last executing test programs: 9m31.554387846s ago: executing program 32 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdfad2c000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r2, r0) 9m20.613257666s ago: executing program 33 (id=66): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) 9m2.404498285s ago: executing program 34 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, &(0x7f0000000080)="660fcbbaf80c66b828ecd08566efbafc0ced0f0012a5360ffb6cb066f72bbaf80c66b81e46118166efbafc0cb80090ef0f20c06635200000000f22c0baa000ec0f01c9", 0x43}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m9.934442042s ago: executing program 35 (id=420): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 8m7.23515612s ago: executing program 36 (id=436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @ioapic={0x4000, 0xfdb, 0xfffffffc, 0x4, 0x0, [{0x5, 0x3, 0x5, '\x00', 0x1}, {0xe4, 0x2, 0x0, '\x00', 0x6}, {0xb, 0x0, 0x1, '\x00', 0xd8}, {0x1, 0xa, 0x1, '\x00', 0x1}, {0x6, 0x1, 0x5, '\x00', 0x3}, {0xcb, 0x40, 0x3, '\x00', 0x7}, {0x81, 0xf8, 0x93, '\x00', 0x10}, {0x7, 0x5, 0xd6, '\x00', 0x7}, {0xda, 0x6, 0x40, '\x00', 0x2}, {0x2, 0x9, 0xff, '\x00', 0xfc}, {0x1, 0x1, 0xd, '\x00', 0x80}, {0x9, 0x4, 0x3, '\x00', 0x80}, {0x7, 0x80}, {0x0, 0xd, 0xfe, '\x00', 0x5}, {0x2, 0xf8, 0xc, '\x00', 0x5}, {0x5, 0xfb, 0x42, '\x00', 0x9}, {0x6, 0x53, 0x0, '\x00', 0x3}, {0xd, 0xe0}, {0x0, 0x8, 0xe, '\x00', 0x4}, {0xea, 0x4, 0xee, '\x00', 0x7}, {0x8, 0x4, 0x4, '\x00', 0x1}, {0x4, 0x34, 0x80, '\x00', 0x40}, {0x2, 0x4, 0x0, '\x00', 0x9}, {0x1, 0x4, 0x43, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x8000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m59.416675615s ago: executing program 37 (id=455): r0 = socket$inet6(0xa, 0x5, 0x0) setresuid(0x0, 0xee01, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 7m31.495204595s ago: executing program 38 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./file1\x00', 0x10, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2) 7m9.254167797s ago: executing program 39 (id=683): io_setup(0x7f, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x71}, &(0x7f0000000100), &(0x7f0000000080)) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r1, 0x0}]) 7m7.636969731s ago: executing program 40 (id=691): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x105, 0x3a, '\x00\x00\x00\x00\x00', 0x3a, '', 0x3a, './bus/file0'}, 0x30) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031682d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m55.58659408s ago: executing program 41 (id=993): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 5m52.472713077s ago: executing program 42 (id=1003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x20000804) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffddc, &(0x7f0000000380)={&(0x7f0000001a40)=@newtfilter={0x78, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0x5}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040044}, 0x20004804) 5m22.058284127s ago: executing program 43 (id=1097): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}}, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4m25.202361538s ago: executing program 4 (id=1415): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mlock(&(0x7f0000633000/0x2000)=nil, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 4m23.532485149s ago: executing program 4 (id=1424): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 4m23.25078759s ago: executing program 4 (id=1426): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) io_uring_setup(0xe36, &(0x7f0000000180)={0x0, 0x9933, 0x10, 0x2, 0x384}) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 4m23.078147868s ago: executing program 4 (id=1428): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 4m22.642170471s ago: executing program 4 (id=1430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1018, 0x3f7, 0x100, 0x70bd28, 0x25dfdbfb, {0x7, 0xff9, './file0', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, 0x1018}, 0x1, 0x0, 0x0, 0x10}, 0x40000) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 4m20.282764923s ago: executing program 4 (id=1443): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) ppoll(&(0x7f0000000040)=[{r1, 0x9510}, {r1, 0x9544}], 0x2, 0x0, 0x0, 0x0) close(0x3) 4m19.548603984s ago: executing program 44 (id=1443): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) ppoll(&(0x7f0000000040)=[{r1, 0x9510}, {r1, 0x9544}], 0x2, 0x0, 0x0, 0x0) close(0x3) 3m51.894807939s ago: executing program 3 (id=1544): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open$dir(&(0x7f0000000000)='.\x00', 0x18100, 0x0) lseek(r0, 0x0, 0x0) 3m51.61503336s ago: executing program 3 (id=1546): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m49.060160845s ago: executing program 3 (id=1555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80d00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xa0, 0x801) r3 = eventfd2(0x10000, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r3}) dup2(r0, r1) 3m48.456085167s ago: executing program 3 (id=1558): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_lower}, {@fat=@quiet}, {@numtail}, {@fat=@nocase}, {@fat=@showexec}, {@utf8no}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 3m48.139987679s ago: executing program 3 (id=1560): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) 3m47.538813552s ago: executing program 3 (id=1564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000006c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 3m47.059738534s ago: executing program 45 (id=1564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000006c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 3m25.987103082s ago: executing program 1 (id=1628): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) write$binfmt_script(r1, &(0x7f0000001d80)={'#! ', './file0'}, 0xb) 3m24.615960126s ago: executing program 1 (id=1634): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0x1000, {0x0, 0x0, 0x0, r3, 0x21801, 0x1143}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3m24.300985039s ago: executing program 1 (id=1637): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="4cbb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r2, 0x4, r2}, 0x10) 3m23.990530213s ago: executing program 1 (id=1639): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="4062f0e1ada617bc77e5e2bdd15e07a3ddd55a344eaeb6eae096e510ee44ad7c53229fefbbc35e01860fb58f6decc4a4158fb769fed64cfc7dc91ccc5016ba2d994279296f5919970f6d9b12545a97acfd03c9a8d79a1204ced3d569b0d2ce366a1b9069641a643ee1053f9ed6f5d121644dbbd157c3585043294ba1dd9d9cabf7160b56179097298965b53b22dc1d113e7ed6b5ece08ba30af7402f0d2d9ed719295f84dfa9189c792ef59b21edc07e639e4ca9ba2f353d02836e62"], 0x86, 0x5505, &(0x7f0000002480)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1230000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) lstat(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000400)) 3m21.727789369s ago: executing program 1 (id=1648): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) 3m18.458689838s ago: executing program 1 (id=1667): r0 = io_uring_setup(0x131c, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0xffffffff, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) 3m17.958967496s ago: executing program 46 (id=1667): r0 = io_uring_setup(0x131c, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0xffffffff, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.721312129s ago: executing program 9 (id=1942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) 2m21.367581622s ago: executing program 9 (id=1943): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 2m20.271317934s ago: executing program 9 (id=1950): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc4}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) 2m19.802444149s ago: executing program 9 (id=1955): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x83084a, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 2m19.447396912s ago: executing program 9 (id=1958): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom(r2, &(0x7f0000000180)=""/102, 0xffffffffffffffd0, 0x40000000, 0x0, 0x0) 2m16.779630858s ago: executing program 9 (id=1968): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x12) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x10, 0x3c, 0x100000000) 2m16.302633991s ago: executing program 47 (id=1968): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x12) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x10, 0x3c, 0x100000000) 2m13.798193008s ago: executing program 8 (id=1986): userfaultfd(0x801) creat(&(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m13.487433011s ago: executing program 8 (id=1989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m13.11136066s ago: executing program 8 (id=1990): socket$unix(0x1, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 2m11.081638742s ago: executing program 8 (id=1997): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 2m10.62421032s ago: executing program 8 (id=1999): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08f503400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.153336055s ago: executing program 8 (id=2002): io_setup(0xc, &(0x7f0000000200)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) write(0xffffffffffffffff, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)) 2m9.623112815s ago: executing program 48 (id=2002): io_setup(0xc, &(0x7f0000000200)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) write(0xffffffffffffffff, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)) 1m52.469739283s ago: executing program 5 (id=2064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x8, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0xa, 0xf, 0xa, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xc, 0x2, 0x1, 0x5, 0xc, 0x0, 0x1, 0x6, 0xc, 0x9}, {0x80a0000, 0xeeee8000, 0xd, 0x0, 0x80, 0xf2, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0x40000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x60000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0xd, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m50.377904721s ago: executing program 5 (id=2072): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m49.921881389s ago: executing program 5 (id=2074): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) 1m49.536695864s ago: executing program 5 (id=2078): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0x2, 0x257, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) getdents(r0, 0xfffffffffffffffd, 0xbb) 1m48.671707113s ago: executing program 5 (id=2083): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000062c0)="5c6db8bf44c8ee7245f8e224c9af35b8b81666bec364e08fc57bd42d1450a0df9820d196188841149a425103c3f0dc6a981aa123adc0c3a31b13dbbddef9469c3ab008669c8f98b01007ae504f204c9b9c3dd18b5ab45c32bac2a4756e3b9a9c232d0fa1240e8a3a371c254aa1bb0bc4de5261de2ea9406f8d3ba445224dd3d42d618e9524b6ea51833a0a0427bc5b7d856c37af86ee858b6ab382fb33ecd59b6ad4313367baa92f75474bc1e9005882608f29d68ab73b80c02782bbc89151090abb13d806f20b7d3a474c7d785cdde2f9ab237c34fb3cae8678cf349f339ca74927aa91300d1485893752a73f0aa96bccb3b29aacd91be679ee0b546811e3447f6d85f3d98e1a9b99921f7a8ccdf8fa8bfee49c939a8eb183bf85be2be3853ec04c532e13bc56e1fc5e3408d799d1d6169efe2710bbf7e1d288ab0171d97c1542b290b15875ad4d7c8e3c03aee964c5f7edfebf2cb5aaa990dbdf9148e48e9020fc3b8aea9472cbe0476db2631b693d7ed93b7e2e22bc05714fb8995b11ff6c47fefa0fec4dfcb5c6151bcd678402afa811db96e42a262fb74b2cb33660fe01b1bfa76b10ca642e8da643b5567ab4a55476e329cf68fba30c117c23f25e0824e75f2a7aace3c229cacf2f76f19fd29b515ea074eeca94937dfd5365bc844780a50d1dbc7611fafb518783a26bff651f3107f8a252ab69c83e7f4c56f7c12477b0df334885131af439dc10876c5c731cd26a9c44bd55e938263f2b5e636caa800e6748fc0eee6830747de7e2b15f2603ca16648326c9aab0d21159be2bbf3f0a0f34e55f0ca011c77a35bba5f5c4d926c6d9717e6ad303a1be22f5d3472f1cc033b0ad42871b28efa172ffa9417d9c46a687baffeecb243747b475810204fb015d5070530670365647c2527c89387c9787e822a8d0aff018c9a2d2fac7ad203c60b17877267dda3736659c7cd482fc9b3f834a01206dfd1ff0311bb2f1f017d8d2641708375aa232bf325b1edffd22e676493e5824ed534f646f1451c3c573fffddff4c52ad81c18ce87027b211701cdecddbca4aafc9d65aed382b78e419bcff3623b605dfbdbde0f894036574f438506d9b5bd00c193db1bbb97d819bd667dd7e643a236c9d2237f73bca3ba404ea32c31e37cf84a9defa843b186154d076f2b74a895913b4e33e725b899c8d52b0cbdc1cf923927868bb5858a24b7d90958944ccc4b0c846e9c34dd9c82a1402aa8bf184d40dd16ccabaf26312b8dc7bb5c93f9b6cebc45ad20967bbc4c1ad3da11a05c77800efe5208dff3c3c455064ebe4a189a7a1e7dfd6ca606a580e32b73172a5e70a42cd0266a1216f7e46063121c977a0d35969338dd675ee37fcd5a2d95b10de2462af45f148178ccb630de6a69e571582aa521a219647f3d7bd5c6741c11d876d9ef5108d363fb3b38db2019b38c9449cd6f0f2a2b0bf288d93243e6f046d78c0bc9589ee8ef8bad33945f742ae4315462a1c2ea5eab4a318978eb59b8dc785b316dca5c4f21d3d8782802c0f4b14aed5a8ef246ee772ce61d867b6c39772316fa41fa038cb3347bb05aed4cdbebf00a54a5541bc067c50cf7812af5dcc330908aa0f6bc95db603cffee4bc0380f07145b2f464740289708e28ab3cb8573f77ddc9767f57f32ef3ae80c5adeea4686bb842120c5cc3e9b98b9892f2c1497bc96054e211fbb8f9cd9edb0ffeca6c8d8a1f8c054c0c7dd11bf3961fda9b8a4527afb00baca8092dcdfe683c95c8be62161e9b7614ba6d6d3f455efac76f252071929da95396cbc377a0429f603d5cd894f9c56ca883e39ff7710bad7bb5836d796693a6c2e1b5d26a479ca491bb9545edfc4656c8a5e1b4baa8c31b645eb742289794ff4124fcdbf9cf54eecea5698d13e860a89e22bd7234efa9029cfadd16eee98562c57f5c1fae4755f214b609bb38473f61cd81316f46ad2009d7253b5a0ae0a16382f377cfe9e26b5e7a8cdc307d2c753731a3c089803f7403cefec69f3840ca6cc36f084da1d1e309123f6fa1b8c0e18e69adda4eb8803bd37669cac1518f5aba8ab7b51c9bf4f929288c1606407a389bdbd54992b1e7a2edba8abbe15197f0e8c0070ee0e3c4c001d5a3cb25b213641addb60fc4e29faba5edbfce75ea270e809692b999a984a5c3d6bc00bec8237a7d702e07262b85d309c0d2e343d2e7c6c7d349b5431e4d873cdf452d3430d2cfc7349957941a572d4f7dfcdc637a409b8c5800bd6e702da6a9c202b5dcd4d2f9af10e77cf0b3b72bcc308fb2e0eaa2dd8125d4626125b2a1aaadd5c411a3b5ea7805862e74ad316b84512913728be4dcc9405c89ec328fe3274c85785090350cd0096db82ae8816110ea084461e394092b0c33b10e1102cf90131a036574d13ffecbbad1c6af8a49a9cca9a1a1016cd081b734e12209be2f00a13518cb66abd49c76813405ec0407a876f4bf1f1efa89a465299b4d62b0cc6ee13b7b3d37148c556cd2907f7f1c7ffcba3cd343037b99d362c0d4f3637355598482182a3e3c391add5a8c63253217a8852037ca1f1d159c693917c4b50695d1d43d506d535eed02d4511ad146a46d51d8599a44e3f0de6c7f3dc725927293b3083c6ef28215b6b046b57dfcb3df187e08f723376f627c5d35dcaaf490f6468bf98d5857eab01f7615197469e221602d5021334d78476cad69bb5898cc49d5fd4ff66ef16ec23ba56f32013494f59b578603c7a0e825245e04f649b1ea4d602fc64395584a543ca75dc9a5f5fdba156c9ae020e25efa34056e17da701df57c6e5fd664d9e840ceae12e8a437cf29c80635ec8f23bc180f679ffe412de84762822553253c4b9431bb4835b31b8cd6b49b5db7daa37df1715fb4651032515215923c19de8c13e509f3814d1f9d839f56dbb34f4369b988e6b3c2826718582e6b30249b36784457b8e161b2dbd9ac67e4406c801eb1f54447bd19d3320ea606a642f5938f4c68480bac127ef2a9b54e287162c6a2492980964d43005f27716992ef2a19a5fb5ae9dffc7b3d02c67a73f0176edcc13b3fa187e2cfca6c82b7695e3f728d657410481e9146c15f72eff98953ea2c59e9420a5e93a61ca081523baf6d5a3bd09c73d1c4353571e6fd691609a0bf7934800b17d5627bc03adbb89f64b3326f01d4a83972498b9c9c77b17989dd877348e0bec50a1f0a9cd4d6b7b241148bbe3d2f58c8e818c5481939af59584c8a79b518c044bf3dff0933c42e4c76d7a5612d4f74bdf04d1a963bcfccab0be24bddcaeff8f476c138726f194bb2a00810cc1aaa159e156d450698532c6fc6e234d3ba4572cdfc2e1afd003e8a68c6d58bd7cd55c681a9b48faa52a11b1603607fd8e682c7f22b7e7cf772662d1a97acf38af0e075629b73a7df6374698902280f51d3c518607649359301b7cd0055c454cf4a249a2cb45c33ea9ba32714cb26991cd24974feb48ddf0de6e1f583ac9180491eebff08ba9549240964507aa9b8548d63400ef03f0a11e06687e3bf92032e07d11f301a9dea8bf02a1d0d18ccc4e475bc8a1c04e6dc04d42558c19776c9c3f674b7b2fa6a79410bd169dc5309c718535f25547d16fd1f0ef9f3770f891e901fd1ff6cfcec1d07a4ff318e33a901b7c6538c49b8b35e64e51649b539095bb8b0a7a330b79289b9dcaa3e4313b8e5e49fefd6c214f5a55b9624809a8ee1fc355a1005e9a4894463ce088d054ef4248d568b4b4747e16e19afdcb40320b83f8a5e64fa77c1e5bccb8c8505f573e64afc46e4aa696c166e061ee7cba2c4c926c335da181cd151e80c116cae2fb150b25463714f78e1d9ce3f75e941b9dd57b0ca28593a9180aad70cc1b79c301df51f583292386c85560d95a84b8acdf359d3c1fa78be39eeecaa4714b6e0fbe3d6f0dfef3300c0b80d6da4e872d1765b583f4259e9dcc23aa63d9d645715425afb60f62ddfb6c2018e1085e19d33a58bb06402f8ffc30728b25c6f060c630970a03897c49fdd17326f67dd3270b7d0f2f6eb70c9aafbc5bc023eeb015cc7c34f0680def1a166783ac6ad268eb361e08428449421cf489fba2dbafd74cfc3d9f2db6c65fa62d04aa8d2785da79226d97c16a985baa60ff93784fbf4456f995f0f02f40d453e5dfefe932e3f2aa5d0b8a58c071716e0fa388ed96b649e62142b69a6fe0a7d8b4ce6190f6ce50c4ff706e686dc8a11b947c11296596892270467bd3dd789b0bb212ccd0f17ce8f27e4b6c7caf89a592317ab0808fddd092ca513d01b6925a5bf912eb028223d48dc83e141b82bc02a03cd3d75143148409b99f63181f14c14936ecb76b8753b74564c98feec7baa0509cebf8ca6d7349f45fdae5f3404f16638feb33622d43cd58de022ab73de3078e3dff7b51ceb58074f8dc09db7eb512d43b700ac880713106a2e6f3a18da7743b95460d2b417b907f89fb4fa5b3097e34713b5a6a73cc9f76836d353116b8c37f9cfdd36b5ea2d4cd9206a828dde7fd936ffb8ac95f9d10a9f24d2586acba4b4f86f0581884d0ae958e8e4618b70a706edb31f2e3434f1992f0ca30d55ec582a7364e16f5d632afd8955360b0b1433155d008fb270a00945463a351ffcc825febb32f31289caa453852d689d12b73f8ef38c73b1760f0cc4c4cf79dd06de9f0fbddc6270982433a9f6fc3531f41c9f31698cbf074353b7318245674df25c19a54f34ef664dc546f310865a9e1e34be4c4d7654158a4c7f802a13e10822f60f6a2462ddafd079f8f3b679d409ac53cd7389a487f522c1d3cae8b5d928dcfa354afa15f1b6da256b6a25ac795a9b0ef8570a7b55eef339f9463bae1b656e5e2987b65e3c67f30632c65a71b7738bb9302c1501023cae931cae04aa13516e0e981ad4fcabcaeb80fb3dd25263e8e949bd462b60a9dc3ebedbbe4b497d0ca61f92664f7d6d4ce921a9b15cf8ff7e79cbd6baface0dc3e7bb0acd2452d15cb490cee915564814ae74f578ee954948040a1d544caa218630b8e54a243dd2e4a439de20893c1b5d2ceaad7ee8e02910db115c2a4c93f561dd8d3083910de2cc1e8e2e58793a9f4560bbe5ee45ea02a5158c0cc4c67bf1fe8e1c447ed7c75e1586a88dd153e87e5d036745ac253de40c6158abcf0b531305d21dc2c577a7bb8c256c8dd140b729ac367b027f64def76b1a291ec8a9c59caa3c15a9b1a6ceab55d64513f225c9f80cc627d94f33e9fd4f7a5fc4628669846f3c3febb0b68d2d3b51cc2223fc0cc61f27f69a5c2bc537cb3cbf3bebd1d5a933c1fe91555c318c7cb3608d66aa8c436de3e7b6c45df033d84d4e02e97a05240479b31911f8205c10ea0603c08ac7f4c3ae0507e3ed9ee56f2b246a05d8ddf2ee0e7f7f84adc0eda403b8bf05c3523bb9c34b924e3318af6e554b30bbd3986a4f821e73cc7b9bed8f0d333bdf8f3e0352d5088ab9e8d708fdd041938b6908ed1fe569f12c187af9ff7d4b7ab7f7c98e7bb9227fc9ac406460dcb637816dd7a9f46c103c0a6baf1afaeb006859ab6dc3bb3a15b7b9c1bcd9af98c4ade75dffbe6cffedac94b4dc2ce9c723ce6e0d992bea7f7318ca48015cb98a8481616879df724945b7f36314f2204579c9e8c5541964d93523923a9a86c99f1f4fabc883f1e8e0fbc1831204fe14c571fa3601c39c83693d68c701c58c178babb797e1f07b3697ed2df2726955a23676c5b937b66d271abc897393bfa3d7ca2a2218d18d049356cab30c8df0f0436dc33f3f028498ee6f09ad41d701a9c6fdc10eea767d2e6a689f09dd87a025458df7a1803940d553612bdfd0b57b1a675ae3ee269d9cf1eb0defc5af1cba23cd8e9f2aa8e1a11d8b84eae2efb151c30df98aafb762294fcf34ae7c93f77f2508aabae6b0cd7924d6df098f14fa94cff60c372aa4fd90dfa1486a9958b7b478e82dc71d2711ed351f18d5dbf28ec7814265d3f894d9ff87aa06b3f1e0819626e3621865e559e6d6e2e98ee1dd3147215378e148c53be869fb729c0aab39e626bc361ce08052f2202853f37b26521960083dd44aa3fb9e7dc89902ff1f95bd1b525c9faddd51da0d416e713c51ec6fb8dff1fad95c22cc15a956f67d4ff0b0eaf5a3ec4e2e25a7ac2c99e126dec1c5bc3cf2a9bf0114abc85add005f0973538e5d277b37a976c9db12422f6357cdcb88629380d12b856d455f068a3dd7f1018bf46d5ea478fe9250aff005c3b34df2295ee1f8950376e48f1c0b046f80a0af05c6c6b89073099dd3030ac6ecafbc96dd8a53db66ba5927c8b6e552d60ab0e823cd294816b9e300e3b4b9c324722fc0b24939b15276200f0d2a891a01e47d88c6fe8de08bf05e587b30dc767d9e20f5f703a9a9a9d3bd03db32f315994d8c4c420c63d14ae4330fa394013a45cc581395cf70d3f43e80115f2016008830028ef3373c0c42483d1788ed4ba1cd3710f276a5e6edf10657215c468716749f76de800e49bbe3aea04c20fede8a98a7da878a7a04e39816a217908d285b6438d3bfea81aefcdfc0d4a12f219845d760cf0f7b0a08ef0319a9e200730f6011d5c1236dbee9693a18e1f284601b9ffdc187a4e9562e8f7785f5f335a76aa30251a43e359722113797880fc2fe15b85636924a65f387c59306e037f84ba214a4745fd1ec5b72056baffb3e7b39d2c5238b85cb4f7ea1176ea446d4fbe1948f72313c538e40e8645a34273d8a92056c09b3463086c0892d97fe19ae27afdf491a750d560e91be806a675ce1daba4c823a83e24c424e438e86487512b0ebfe9a930d80d10bb3869e0b162bc5207805e20306f783d1690b24a11c37c4c18f913d925ecd37d5e8ce4cc34afd2e0435c568f3a5e6982208ef82812f971a37a38ad925c29df133b086f573fb08d24fe4709381c65243c81865e990cb6f4279c82487556d1dea51c7a9a6bc64e3a7236ef44bc1fe3579f36fa9c2b56cd4f7abeb6688dffe7262aa9d427cbd9d3da22fdf988181d427606b3830e1225c43506aaffe74b1c99a20a79d7ebf7f19c0cb5a4a6b056c723fe8447fec5320e10d409d81b4109d149d11bfaccd55805d46a784ebf76832b03365b260498d67d118b659959674ecaa625c075d792990a18bfca13276cbf8c71bead0527d153ac39f1598b00d128cfb6c06096b865a48695968c76abf131cc2ce331a3574e9142b1528ffb99207d6708fbe825f4997150f74b2f59df61ecbc354c43b7f826810804ec861075b6eb67ff228a495ea3a66b42f3aae38edd0a58de623b0b4948b23f40c67f265f508c39455457af424a821dde2e82fb579f1be665f849038a59abd13963fedaa8568db48ccc5784d2b9d7165a8f5f68a65ff30ba760cdcbf70da836fa4ce3f482b0cca559401e20a3500a1f6fd7271f2e5d5d580d9052aa08c81c918fbc14e59aa7cdb2da5ad972dd9166c12d391a0a921a1d214c98667ee3c44eb86507c4eff9ef9c9d6fe78fcd4817124ffd0eba47f4decab7ef4c84f9f131c2080e9843843472b3058a908465257d8c535f21a4f7b7520ae12b6bb84ba72f50e8f4e454a6bea215459164c8402a9df2d3b68afbb0515abcb1cb1168f1b8ce1853ead9c62d4e70093d9295355e9ffecdf7d621972ad8995e2a8cc3476f8146082ebc6d026acd370ee365ee1e747429f914fc93ceff847f81fcb1826be8618d5b46992a467c0e31c407bae356d5e8568e5aa31aa65b313891ec1e0fece67dfacbd087fd0a981539bc1ceaba9bd63a4e4c59c31f4b2bfebbcc31ca95c2a47f3d5dc0149673aa68a3b32f36b2accd45748e6bcb02f3032957c7b10a7990d40f09e83411a7f7d1731f19054776413aa5af9d21928704be77110cdf14759b12dc5b3cd68404b8ba2e40fb6359fac65ce5e8225f15c33ce9358b39d7030ed8822a588c9d2768f9c038c12454b247668520ff3524536d32141d42ce197bed8bccd8001a045f1b235517a02562d68b873f8352d93012b5edee9a0efd7bfc3f9b5d30f3aa06e830ad97fc016815eaec5900d426cd9dc448e4ad5cff033ac7979275c3056cab668b8e672001e789f89aa86081d3dd5392c98426ddfbedfa54fd9b4ffc6a5e92462a2a1c111da0900ea8584b8a23660ec431e1987520929a7e26c6e51eec8e8d1f4345ab7b8bf51286224405ef025a3bee9692ca49848a19277fb63726f045c8cecadd9c5ab70b547d61fe628de61f42c4700f9e30662bc165154139484ee5986d767c876e44b7651f33963e63e67bacadac24e6178c9808f3aca5cf25017ab21c2aa9d691023d1331dd81b614911abad642738cdb55e270ec18c549496fb89a2c175c2b03b9e03d000abbd4e3ea5018121a621833e25814af5b847971465be7c8563a21604d13870b80a5c1dbbd460a278d2765ea06e29380a3380130250fc28119efa3507244959f8fd7bc13b5d92236623be0c1dcb3b29b608b602f9926c82d58f6d297e73880908a5c3b4dc96135b4de5503b670472c535617da919252227cc69cafcf8404f8899c9b3b0f18008a20ed43ca2afc88a794f20aa5924a48f4663512a0fb0e8c44fc7e559f8eb44ae9e275260fd5eba329646a487b5d59b6a640ce0825d8ed83157c01ec7b8795a7a8b7b9a17b433b7581fae2d7167cc0a78f4321568c8acbbbcfbba079ea43b46d46b4102ed32e59b3488dc2b190bffcc62b62ce13e6abf55b2ae62e536bf9e6904b2231d6d43d1098f4b39c1d972f20c1d41dcad491592f45b20f76b8696194a571aa053f6fac99241795e402cf1a675a6e73214e60260e5a95dae62859006549622fb42d0ce51e8bc0832a5bb0bd2eb9383e5ab75381e63e893e22a00fb308ca397e1a4691e0946235bf2be78d2ef8d04a65617651041e853219ad56ec005f30166b6074f8aed3becb8f1c125e407bc46715af5563cc128680413c528b79709edabdea5cf09be909e04297cd510aed4791130c91382c757bb2d2bdb5d29fc3677ad822667e466b88023c42e70a681622c6ecfd641d06384dfca43fe7c618d6fc9526d5eca01114e4e34f72d7a0da887c3b1092ac888a39ad31a98b243f76de3e8a9b726d444dd7b6c13f28679bb9de7efec19fb84418f475b8274adb807eabcd6f8041b1ec1df138395fb445dd6bdc46c29b53dcd172eaad56f4179a1661342131b1e6ad29b6087e47aea03071c8b90075798be030c5c55c8cca3eff3f9a0d46cb52a172eb35d9fbeee5c29b11550fef938fb93ca6dff41b6eb565edc24a7503f8d88dc76058e7b206d551ae86110f21b2305a03c46af3695e5a67d925131a9efac9519017407fc521e0cd9d81259f38cb33b4bdf3d8d469996a9ed31b1b6c22fc6f680f47a874a2cf08ea974765f1e6e34174d136024a63119ed77df62368a043b42fc78f198edfe1eeaee5791161cb62cb3976e7af9d59e161a412655524715eb137a181742e63119bf10682982d857f58a3974631d0ed32c22ba4ef31608636b8631afc7f8e75709aff605741253a1090d7ce3bb8d9c1f3d9d99e8891d822fbd2ca270a2a26323b18a5a75a13275f8300c4cd591f11326576010b2958590423a6505f1d415eba0f28e8d52e605ce264962732cb1b7b8c0b649d2cfda6fa809a98cf29e840040bb052b834082aa5e4761926eded6eb37c8dedfeaaafec5b7251665d66e9e3f6b3ec88b6179653cd53dd5581a411fe7e08034481dc5089efd8b7e679459e873a0a29c5512c0114ecb6885ee6ba14662ea7bb7d5fd798a695085143b56d7f0ac015f22eb136be72e8d0b6f30a9293a1a00f211e413a5ee9b03c884d272912d1b87d9b792ff61c539db5856b426fcef7f0e035ce50c4a545ffa85ea1bf21deb1b9d22974a9360c05532772331c802135cd8b19b081c6782e3dbb61e67c77df509dbc1166b17978100e14338d7e52b244d857dcc63de41e3951b1fbf56d081a30d5d2728dde9dc407d758c5c25f947811b716e259046953d92dcb63a6471450bd53b4ebbfa97a98d9ecbd1ced74a09bd3ee5a00c8edcf963c4cd6955dc74fa4f5edfb2b2d1e707368edd1ecdd478e2cae40827d2b87f5b2a49a99a67ec86dd9ebfa6ceec6e09231607982677022202492a2a9c08eb214767717e48e16254612fc19357d0d2be6e8a8c84738ac477ad772741e705a07d74ad810e39a088322d21266c2f0eebbc35ffd227b6f3c0a1a02e73b51e73a4c4a1188759925ee7b8a174299bfe920669829972be2ead372f6232914cb7101f2a05a75a697dba2fbab9ab014af79c895fbd8d9f9a0869a5c64267da97e1eb57817cf9d826cc56a2f00c7e0a7eaf2cecdbf7d4cbed10a9e8db33aeb1d08959e31cdcf248e0d1028dd5c14068727b1e1ba5baa78143d5b3a7482cd297f468ec45e310c70fce88fe6157ecbc1062973a67047e2bd9ccfd6592a206fb52852712d3848c8cc6c10773c3d64cf8a6950ab6600b6550e86fe2fceb19488547705d18bf2dd392ce0131a36990b61289e53fb78c3ba3f1b5b8efdb40412b5c679a6227bb8dad2441a19ae9613305ecd2561a726719e2a172ced381cad9520511b6a0671cb0c4d4ed6d961e982a8a23cf1641639664e5ffd3efef70ba890f146e9553c49f7ff3fbe9f7d269f40f101e43f07f92337b01242455d8ae6348e4d3abf35cdbb02f3e5881581edaec46e35dffa44f84eac946a6c5307d808d9fdf8b7c1ddb8439273057cf41d72cac06c64f3bd477d3fd43ed3224b01412da9fe91e191a0d832a8328ae8337523d7b254d26ae690ad403dd7421a852f760e39c7c2a319e3f0b08a8e80346f97c54462455144889ae04fcafd50a02532d3d7d0b57586a14ba9afcf549082d9e9a576e30152db0962c57a068ab726e9fd018fd735de4f839e1be94859f78bf2f0ebc504a808a2c1a4d341ec2b43c01506f6f5243fdf9e50a38c2f1c2343c5b1d26c008987801bbe0a30e604fd6cc6d13d4a8409a63b44e5b1f3c94edcc576e2cd151d52bb8c0a7b6662682fe0a80706d7296d1a18647503af6101fa81892226e0660d0807a1b4fcb024887e61f1080485bef8c9c6557030e27e4599be1ce00579f55493f13f9177abfe1fdcbc0a305fdef0e5c1e49578be2f486fdf2fb37aba27a33cd843afa6910b686d2e800c8388ba10803cd9d17be9054625570c74c4874a9aa50e01a76a8d0cb1be7007db3f057a3653f79c306e4d1e38121d9a22dfad355bb033e5bcfcae522d640b7acda5c0352419f9b02bd122982623ac12fbb30e79e4160da2f6e579f6448b302a17935bc94916e5735e31f432d10c89b5f8b0d08d423359f4ca48eefb098ce67231cac4e0a11d9411dcf721909523c43d2a4ddaec74e38f6bcfda98e129b6848df82005e0821930078105b09ee21a430224c321b46d3c9e79e689d7abd6d2a02599b5105efc13a22959bd1e0321f095ccb0c7e1666e40a16b0346d5471be493f8bc5bdffd849ee4843729e7b3f4f51f1b7aaaad857e30d6c2c9d57fb8527f20f172f9d8440ed8cb267d6fdb5ec76b61140822057668d4ee72b8ccc0e153f2b9c278c8cc5f5373a306b86948464f44317584cf5c7845f7c05c90edb5ca5d0d50f1bd6ee0ee6204afc5c74d9d8685d5969562001be40dd7", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, r2, 0xffffffffffffffff, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x124) 1m47.911743246s ago: executing program 5 (id=2087): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xc2) 1m47.320048722s ago: executing program 49 (id=2087): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xc2) 39.426478469s ago: executing program 0 (id=2370): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) mq_notify(r1, &(0x7f0000000000)={0x0, 0x4, 0x0, @tid=r0}) 39.109065102s ago: executing program 0 (id=2372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000003c0), 0x67, 0x53d, &(0x7f0000000f80)="$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") setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) openat(0xffffffffffffff9c, 0x0, 0x60840, 0x8) unshare(0x26020480) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)) 38.642839247s ago: executing program 0 (id=2376): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x4, {0x2, 0x1df, 0x4}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {0x0, 0xf0, 0x7}, 0xff}, 0x18) close(0x4) 38.417660522s ago: executing program 0 (id=2378): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) 38.08285369s ago: executing program 0 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa10c4, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) 37.845051632s ago: executing program 0 (id=2383): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {}, {0x8}}}, 0x24}}, 0x40004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffed5, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x800004}, 0xa4c9, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x200000d, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 22.535466332s ago: executing program 50 (id=2383): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {}, {0x8}}}, 0x24}}, 0x40004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffed5, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x800004}, 0xa4c9, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x200000d, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 9.42675476s ago: executing program 7 (id=2505): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x20000000000006) close_range(r0, 0xffffffffffffffff, 0x0) 9.42625268s ago: executing program 6 (id=2506): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f00000001c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb8x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\x00\x00\x00\x00\x00\x00\x00\a\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`\x1e\x0e\xf6\x80\x86\xd4\x003?Dji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x99\xb1\x03\x8am\xb8\xaa\x1f\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x00\x00\x00\x00\xe4\xc2MR\xaf\a\x14j\x1aX\xd7\x19)mx>\xc2\xe3\xe8\xca\x88\xdb\xbf\x9b%\xf25Ha\xd6\x12\t.dGnV\xd6\x8c89.\xc9\xb1\xc7\xda\xb1\xea7\r\xf2u!\xad\xdbCVn\xd2\f0\xae\x88\x9e4D!\xc1nq\xda@\x16\x00\xb4\x99I\xcf\x8abK\xdc )\x19\xb3\xda\x8c\x15\x1d\xc1\xf7\x98\xdeO@Y8-\xe5\xa3LLl', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 9.420994559s ago: executing program 2 (id=2507): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$caif_stream(0x25, 0x1, 0x5) sendmsg$sock(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 7.658025857s ago: executing program 7 (id=2508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.651428375s ago: executing program 6 (id=2509): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.651221905s ago: executing program 2 (id=2510): syz_80211_inject_frame(0x0, 0x0, 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf252600000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000080026006c0900000a000600505050505050000008004200010000001e0094"], 0x70}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 5.946026937s ago: executing program 7 (id=2511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 5.902843507s ago: executing program 6 (id=2512): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@utf8}, {@umask={'umask', 0x3d, 0x8000}}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@sys_tz}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_remount}, {@utf8}, {@keep_last_dots}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x63}}, {@umask={'umask', 0x3d, 0x357}}]}, 0x1, 0x1531, &(0x7f0000004d00)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) 5.902605947s ago: executing program 2 (id=2513): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb720, 0x800, 0x0, 0x100135}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x2, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x10000, 0x7ffffffffffffd, 0x7fe, 0x6}, 0x0, 0x0) 4.070638268s ago: executing program 7 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0) 4.063297447s ago: executing program 6 (id=2515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca79788"], 0x0}, 0x94) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd5000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000100000000000050003001c00"], 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x4800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000c010) 4.062812696s ago: executing program 2 (id=2516): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 1.952146439s ago: executing program 7 (id=2517): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000280), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="3b84c629048c322397ed7acacf5090c9fce895c250175dfa68c0df43bc10407cc989ec004ac2aa9d27bfd98b431564f6602c7ac435c348fef418b775c3b44b883338e4d745e8eff4aed42806f2915fd9aebb5945e77e630309bf38ce7d", 0x5d}, {&(0x7f0000000480)="866d9c26e336e6156af9b7d82b991d16eb7f70695934a9a823ffb0", 0x1b}], 0x2) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) 1.951783039s ago: executing program 6 (id=2518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 1.951560549s ago: executing program 2 (id=2519): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x58a, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0x2}]) 495.59µs ago: executing program 7 (id=2520): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x200440c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 177.23µs ago: executing program 6 (id=2521): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x8, {0x40000000000003, 0x0, 0x2, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x400000000004, 0x7, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2275, 0x0) 0s ago: executing program 2 (id=2522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xac, 0x2, {{0x2, 0x80000000, 0x994, 0x1, 0x3}, 0x2, 0x0, 0x66a4, 0x6, 0x6, 0x10, 0x1f, 0x1e, 0x6, 0x8, {0x7, 0x6, 0x0, 0xae29, 0x9, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) write$tun(0xffffffffffffffff, &(0x7f0000001900)={@void, @val={0x0, 0x83, 0xd, 0x296, 0xb, 0x9}, @x25={0x1, 0x2, 0x8, "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"}}, 0xbec) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000008000a0042"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) kernel console output (not intermixed with test programs): tsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 490.122298][T10761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.152591][ T5832] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 490.192521][ T5832] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.208169][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.218608][ T5832] usb 1-1: Product: syz [ 490.243787][ T5832] usb 1-1: Manufacturer: syz [ 490.285637][ T5832] cdc_wdm 1-1:1.0: skipping garbage [ 490.291007][ T5832] cdc_wdm 1-1:1.0: skipping garbage [ 490.300856][ T5832] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 490.310445][ T5832] cdc_wdm 1-1:1.0: Unknown control protocol [ 490.324019][T10763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.332564][T10763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.684642][ C0] wdm_int_callback: 3 callbacks suppressed [ 490.684669][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.697200][ C0] wdm_int_callback: 3 callbacks suppressed [ 490.697219][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.709994][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.716656][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.723053][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.729743][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.736450][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.743109][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.749446][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.756092][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.762477][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.769112][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.776212][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.782888][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.789672][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.796326][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.802653][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.809308][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.816058][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.822738][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.829190][T12254] usb 1-1: USB disconnect, device number 14 [ 490.835376][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 490.915423][ T5832] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 491.126213][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.159199][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.186068][ T5832] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 491.225470][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.273633][ T5832] usb 8-1: config 0 descriptor?? [ 491.708438][ T5832] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 491.738358][ T5832] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 491.830768][T13904] loop8: detected capacity change from 0 to 40427 [ 491.906215][ T5832] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 491.956917][T13904] F2FS-fs (loop8): Found nat_bits in checkpoint [ 492.148522][T13904] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 492.285507][ T27] audit: type=1800 audit(1772030916.982:194): pid=13904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1668" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 492.372157][T13904] syz.8.1668: attempt to access beyond end of device [ 492.372157][T13904] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 492.389861][ T27] audit: type=1800 audit(1772030916.992:195): pid=13904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1668" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 492.487215][T13934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1747'. [ 492.515175][T13897] cp2112 0003:10C4:EA90.000F: Multi-message I2C transactions not supported [ 492.534185][ T5832] cp2112 0003:10C4:EA90.000F: error reading lock byte: -71 [ 492.589928][ T5832] usb 8-1: USB disconnect, device number 6 [ 492.619672][T13584] syz-executor: attempt to access beyond end of device [ 492.619672][T13584] loop8: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 492.686737][T13584] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 492.740712][T13938] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 493.306796][T13956] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 493.530274][T13964] loop0: detected capacity change from 0 to 736 [ 494.790563][T13995] loop7: detected capacity change from 0 to 2048 [ 494.910547][T13995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.965552][T13995] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.862240][T13120] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.966478][T11946] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 496.061049][T14027] loop7: detected capacity change from 0 to 256 [ 496.082645][T14027] exfat: Deprecated parameter 'namecase' [ 496.109089][T14027] exfat: Deprecated parameter 'namecase' [ 496.169209][T14027] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 496.195531][T11946] usb 9-1: Using ep0 maxpacket: 16 [ 496.221648][T11946] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.251497][T11946] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.300789][T11946] usb 9-1: Dual-Role OTG device on HNP port [ 496.317854][T11946] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.379754][T11946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.421513][T11946] usb 9-1: Product: syz [ 496.437051][T11946] usb 9-1: Manufacturer: syz [ 496.465627][T11946] usb 9-1: SerialNumber: syz [ 496.781994][T11946] usb 9-1: 0:2 : does not exist [ 496.814887][T11946] usb 9-1: unit 6 not found! [ 496.909435][T11946] usb 9-1: USB disconnect, device number 4 [ 497.042264][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.275027][T14130] input: syz0 as /devices/virtual/input/input13 [ 500.858954][T14145] netlink: 'syz.7.1796': attribute type 1 has an invalid length. [ 500.948975][T14145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.229943][T14151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.275948][T14151] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 501.329683][T14151] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 501.789298][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.802117][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.876765][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1802'. [ 501.900363][T14173] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.909887][T14173] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.918751][T14173] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.927626][T14173] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.955721][T13201] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 501.974881][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1802'. [ 502.181583][T13201] usb 9-1: Using ep0 maxpacket: 32 [ 502.242768][T13201] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 502.292340][T13201] usb 9-1: config 1 interface 0 has no altsetting 0 [ 502.320482][T13201] usb 9-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 502.337619][T13201] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.362059][T13201] usb 9-1: Product: syz [ 502.366489][T13201] usb 9-1: Manufacturer: syz [ 502.371147][T13201] usb 9-1: SerialNumber: syz [ 502.656197][T14142] loop9: detected capacity change from 0 to 40427 [ 502.703869][T14142] F2FS-fs (loop9): invalid crc value [ 502.718297][T14142] F2FS-fs (loop9): Found nat_bits in checkpoint [ 502.787497][T13201] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input14 [ 502.845912][ C1] appletouch 9-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 502.866743][T13201] usb 9-1: USB disconnect, device number 5 [ 502.929478][T13201] appletouch 9-1:1.0: input: appletouch disconnected [ 502.948469][T14142] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 503.091967][ T27] audit: type=1800 audit(1772030927.792:196): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1794" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 503.262119][T12544] syz-executor: attempt to access beyond end of device [ 503.262119][T12544] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 503.295915][T12544] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 503.638745][T14206] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1806'. [ 505.415767][ T5759] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 505.437275][T14246] loop0: detected capacity change from 0 to 16 [ 505.537461][T14246] erofs: (device loop0): mounted with root inode @ nid 36. [ 505.625856][ T5759] usb 9-1: Using ep0 maxpacket: 8 [ 505.644227][ T5759] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 505.653292][ T5759] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.674191][ T5759] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.721039][ T5759] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.750475][ T5759] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.773971][ T5759] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.804413][ T5759] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.050795][ T5759] usb 9-1: usb_control_msg returned -32 [ 506.056817][ T5759] usbtmc 9-1:16.0: can't read capabilities [ 506.426010][T14241] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 506.448468][ T5759] usb 9-1: USB disconnect, device number 6 [ 506.743813][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1823'. [ 506.766570][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1823'. [ 507.335573][ T27] audit: type=1804 audit(1772030932.032:197): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1826" name="/newroot/89/bus/file1" dev="overlay" ino=537 res=1 errno=0 [ 507.449116][T14299] syz_tun: entered allmulticast mode [ 507.517071][T14297] syz_tun: left allmulticast mode [ 508.424927][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'. [ 508.475480][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1835'. [ 509.167607][T14344] bridge0: port 3(syz_tun) entered blocking state [ 509.174309][T14344] bridge0: port 3(syz_tun) entered disabled state [ 509.206279][T14344] syz_tun: entered allmulticast mode [ 509.213613][T14344] syz_tun: entered promiscuous mode [ 509.268926][T14344] bridge0: port 3(syz_tun) entered blocking state [ 509.276934][T14344] bridge0: port 3(syz_tun) entered forwarding state [ 512.398514][T14405] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1855'. [ 512.647383][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1856'. [ 512.884159][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1857'. [ 513.589531][T14443] loop2: detected capacity change from 0 to 7 [ 513.616107][T14443] Dev loop2: unable to read RDB block 7 [ 513.621770][T14443] loop2: unable to read partition table [ 513.660974][T14443] loop2: partition table beyond EOD, truncated [ 513.745505][T14443] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 514.047037][T14453] loop0: detected capacity change from 0 to 4096 [ 514.060195][T14453] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 514.157123][T14453] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 514.169489][T14453] ntfs3: loop0: Failed to load $Extend (-22). [ 514.186698][T14453] ntfs3: loop0: Failed to initialize $Extend. [ 514.198020][T10761] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 514.292632][T14453] ntfs3: loop0: ino=0, attr_set_size [ 514.332356][T14453] ntfs3: loop0: ino=0, attr_set_size [ 514.354585][T14453] ntfs3: loop0: ino=0, attr_set_size [ 514.363584][T14453] ntfs3: loop0: no free space to extend mft [ 514.380293][T14453] ntfs3: loop0: no free space to extend mft [ 514.388616][T14453] ntfs3: loop0: no free space to extend mft [ 514.661816][T14471] syz_tun: entered allmulticast mode [ 514.703833][T14470] syz_tun: left allmulticast mode [ 514.799792][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1873'. [ 515.212739][T14489] block device autoloading is deprecated and will be removed. [ 515.672018][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1881'. [ 516.088568][T14521] loop8: detected capacity change from 0 to 256 [ 516.104735][T14521] exfat: Deprecated parameter 'namecase' [ 516.138972][T14521] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 516.369669][T14521] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0x592ab215) [ 516.384433][T14521] exFAT-fs (loop8): Filesystem has been set read-only [ 516.398646][T14521] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0x592ab215) [ 517.004369][T14459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.365566][ T5832] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 517.565661][ T5832] usb 9-1: Using ep0 maxpacket: 8 [ 517.585141][ T5832] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 517.610972][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.635703][ T5832] usb 9-1: Product: syz [ 517.640028][ T5832] usb 9-1: Manufacturer: syz [ 517.644668][ T5832] usb 9-1: SerialNumber: syz [ 517.691207][ T5832] usb 9-1: config 0 descriptor?? [ 517.749188][ T5832] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 520.721580][ T5832] gspca_vc032x: reg_w err -71 [ 520.727591][ T5832] vc032x: probe of 9-1:0.0 failed with error -71 [ 520.765445][ T5832] usb 9-1: USB disconnect, device number 7 [ 521.175427][T11946] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 521.365599][T11946] usb 1-1: Using ep0 maxpacket: 16 [ 521.406592][T11946] usb 1-1: config 0 has no interfaces? [ 521.420419][T11946] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 521.447930][T11946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.489888][T11946] usb 1-1: Product: syz [ 521.494543][T11946] usb 1-1: Manufacturer: syz [ 521.522094][T11946] usb 1-1: SerialNumber: syz [ 521.544732][T11946] usb 1-1: config 0 descriptor?? [ 521.584855][T14601] loop8: detected capacity change from 0 to 2048 [ 521.670000][T14601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.845818][T14601] EXT4-fs warning (device loop8): ext4_dirblock_csum_set:427: inode #2: comm syz.8.1899: No space for directory leaf checksum. Please run e2fsck -D. [ 521.882033][ T5762] udevd[5762]: incorrect jbd checksum on /dev/loop8 [ 522.064110][T13584] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.084455][T14610] netlink: 'syz.7.1900': attribute type 1 has an invalid length. [ 522.095715][T14610] netlink: 'syz.7.1900': attribute type 4 has an invalid length. [ 522.114966][T14610] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1900'. [ 522.138219][T11946] usb 1-1: USB disconnect, device number 15 [ 522.172150][T14615] netlink: 'syz.7.1900': attribute type 1 has an invalid length. [ 522.195754][T14615] netlink: 'syz.7.1900': attribute type 4 has an invalid length. [ 522.204763][T14615] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1900'. [ 523.242643][T14646] loop7: detected capacity change from 0 to 1024 [ 524.133223][T14665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 525.339833][T14677] loop7: detected capacity change from 0 to 32768 [ 525.400754][T14677] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.622944][T14677] XFS (loop7): Ending clean mount [ 525.631673][T14677] XFS (loop7): Quotacheck needed: Please wait. [ 525.787251][T14677] XFS (loop7): Quotacheck: Done. [ 526.284181][T13120] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 526.567359][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1927'. [ 526.585491][T14727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.726029][T14727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.033179][T14736] loop0: detected capacity change from 0 to 4096 [ 527.041574][T14736] EXT4-fs: Ignoring removed mblk_io_submit option [ 527.083371][T14736] EXT4-fs (loop0): Test dummy encryption mode enabled [ 527.108615][T14736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.337212][T14745] xt_hashlimit: max too large, truncated to 1048576 [ 527.616829][T11132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.764501][T14751] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1932'. [ 529.105834][T14772] Bluetooth: MGMT ver 1.22 [ 529.354089][T14785] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 529.449544][T14785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.643430][T14787] bond2: (slave veth5): Enslaving as an active interface with a down link [ 529.882006][T14803] loop8: detected capacity change from 0 to 16 [ 529.922472][T14803] erofs: (device loop8): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 10000) [ 529.991380][T14790] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 530.062719][T14790] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 530.501542][ T27] audit: type=1326 audit(1772030955.202:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 530.559831][ T27] audit: type=1326 audit(1772030955.202:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 530.626607][ T27] audit: type=1326 audit(1772030955.242:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 530.691588][ T27] audit: type=1326 audit(1772030955.242:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 530.798867][ T27] audit: type=1326 audit(1772030955.242:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 530.828463][T14819] overlayfs: upper fs does not support file handles, falling back to index=off. [ 530.870296][ T27] audit: type=1326 audit(1772030955.242:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 530.939835][ T27] audit: type=1326 audit(1772030955.242:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 531.004569][ T27] audit: type=1326 audit(1772030955.252:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 531.101610][ T27] audit: type=1326 audit(1772030955.252:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 531.184246][ T27] audit: type=1326 audit(1772030955.252:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdd12d9c629 code=0x7ffc0000 [ 531.314169][T14830] loop9: detected capacity change from 0 to 128 [ 531.399560][T14830] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 531.488339][T14830] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 531.695120][T12544] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 531.955575][T11946] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 532.147954][T11946] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.170819][T11946] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 532.196149][T11946] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.205729][T11946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.239153][T14841] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 532.280423][T11946] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 532.622998][T14859] loop0: detected capacity change from 0 to 256 [ 532.670342][T11946] usb 9-1: USB disconnect, device number 8 [ 532.707397][T14859] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 533.572795][T14879] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.1963'. [ 533.610627][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1963'. [ 533.925739][T11946] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 534.125532][T11946] usb 9-1: Using ep0 maxpacket: 32 [ 534.144882][T14885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.152455][T11946] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.164034][T11946] usb 9-1: config 0 has no interfaces? [ 534.183082][T11946] usb 9-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 534.193632][T11946] usb 9-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 534.240880][T11946] usb 9-1: Product: syz [ 534.314794][T11946] usb 9-1: config 0 descriptor?? [ 534.565578][T14888] sctp: [Deprecated]: syz.7.1966 (pid 14888) Use of int in max_burst socket option. [ 534.565578][T14888] Use struct sctp_assoc_value instead [ 534.683350][T11946] usb 9-1: USB disconnect, device number 9 [ 535.438339][T14912] syz.8.1973 (14912) used obsolete PPPIOCDETACH ioctl [ 536.173922][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.194357][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 536.205837][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 536.216630][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.224605][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 536.232147][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.363980][T14944] loop8: detected capacity change from 0 to 512 [ 536.391842][T14944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 536.477424][T14944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.505738][T14944] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.928450][T14936] chnl_net:caif_netlink_parms(): no params data found [ 536.983811][T13584] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.292763][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.335560][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.341749][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 537.341784][ T27] audit: type=1804 audit(1772030962.042:238): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1983" name="/newroot/233/file0/file1" dev="overlay" ino=1356 res=1 errno=0 [ 537.343359][T14936] bridge_slave_0: entered allmulticast mode [ 537.386156][T14936] bridge_slave_0: entered promiscuous mode [ 537.396033][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.424877][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.436182][T14936] bridge_slave_1: entered allmulticast mode [ 537.498137][T14936] bridge_slave_1: entered promiscuous mode [ 537.544986][T14936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.578784][T14936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.756970][T14936] team0: Port device team_slave_0 added [ 537.821722][T14936] team0: Port device team_slave_1 added [ 537.938843][T14936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.957849][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.994845][T14936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.015172][T14994] netlink: 'syz.7.1988': attribute type 1 has an invalid length. [ 538.076506][T14994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.119958][T14997] bond2: (slave veth3): Enslaving as an active interface with a down link [ 538.129773][T14936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.136972][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.194040][T14936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.248054][T14999] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 538.256925][T14999] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 538.335837][ T5782] Bluetooth: hci1: command tx timeout [ 538.522502][T14936] hsr_slave_0: entered promiscuous mode [ 538.552924][T14936] hsr_slave_1: entered promiscuous mode [ 538.571686][T14936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.581447][T14936] Cannot create hsr debugfs directory [ 538.608366][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1991'. [ 538.624414][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1991'. [ 538.825991][ T5832] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 538.846223][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 538.890975][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 539.031036][ T5832] usb 9-1: Using ep0 maxpacket: 8 [ 539.051017][ T5832] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 539.113029][ T5832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 539.145449][ T5832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.164892][ T5832] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.185706][ T5832] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.201715][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.495763][ T5832] usb 9-1: GET_CAPABILITIES returned 0 [ 539.501536][ T5832] usbtmc 9-1:16.0: can't read capabilities [ 539.545562][T11946] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 539.767375][ T5832] usb 9-1: USB disconnect, device number 10 [ 539.791483][T11946] usb 1-1: Using ep0 maxpacket: 32 [ 539.801699][T11946] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 539.824055][T11946] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 539.873190][T11946] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 539.892148][T11946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.922869][T11946] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.974990][T11946] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 540.001821][T11946] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 540.041953][T11946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.080268][T11946] usb 1-1: config 0 descriptor?? [ 540.332265][T11946] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 540.400987][T11946] usb 1-1: USB disconnect, device number 16 [ 540.425587][ T5782] Bluetooth: hci1: command tx timeout [ 540.446369][T11946] usblp0: removed [ 540.585897][T15043] loop8: detected capacity change from 0 to 16 [ 540.621156][T15043] erofs: (device loop8): mounted with root inode @ nid 36. [ 540.881419][T14936] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 540.920711][T14936] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 540.945653][T11946] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 540.968782][T14936] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 541.121657][T14936] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 541.155785][T11946] usb 1-1: Using ep0 maxpacket: 32 [ 541.168925][T11946] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 541.182387][T11946] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 541.218711][T11946] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 541.265551][T11946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 541.309295][T11946] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 541.340807][T11946] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 541.354665][T11946] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 541.367441][T11946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.379677][T11946] usb 1-1: config 0 descriptor?? [ 541.600984][T11946] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 541.633234][ T1079] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.752619][ T1079] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.884258][ T1079] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.909064][T14936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.009285][ T23] usb 1-1: USB disconnect, device number 17 [ 542.021717][ T1079] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.032988][ T23] usblp0: removed [ 542.077090][T14936] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.121867][T10763] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.129153][T10763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.209025][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.216284][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.495532][ T5782] Bluetooth: hci1: command tx timeout [ 542.606933][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.624157][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 542.635479][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.647807][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.658854][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 542.667735][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 543.440690][T14936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.143510][T15110] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2014'. [ 544.410583][T15072] chnl_net:caif_netlink_parms(): no params data found [ 544.584804][ T5782] Bluetooth: hci1: command tx timeout [ 544.647986][T14936] veth0_vlan: entered promiscuous mode [ 544.817793][ T5782] Bluetooth: hci3: command tx timeout [ 544.889348][ T1079] hsr_slave_0: left promiscuous mode [ 544.926859][ T1079] hsr_slave_1: left promiscuous mode [ 544.944195][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.961574][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.973116][ T1079] bridge_slave_1: left allmulticast mode [ 544.986934][ T1079] bridge_slave_1: left promiscuous mode [ 545.001233][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.027400][ T1079] bridge_slave_0: left allmulticast mode [ 545.033132][ T1079] bridge_slave_0: left promiscuous mode [ 545.063990][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.194297][ T1079] veth1_macvtap: left promiscuous mode [ 545.200502][ T1079] veth0_macvtap: left promiscuous mode [ 545.214075][ T1079] veth1_vlan: left promiscuous mode [ 545.223982][ T1079] veth0_vlan: left promiscuous mode [ 546.910604][ T5782] Bluetooth: hci3: command tx timeout [ 547.024956][T15141] overlayfs: failed to clone upperpath [ 547.531363][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 547.759704][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 547.932007][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.176866][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.815634][ T5832] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 548.986000][T15075] Bluetooth: hci3: command tx timeout [ 549.045051][ T5832] usb 8-1: Using ep0 maxpacket: 16 [ 549.068251][ T1079] bond0 (unregistering): Released all slaves [ 549.111028][ T5832] usb 8-1: config 0 has an invalid interface number: 240 but max is 0 [ 549.144284][ T5832] usb 8-1: config 0 has no interface number 0 [ 549.166096][ T5832] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 549.185371][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.194107][ T5832] usb 8-1: Product: syz [ 549.204389][ T5832] usb 8-1: Manufacturer: syz [ 549.212216][ T5832] usb 8-1: SerialNumber: syz [ 549.227280][ T5832] usb 8-1: config 0 descriptor?? [ 549.237528][T14936] veth1_vlan: entered promiscuous mode [ 549.269294][ T5832] gspca_main: spca508-2.14.0 probing 041e:4018 [ 549.327686][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.335011][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.353163][T15072] bridge_slave_0: entered allmulticast mode [ 549.372762][T15072] bridge_slave_0: entered promiscuous mode [ 549.397678][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.416331][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.423896][T15072] bridge_slave_1: entered allmulticast mode [ 549.442089][T15072] bridge_slave_1: entered promiscuous mode [ 549.505520][ T5832] gspca_spca508: reg_read err -32 [ 549.523882][ T5832] gspca_spca508: reg_read err -32 [ 549.544757][ T5832] gspca_spca508: reg_read err -32 [ 549.584552][T15072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.595701][ T5832] gspca_spca508: reg_read err -32 [ 549.620528][ T5832] gspca_spca508: reg_read err -32 [ 549.662694][T15072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.787026][T14936] veth0_macvtap: entered promiscuous mode [ 549.821619][T15072] team0: Port device team_slave_0 added [ 549.838161][T14936] veth1_macvtap: entered promiscuous mode [ 549.859531][ T5832] gspca_spca508: reg write: error -71 [ 549.865065][ T5832] spca508: probe of 8-1:0.240 failed with error -71 [ 549.897400][T15072] team0: Port device team_slave_1 added [ 549.926040][ T5832] usb 8-1: USB disconnect, device number 7 [ 549.937979][T15075] Bluetooth: hci2: command 0x0406 tx timeout [ 550.024858][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.045853][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.056333][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.067807][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.078213][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.089284][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.101434][T14936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.111725][T15072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.125498][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.162669][T15072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.216105][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.230244][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.241794][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.252787][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.263751][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.275989][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.288571][T14936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.301721][T15072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.310210][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.344515][T15072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.372373][T14936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.383693][T14936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.393050][T14936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.402907][T14936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.505613][T15072] hsr_slave_0: entered promiscuous mode [ 550.523052][T15072] hsr_slave_1: entered promiscuous mode [ 550.534780][T15072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.543431][T15072] Cannot create hsr debugfs directory [ 550.627137][ T5759] IPVS: starting estimator thread 0... [ 550.726250][T15168] IPVS: using max 19 ests per chain, 45600 per kthread [ 550.754155][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2035'. [ 550.782331][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2035'. [ 550.792119][T10763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.813558][T10763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.944814][T10763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.960784][T10763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.071683][ T5782] Bluetooth: hci3: command tx timeout [ 552.412162][T15072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.444914][T15072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.467598][T15072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.506190][T15072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 552.619040][T15204] netlink: 296 bytes leftover after parsing attributes in process `syz.5.2048'. [ 552.731282][T15072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.806886][T15072] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.856291][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.863702][T10758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.921574][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.928953][T10758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.608825][T15228] loop7: detected capacity change from 0 to 512 [ 553.708324][T15072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.718746][T15208] loop5: detected capacity change from 0 to 32768 [ 553.762517][T15228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.837836][T15228] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 553.879747][T15208] [ 553.879747][T15208] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 553.879747][T15208] [ 554.057948][T15208] ERROR: (device loop5): diWrite: ixpxd invalid [ 554.057948][T15208] [ 554.070254][T15072] veth0_vlan: entered promiscuous mode [ 554.079865][ T27] audit: type=1800 audit(1772030978.782:239): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2052" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 554.083171][T15208] ERROR: (device loop5): txCommit: [ 554.083171][T15208] [ 554.134721][T15072] veth1_vlan: entered promiscuous mode [ 554.183168][T15238] ERROR: (device loop5): diWrite: ixpxd invalid [ 554.183168][T15238] [ 554.209727][T15238] ERROR: (device loop5): txCommit: [ 554.209727][T15238] [ 554.251865][T13120] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.276381][T15072] veth0_macvtap: entered promiscuous mode [ 554.302923][T15238] ERROR: (device loop5): diWrite: ixpxd invalid [ 554.302923][T15238] [ 554.315546][ T5832] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 554.324063][T15238] ERROR: (device loop5): txCommit: [ 554.324063][T15238] [ 554.356983][T15208] ERROR: (device loop5): diWrite: ixpxd invalid [ 554.356983][T15208] [ 554.384054][T15072] veth1_macvtap: entered promiscuous mode [ 554.426660][T15208] ERROR: (device loop5): txCommit: [ 554.426660][T15208] [ 554.439062][T15243] ERROR: (device loop5): diWrite: ixpxd invalid [ 554.439062][T15243] [ 554.448870][T15243] ERROR: (device loop5): txCommit: [ 554.448870][T15243] [ 554.458065][T15238] ERROR: (device loop5): diWrite: ixpxd invalid [ 554.458065][T15238] [ 554.498358][T15238] ERROR: (device loop5): txCommit: [ 554.498358][T15238] [ 554.515520][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 554.523332][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.544023][ T5832] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 554.548638][T15208] ERROR: (device loop5): diWrite: ixpxd invalid [ 554.548638][T15208] [ 554.564016][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.574976][ T5832] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 554.587221][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.596777][ T5832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 554.607321][T15208] ERROR: (device loop5): txCommit: [ 554.607321][T15208] [ 554.615365][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 554.625110][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 554.625119][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.625141][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 554.668914][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.702623][ T5832] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 554.711239][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.745105][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.750734][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.774848][ T5832] usb 1-1: config 0 descriptor?? [ 554.815577][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.869938][T14936] [ 554.869938][T14936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 554.869938][T14936] [ 554.883560][T15072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.904342][T14936] [ 554.904342][T14936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 554.904342][T14936] [ 554.928396][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.959756][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.010644][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.027483][ T5832] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 555.045704][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.075490][ T5832] usb 1-1: USB disconnect, device number 18 [ 555.092857][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.116749][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.127149][ T5832] usblp0: removed [ 555.143967][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.184265][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.243681][T15072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.279662][T15072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.307175][T15072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.325829][T15072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.345127][T15072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.605538][ T5832] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 555.606074][T10761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.646682][T10761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.696608][T10763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.718820][T10763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.795428][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 555.816529][ T5832] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 555.841679][ T5832] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 555.864286][ T5832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 555.895546][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 555.925602][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 555.967750][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 555.995716][ T5832] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 556.015932][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.038343][ T5832] usb 1-1: config 0 descriptor?? [ 556.265905][ T5832] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 556.678699][ T23] usb 1-1: USB disconnect, device number 19 [ 556.699625][ T23] usblp0: removed [ 557.302013][T15271] loop5: detected capacity change from 0 to 32768 [ 557.319929][T15271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2057 (15271) [ 557.496003][T15271] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.565586][T15271] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 557.574332][T15271] BTRFS info (device loop5): force clearing of disk cache [ 557.596363][T15271] BTRFS info (device loop5): force zlib compression, level 3 [ 557.610975][T15271] BTRFS info (device loop5): enabling auto defrag [ 557.624170][T15271] BTRFS info (device loop5): max_inline at 0 [ 557.641075][T15271] BTRFS info (device loop5): using free space tree [ 557.691028][T15279] loop7: detected capacity change from 0 to 32768 [ 557.773647][T15279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2058 (15279) [ 557.870365][T15271] BTRFS info (device loop5): enabling ssd optimizations [ 557.890549][T15279] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.922650][T15271] BTRFS info (device loop5): auto enabling async discard [ 557.941998][T15279] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 557.957472][T15271] BTRFS info (device loop5): rebuilding free space tree [ 557.974765][T15279] BTRFS info (device loop7): allowing degraded mounts [ 558.017320][T15279] BTRFS info (device loop7): enabling auto defrag [ 558.031008][T15279] BTRFS info (device loop7): using free space tree [ 558.256450][T15279] BTRFS info (device loop7): enabling ssd optimizations [ 558.263598][T15279] BTRFS info (device loop7): auto enabling async discard [ 558.347487][T15336] loop0: detected capacity change from 0 to 8 [ 558.468831][T15336] SQUASHFS error: Failed to read block 0x71: -5 [ 558.525998][T15271] loop5: detected capacity change from 32768 to 0 [ 558.543290][ T27] audit: type=1800 audit(1772030983.232:240): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2062" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 558.573180][T15340] syz.5.2057: attempt to access beyond end of device [ 558.573180][T15340] loop5: rw=524288, sector=10344, nr_sectors = 24 limit=0 [ 558.668640][T15340] syz.5.2057: attempt to access beyond end of device [ 558.668640][T15340] loop5: rw=0, sector=10344, nr_sectors = 8 limit=0 [ 558.730232][T15340] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 0, rd 1, flush 0, corrupt 0, gen 0 [ 558.792216][ T27] audit: type=1800 audit(1772030983.492:241): pid=15340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2057" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 558.996685][T15347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 559.043620][T14936] syz-executor: attempt to access beyond end of device [ 559.043620][T14936] loop5: rw=6145, sector=10472, nr_sectors = 8 limit=0 [ 559.066231][T14936] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 1, rd 1, flush 0, corrupt 0, gen 0 [ 559.125746][T14936] syz-executor: attempt to access beyond end of device [ 559.125746][T14936] loop5: rw=6145, sector=10480, nr_sectors = 8 limit=0 [ 559.171380][T14936] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 2, rd 1, flush 0, corrupt 0, gen 0 [ 559.192645][T14936] syz-executor: attempt to access beyond end of device [ 559.192645][T14936] loop5: rw=6145, sector=10488, nr_sectors = 8 limit=0 [ 559.239390][T14936] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 3, rd 1, flush 0, corrupt 0, gen 0 [ 559.270852][T14936] syz-executor: attempt to access beyond end of device [ 559.270852][T14936] loop5: rw=6145, sector=10496, nr_sectors = 8 limit=0 [ 559.315941][T14936] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 4, rd 1, flush 0, corrupt 0, gen 0 [ 559.376510][T14936] syz-executor: attempt to access beyond end of device [ 559.376510][T14936] loop5: rw=6145, sector=10504, nr_sectors = 8 limit=0 [ 559.442265][T14936] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 5, rd 1, flush 0, corrupt 0, gen 0 [ 559.485596][T14936] syz-executor: attempt to access beyond end of device [ 559.485596][T14936] loop5: rw=6145, sector=10512, nr_sectors = 8 limit=0 [ 559.569635][T13120] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 559.596459][T14936] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 6, rd 1, flush 0, corrupt 0, gen 0 [ 559.626885][T14936] BTRFS: error (device loop5) in btrfs_commit_transaction:2512: errno=-5 IO failure (Error while writing out transaction) [ 559.655787][T14936] BTRFS info (device loop5: state E): forced readonly [ 559.662714][T14936] BTRFS warning (device loop5: state E): Skipping commit of aborted transaction. [ 559.682948][T14936] BTRFS error (device loop5: state EA): Transaction aborted (error -5) [ 559.714058][T14936] BTRFS: error (device loop5: state EA) in cleanup_transaction:2005: errno=-5 IO failure [ 559.787635][T14936] BTRFS info (device loop5: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.477848][T15368] loop2: detected capacity change from 0 to 128 [ 560.678763][T15368] syz.2.2068: attempt to access beyond end of device [ 560.678763][T15368] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 560.842987][T15379] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2066'. [ 561.064323][T15382] loop0: detected capacity change from 0 to 4096 [ 561.086452][T15382] EXT4-fs: Ignoring removed mblk_io_submit option [ 561.136892][T15382] EXT4-fs (loop0): Test dummy encryption mode enabled [ 561.229026][T15382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.402345][T15391] overlayfs: failed to get inode (-116) [ 561.423044][T15391] overlayfs: failed to get inode (-116) [ 561.455749][T15382] overlayfs: failed to clone lowerpath [ 561.611009][T11132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.088696][T15410] loop5: detected capacity change from 0 to 128 [ 562.179331][T15410] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.266631][T15410] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.275259][T15418] loop0: detected capacity change from 0 to 512 [ 562.367379][T15418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.397080][T15410] loop5: detected capacity change from 128 to 0 [ 562.410496][ C0] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 562.423111][T15410] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.2078: No space for directory leaf checksum. Please run e2fsck -D. [ 562.443399][T15418] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 562.467344][T15410] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.2078: Directory block failed checksum [ 562.510874][T15410] syz.5.2078: attempt to access beyond end of device [ 562.510874][T15410] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 562.605556][T15410] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 562.613982][T15410] EXT4-fs (loop5): I/O error while writing superblock [ 562.797082][T14936] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 562.854904][T14936] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory block failed checksum [ 562.889033][T14936] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 562.915515][T14936] EXT4-fs (loop5): I/O error while writing superblock [ 562.967089][T11132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.044031][T14936] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.123410][T14936] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 563.142411][T14936] EXT4-fs (loop5): I/O error while writing superblock [ 563.224551][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.231485][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.276584][T15442] loop2: detected capacity change from 0 to 7 [ 563.294150][T15442] Dev loop2: unable to read RDB block 7 [ 563.302628][T15442] loop2: unable to read partition table [ 563.326226][T15442] loop2: partition table beyond EOD, truncated [ 563.332514][T15442] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 563.466697][ T5137] Dev loop2: unable to read RDB block 7 [ 563.472554][ T5137] loop2: unable to read partition table [ 563.479336][ T5137] loop2: partition table beyond EOD, truncated [ 563.902899][T10761] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.107118][T10761] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.290682][T10761] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.337595][T15464] overlayfs: failed to get inode (-116) [ 564.357684][T15464] overlayfs: failed to look up (file0) for ino (-116) [ 564.550534][T10761] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.785485][T11946] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 565.001462][T11946] usb 8-1: Using ep0 maxpacket: 32 [ 565.035912][T11946] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 565.075101][T11946] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 565.088344][T11946] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 565.130040][T11946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.192372][T15075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.219531][T11946] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.229850][T11946] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 565.243402][T11946] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 565.253407][T11946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.262799][T15075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.273882][T15075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.289632][T15075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.298296][T15075] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 565.309280][T15075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.317670][T11946] usb 8-1: config 0 descriptor?? [ 565.438954][T13201] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 565.520772][T15488] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.531996][T15488] bridge_slave_1: left allmulticast mode [ 565.545703][T15488] bridge_slave_1: left promiscuous mode [ 565.556809][T11946] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 565.573944][T15488] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.599922][T11946] usb 8-1: USB disconnect, device number 8 [ 565.618356][T11946] usblp0: removed [ 565.668314][T13201] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.706443][T13201] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 565.742010][T13201] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 565.762180][T13201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 565.795646][T13201] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 565.811662][T13201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.823907][T13201] usb 3-1: config 0 descriptor?? [ 565.839097][T15484] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 566.084251][T13201] usbhid 3-1:0.0: can't add hid device: -71 [ 566.111887][T13201] usbhid: probe of 3-1:0.0 failed with error -71 [ 566.131481][T13201] usb 3-1: USB disconnect, device number 6 [ 566.215828][T11946] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 566.440764][T11946] usb 8-1: Using ep0 maxpacket: 32 [ 566.458039][T11946] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 566.479354][T11946] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 566.506852][T11946] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 566.536288][T11946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.585877][T11946] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.616772][T11946] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 566.635608][T11946] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 566.644807][T11946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.697623][T11946] usb 8-1: config 0 descriptor?? [ 566.983587][T11946] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 567.360883][T15485] chnl_net:caif_netlink_parms(): no params data found [ 567.455747][ T5782] Bluetooth: hci1: command tx timeout [ 567.509770][ T23] usb 8-1: USB disconnect, device number 9 [ 567.528417][ T23] usblp0: removed [ 567.800832][T10761] hsr_slave_0: left promiscuous mode [ 567.823452][T10761] hsr_slave_1: left promiscuous mode [ 567.854547][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.884307][T10761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.901755][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.926778][T10761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.949413][T10761] bridge_slave_1: left allmulticast mode [ 567.957615][T10761] bridge_slave_1: left promiscuous mode [ 567.979647][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.004186][T10761] bridge_slave_0: left allmulticast mode [ 568.024637][T10761] bridge_slave_0: left promiscuous mode [ 568.032850][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.192810][T10761] veth1_macvtap: left promiscuous mode [ 568.208159][T10761] veth0_macvtap: left promiscuous mode [ 568.222596][T10761] veth1_vlan: left promiscuous mode [ 568.233643][T10761] veth0_vlan: left promiscuous mode [ 569.121873][T15549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.551982][T15075] Bluetooth: hci1: command tx timeout [ 570.056354][T10761] team0 (unregistering): Port device team_slave_1 removed [ 570.130228][T10761] team0 (unregistering): Port device team_slave_0 removed [ 570.199965][T10761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.280377][T10761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.423545][T15075] Bluetooth: hci0: command 0x0406 tx timeout [ 570.914259][T10761] bond0 (unregistering): Released all slaves [ 571.099727][T15544] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 571.110132][T15544] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 571.190028][T15485] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.255179][T15485] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.265806][T15485] bridge_slave_0: entered allmulticast mode [ 571.273372][T15485] bridge_slave_0: entered promiscuous mode [ 571.284207][T15485] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.288565][T15550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.293688][T15485] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.338114][T15485] bridge_slave_1: entered allmulticast mode [ 571.356996][T15485] bridge_slave_1: entered promiscuous mode [ 571.557809][T15485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.616448][ T5782] Bluetooth: hci1: command tx timeout [ 571.629350][T15485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.814544][T15485] team0: Port device team_slave_0 added [ 571.858621][T15485] team0: Port device team_slave_1 added [ 571.979073][T15485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.996418][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.058593][T15485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.073145][T15485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.135185][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.188741][T15485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.332916][T15610] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2641148782/2641148784 [ 572.584136][T15485] hsr_slave_0: entered promiscuous mode [ 572.652382][T15485] hsr_slave_1: entered promiscuous mode [ 572.691621][T15485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.713375][T15485] Cannot create hsr debugfs directory [ 573.135991][T12254] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 573.345593][T12254] usb 3-1: Using ep0 maxpacket: 16 [ 573.369702][T12254] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.401796][T12254] usb 3-1: config 0 interface 0 has no altsetting 0 [ 573.430104][T12254] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 573.452696][T12254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.505565][T12254] usb 3-1: Product: syz [ 573.509829][T12254] usb 3-1: Manufacturer: syz [ 573.517563][T12254] usb 3-1: SerialNumber: syz [ 573.542670][T12254] usb 3-1: config 0 descriptor?? [ 573.695709][ T5782] Bluetooth: hci1: command tx timeout [ 573.801412][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 573.879036][T12254] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 574.002760][T12254] imon:send_packet: packet tx failed (-71) [ 574.034035][T12254] imon 3-1:0.0: panel buttons/knobs setup failed [ 574.285383][T12254] rc_core: IR keymap rc-imon-pad not found [ 574.291395][T12254] Registered IR keymap rc-empty [ 574.324693][T12254] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 574.376618][T12254] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 574.404293][T15485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 574.419135][T12254] imon:send_packet: packet tx failed (-71) [ 574.455079][T12254] imon 3-1:0.0: remote input dev register failed [ 574.463401][T12254] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 574.477465][T15485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.539657][T15485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 574.586869][T15485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 574.673949][T12254] imon 3-1:0.0: unable to initialize intf0, err 0 [ 574.721744][T12254] imon:imon_probe: failed to initialize context! [ 574.733696][T12254] imon 3-1:0.0: unable to register, err -19 [ 574.806014][T12254] usb 3-1: USB disconnect, device number 7 [ 574.988685][T15485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.031456][T15485] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.063589][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.070854][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.103991][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.111241][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.205399][T12254] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 575.395436][T12254] usb 3-1: Using ep0 maxpacket: 16 [ 575.414721][T12254] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.472211][T12254] usb 3-1: config 0 interface 0 has no altsetting 0 [ 575.510522][T12254] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 575.524821][T12254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.563574][T12254] usb 3-1: Product: syz [ 575.577849][T12254] usb 3-1: Manufacturer: syz [ 575.584809][T12254] usb 3-1: SerialNumber: syz [ 575.619309][T12254] usb 3-1: config 0 descriptor?? [ 575.671309][T15694] block device autoloading is deprecated and will be removed. [ 575.893567][T15485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.073890][T12254] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 576.525398][T12254] rc_core: IR keymap rc-imon-pad not found [ 576.547596][T12254] Registered IR keymap rc-empty [ 576.552721][T12254] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 576.602465][T12254] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 576.668270][T12254] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 576.725163][T12254] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 576.779436][T12254] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:8> initialized [ 577.040009][T15485] veth0_vlan: entered promiscuous mode [ 577.123686][T15485] veth1_vlan: entered promiscuous mode [ 577.250652][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 577.258474][ T5832] usb 3-1: USB disconnect, device number 8 [ 577.366336][T15485] veth0_macvtap: entered promiscuous mode [ 577.400098][T15485] veth1_macvtap: entered promiscuous mode [ 577.493362][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.525397][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.565626][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.612240][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.623341][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.635728][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.647162][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.663329][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.719179][T15485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.748620][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.759476][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.779433][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.791266][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.802807][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.829067][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.849021][T15485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.898916][T15485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.913882][T15485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.948825][T15485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.967410][T15485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.976652][T15485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.998850][T15485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.280663][T10763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.310835][T10763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.333381][T15743] syzkaller0: entered allmulticast mode [ 578.356213][T15743] syzkaller0: entered promiscuous mode [ 578.399222][T15743] syzkaller0 (unregistering): left promiscuous mode [ 578.416432][T15743] syzkaller0 (unregistering): left allmulticast mode [ 578.501972][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.528798][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.841603][T15757] loop6: detected capacity change from 0 to 2048 [ 578.881120][T15759] batman_adv: batadv0: Adding interface: dummy0 [ 578.894439][T15759] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.943419][T15757] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 578.968648][T15757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.991315][T15759] batman_adv: batadv0: Interface activated: dummy0 [ 579.976635][T15782] netlink: 'syz.2.2152': attribute type 10 has an invalid length. [ 579.985830][ T5759] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 580.117833][T15782] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 580.225840][ T5759] usb 7-1: config 0 has an invalid interface number: 111 but max is 0 [ 580.243470][ T5759] usb 7-1: config 0 has no interface number 0 [ 580.261983][ T5759] usb 7-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 580.314887][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.354873][ T5759] usb 7-1: config 0 descriptor?? [ 580.401969][ T5759] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 581.998615][T15832] loop2: detected capacity change from 0 to 256 [ 582.029012][ T5759] gspca_ov534_9: reg_r err -71 [ 582.134852][T15832] FAT-fs (loop2): Directory bread(block 64) failed [ 582.150141][T15832] FAT-fs (loop2): Directory bread(block 65) failed [ 582.159019][T15832] FAT-fs (loop2): Directory bread(block 66) failed [ 582.167259][T15832] FAT-fs (loop2): Directory bread(block 67) failed [ 582.182514][T15832] FAT-fs (loop2): Directory bread(block 68) failed [ 582.191902][T15832] FAT-fs (loop2): Directory bread(block 69) failed [ 582.211376][T15812] loop7: detected capacity change from 0 to 32768 [ 582.212589][T15832] FAT-fs (loop2): Directory bread(block 70) failed [ 582.270436][T15832] FAT-fs (loop2): Directory bread(block 71) failed [ 582.305656][T15832] FAT-fs (loop2): Directory bread(block 72) failed [ 582.312979][T15812] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 582.325480][T15832] FAT-fs (loop2): Directory bread(block 73) failed [ 582.385534][ T5759] gspca_ov534_9: Unknown sensor 0000 [ 582.385635][ T5759] ov534_9: probe of 7-1:0.111 failed with error -22 [ 582.407998][ T5759] usb 7-1: USB disconnect, device number 5 [ 582.506182][T15812] XFS (loop7): Ending clean mount [ 582.792014][T15849] loop6: detected capacity change from 0 to 512 [ 582.850970][T15849] EXT4-fs (loop6): Test dummy encryption mode enabled [ 582.874063][T15849] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 582.895661][T15849] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 583.122378][T13120] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 583.867115][T15866] loop6: detected capacity change from 0 to 1024 [ 583.946559][T15866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.445839][T15866] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #2: block 16: comm syz.6.2170: bad entry in directory: inode out of bounds - offset=60, inode=13, rec_len=16, size=1024 fake=0 [ 584.693474][T15485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.055611][ T5782] Bluetooth: hci1: command tx timeout [ 586.020485][T15926] loop0: detected capacity change from 0 to 256 [ 586.055775][ T23] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 586.071108][T15926] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 586.182059][T15926] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 586.263455][ T23] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 586.281158][ T23] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.335880][ T23] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 586.367700][ T23] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 586.384462][ T23] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 586.393203][ T23] usb 8-1: Product: syz [ 586.397818][ T23] usb 8-1: Manufacturer: syz [ 586.438320][T15926] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 586.675758][ T5759] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 586.704965][ T23] usb 8-1: USB disconnect, device number 10 [ 586.877008][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 586.892435][ T5759] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 586.903315][ T5759] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.931111][ T5759] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 586.943255][ T5759] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.958894][ T5759] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.974049][ T5759] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 586.983705][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.248521][ T5759] usb 3-1: usb_control_msg returned -32 [ 587.275197][ T5759] usbtmc 3-1:16.0: can't read capabilities [ 587.631844][ T23] usb 3-1: USB disconnect, device number 9 [ 587.636125][T15935] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 587.748214][T13199] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 587.956661][T13199] usb 1-1: Using ep0 maxpacket: 16 [ 587.983358][T13199] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 588.007701][T13199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.035600][T12254] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 588.044153][T13199] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.071517][T13199] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.085380][T13199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.103889][T13199] usb 1-1: Product: syz [ 588.109834][T13199] usb 1-1: Manufacturer: syz [ 588.134871][T13199] usb 1-1: SerialNumber: syz [ 588.252204][T12254] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 588.287750][T12254] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.313780][T12254] usb 7-1: config 0 has no interfaces? [ 588.323950][T12254] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 588.353742][T12254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.405843][T12254] usb 7-1: config 0 descriptor?? [ 588.627857][T13199] usb 1-1: 0:2 : does not exist [ 589.875116][T13199] usb 1-1: 1:0: cannot get min/max values for control 6 (id 1) [ 589.966086][T13199] usb 1-1: USB disconnect, device number 20 [ 590.150851][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.048184][ T23] usb 7-1: USB disconnect, device number 6 [ 591.267059][T16013] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2201'. [ 592.952541][T16018] loop6: detected capacity change from 0 to 32768 [ 593.044789][T16018] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 593.245419][T16018] XFS (loop6): Ending clean mount [ 593.624353][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2203'. [ 593.951211][T15485] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 595.957215][T16085] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 595.997898][T16085] netlink: 'syz.0.2212': attribute type 4 has an invalid length. [ 596.036912][T16085] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2212'. [ 597.454382][ T42] hsr_slave_0: left promiscuous mode [ 597.507094][ T42] hsr_slave_1: left promiscuous mode [ 597.514818][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.546210][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.574766][ T42] bridge_slave_1: left allmulticast mode [ 597.595068][ T42] bridge_slave_1: left promiscuous mode [ 597.636843][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.757855][ T42] bridge_slave_0: left allmulticast mode [ 597.795103][ T42] bridge_slave_0: left promiscuous mode [ 597.816185][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.440576][T16133] tipc: Failed to remove unknown binding: 66,0,0/0:3236172916/3236172917 [ 600.266771][T13201] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 600.539579][T16167] loop6: detected capacity change from 0 to 512 [ 600.547574][T13201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.580516][T16167] EXT4-fs: Ignoring removed bh option [ 600.588846][T13201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.608131][T16167] EXT4-fs: Ignoring removed mblk_io_submit option [ 600.614937][T16167] EXT4-fs: Ignoring removed bh option [ 600.625107][T13201] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 600.636793][T13201] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 600.644902][T13201] usb 3-1: Manufacturer: syz [ 600.655886][T16167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 600.689435][T13201] usb 3-1: config 0 descriptor?? [ 600.746632][T16167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.825545][T16167] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.127779][T16167] EXT4-fs error (device loop6): ext4_dx_csum_verify:502: inode #2: comm syz.6.2229: dir seems corrupt? Run e2fsck -D. [ 601.147588][T16167] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.2229: Directory index failed checksum [ 601.173238][T13201] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 601.185858][T13201] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 601.205679][T13201] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 601.212566][T13201] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 601.225551][ T42] team0 (unregistering): Port device team_slave_1 removed [ 601.238946][T13201] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 601.259271][T13201] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 601.279052][T13201] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 601.329919][T13201] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 601.349928][T15485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.439889][ T42] team0 (unregistering): Port device team_slave_0 removed [ 601.682502][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.863088][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.379509][T13201] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 602.401088][T13201] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 602.441810][T13201] pyra: probe of 0003:1E7D:2CF6.0010 failed with error -71 [ 602.532871][T13201] usb 3-1: USB disconnect, device number 10 [ 602.742839][T16190] fido_id[16190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 602.891082][T16192] loop7: detected capacity change from 0 to 1024 [ 602.910065][T16192] EXT4-fs: Ignoring removed oldalloc option [ 602.925440][T16192] EXT4-fs: Ignoring removed bh option [ 602.931859][T16192] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 602.994827][T16192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.105552][ T27] audit: type=1804 audit(1772031027.782:242): pid=16192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2235" name="/newroot/168/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 603.641193][ T42] bond0 (unregistering): Released all slaves [ 603.794610][T13120] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.188292][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 604.845472][ T23] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 604.946996][T16244] netlink: 'syz.7.2245': attribute type 1 has an invalid length. [ 605.046310][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 605.096271][T16244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.104685][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 605.114304][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.128909][ T23] usb 7-1: Product: syz [ 605.133293][ T23] usb 7-1: Manufacturer: syz [ 605.143077][ T23] usb 7-1: SerialNumber: syz [ 605.159938][ T23] usb 7-1: config 0 descriptor?? [ 605.263659][T16246] bond3: (slave veth7): Enslaving as an active interface with a down link [ 605.402388][ T23] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 605.417039][T16248] bond3: (slave veth0_to_bond): making interface the new active one [ 605.447640][T16248] veth0_to_bond: entered promiscuous mode [ 605.454007][T16248] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 605.493486][ T42] IPVS: stop unused estimator thread 0... [ 605.744798][T16237] loop0: detected capacity change from 0 to 32768 [ 605.814766][T16237] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 605.909415][T16237] XFS (loop0): Ending clean mount [ 606.146755][ T27] audit: type=1326 audit(1772031030.852:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d19c629 code=0x7ffc0000 [ 606.185534][ T27] audit: type=1326 audit(1772031030.872:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d19c629 code=0x7ffc0000 [ 606.218736][ T27] audit: type=1326 audit(1772031030.872:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d19c629 code=0x7ffc0000 [ 606.271946][ T27] audit: type=1326 audit(1772031030.872:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d19c629 code=0x7ffc0000 [ 606.345696][ T27] audit: type=1326 audit(1772031030.882:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc89d19c629 code=0x7ffc0000 [ 606.395656][ T27] audit: type=1326 audit(1772031030.882:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d19c629 code=0x7ffc0000 [ 606.437146][ T27] audit: type=1326 audit(1772031030.952:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89d19c629 code=0x7ffc0000 [ 606.472645][T16272] loop7: detected capacity change from 0 to 2048 [ 606.479377][ T27] audit: type=1326 audit(1772031030.952:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc89d19c392 code=0x7ffc0000 [ 606.545460][ T27] audit: type=1326 audit(1772031030.952:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.7.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc89d19c427 code=0x7ffc0000 [ 606.554223][T11132] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 606.836190][ T23] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 606.874267][ T23] usb 7-1: USB disconnect, device number 7 [ 609.750569][T16308] loop2: detected capacity change from 0 to 40427 [ 609.861156][T16308] F2FS-fs (loop2): invalid crc value [ 609.890141][T16308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 610.173397][T16308] F2FS-fs (loop2): Start checkpoint disabled! [ 610.235059][T16308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 610.984064][T10767] bio_check_eod: 2 callbacks suppressed [ 610.993079][T10767] kworker/u4:16: attempt to access beyond end of device [ 610.993079][T10767] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 611.056981][T10767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 611.644965][ T5782] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 611.765744][T13201] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 611.975401][T13201] usb 1-1: Using ep0 maxpacket: 16 [ 611.990129][T13201] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.003396][T13201] usb 1-1: config 0 has no interface number 0 [ 612.011213][T13201] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.033666][T13201] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.054162][T13201] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 612.065999][T13201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.085910][T13201] usb 1-1: config 0 descriptor?? [ 612.165623][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 612.238414][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2266'. [ 612.385925][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 612.411104][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 612.434168][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 612.445617][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.453680][ T23] usb 3-1: Product: syz [ 612.473684][ T23] usb 3-1: Manufacturer: syz [ 612.483805][ T23] usb 3-1: SerialNumber: syz [ 612.504378][ T23] usb 3-1: config 0 descriptor?? [ 612.529156][ T23] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 612.548291][ T23] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 612.568481][T16386] syz_tun: entered allmulticast mode [ 612.596531][T16382] syz_tun: left allmulticast mode [ 612.750154][T13201] uclogic 0003:28BD:0071.0011: failed retrieving string descriptor #100: -71 [ 612.775620][T13201] uclogic 0003:28BD:0071.0011: failed retrieving pen parameters: -71 [ 612.804312][T13201] uclogic 0003:28BD:0071.0011: pen probing failed: -71 [ 612.821826][T13201] uclogic 0003:28BD:0071.0011: failed probing parameters: -71 [ 612.855459][T13201] uclogic: probe of 0003:28BD:0071.0011 failed with error -71 [ 612.893928][T13201] usb 1-1: USB disconnect, device number 21 [ 613.148607][ T23] em28xx 3-1:0.0: chip ID is em2874 [ 613.685584][ T5832] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 613.758632][T16412] loop7: detected capacity change from 0 to 4096 [ 613.876762][T16412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.906705][ T5832] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 613.931047][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 614.025605][ T5832] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 614.049346][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 614.084882][ T5832] usb 1-1: Product: syz [ 614.099714][ T5832] usb 1-1: Manufacturer: syz [ 614.118312][ T5832] usb 1-1: SerialNumber: syz [ 614.138611][ T5832] usb 1-1: config 0 descriptor?? [ 614.199468][ T5832] usb 1-1: selecting invalid altsetting 0 [ 614.279036][ T23] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 614.319358][ T23] em28xx 3-1:0.0: board has no eeprom [ 614.470433][T13199] usb 1-1: USB disconnect, device number 22 [ 614.525839][ T23] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 614.546633][ T23] em28xx 3-1:0.0: dvb set to bulk mode. [ 614.552856][T11946] em28xx 3-1:0.0: Binding DVB extension [ 614.655523][ T23] usb 3-1: USB disconnect, device number 11 [ 614.698540][ T23] em28xx 3-1:0.0: Disconnecting em28xx [ 614.849359][T11946] em28xx 3-1:0.0: Registering input extension [ 614.977394][T16436] loop2: detected capacity change from 0 to 512 [ 615.005155][T16436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 615.061736][T11946] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 615.089175][T16436] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 615.103937][T11946] Registered IR keymap rc-empty [ 615.150457][T11946] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 615.175872][T13120] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.199573][T11946] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 615.283246][T11946] em28xx 3-1:0.0: Input extension successfully initialized [ 615.313808][ T23] em28xx 3-1:0.0: Closing input extension [ 615.684988][ T23] em28xx 3-1:0.0: Freeing device [ 615.992120][T16430] loop6: detected capacity change from 0 to 32768 [ 616.088377][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 616.117419][T16430] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 616.294016][T16430] XFS (loop6): Ending clean mount [ 616.330117][ T23] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 616.355495][ T23] usb 3-1: config 0 has no interface number 0 [ 616.381957][ T23] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64 [ 616.399138][ T23] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 616.408487][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.440071][ T23] usb 3-1: config 0 descriptor?? [ 616.518767][ T23] rndis_wlan 3-1:0.219: invalid descriptor buffer length [ 616.576982][ T23] usb 3-1: bad CDC descriptors [ 616.609086][ T23] rndis_host 3-1:0.219: invalid descriptor buffer length [ 616.712950][ T23] usb 3-1: bad CDC descriptors [ 616.776113][ T23] cdc_acm 3-1:0.219: invalid descriptor buffer length [ 616.795598][T13199] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 616.865140][ T23] usb 3-1: USB disconnect, device number 12 [ 616.922586][T15485] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 617.060357][T13199] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 617.075808][T10767] veth0_to_bond: left promiscuous mode [ 617.095751][T13199] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.137290][T13199] usb 8-1: config 0 has no interfaces? [ 617.142871][T13199] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 617.161800][T13199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.184168][T13199] usb 8-1: config 0 descriptor?? [ 618.326211][ T3065] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 618.528669][ T3065] usb 3-1: Using ep0 maxpacket: 32 [ 618.559786][ T3065] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 618.581780][ T3065] usb 3-1: config 0 has no interface number 0 [ 618.609104][ T3065] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 618.644922][ T3065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.673738][ T3065] usb 3-1: Product: syz [ 618.687183][ T3065] usb 3-1: Manufacturer: syz [ 618.705653][ T3065] usb 3-1: SerialNumber: syz [ 618.726558][ T3065] usb 3-1: config 0 descriptor?? [ 618.790395][ T3065] asix: probe of 3-1:0.188 failed with error -22 [ 618.943235][ T3065] usb 3-1: USB disconnect, device number 13 [ 620.217239][T13201] usb 8-1: USB disconnect, device number 11 [ 623.046202][ T7218] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 623.370568][ T7218] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 623.394515][ T7218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.461260][ T7218] usb 3-1: config 0 has no interfaces? [ 623.543708][ T7218] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 623.589720][ T7218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.640905][ T7218] usb 3-1: config 0 descriptor?? [ 624.663036][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.669515][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.903269][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 624.903284][ T27] audit: type=1326 audit(1772031049.602:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16610 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12d9c629 code=0x7fc00000 [ 625.484654][ T27] audit: type=1326 audit(1772031050.182:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16610 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd12d3da19 code=0x7fc00000 [ 626.391679][ T5759] usb 3-1: USB disconnect, device number 14 [ 627.763663][T16692] tipc: Started in network mode [ 627.773281][T16692] tipc: Node identity b659645cab05, cluster identity 4711 [ 627.794097][T16692] tipc: Enabled bearer , priority 0 [ 627.815678][T16683] tipc: Resetting bearer [ 627.900852][T16683] tipc: Disabling bearer [ 627.977598][T12944] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 628.227219][T12944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.255432][T12944] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 628.294137][T12944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.326810][T12944] usb 1-1: config 0 descriptor?? [ 628.550087][T12944] usbhid 1-1:0.0: can't add hid device: -71 [ 628.567758][T12944] usbhid: probe of 1-1:0.0 failed with error -71 [ 628.590586][T12944] usb 1-1: USB disconnect, device number 23 [ 629.158500][T12944] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 629.379853][T12944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 629.402724][T12944] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 629.441276][T12944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.474825][T12944] usb 1-1: config 0 descriptor?? [ 629.497719][T12944] hub 1-1:0.0: USB hub found [ 629.705523][T12944] hub 1-1:0.0: 1 port detected [ 630.131958][T16768] syz.6.2349 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 630.727987][T13201] usb 1-1: USB disconnect, device number 24 [ 630.734146][T12944] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 630.756364][T12944] hub 1-1:0.0: get_hub_status failed [ 632.102740][T16842] loop2: detected capacity change from 0 to 512 [ 632.193277][T16842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.214459][T16842] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.337572][T16842] Quota error (device loop2): write_blk: dquota write failed [ 632.405826][T16842] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 632.418493][ T5762] udevd[5762]: incorrect jbd checksum on /dev/loop2 [ 632.436564][T16842] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.2368: Failed to acquire dquot type 1 [ 632.491985][T16842] EXT4-fs (loop2): Remounting filesystem read-only [ 632.540579][T16858] loop0: detected capacity change from 0 to 512 [ 632.653440][T16858] EXT4-fs (loop0): orphan cleanup on readonly fs [ 632.669786][T15072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.691762][T16858] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.2372: bad orphan inode 13 [ 632.710439][T16858] ext4_test_bit(bit=12, block=18) = 1 [ 632.715981][T16858] is_bad_inode(inode)=0 [ 632.720187][T16858] NEXT_ORPHAN(inode)=2130706432 [ 632.725185][T16858] max_ino=32 [ 632.728825][T16858] i_nlink=1 [ 632.733508][T16858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 632.797803][T11132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.214727][T16882] loop0: detected capacity change from 0 to 256 [ 634.958460][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 635.246701][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 635.374067][T16945] tipc: Started in network mode [ 635.398266][T16945] tipc: Node identity 84e, cluster identity 4711 [ 635.421004][T16945] tipc: Node number set to 2126 [ 635.812928][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2403'. [ 636.476816][T16991] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 637.245889][T17005] loop2: detected capacity change from 0 to 8192 [ 637.335808][T17005] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 637.365789][T17005] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 637.396042][T17005] REISERFS (device loop2): using ordered data mode [ 637.402622][T17005] reiserfs: using flush barriers [ 637.478622][T17005] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 637.547079][T17005] REISERFS (device loop2): checking transaction log (loop2) [ 637.617636][T17005] REISERFS (device loop2): Using r5 hash to sort names [ 637.697578][T17005] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 638.660242][T17034] xt_time: unknown flags 0xc [ 641.614070][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 641.631141][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 641.665540][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 641.676330][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 641.694640][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 641.706040][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 641.718873][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 641.748915][T17049] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 641.758538][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 641.766116][T17049] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2033: comm syz.2.2426: mark_inode_dirty error [ 642.854674][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 643.906674][T17025] netlink: 'syz.6.2418': attribute type 4 has an invalid length. [ 643.986620][T17026] netlink: 'syz.6.2418': attribute type 4 has an invalid length. [ 644.288846][T17077] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 644.365880][T17077] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 644.845146][T17108] overlayfs: failed to clone upperpath [ 645.065541][T11946] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 645.134388][T17127] overlayfs: failed to clone upperpath [ 645.268673][T11946] usb 3-1: Using ep0 maxpacket: 32 [ 645.281441][T11946] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 645.293265][T11946] usb 3-1: config 0 has no interface number 0 [ 645.313778][T11946] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.339698][T11946] usb 3-1: config 0 interface 85 has no altsetting 0 [ 645.360968][T11946] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 645.375949][T11946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.432493][T11946] usb 3-1: Product: syz [ 645.437108][T11946] usb 3-1: Manufacturer: syz [ 645.441779][T11946] usb 3-1: SerialNumber: syz [ 645.456921][T11946] usb 3-1: config 0 descriptor?? [ 645.719982][ T27] audit: type=1326 audit(1772031070.422:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.6.2449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cabd9c629 code=0x0 [ 645.973274][T17157] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 646.096925][T11946] appletouch 3-1:0.85: Geyser mode initialized. [ 646.121716][T11946] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input20 [ 646.307577][T13199] usb 3-1: USB disconnect, device number 15 [ 646.332290][T13199] appletouch 3-1:0.85: input: appletouch disconnected [ 646.630246][T17182] EXT4-fs error: 120 callbacks suppressed [ 646.630266][T17182] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 646.648683][T17182] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2031: comm syz.6.2452: mark_inode_dirty error [ 646.667671][T17182] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 646.679533][T17182] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2031: comm syz.6.2452: mark_inode_dirty error [ 646.774568][T17187] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 646.785041][T17187] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2031: comm syz.6.2453: mark_inode_dirty error [ 646.804087][T17187] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 646.831390][T17187] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2031: comm syz.6.2453: mark_inode_dirty error [ 646.916472][T17192] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 646.940143][T17192] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2033: comm syz.2.2454: mark_inode_dirty error [ 647.128106][ T27] audit: type=1326 audit(1772031071.832:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.190739][ T27] audit: type=1326 audit(1772031071.852:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.256824][ T27] audit: type=1326 audit(1772031071.852:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.305386][ T27] audit: type=1326 audit(1772031071.852:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.366250][ T27] audit: type=1326 audit(1772031071.852:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.449015][ T27] audit: type=1326 audit(1772031071.852:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.515325][ T27] audit: type=1326 audit(1772031071.862:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.544273][T17211] loop7: detected capacity change from 0 to 256 [ 647.566414][ T27] audit: type=1326 audit(1772031071.862:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 647.606098][T17211] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 647.647640][ T27] audit: type=1326 audit(1772031071.862:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17197 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f7cabd9c629 code=0x7ffc0000 [ 648.295123][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 648.307669][ T5782] CPU: 0 PID: 5782 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 648.315305][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.325421][ T5782] Workqueue: hci3 hci_rx_work [ 648.330191][ T5782] Call Trace: [ 648.333522][ T5782] [ 648.336494][ T5782] dump_stack_lvl+0x18c/0x250 [ 648.341275][ T5782] ? show_regs_print_info+0x20/0x20 [ 648.346540][ T5782] ? load_image+0x400/0x400 [ 648.351157][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 648.356332][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 648.361071][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 648.366339][ T5782] kobject_add_internal+0x61c/0xcc0 [ 648.371692][ T5782] kobject_add+0x164/0x240 [ 648.376174][ T5782] ? __rwlock_init+0x150/0x150 [ 648.381009][ T5782] ? kobject_init+0x1e0/0x1e0 [ 648.385729][ T5782] ? _raw_spin_unlock+0x28/0x40 [ 648.390731][ T5782] ? get_device_parent+0x366/0x390 [ 648.395913][ T5782] device_add+0x408/0xc20 [ 648.400311][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 648.405306][ T5782] le_conn_complete_evt+0xf5d/0x1540 [ 648.410669][ T5782] ? hci_event_packet+0x4cb/0x1270 [ 648.415848][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 648.422332][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 648.428120][ T5782] ? skb_pull_data+0xfb/0x200 [ 648.432856][ T5782] hci_le_conn_complete_evt+0x187/0x440 [ 648.438465][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 648.444588][ T5782] hci_event_packet+0x7ba/0x1270 [ 648.450069][ T5782] ? bis_list+0x290/0x290 [ 648.454468][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 648.459722][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 648.464992][ T5782] hci_rx_work+0x43a/0xd60 [ 648.469483][ T5782] ? process_scheduled_works+0x96f/0x15d0 [ 648.475276][ T5782] process_scheduled_works+0xa5d/0x15d0 [ 648.480915][ T5782] ? assign_work+0x430/0x430 [ 648.485571][ T5782] ? assign_work+0x3d0/0x430 [ 648.490230][ T5782] worker_thread+0xa55/0xfc0 [ 648.494894][ T5782] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 648.500831][ T5782] ? _raw_spin_unlock+0x40/0x40 [ 648.505718][ T5782] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 648.511664][ T5782] kthread+0x2fa/0x390 [ 648.515790][ T5782] ? pr_cont_work+0x560/0x560 [ 648.520502][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 648.525116][ T5782] ret_from_fork+0x48/0x80 [ 648.529567][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 648.534186][ T5782] ret_from_fork_asm+0x11/0x20 [ 648.538995][ T5782] [ 648.549805][ T5782] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 648.563968][ T5782] Bluetooth: hci3: failed to register connection device [ 648.588901][T17242] loop7: detected capacity change from 0 to 128 [ 648.646946][T17242] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 648.696206][T17240] loop2: detected capacity change from 0 to 1024 [ 648.735948][T17242] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 648.759212][T17240] hfsplus: invalid btree extent records (0 size) [ 648.774187][T17240] hfsplus: failed to load attributes file [ 649.038705][T13120] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 650.669844][T17314] overlayfs: failed to clone upperpath [ 650.709341][T17314] overlay: ./cgroup is not a directory [ 652.037495][ T5432] EXT4-fs error: 131 callbacks suppressed [ 652.037514][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 652.112082][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 652.121573][T17333] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 652.137534][T17333] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2031: comm syz.6.2480: mark_inode_dirty error [ 652.151105][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 652.177578][T17379] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #1265: block 23725: comm syz-executor: lblock 0 mapped to illegal pblock 23725 (length 1) [ 652.269096][T17382] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 652.272444][T17385] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 652.297574][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 652.312732][T17385] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2033: comm syz.2.2483: mark_inode_dirty error [ 654.975833][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 655.307440][T17548] kvm: pic: single mode not supported [ 655.307767][T17548] kvm: pic: level sensitive irq not supported [ 655.318132][T17548] kvm: pic: level sensitive irq not supported [ 656.686041][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 656.890233][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.901853][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.914455][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 656.924015][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.937709][ T8] usb 3-1: config 0 descriptor?? [ 657.148314][T17562] EXT4-fs error: 69 callbacks suppressed [ 657.148333][T17562] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 657.164126][T17562] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2033: comm syz.2.2496: mark_inode_dirty error [ 657.384708][ T8] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 657.394295][ T8] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 657.430474][T17571] udevd[17571]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 657.584023][ T8] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 657.634636][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 657.645020][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 657.662860][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 657.672445][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 657.693917][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 657.703792][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 657.712282][T17572] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #1265: block 23725: comm syz-executor: lblock 0 mapped to illegal pblock 23725 (length 1) [ 657.731560][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 658.192819][T17565] cp2112 0003:10C4:EA90.0012: Multi-message I2C transactions not supported [ 658.204003][ T8] cp2112 0003:10C4:EA90.0012: error reading lock byte: -71 [ 658.225514][ T8] usb 3-1: USB disconnect, device number 16 [ 660.652770][T17642] ptrace attach of "./syz-executor exec"[15485] was attempted by " ./file1 xk\x1bW d^X͞\x0c\x0by&^Y1e+XriJB[zk/9^$Cqe[rĖӼ{y7/k<'q,\x22^O\x22F'_Me#k%gKeiԑz+'2-z~pyz\x5caxzrjԙ9P\x0d7g~z7zEq92}ҟmwЕ/P=Сcr,Fof RDlv\x0d XKj @4>\x07o,Dn7\x22Z:[f7T:r7ve$<\x22%:$@+׮Gą랅Ns͙+=e6?b3 nnfv2017}=OV`6s}x_n]ocڸlI?qz8L4>vg?]\x1b膴G [ 663.675014][ T5757] EXT4-fs error: 66 callbacks suppressed [ 663.675033][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 663.691650][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 663.704963][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 663.715001][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 663.728807][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 663.742329][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 663.759729][T17660] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #1265: block 23725: comm syz-executor: lblock 0 mapped to illegal pblock 23725 (length 1) [ 663.768110][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 663.789914][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2028: comm syz-executor: mark_inode_dirty error [ 663.801981][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 663.895186][T17667] overlayfs: failed to clone upperpath [ 663.918497][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2510'. [ 663.951135][T17666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.602174][T17707] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2511'. [ 667.475214][T17730] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2514'. [ 667.503131][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2515'. [ 667.519121][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2515'. [ 667.695520][T15075] Bluetooth: hci3: command 0x0406 tx timeout [ 667.735469][ T8733] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 667.915451][ T8733] usb 3-1: Using ep0 maxpacket: 16 [ 667.923577][ T8733] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 667.932643][ T8733] usb 3-1: config 0 has no interface number 0 [ 667.942555][ T8733] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 667.951728][ T8733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.959881][ T8733] usb 3-1: Product: syz [ 667.964138][ T8733] usb 3-1: Manufacturer: syz [ 667.968978][ T8733] usb 3-1: SerialNumber: syz [ 667.978783][ T8733] usb 3-1: config 0 descriptor?? [ 667.986532][ T8733] hub 3-1:0.132: bad descriptor, ignoring hub [ 667.992713][ T8733] hub: probe of 3-1:0.132 failed with error -5 [ 668.002310][ T8733] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input21 [ 669.340775][ T5757] EXT4-fs error: 41 callbacks suppressed [ 669.340796][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 669.364830][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 669.381279][T17733] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #1265: block 23725: comm syz-executor: lblock 0 mapped to illegal pblock 23725 (length 1) [ 669.407244][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 669.417283][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 669.430853][ T5757] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 669.441663][ T5757] EXT4-fs error (device sda1): ext4_dirty_inode:6124: inode #2021: comm syz-executor: mark_inode_dirty error [ 669.497577][T17736] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 669.497837][T17735] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 669.510134][T17734] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 669.537801][T17737] loop2: detected capacity change from 0 to 1024 [ 669.609730][T17737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.794875][T15072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.510415][T17747] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2522'. [ 671.543839][T17747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2522'. SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: failed to mkdtemp (errno 117: Structure needs cleaning) SYZFAIL: repeatedly failed to execute the program proc=4 req=2466 state=1 status=67 (errno 11: Resource temporarily unavailable) [ 671.564675][T17747] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.596778][T17747] bridge_slave_1: left allmulticast mode [ 671.602495][T17747] bridge_slave_1: left promiscuous mode [ 671.608789][T17747] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.624768][T17747] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 671.744897][ T5757] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 671.842230][ T5757] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 672.073888][T13120] bridge0: port 3(syz_tun) entered disabled state [ 672.266827][T13120] syz_tun (unregistering): left allmulticast mode [ 672.273359][T13120] syz_tun (unregistering): left promiscuous mode [ 672.319514][T13120] bridge0: port 3(syz_tun) entered disabled state [ 672.600390][T15456] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 672.619287][ T3065] usb 3-1: USB disconnect, device number 17 [ 672.648037][T15068] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 672.723122][T15456] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 672.763582][T10761] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.777636][T13097] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 672.789390][T15068] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 672.864986][T13097] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 672.909692][T10761] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.050803][T10761] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.082210][T15068] EXT4-fs warning (device sda1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 673.129394][T10761] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.242983][T10761] hsr_slave_0: left promiscuous mode [ 674.250996][T10761] hsr_slave_1: left promiscuous mode [ 674.257872][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.266292][T10761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.275869][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.283362][T10761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.291780][T10761] bridge_slave_1: left allmulticast mode [ 674.298055][T10761] bridge_slave_1: left promiscuous mode [ 674.303897][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.316501][T10761] bridge_slave_0: left allmulticast mode [ 674.322217][T10761] bridge_slave_0: left promiscuous mode [ 674.329653][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.380295][T10761] veth1_macvtap: left promiscuous mode [ 674.385994][T10761] veth0_macvtap: left promiscuous mode [ 674.391620][T10761] veth1_vlan: left promiscuous mode [ 674.397647][T10761] veth0_vlan: left promiscuous mode [ 675.359382][ T5432] EXT4-fs error: 71 callbacks suppressed [ 675.359402][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 675.450312][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 675.466918][T10761] team0 (unregistering): Port device team_slave_1 removed [ 675.554755][T10761] team0 (unregistering): Port device team_slave_0 removed [ 675.629568][T10761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.639747][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 675.724315][T10761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.309192][T10761] bond0 (unregistering): Released all slaves [ 676.841455][T10761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.934973][T10761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.027155][T10761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.100240][T10761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.269454][T10761] tipc: Left network mode [ 678.060804][T10761] bond0: (slave wlan1): Releasing backup interface [ 678.208344][T10761] hsr_slave_0: left promiscuous mode [ 678.214428][T10761] hsr_slave_1: left promiscuous mode [ 678.220668][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.231060][T10761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.240348][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.249376][T10761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.264047][T10761] bridge_slave_0: left allmulticast mode [ 678.270233][T10761] bridge_slave_0: left promiscuous mode [ 678.276616][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.312210][T10761] veth1_macvtap: left promiscuous mode [ 678.318196][T10761] veth0_macvtap: left promiscuous mode [ 678.324009][T10761] veth1_vlan: left promiscuous mode [ 678.329564][T10761] veth0_vlan: left promiscuous mode [ 678.447856][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 678.570382][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 678.603712][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 679.449318][T10761] team0 (unregistering): Port device team_slave_1 removed [ 679.534946][T10761] team0 (unregistering): Port device team_slave_0 removed [ 679.614001][T10761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.702245][T10761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.897862][ T5432] EXT4-fs error (device sda1): ext4_map_blocks:608: inode #2004: block 33717: comm dhcpcd: lblock 0 mapped to illegal pblock 33717 (length 1) [ 680.308331][T10761] bond0 (unregistering): Released all slaves