10] usb 2-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.388170][ T10] usb 2-1: config 160 interface 200 has no altsetting 0 [ 322.401370][ T10] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 322.412659][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1249'. [ 322.432507][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.451465][ T10] usb 2-1: Product: syz [ 322.475856][ T10] usb 2-1: Manufacturer: syz [ 322.490467][ T10] usb 2-1: SerialNumber: syz [ 322.768518][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.799623][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 323.028534][ T10] usb 2-1: USB disconnect, device number 26 [ 324.268933][ T9677] loop5: detected capacity change from 0 to 512 [ 324.316480][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.340236][ T9677] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 325.612503][ T9691] binder_alloc: 9690: binder_alloc_buf size -488 failed, no address space [ 325.668464][ T9691] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 325.683087][ T9674] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1245'. [ 325.893141][ T9699] loop1: detected capacity change from 0 to 32768 [ 325.907417][ T9699] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1258 (9699) [ 325.933980][ T9699] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 325.944319][ T9699] BTRFS info (device loop1): using crc32c checksum algorithm [ 325.951844][ T9699] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 326.916103][ T9699] BTRFS info (device loop1): rebuilding free space tree [ 327.121626][ T9699] BTRFS info (device loop1): disabling free space tree [ 327.128754][ T9699] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.138623][ T9699] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.161535][ T9699] BTRFS info (device loop1): enabling ssd optimizations [ 327.171196][ T9699] BTRFS info (device loop1): turning on async discard [ 327.178054][ T9699] BTRFS info (device loop1): enabling disk space caching [ 327.185250][ T9699] BTRFS info (device loop1): force clearing of disk cache [ 327.192431][ T9699] BTRFS info (device loop1): use zstd compression, level 3 [ 328.667656][ T5625] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 328.749479][ T9730] loop4: detected capacity change from 0 to 512 [ 328.819160][ T9730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.061830][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.909536][ T9754] loop2: detected capacity change from 0 to 1024 [ 332.244461][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 332.291796][ T9785] loop2: detected capacity change from 0 to 512 [ 332.347710][ T9785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.403504][ T10] usb 5-1: device descriptor read/64, error -71 [ 332.556981][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.652228][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 332.840322][ T10] usb 5-1: device descriptor read/64, error -71 [ 332.992647][ T10] usb usb5-port1: attempt power cycle [ 333.260424][ T9805] loop2: detected capacity change from 0 to 1024 [ 333.392447][ T5793] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 333.687406][ T5793] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 333.692143][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 333.728682][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.864904][ T5793] usb 6-1: config 0 descriptor?? [ 333.973916][ T5793] cp210x 6-1:0.0: cp210x converter detected [ 334.015777][ T10] usb 5-1: device descriptor read/8, error -71 [ 334.161248][ T9812] loop0: detected capacity change from 0 to 1024 [ 334.201119][ T9812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 334.262500][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 334.292908][ T10] usb 5-1: device descriptor read/8, error -71 [ 334.337422][ T5793] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 334.354642][ T5793] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 334.375430][ T5793] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 334.397722][ T5793] usb 6-1: cp210x converter now attached to ttyUSB0 [ 334.412653][ T10] usb usb5-port1: unable to enumerate USB device [ 334.421820][ T5793] usb 6-1: USB disconnect, device number 37 [ 334.459195][ T5793] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 334.480399][ T5793] cp210x 6-1:0.0: device disconnected [ 334.632508][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 335.175239][ T5630] block nbd1: Receive control failed (result -107) [ 335.251956][ T9836] nbd1: detected capacity change from 0 to 10 [ 335.284655][ T9830] block nbd1: shutting down sockets [ 335.552632][ T9852] fuse: Invalid rootmode [ 337.237304][ T9856] loop0: detected capacity change from 0 to 40427 [ 337.259566][ T9856] F2FS-fs (loop0): invalid crc value [ 337.262829][ T29] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 337.292310][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 337.442324][ T10] usb 3-1: device descriptor read/64, error -71 [ 337.451336][ T9856] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 337.464299][ T29] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 337.495884][ T9856] F2FS-fs (loop0): Start checkpoint disabled! [ 337.499256][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.545188][ T9856] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 337.549437][ T29] usb 6-1: config 0 descriptor?? [ 337.560909][ T9856] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 337.587805][ T29] cp210x 6-1:0.0: cp210x converter detected [ 337.712254][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 337.862206][ T10] usb 3-1: device descriptor read/64, error -71 [ 337.982633][ T10] usb usb3-port1: attempt power cycle [ 337.995134][ T29] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 338.019759][ T29] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 338.041699][ T29] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 338.073848][ T29] usb 6-1: cp210x converter now attached to ttyUSB0 [ 338.098350][ T29] usb 6-1: USB disconnect, device number 38 [ 338.304766][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 338.313281][ T29] cp210x 6-1:0.0: device disconnected [ 338.392445][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 338.791469][ T10] usb 3-1: device descriptor read/8, error -71 [ 339.579497][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 339.603206][ T10] usb 3-1: device descriptor read/8, error -71 [ 339.828437][ T10] usb usb3-port1: unable to enumerate USB device [ 340.569560][ T9914] fuse: Bad value for 'rootmode' [ 340.652217][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 340.835604][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 340.857623][ T10] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.501572][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.621132][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.668145][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.746248][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.947872][ T5630] Bluetooth: hci4: unexpected event for opcode 0x0c23 [ 341.984887][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 342.005674][ T10] usb 3-1: USB disconnect, device number 21 [ 342.399387][ T9945] loop4: detected capacity change from 0 to 1024 [ 345.486101][ T9974] loop0: detected capacity change from 0 to 64 [ 345.517217][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 345.527677][ T29] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 345.643780][ T9978] loop5: detected capacity change from 0 to 2048 [ 345.658152][ T9978] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 345.681111][ T9978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.720709][ T30] audit: type=1800 audit(1778151205.188:180): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1338" name=".log" dev="loop5" ino=1367 res=0 errno=0 [ 345.783791][ T5620] Bluetooth: hci5: command 0x0c1a tx timeout [ 345.919120][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 345.926293][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.935533][ T29] usb 3-1: config 0 has no interface number 0 [ 345.941739][ T29] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.956156][ T29] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 346.009840][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.716837][ T29] usb 3-1: config 0 descriptor?? [ 346.790730][ T29] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 346.974726][ T9] usb 3-1: USB disconnect, device number 22 [ 347.160317][ T9993] netlink: 'syz.2.1344': attribute type 13 has an invalid length. [ 347.252570][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 347.267974][ T9993] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.285646][ T9993] syzkaller0: entered promiscuous mode [ 347.304431][ T9993] syzkaller0: entered allmulticast mode [ 347.329125][ T9993] tipc: Enabled bearer , priority 0 [ 347.385962][ T9998] loop0: detected capacity change from 0 to 1024 [ 347.422123][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 347.444656][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.461503][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.461499][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.479128][ T29] usb 5-1: config 0 has no interface number 0 [ 347.495575][ T29] usb 5-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.501627][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.522462][ T29] usb 5-1: config 0 interface 1 has no altsetting 0 [ 347.546262][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 347.556291][ T9999] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.565194][ T9999] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.565416][ T9992] tipc: Resetting bearer [ 347.583301][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.604496][ T29] usb 5-1: config 0 descriptor?? [ 347.629621][ T9992] tipc: Disabling bearer [ 347.644057][ T29] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 347.654624][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.673468][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.687359][ T9999] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.696309][ T9999] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.707837][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.716625][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.769147][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.786898][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.811437][ T9999] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.819259][ T9999] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.836425][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.846828][ T29] usb 5-1: USB disconnect, device number 23 [ 348.060304][ T9998] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.134752][T10019] loop5: detected capacity change from 0 to 2048 [ 349.387860][T10019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.778664][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.413366][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 353.538838][T10070] vxcan1: tx drop: invalid da for name 0x0000100000000000 [ 353.568818][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.590330][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.601666][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.618454][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.632174][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 353.645888][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.074681][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.103840][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.117982][ T29] usb 5-1: config 0 has no interface number 0 [ 354.124314][ T29] usb 5-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.137735][ T29] usb 5-1: config 0 interface 1 has no altsetting 0 [ 354.145972][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 354.197938][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.248885][ T29] usb 5-1: config 0 descriptor?? [ 354.294007][ T29] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 354.485159][ T5771] usb 5-1: USB disconnect, device number 24 [ 355.749215][T10095] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 355.782247][ T5630] Bluetooth: hci6: command tx timeout [ 357.222120][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 357.862195][ T5630] Bluetooth: hci6: command 0x041b tx timeout [ 359.138292][T10130] loop3: detected capacity change from 0 to 2048 [ 359.790096][T10137] vxcan1: tx drop: invalid da for name 0x0000100000000000 [ 359.943207][ T5630] Bluetooth: hci6: command 0x041b tx timeout [ 360.483762][T10155] loop4: detected capacity change from 0 to 512 [ 360.603531][T10155] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1387: missing EA_INODE flag [ 360.615676][T10155] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 360.618483][T10155] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1387: error while reading EA inode 12 err=-117 [ 360.627745][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 360.627817][ C0] EXT4-fs (loop4): initial error at time 1778151220: ext4_xattr_inode_iget:441: inode 12 [ 360.627858][ C0] EXT4-fs (loop4): last error at time 1778151220: ext4_xattr_inode_iget:441: inode 12 [ 360.647645][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.647759][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.647913][T10064] bridge_slave_0: entered allmulticast mode [ 360.658860][T10064] bridge_slave_0: entered promiscuous mode [ 360.684566][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.686328][T10155] loop4: lost filesystem error report for type 5 error -117 [ 360.711867][T10155] EXT4-fs (loop4): 1 orphan inode deleted [ 360.725719][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.727958][T10155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.765525][T10064] bridge_slave_1: entered allmulticast mode [ 360.821185][T10064] bridge_slave_1: entered promiscuous mode [ 360.916766][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.929549][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.985105][T10064] team0: Port device team_slave_0 added [ 360.994373][T10064] team0: Port device team_slave_1 added [ 361.032162][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.045816][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.785294][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.847959][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.862371][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.929563][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.973259][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.022758][ T5630] Bluetooth: hci6: command 0x041b tx timeout [ 362.352413][T10064] hsr_slave_0: entered promiscuous mode [ 362.359394][T10064] hsr_slave_1: entered promiscuous mode [ 362.369008][T10064] debugfs: 'hsr0' already exists in 'hsr' [ 362.375069][T10064] Cannot create hsr debugfs directory [ 363.734305][T10199] vxcan1: tx drop: invalid da for name 0x0000100000000000 [ 363.830492][T10064] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 363.939475][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.969138][T10064] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.027646][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.052287][T10064] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 364.067848][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.076755][T10064] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 364.103357][ T5630] Bluetooth: hci6: command 0x041b tx timeout [ 364.110831][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.214206][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.296737][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.555899][T10233] loop5: detected capacity change from 0 to 40427 [ 365.578058][T10233] F2FS-fs (loop5): invalid crc value [ 365.581781][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.590734][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.705822][T10233] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 365.809981][T10233] F2FS-fs (loop5): Start checkpoint disabled! [ 365.838284][T10233] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 365.847948][T10233] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 365.849840][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.862636][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.936105][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 368.719849][T10272] binder: BINDER_SET_CONTEXT_MGR already set [ 368.763612][T10272] binder: 10270:10272 ioctl 4018620d 200000004a80 returned -16 [ 369.070387][T10271] vxcan1: tx drop: invalid da for name 0x0000100000000000 [ 369.472360][ T5793] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 369.794283][ T5793] usb 5-1: Using ep0 maxpacket: 16 [ 369.985551][ T5793] usb 5-1: config 253 has an invalid interface number: 184 but max is 0 [ 370.065590][ T5793] usb 5-1: config 253 has no interface number 0 [ 370.108436][ T5793] usb 5-1: config 253 interface 184 has no altsetting 0 [ 370.197124][ T5793] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 370.269214][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.317396][ T5793] usb 5-1: Product: syz [ 370.342766][ T5793] usb 5-1: Manufacturer: syz [ 370.366304][ T5793] usb 5-1: SerialNumber: syz [ 370.407842][ T5793] go7007 5-1:253.184: probe with driver go7007 failed with error -12 [ 370.609702][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.623336][ T29] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 370.656914][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.743988][T10307] syzkaller0: entered promiscuous mode [ 370.751976][T10307] syzkaller0: entered allmulticast mode [ 370.788577][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.824504][ T29] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 370.841022][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.862850][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 370.881030][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.908868][ T29] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 370.927109][ T29] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 370.948035][ T29] usb 3-1: Product: syz [ 370.956782][ T29] usb 3-1: Manufacturer: syz [ 370.992592][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 371.004783][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 371.023026][ T29] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 371.040668][ T29] cdc_wdm 3-1:1.0: Unknown control protocol [ 371.400914][ T5793] usb 5-1: USB disconnect, device number 25 [ 371.736677][T10320] binder: BINDER_SET_CONTEXT_MGR already set [ 371.753087][T10320] binder: 10319:10320 ioctl 4018620d 200000004a80 returned -16 [ 372.825231][T10064] veth0_vlan: entered promiscuous mode [ 372.869650][T10064] veth1_vlan: entered promiscuous mode [ 373.741547][ T5772] usb 3-1: USB disconnect, device number 23 [ 373.849824][T10064] veth0_macvtap: entered promiscuous mode [ 374.798710][T10064] veth1_macvtap: entered promiscuous mode [ 375.264872][T10064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.284262][T10064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.585596][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.255107][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.381200][T10363] binder: BINDER_SET_CONTEXT_MGR already set [ 376.394236][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.412294][T10363] binder: 10362:10363 ioctl 4018620d 200000004a80 returned -16 [ 376.500500][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.741470][ T5772] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 377.865572][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.353774][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.434066][ T5772] usb 5-1: Using ep0 maxpacket: 32 [ 378.468543][T10371] loop5: detected capacity change from 0 to 256 [ 379.978302][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.002169][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.617200][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.691424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.934064][T10382] syzkaller0: entered promiscuous mode [ 380.964770][T10382] syzkaller0: entered allmulticast mode [ 381.484366][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1459'. [ 382.045067][ T5750] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 382.483101][ T5750] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 382.607841][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.836171][ T5750] usb 3-1: config 0 descriptor?? [ 383.160679][ T5750] cp210x 3-1:0.0: cp210x converter detected [ 383.462405][ T5772] usb 5-1: device descriptor read/all, error -110 [ 383.483093][T10405] binder: 10404:10405 ioctl c0306201 0 returned -14 [ 383.617081][ T5750] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 383.889410][ T5750] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 384.025688][ T5750] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 384.889154][ T5750] usb 3-1: cp210x converter now attached to ttyUSB0 [ 385.146456][ T5750] usb 3-1: USB disconnect, device number 24 [ 385.839896][ T5750] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 385.965484][ T5750] cp210x 3-1:0.0: device disconnected [ 388.799806][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 389.348145][T10451] binder: 10448:10451 ioctl c0306201 0 returned -14 [ 389.522434][ T5771] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 389.682384][ T5793] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 389.768374][ T5771] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.804451][ T5771] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.881136][ T5793] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 389.905839][ T5771] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 389.937147][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.966767][ T5771] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.994118][ T5793] usb 6-1: config 0 descriptor?? [ 390.020288][ T5793] cp210x 6-1:0.0: cp210x converter detected [ 390.263551][ T5771] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.041029][ T5793] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 391.051690][ T5793] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 391.072124][ T5793] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 391.115289][ T5771] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.136501][ T5793] usb 6-1: cp210x converter now attached to ttyUSB0 [ 391.170067][ T5771] usb 7-1: Product: syz [ 391.189831][ T5771] usb 7-1: Manufacturer: syz [ 391.236034][ T5771] cdc_wdm 7-1:1.0: skipping garbage [ 391.269588][ T5757] usb 6-1: USB disconnect, device number 39 [ 391.283341][ T5771] cdc_wdm 7-1:1.0: skipping garbage [ 391.342362][ T5771] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 391.349121][ T5757] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 391.371280][ T5771] cdc_wdm 7-1:1.0: Unknown control protocol [ 391.420640][ T5757] cp210x 6-1:0.0: device disconnected [ 391.450863][ T5771] usb 7-1: USB disconnect, device number 2 [ 393.905224][T10497] binder: 10495:10497 ioctl c0306201 0 returned -14 [ 393.961583][T10497] binder: BINDER_SET_CONTEXT_MGR already set [ 393.993769][T10497] binder: 10495:10497 ioctl 4018620d 200000004a80 returned -16 [ 395.920961][T10520] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 397.792206][ T5772] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 398.732358][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 398.776000][ T5772] usb 4-1: config 0 has no interfaces? [ 398.822356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 398.899540][ T5772] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 398.988409][T10533] loop5: detected capacity change from 0 to 32768 [ 399.177988][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.194451][ T5772] usb 4-1: Product: syz [ 399.198808][ T5772] usb 4-1: Manufacturer: syz [ 399.217583][ T5772] usb 4-1: SerialNumber: syz [ 399.950413][T10533] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop5": -EINTR [ 399.964337][ T5772] usb 4-1: config 0 descriptor?? [ 400.145676][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 401.827149][T10571] loop2: detected capacity change from 0 to 2048 [ 402.812061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 402.864131][T10571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.387221][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.582294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 403.750719][T10598] loop5: detected capacity change from 0 to 512 [ 403.815270][T10598] EXT4-fs: Ignoring removed i_version option [ 403.860269][T10598] EXT4-fs: Ignoring removed bh option [ 403.957066][T10598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.066455][T10598] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.305806][T10606] loop2: detected capacity change from 0 to 512 [ 404.350586][T10606] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 404.451658][T10606] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 404.490716][T10606] EXT4-fs (loop2): orphan cleanup on readonly fs [ 404.506164][T10606] EXT4-fs error (device loop2): ext4_quota_enable:7225: comm syz.2.1529: inode #150994944: comm syz.2.1529: iget: illegal inode # [ 404.523682][T10606] loop2: lost filesystem error report for type 5 error -117 [ 404.524908][T10606] EXT4-fs (loop2): Remounting filesystem read-only [ 404.532269][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 404.532288][ C0] EXT4-fs (loop2): initial error at time 1778151263: ext4_quota_enable:7225 [ 404.532311][ C0] EXT4-fs (loop2): last error at time 1778151263: ext4_quota_enable:7225 [ 404.565680][T10606] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=150994944). Please run e2fsck to fix. [ 404.583378][T10606] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 404.595127][T10606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.628830][ T9] IPVS: starting estimator thread 0... [ 404.659054][T10606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.729106][T10615] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 404.762670][T10614] IPVS: using max 33 ests per chain, 79200 per kthread [ 405.110746][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.153909][ T5772] usb 4-1: can't set config #0, error -110 [ 405.348023][ T5750] usb 4-1: USB disconnect, device number 29 [ 405.681567][T10608] syz.6.1530 (10608): drop_caches: 2 [ 406.779529][T10628] loop6: detected capacity change from 0 to 1024 [ 408.389499][T10637] loop6: detected capacity change from 0 to 16 [ 408.414073][T10637] erofs: Unknown parameter 'ãé' [ 408.789570][T10642] atomic_op ffff888035de8998 conn xmit_atomic 0000000000000000 [ 410.907388][ T5772] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 411.098175][ T5772] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.135072][T10661] fuse: Unknown parameter 'fd00000000000000000003' [ 411.175155][ T5772] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.221547][ T5772] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 411.260330][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.276464][ T5772] usb 3-1: config 0 descriptor?? [ 412.951076][ T5772] usbhid 3-1:0.0: can't add hid device: -71 [ 413.006533][ T5772] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 413.130424][ T5772] usb 3-1: USB disconnect, device number 25 [ 413.427334][T10680] loop3: detected capacity change from 0 to 32768 [ 413.460629][T10680] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.538398][T10680] XFS (loop3): Ending clean mount [ 413.547337][T10680] XFS (loop3): Quotacheck needed: Please wait. [ 413.670790][T10680] XFS (loop3): Quotacheck: Done. [ 415.544269][ T5628] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 415.720888][T10703] atomic_op ffff888021389198 conn xmit_atomic 0000000000000000 [ 415.891355][T10709] loop2: detected capacity change from 0 to 2048 [ 415.901938][T10709] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 415.915812][T10709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.147820][ T30] audit: type=1800 audit(1778151275.428:181): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1559" name=".log" dev="loop2" ino=1367 res=0 errno=0 [ 418.265801][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 418.404689][T10738] fuse: Unknown parameter 'fd00000000000000000003' [ 419.268984][T10734] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 420.303680][ T5771] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 420.471252][T10762] fuse: Unknown parameter '0x0000000000000003' [ 420.505925][ T5771] usb 6-1: Using ep0 maxpacket: 8 [ 420.514590][ T5771] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.523035][ T5771] usb 6-1: config 0 has no interface number 0 [ 420.529173][ T5771] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.543828][ T5771] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 420.553227][ T5771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.582942][ T5771] usb 6-1: config 0 descriptor?? [ 420.608808][ T5771] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 420.825481][ T5771] usb 6-1: USB disconnect, device number 40 [ 421.339320][T10777] capability: warning: `syz.0.1580' uses 32-bit capabilities (legacy support in use) [ 422.226381][T10796] netlink: 'syz.5.1586': attribute type 2 has an invalid length. [ 422.234427][T10796] netlink: 723 bytes leftover after parsing attributes in process `syz.5.1586'. [ 423.066952][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 423.130201][T10801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1587'. [ 424.676269][T10815] fuse: Unknown parameter '0x0000000000000003' [ 424.708468][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'. [ 426.466942][T10840] fuse: fd is not a fuse device [ 426.782485][ T5793] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 426.890542][T10844] atomic_op ffff88807ffc5198 conn xmit_atomic 0000000000000000 [ 427.512925][ T5793] usb 5-1: no configurations [ 427.517714][ T5793] usb 5-1: can't read configurations, error -22 [ 428.109308][ T5793] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 428.525941][ T5793] usb 5-1: no configurations [ 428.562266][ T5793] usb 5-1: can't read configurations, error -22 [ 428.665191][ T5793] usb usb5-port1: attempt power cycle [ 429.965754][ T5793] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 430.196940][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1609'. [ 430.343195][ T5793] usb 5-1: device descriptor read/8, error -71 [ 431.545839][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 431.807756][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 431.834046][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.883457][ T24] usb 3-1: config 0 has no interface number 0 [ 431.926278][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.984851][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.030911][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.156769][T10885] loop3: detected capacity change from 0 to 2048 [ 432.182429][T10885] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 432.888337][ T24] usb 3-1: config 0 descriptor?? [ 432.914396][T10885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.933511][ T30] audit: type=1800 audit(1778151292.408:182): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1618" name=".log" dev="loop3" ino=1367 res=0 errno=0 [ 433.194654][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 433.417506][ T24] usb 3-1: USB disconnect, device number 26 [ 436.015314][T10905] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1626'. [ 437.462141][ T5772] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 438.215986][T10930] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 438.246991][ T6583] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.363772][ T5772] usb 7-1: Using ep0 maxpacket: 16 [ 438.373755][ T5772] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 438.392049][ T5772] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 438.441566][ T6583] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.446149][ T5772] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 438.502948][ T6583] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.505323][ T5772] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 438.567210][ T6583] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.581740][ T5772] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 438.623907][ T5772] usb 7-1: config 0 has no interface number 0 [ 438.643650][ T5772] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 438.676131][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 438.685227][T10946] loop2: detected capacity change from 0 to 1024 [ 438.698299][ T5772] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 438.763092][ T5772] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 439.306173][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.435620][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.509239][ T5772] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.527228][ T5772] usb 7-1: config 0 interface 125 has no altsetting 0 [ 439.534104][ T5772] usb 7-1: config 0 interface 125 has no altsetting 2 [ 439.543651][ T5772] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 439.569019][ T5772] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.603574][ T5772] usb 7-1: Product: syz [ 439.619418][ T5772] usb 7-1: Manufacturer: syz [ 439.648356][ T5772] usb 7-1: SerialNumber: syz [ 439.677488][ T5772] usb 7-1: config 0 descriptor?? [ 439.703865][ T5772] usb 7-1: selecting invalid altsetting 2 [ 439.832337][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 439.983775][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 439.992631][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.004906][ T10] usb 4-1: config 0 has no interface number 0 [ 440.014158][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.025596][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 440.035025][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.053880][ T10] usb 4-1: config 0 descriptor?? [ 440.074058][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 440.273368][ T10] usb 4-1: USB disconnect, device number 30 [ 440.595032][ C0] usb 7-1: async_complete: urb error -71 [ 440.600804][ C0] usb 7-1: async_complete: urb error -71 [ 440.606509][ C0] usb 7-1: async_complete: urb error -71 [ 440.617285][ T5772] get_1284_register: usb error -71 [ 440.628991][ T5772] usb 7-1: USB disconnect, device number 3 [ 440.952897][T10974] fuse: fd is not a fuse device [ 441.242174][ T5772] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 442.175846][ T5772] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.280511][ T5772] usb 4-1: can't read configurations, error -61 [ 442.453721][ T5772] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 443.506873][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1653'. [ 443.516662][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1653'. [ 444.092099][ T5772] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 444.122104][ T5772] usb 4-1: can't read configurations, error -61 [ 444.131088][ T5772] usb usb4-port1: attempt power cycle [ 445.992129][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 446.045856][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 446.153023][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 446.181869][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.209897][ T9] usb 6-1: config 0 has no interface number 0 [ 446.224765][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.240812][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 446.257723][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.271161][ T9] usb 6-1: config 0 descriptor?? [ 446.305285][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 446.865578][ T9] usb 6-1: USB disconnect, device number 41 [ 447.342413][T11044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1670'. [ 447.351504][T11044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1670'. [ 447.364850][T11048] loop4: detected capacity change from 0 to 1024 [ 447.394451][T11048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.421971][T11048] EXT4-fs: Ignoring removed bh option [ 447.441520][T11048] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 447.552098][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 447.715185][ T29] usb 7-1: config 0 has no interfaces? [ 447.738006][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 447.768238][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 447.853053][ T29] usb 7-1: Product: syz [ 447.950826][ T29] usb 7-1: Manufacturer: syz [ 448.074702][ T29] usb 7-1: SerialNumber: syz [ 448.244016][ T29] usb 7-1: config 0 descriptor?? [ 448.509143][ T9] usb 7-1: USB disconnect, device number 4 [ 450.004914][T11076] loop2: detected capacity change from 0 to 256 [ 451.397745][ T5772] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 451.464897][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 451.622358][ T5772] usb 5-1: Using ep0 maxpacket: 8 [ 451.634945][ T5772] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.643032][ T5772] usb 5-1: config 0 has no interface number 0 [ 451.649129][ T5772] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.660061][ T5772] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 451.747737][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.762971][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.805129][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.823717][ T5772] usb 5-1: config 0 descriptor?? [ 451.850123][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 451.889112][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.900356][ T5772] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 451.920506][ T9] usb 4-1: Product: syz [ 451.936346][ T9] usb 4-1: Manufacturer: syz [ 451.965986][ T9] usb 4-1: SerialNumber: syz [ 451.983742][ T9] usb 4-1: config 0 descriptor?? [ 452.088317][ T9] usb 5-1: USB disconnect, device number 32 [ 452.120645][T11109] loop5: detected capacity change from 0 to 512 [ 452.159530][T11109] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1693: bad orphan inode 15 [ 452.202938][T11109] loop5: lost filesystem error report for type 5 error -117 [ 452.203384][T11109] ext4_test_bit(bit=14, block=18) = 1 [ 452.216135][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 452.216159][ C1] EXT4-fs (loop5): initial error at time 1778151311: ext4_orphan_get:1423 [ 452.216216][ C1] EXT4-fs (loop5): last error at time 1778151311: ext4_orphan_get:1423 [ 452.239739][T11109] is_bad_inode(inode)=0 [ 452.244655][T11109] NEXT_ORPHAN(inode)=1023 [ 452.248997][T11109] max_ino=32 [ 452.252247][T11109] i_nlink=0 [ 452.257181][T11109] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.1693: corrupted xattr block 19: invalid header [ 452.271928][T11109] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 452.274742][T11109] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 452.326294][T11109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 452.346886][T11109] ext4 filesystem being mounted at /299/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 452.424210][T11109] EXT4-fs (loop5): shut down requested (1) [ 452.537405][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 452.926030][T11132] loop5: detected capacity change from 0 to 2048 [ 452.962205][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 452.995035][T11132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.120620][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.134196][ T29] usb 7-1: config 0 has no interfaces? [ 453.143303][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 453.162123][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 453.170524][ T29] usb 7-1: Product: syz [ 453.177597][ T29] usb 7-1: Manufacturer: syz [ 453.191649][ T29] usb 7-1: SerialNumber: syz [ 453.212068][ T29] usb 7-1: config 0 descriptor?? [ 453.429082][ T29] usb 7-1: USB disconnect, device number 5 [ 454.546922][ T29] usb 4-1: USB disconnect, device number 34 [ 455.329065][T11155] loop5: detected capacity change from 0 to 2048 [ 455.408105][T11155] Dev loop5: unable to read RDB block 8 [ 455.414193][T11155] loop5: unable to read partition table [ 455.420092][T11155] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 456.437475][ T5757] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 456.543584][T11168] loop5: detected capacity change from 0 to 2048 [ 456.669675][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 456.690141][T11168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.713672][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.725439][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1716'. [ 456.783743][ T5757] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.837918][ T5757] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 456.890743][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.949553][ T5757] usb 5-1: config 0 descriptor?? [ 457.213626][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.382779][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 458.391739][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 458.400863][T11193] netlink: 'syz.2.1721': attribute type 13 has an invalid length. [ 458.408768][T11193] netlink: 'syz.2.1721': attribute type 12 has an invalid length. [ 459.132999][ T5779] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 459.264500][ T24] usb 5-1: USB disconnect, device number 33 [ 459.324738][ T5779] usb 6-1: config 0 has no interfaces? [ 459.344814][ T5779] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 459.411422][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 459.452137][ T5779] usb 6-1: Product: syz [ 459.481566][ T5779] usb 6-1: Manufacturer: syz [ 459.499631][ T5779] usb 6-1: SerialNumber: syz [ 459.550567][ T5779] usb 6-1: config 0 descriptor?? [ 459.684818][ T30] audit: type=1804 audit(1778151319.158:183): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1734" name="/newroot/283/file0" dev="tmpfs" ino=1513 res=1 errno=0 [ 459.942582][ T9] usb 6-1: USB disconnect, device number 42 [ 461.232462][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 461.241434][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1737'. [ 461.250551][T11245] netlink: 'syz.3.1737': attribute type 13 has an invalid length. [ 461.258456][T11245] netlink: 'syz.3.1737': attribute type 12 has an invalid length. [ 461.746257][ T5779] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 462.075108][ T5779] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 462.102147][ T5779] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 462.122213][ T5779] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 462.146257][ T5779] usb 3-1: config 220 has no interface number 2 [ 462.155476][ T5779] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 462.178742][ T5779] usb 3-1: config 220 interface 0 has no altsetting 0 [ 462.189876][ T5779] usb 3-1: config 220 interface 76 has no altsetting 0 [ 462.202815][ T5779] usb 3-1: config 220 interface 1 has no altsetting 0 [ 462.221781][ T5779] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 462.242584][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.275279][ T5779] usb 3-1: Product: syz [ 462.287939][ T5779] usb 3-1: Manufacturer: syz [ 462.299302][ T5779] usb 3-1: SerialNumber: syz [ 462.337943][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 462.402320][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 462.541199][ T5779] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 462.555101][ T5779] uvcvideo 3-1:220.0: No valid video chain found. [ 462.567902][ T5779] usb 3-1: selecting invalid altsetting 0 [ 462.606242][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.614720][ T5779] usb 3-1: selecting invalid altsetting 0 [ 462.623726][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.652618][ T5779] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 463.318778][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 463.328204][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.353455][ T9] usb 7-1: config 0 descriptor?? [ 463.353720][T11272] loop4: detected capacity change from 0 to 2048 [ 463.396164][ T5779] usb 3-1: USB disconnect, device number 27 [ 463.448629][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 463.485420][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 463.555110][T11280] fuse: fd is not a fuse device [ 463.644288][T11278] bridge1: port 1(vlan2) entered blocking state [ 463.653569][T11278] bridge1: port 1(vlan2) entered disabled state [ 463.660263][T11278] vlan2: entered allmulticast mode [ 463.673008][T11278] bridge1: entered allmulticast mode [ 464.251965][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 464.260960][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 464.271327][T11290] netlink: 'syz.0.1752': attribute type 13 has an invalid length. [ 464.280040][T11290] netlink: 'syz.0.1752': attribute type 12 has an invalid length. [ 464.685627][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 464.770776][T11278] vlan2: left allmulticast mode [ 464.776075][T11278] bridge1: left allmulticast mode [ 464.838320][T11272] Dev loop4: unable to read RDB block 8 [ 464.853243][T11272] loop4: unable to read partition table [ 464.859030][T11272] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 465.154022][T11292] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.1754'. [ 465.422525][ T5779] usb 7-1: USB disconnect, device number 6 [ 466.557539][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 466.592835][T11313] fuse: Bad value for 'group_id' [ 466.609124][T11313] fuse: Bad value for 'group_id' [ 466.996727][T11329] loop4: detected capacity change from 0 to 2048 [ 468.110912][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 468.119928][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 468.129022][T11334] netlink: 'syz.2.1767': attribute type 13 has an invalid length. [ 468.136921][T11334] netlink: 'syz.2.1767': attribute type 12 has an invalid length. [ 468.754177][T11338] loop4: detected capacity change from 0 to 1024 [ 469.832548][ T29] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 469.932054][T11352] netlink: 'syz.4.1776': attribute type 13 has an invalid length. [ 470.088086][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.125912][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.157698][ T29] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 470.181818][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.202801][ T29] usb 6-1: config 0 descriptor?? [ 470.214839][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 470.276037][T11360] loop3: detected capacity change from 0 to 2048 [ 470.344690][T11360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.709402][T11378] netlink: 'syz.0.1780': attribute type 2 has an invalid length. [ 470.718589][T11378] netlink: 723 bytes leftover after parsing attributes in process `syz.0.1780'. [ 470.852886][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.867454][T11373] tipc: Enabling of bearer rejected, failed to enable media [ 471.404994][T11394] netlink: 'syz.6.1783': attribute type 30 has an invalid length. [ 471.426854][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1783'. [ 471.464040][T11394] bond0: option arp_missed_max: invalid value (0) [ 471.481423][T11394] bond0: option arp_missed_max: allowed values 1 - 255 [ 471.915969][ T5620] Bluetooth: hci4: unexpected event for opcode 0x000e [ 474.058155][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 474.071316][ T9] usb 6-1: USB disconnect, device number 43 [ 474.281843][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 474.290912][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 474.299989][T11415] netlink: 'syz.4.1789': attribute type 13 has an invalid length. [ 474.309132][T11415] netlink: 'syz.4.1789': attribute type 12 has an invalid length. [ 475.041810][T11426] 9pnet_fd: p9_fd_create_unix (11426): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 475.673476][T11430] loop6: detected capacity change from 0 to 512 [ 475.875541][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 475.909056][T11430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.946203][T11430] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.965989][T11430] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.1797: corrupted inode contents [ 475.983909][T11430] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz.6.1797: mark_inode_dirty error [ 476.026388][T11430] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.1797: corrupted inode contents [ 476.073948][T11442] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.1797: corrupted inode contents [ 476.109315][T11442] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz.6.1797: mark_inode_dirty error [ 476.128602][T11442] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.1797: corrupted inode contents [ 476.150842][T11442] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1797: mark_inode_dirty error [ 476.244567][T11430] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.1797: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 476.244567][T11430] [ 476.273290][T11430] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.1797: corrupted inode contents [ 476.472884][T11430] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.1797: mark_inode_dirty error [ 476.485543][T11430] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 476.865464][T10064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.413926][T11464] loop3: detected capacity change from 0 to 2048 [ 477.641079][T11464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.823137][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1809'. [ 477.832156][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1809'. [ 477.841189][T11473] netlink: 'syz.6.1809': attribute type 13 has an invalid length. [ 477.849115][T11473] netlink: 'syz.6.1809': attribute type 12 has an invalid length. [ 478.753268][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.763244][T11486] loop2: detected capacity change from 0 to 1024 [ 480.812756][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1819'. [ 481.891357][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 481.900549][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 484.716899][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1824'. [ 484.725922][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1824'. [ 484.734976][T11527] netlink: 'syz.5.1824': attribute type 13 has an invalid length. [ 484.742937][T11527] netlink: 'syz.5.1824': attribute type 12 has an invalid length. [ 486.126835][T11525] loop6: detected capacity change from 0 to 2048 [ 486.239048][T11525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.297608][T11540] binder: 11539:11540 ioctl c0306201 0 returned -14 [ 486.323016][ T30] audit: type=1800 audit(1778151345.788:184): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1827" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 486.710651][T11546] 9pnet_fd: p9_fd_create_unix (11546): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 487.393818][T10064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.336427][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1835'. [ 490.661809][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1842'. [ 490.670830][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1842'. [ 490.679863][T11576] netlink: 'syz.5.1842': attribute type 13 has an invalid length. [ 490.688935][T11576] netlink: 'syz.5.1842': attribute type 12 has an invalid length. [ 491.283926][T11582] loop3: detected capacity change from 0 to 128 [ 491.314581][T11582] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.350541][T11582] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.377869][T11588] binder: 11585:11588 ioctl c0306201 0 returned -14 [ 491.683469][T11596] loop4: detected capacity change from 0 to 16 [ 491.706605][T11596] erofs: Unknown parameter 'ãé' [ 492.002861][T11602] usb usb7: usbfs: process 11602 (syz.5.1854) did not claim interface 0 before use [ 492.082576][T11605] atomic_op ffff888035a08198 conn xmit_atomic 0000000000000000 [ 492.736676][ T5628] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.035716][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1859'. [ 494.044724][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 494.053807][T11626] netlink: 'syz.4.1859': attribute type 13 has an invalid length. [ 494.061663][T11626] netlink: 'syz.4.1859': attribute type 12 has an invalid length. [ 494.761535][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 496.606823][T11638] fuse: fd is not a fuse device [ 497.536937][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 497.860496][T11661] loop3: detected capacity change from 0 to 512 [ 497.866405][T11662] 9pnet_fd: p9_fd_create_unix (11662): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 497.902796][T11661] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 498.164747][T11661] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 498.210039][T11661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 498.229051][T11661] System zones: 0-2, 18-18, 34-34 [ 498.259391][T11661] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1875: bad orphan inode 15 [ 498.290954][T11667] syzkaller0: entered promiscuous mode [ 498.316887][T11667] syzkaller0: entered allmulticast mode [ 498.325554][T11661] loop3: lost filesystem error report for type 5 error -117 [ 498.326024][T11661] ext4_test_bit(bit=14, block=18) = 1 [ 498.333425][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 498.333454][ C0] EXT4-fs (loop3): initial error at time 1778151357: ext4_orphan_get:1423 [ 498.333486][ C0] EXT4-fs (loop3): last error at time 1778151357: ext4_orphan_get:1423 [ 498.533157][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1880'. [ 498.550319][T11661] is_bad_inode(inode)=0 [ 498.568129][T11661] NEXT_ORPHAN(inode)=2264924160 [ 498.596888][T11661] max_ino=32 [ 498.613741][T11661] i_nlink=0 [ 498.625061][T11661] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.1875: corrupted xattr block 19: e_value out of bounds [ 498.706660][T11661] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 498.707496][T11661] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 498.783081][T11661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.958444][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.285893][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 499.507233][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 499.727911][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 500.775832][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.782441][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.733651][T11731] 9pnet_fd: p9_fd_create_unix (11731): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 504.784773][ T5620] Bluetooth: hci6: unexpected event for opcode 0x1001 [ 505.029414][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 505.088388][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1905'. [ 505.365794][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1907'. [ 505.872785][T11799] binder: BINDER_SET_CONTEXT_MGR already set [ 505.889209][T11799] binder: 11798:11799 ioctl 4018620d 200000004a80 returned -16 [ 506.951923][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 508.063019][T11824] loop2: detected capacity change from 0 to 256 [ 508.064527][T11823] loop3: detected capacity change from 0 to 4096 [ 508.104472][T11824] exfat: Deprecated parameter 'utf8' [ 508.110132][T11826] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.155016][T11824] exfat: Deprecated parameter 'namecase' [ 508.217780][T11824] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 508.854148][T11840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'. [ 508.870238][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1923'. [ 508.986614][T11847] fuse: fd is not a fuse device [ 509.179981][T11850] binder: BINDER_SET_CONTEXT_MGR already set [ 509.192574][T11850] binder: 11849:11850 ioctl 4018620d 200000004a80 returned -16 [ 512.512287][T11894] loop5: detected capacity change from 0 to 2048 [ 512.539217][T11894] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 512.575103][T11894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.594357][ T30] audit: type=1800 audit(1778151372.068:185): pid=11894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1940" name=".log" dev="loop5" ino=1367 res=0 errno=0 [ 514.113049][T11912] 9pnet_fd: p9_fd_create_unix (11912): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 516.213364][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 516.351809][T11941] loop3: detected capacity change from 0 to 512 [ 516.420361][T11941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.461848][T11941] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.477465][T11941] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1952: corrupted inode contents [ 516.508008][T11941] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.1952: mark_inode_dirty error [ 516.568308][T11941] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1952: corrupted inode contents [ 516.665328][T11947] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1952: corrupted inode contents [ 516.774058][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 516.792210][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.812120][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 516.831604][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 516.867152][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 516.882026][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 516.929061][T11947] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.1952: mark_inode_dirty error [ 516.947762][ T9] usb 7-1: Product: syz [ 516.956982][ T9] usb 7-1: Manufacturer: syz [ 516.972770][T11947] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1952: corrupted inode contents [ 517.061109][T11947] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1952: mark_inode_dirty error [ 517.541822][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 517.568639][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 517.577614][T11941] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.1952: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 517.577614][T11941] [ 517.751430][ T9] usb 7-1: USB disconnect, device number 7 [ 517.769971][T11941] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1952: corrupted inode contents [ 517.799556][T11941] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.1952: mark_inode_dirty error [ 517.817309][T11941] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 517.917518][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.065635][T12002] loop5: detected capacity change from 0 to 16 [ 522.098396][T12002] erofs: Unknown parameter 'ãé' [ 523.085974][T12005] atomic_op ffff888032859998 conn xmit_atomic 0000000000000000 [ 523.110686][ T30] audit: type=1804 audit(1778151382.578:186): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1968" name="/newroot/97/file0" dev="tmpfs" ino=522 res=1 errno=0 [ 523.384395][T12015] loop3: detected capacity change from 0 to 512 [ 523.469564][T12015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.498745][T12015] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 523.527623][T12015] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1969: corrupted inode contents [ 523.543503][T12015] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.1969: mark_inode_dirty error [ 523.561431][T12015] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1969: corrupted inode contents [ 523.584779][T12015] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1969: corrupted inode contents [ 523.635782][T12015] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.1969: mark_inode_dirty error [ 523.683992][T12015] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1969: corrupted inode contents [ 523.750575][T12015] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1969: mark_inode_dirty error [ 523.786505][T12032] loop5: detected capacity change from 0 to 2048 [ 523.810884][T12032] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 523.827082][T12032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.840267][T12026] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.1969: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 523.840267][T12026] [ 523.876155][ T30] audit: type=1800 audit(1778151383.338:187): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1978" name=".log" dev="loop5" ino=1367 res=0 errno=0 [ 525.264531][ T5750] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 525.293864][T12026] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1969: corrupted inode contents [ 525.804873][T12026] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.1969: mark_inode_dirty error [ 525.849423][T12026] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 525.903870][ T5750] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 525.939495][ T5750] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.129414][ T5750] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.139123][ T5750] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.170667][ T5750] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.179879][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.188151][ T5750] usb 5-1: Product: syz [ 526.193632][ T5750] usb 5-1: Manufacturer: syz [ 527.954677][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.197994][ T5750] usb 5-1: can't set config #1, error -71 [ 528.231845][ T5750] usb 5-1: USB disconnect, device number 34 [ 528.425552][T12061] loop5: detected capacity change from 0 to 16 [ 528.447557][T12061] erofs: Unknown parameter 'ãé' [ 528.692596][T12064] atomic_op ffff88805e208998 conn xmit_atomic 0000000000000000 [ 530.948324][T12090] loop3: detected capacity change from 0 to 512 [ 531.898466][T12090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.990726][T12090] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.094816][T12090] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1996: corrupted inode contents [ 532.149011][T12090] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.1996: mark_inode_dirty error [ 532.197243][T12090] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1996: corrupted inode contents [ 532.232069][ T5771] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 532.251940][T12105] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1996: corrupted inode contents [ 532.295056][T12105] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.1996: mark_inode_dirty error [ 532.324053][T12105] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1996: corrupted inode contents [ 532.371789][T12105] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1996: mark_inode_dirty error [ 532.414275][ T5771] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.423413][T12106] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.1996: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 532.423413][T12106] [ 532.443685][ T5771] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.521008][T12110] batadv_slave_0: Caught tx_queue_len zero misconfig [ 532.694814][T12112] loop2: detected capacity change from 0 to 16 [ 532.712664][T12112] erofs: Unknown parameter 'ãé' [ 532.960414][ T5771] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 533.028124][T12113] atomic_op ffff88806acd8998 conn xmit_atomic 0000000000000000 [ 533.036766][ T5771] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.052486][ T5771] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 533.061608][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 533.069800][ T5771] usb 5-1: Product: syz [ 533.074066][ T5771] usb 5-1: Manufacturer: syz [ 533.162304][ T5771] cdc_wdm 5-1:1.0: skipping garbage [ 533.174511][ T5771] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 533.261616][T12106] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.1996: corrupted inode contents [ 533.277447][T12106] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.1996: mark_inode_dirty error [ 533.291779][T12106] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 533.358273][ T5772] usb 5-1: USB disconnect, device number 35 [ 534.363449][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.328956][T12130] loop3: detected capacity change from 0 to 1024 [ 536.369709][T12130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 536.407527][T12130] EXT4-fs: Ignoring removed bh option [ 536.442054][T12130] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 537.753042][T12149] loop4: detected capacity change from 0 to 128 [ 537.825923][T12150] syzkaller0: entered promiscuous mode [ 538.026297][T12156] loop3: detected capacity change from 0 to 512 [ 538.042969][T12150] syzkaller0: entered allmulticast mode [ 542.542833][T12156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.639705][T12156] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 542.874108][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.194592][T12179] ceph: No mds server is up or the cluster is laggy [ 544.590859][T12189] loop3: detected capacity change from 0 to 1024 [ 544.735994][T12189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 545.062965][T12189] EXT4-fs: Ignoring removed bh option [ 545.102279][T12189] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 545.838865][ T5620] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 545.850986][ T5620] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 545.859421][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.870460][ T5620] Tainted: [L]=SOFTLOCKUP [ 545.874782][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.884841][ T5620] Workqueue: hci3 hci_rx_work [ 545.889544][ T5620] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 545.895460][ T5620] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 2b 5b df fe cc 66 66 66 66 66 66 2e [ 545.915075][ T5620] RSP: 0018:ffffc90003e174d0 EFLAGS: 00010212 [ 545.921145][ T5620] RAX: dffffc0000000000 RBX: ffffffff89747b71 RCX: 0000000080000001 [ 545.929108][ T5620] RDX: 0000000000000000 RSI: ffffffff89747b71 RDI: 000000000000004c [ 545.937080][ T5620] RBP: ffffffff8aaa8d1a R08: 0000000000000001 R09: 0000000000000000 [ 545.945057][ T5620] R10: dffffc0000000000 R11: ffffffff8aaa8cd0 R12: 0000000000000000 [ 545.953022][ T5620] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 545.960982][ T5620] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 545.969900][ T5620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.976471][ T5620] CR2: 00007ff41d1456b8 CR3: 0000000063bcd000 CR4: 0000000000350ef0 [ 545.984439][ T5620] Call Trace: [ 545.987707][ T5620] [ 545.990621][ T5620] __kasan_check_byte+0x12/0x40 [ 545.995491][ T5620] lock_acquire+0x84/0x350 [ 545.999908][ T5620] ? __pfx___mutex_lock+0x10/0x10 [ 546.004935][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.010565][ T5620] ? l2cap_global_fixed_chan+0x2ee/0x380 [ 546.016198][ T5620] lock_sock_nested+0x41/0x100 [ 546.020961][ T5620] ? l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 546.026942][ T5620] l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 546.032753][ T5620] l2cap_connect_cfm+0x368/0x1560 [ 546.037779][ T5620] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 546.043237][ T5620] ? device_add+0x70b/0xbb0 [ 546.047733][ T5620] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 546.053193][ T5620] hci_connect_cfm+0x95/0x140 [ 546.057890][ T5620] le_conn_complete_evt+0x1134/0x16b0 [ 546.063259][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.068891][ T5620] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 546.074610][ T5620] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 546.080259][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.085887][ T5620] ? __asan_memcpy+0x40/0x70 [ 546.090481][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.096108][ T5620] ? skb_pull_data+0xfb/0x200 [ 546.100794][ T5620] hci_le_conn_complete_evt+0x187/0x470 [ 546.106336][ T5620] hci_event_packet+0x659/0xef0 [ 546.111193][ T5620] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 546.116472][ T5620] ? __pfx_hci_event_packet+0x10/0x10 [ 546.121852][ T5620] ? kcov_remote_start+0x49a/0x7a0 [ 546.126967][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.132595][ T5620] ? hci_send_to_monitor+0xe2/0x590 [ 546.137792][ T5620] hci_rx_work+0x3ee/0x1040 [ 546.142298][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.147926][ T5620] ? process_scheduled_works+0xa70/0x1860 [ 546.153638][ T5620] process_scheduled_works+0xb5d/0x1860 [ 546.159174][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.164816][ T5620] ? __pfx_process_scheduled_works+0x10/0x10 [ 546.170790][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.176417][ T5620] ? assign_work+0x3d5/0x5e0 [ 546.181013][ T5620] worker_thread+0xa53/0xfc0 [ 546.185600][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.191246][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.196879][ T5620] kthread+0x388/0x470 [ 546.200948][ T5620] ? __pfx_worker_thread+0x10/0x10 [ 546.206049][ T5620] ? __pfx_kthread+0x10/0x10 [ 546.210640][ T5620] ret_from_fork+0x514/0xb70 [ 546.215229][ T5620] ? __pfx_ret_from_fork+0x10/0x10 [ 546.220333][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.225963][ T5620] ? __switch_to+0xc79/0x1410 [ 546.230652][ T5620] ? __pfx_kthread+0x10/0x10 [ 546.235248][ T5620] ret_from_fork_asm+0x1a/0x30 [ 546.240025][ T5620] [ 546.243028][ T5620] Modules linked in: [ 546.248430][ T5620] ---[ end trace 0000000000000000 ]--- [ 546.255443][ T5620] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 546.261391][ T5620] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 2b 5b df fe cc 66 66 66 66 66 66 2e [ 546.281300][ T5620] RSP: 0018:ffffc90003e174d0 EFLAGS: 00010212 [ 546.287420][ T5620] RAX: dffffc0000000000 RBX: ffffffff89747b71 RCX: 0000000080000001 [ 546.296639][ T5620] RDX: 0000000000000000 RSI: ffffffff89747b71 RDI: 000000000000004c [ 546.304717][ T5620] RBP: ffffffff8aaa8d1a R08: 0000000000000001 R09: 0000000000000000 [ 546.312794][ T5620] R10: dffffc0000000000 R11: ffffffff8aaa8cd0 R12: 0000000000000000 [ 546.320792][ T5620] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 546.328889][ T5620] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 546.337874][ T5620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.344631][ T5620] CR2: 00007ff41d1456b8 CR3: 00000000590f5000 CR4: 0000000000350ef0 [ 546.352703][ T5620] Kernel panic - not syncing: Fatal exception [ 546.359274][ T5620] Kernel Offset: disabled [ 546.363599][ T5620] Rebooting in 86400 seconds..