last executing test programs: 3m43.454435734s ago: executing program 1 (id=627): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffdfff, 0xffffffff, 0x0, 0x4000001, 0xffffff7f, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x402, 0x0, 0xfffffffe, 0xffffffff, 0xffffffff, 0x4, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x5, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x3, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0xc0844123, &(0x7f0000000580)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) io_setup(0x30, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x282, 0x0) 3m42.842382784s ago: executing program 1 (id=630): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x7cb7}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7) pipe2$9p(0x0, 0x80000) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000a40)={0x6, 0x2, {0x8000000000000001, @struct={0x8, 0x4}, 0x0, 0xbe, 0xc, 0x331, 0xe, 0x7f, 0x7b, @usage=0x9, 0x8000, 0x8, [0x6, 0x8, 0x7b, 0x30000000000, 0x2, 0x343]}, {0xe, @usage=0x8, 0x0, 0xe2, 0x2, 0x34, 0x55, 0x7f, 0x20, @struct={0x4, 0xc46}, 0x3, 0x6, [0x0, 0x9, 0x9, 0x4, 0x5, 0x4]}, {0x2010, @usage=0xffffffff80000001, 0x0, 0x8000000000000000, 0x200, 0x6, 0xffff, 0x80, 0x2, @usage=0xffffffff, 0x6, 0x8, [0x2, 0x9, 0xf45f, 0x5, 0x7, 0x4]}, {0x7f, 0x1, 0x101}}) 3m42.374011995s ago: executing program 1 (id=633): getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x4, 0x1f, 0x2, 0x23, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x40, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xffffff7a, 0x10000, 0x478, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xb}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) ptrace$pokeuser(0x6, r3, 0xffffffff, 0x200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) 3m41.446192117s ago: executing program 1 (id=637): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc400, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@errors_continue}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='mnt/ttyUSB0\x00', 0x4000, 0x0) 3m38.381480734s ago: executing program 1 (id=651): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r3, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) socket$kcm(0x11, 0x200000000000002, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000380)={0x2, 0x0, [{0x80000006, 0x3, 0x3, 0x44, 0x9, 0x3ff, 0x3}, {0xb, 0x9, 0x2, 0xfd3c, 0x7, 0x3, 0x7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m37.817368721s ago: executing program 2 (id=652): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 3m36.912114756s ago: executing program 2 (id=657): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x80000) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x6, 0x2, {0x8000000000000001, @struct={0x8, 0x4}, 0x0, 0xbe, 0xc, 0x331, 0xe, 0x7f, 0x7b, @usage=0x9, 0x8000, 0x8, [0x6, 0x8, 0x7b, 0x30000000000, 0x2, 0x343]}, {0xe, @usage=0x8, 0x0, 0xe2, 0x2, 0x34, 0x55, 0x7f, 0x20, @struct={0x4, 0xc46}, 0x3, 0x6, [0x0, 0x9, 0x9, 0x4, 0x5, 0x4]}, {0x2010, @usage=0xffffffff80000001, 0x0, 0x8000000000000000, 0x200, 0x6, 0xffff, 0x80, 0x2, @usage=0xffffffff, 0x6, 0x8, [0x2, 0x9, 0xf45f, 0x5, 0x7, 0x4]}, {0x7f, 0x1, 0x101}}) 3m36.01487828s ago: executing program 2 (id=659): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) setreuid(0xee01, 0x0) r3 = getuid() setresuid(r3, 0x0, r3) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f00000001c0)=@sha1={0x1, "343be0066659cc3cbb166b95443c1a77354dce85"}, 0x15, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 3m33.996225035s ago: executing program 2 (id=663): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc400, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@errors_continue}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='mnt/ttyUSB0\x00', 0x4000, 0x0) 3m33.109185045s ago: executing program 1 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/215, 0xd7}], 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/87, 0x57}, {0x0}, {0x0}], 0x3, 0x0) 3m32.189195965s ago: executing program 32 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/215, 0xd7}], 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/87, 0x57}, {0x0}, {0x0}], 0x3, 0x0) 3m30.78519063s ago: executing program 2 (id=677): r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) gettimeofday(&(0x7f0000002940), 0x0) 3m25.90508031s ago: executing program 2 (id=696): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r3, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0, 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000380)={0x2, 0x0, [{0x80000006, 0x3, 0x3, 0x44, 0x9, 0x3ff, 0x3}, {0xb, 0x9, 0x2, 0xfd3c, 0x7, 0x3, 0x7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m25.629297121s ago: executing program 33 (id=696): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r3, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0, 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000380)={0x2, 0x0, [{0x80000006, 0x3, 0x3, 0x44, 0x9, 0x3ff, 0x3}, {0xb, 0x9, 0x2, 0xfd3c, 0x7, 0x3, 0x7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m7.724004359s ago: executing program 6 (id=697): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) socketpair$tipc(0x1e, 0x44d28e74b5c8ca2a, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4040400) 3m6.731603017s ago: executing program 6 (id=764): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) setreuid(0xee01, 0x0) r3 = getuid() setresuid(r3, 0x0, r3) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f00000001c0)=@sha1={0x1, "343be0066659cc3cbb166b95443c1a77354dce85"}, 0x15, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 3m5.64135031s ago: executing program 6 (id=767): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e, 0x13, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400008000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"/263], 0x16, 0xc59, &(0x7f0000002940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000300)) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x14e) 3m5.02776215s ago: executing program 6 (id=773): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r3, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) socket$kcm(0x11, 0x200000000000002, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0, 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000380)={0x2, 0x0, [{0x80000006, 0x3, 0x3, 0x44, 0x9, 0x3ff, 0x3}, {0xb, 0x9, 0x2, 0xfd3c, 0x7, 0x3, 0x7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m1.667415814s ago: executing program 6 (id=788): r0 = gettid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) tkill(r0, 0x4) 3m1.517014593s ago: executing program 34 (id=788): r0 = gettid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) tkill(r0, 0x4) 2m12.534371155s ago: executing program 0 (id=933): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x58) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0', 0xb) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 2m9.022212068s ago: executing program 0 (id=946): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) socketpair$tipc(0x1e, 0x44d28e74b5c8ca2a, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x4040400) 2m7.895643922s ago: executing program 0 (id=950): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64], 0x4, 0x129c, &(0x7f0000002d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101080, 0x0) getdents64(r0, &(0x7f0000000080)=""/57, 0x39) getdents64(r0, 0xfffffffffffffffe, 0x29) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 2m6.766495845s ago: executing program 0 (id=953): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010094, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=0x0], 0x1, 0x701, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x78) close(r0) 2m6.677315738s ago: executing program 0 (id=954): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m6.453640236s ago: executing program 0 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000180)=0x800001, 0x4) 1m51.132877192s ago: executing program 35 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000180)=0x800001, 0x4) 13.884256768s ago: executing program 7 (id=1436): syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0xe0, 0x65, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xe1, 0x5, 0x8, {0x7, 0x25, 0x1, 0x0, 0xf, 0xb8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x8, 0xb, {0x7, 0x25, 0x1, 0x4, 0xc, 0x8}}}}}}}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x3, 0x100) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x42, 0x16, 0x7, 0x101, "13f3d6fe69fbfdd23410002a0edb8280ac4489075029ecf93badb8315a00"}) 12.011098965s ago: executing program 8 (id=1442): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) syz_emit_vhci(0x0, 0xb) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.804287329s ago: executing program 7 (id=1447): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xc388) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0xfef3, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) 10.075207439s ago: executing program 7 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 8.041668848s ago: executing program 7 (id=1451): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x20048091) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r1 = inotify_init() getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), 0x0) inotify_add_watch(r1, 0x0, 0xa50003d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8], 0x3, 0x24c, &(0x7f00000008c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) unshare(0x22020600) syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) nanosleep(0x0, 0x0) 8.020477733s ago: executing program 8 (id=1452): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@mblk_io_submit}, {@nouid32}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}, {@nobarrier}]}, 0x4, 0xbbf, &(0x7f0000000700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7.446836633s ago: executing program 8 (id=1453): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000040)='0\x00', 0x2) 7.279402266s ago: executing program 8 (id=1455): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001280)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000001540)=[{}, {}], 0x0, 0x0) io_destroy(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x9, 0x0, 0x0) 7.050647886s ago: executing program 8 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESOCT=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") syz_clone(0xa012400, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x90) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r3, r4) setregid(r1, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r7, &(0x7f00000002c0)=""/10, 0x5b) 5.756642972s ago: executing program 5 (id=1460): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x4002, &(0x7f0000000000), 0x1, 0x75d, &(0x7f0000001240)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x30d38000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x800) 5.755540182s ago: executing program 4 (id=1462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x2f) 4.80252753s ago: executing program 4 (id=1465): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2814800, &(0x7f0000000100)=ANY=[], 0x3, 0x6c2, &(0x7f0000001600)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300801c, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRESDEC, @ANYBLOB="de3631d09a34c16dcba1ffab984911dcdbc1e2658c0e67172ccdcb14208a27a4ff0c1cbd0fa976fdbbaad16f5c6fde7c2c92f2e0ab2344e716564d5a635f805beb1b8f511710cab116bf7d89a29c2663983ab0d1ba440d9b6dad26650c4fcbc378c942f1886742a767c7a16ea03d45863b2d1cb3c0b110fce5adcfb2a8b7eaeb511b156d10fcaff3dc0e49dab7a3f17f23f991b330ebbbe05cf266927dbfaf48e5a94cc269103cc3becda023f5c580b23c1692efe1242191b52e58260985c320a9fe27a1cb3b4d1fa1494038ee8af6168a9d6ec2c35671b71eaac01cf09c1df4cd5cf00ae24e0191a460c21f04f00c70d4", @ANYRES16], 0x1, 0x2d0, &(0x7f00000004c0)="$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") r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 4.782156226s ago: executing program 7 (id=1466): getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xffffff7a, 0x10000, 0x478, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xb}, 0x50) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) ptrace$pokeuser(0x6, 0x0, 0xffffffff, 0x200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sigaltstack(0x0, 0x0) 3.638245663s ago: executing program 5 (id=1467): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061111c002af0ffff3f060000000000000095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xfffb}, 0x6) socketpair(0x11, 0x2, 0x2, &(0x7f0000000180)) 3.581722718s ago: executing program 4 (id=1468): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 3.202035627s ago: executing program 5 (id=1470): r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2814800, &(0x7f0000000100)=ANY=[], 0x3, 0x6c2, &(0x7f0000001600)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) fgetxattr(r6, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r5], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300801c, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRESDEC, @ANYBLOB="de3631d09a34c16dcba1ffab984911dcdbc1e2658c0e67172ccdcb14208a27a4ff0c1cbd0fa976fdbbaad16f5c6fde7c2c92f2e0ab2344e716564d5a635f805beb1b8f511710cab116bf7d89a29c2663983ab0d1ba440d9b6dad26650c4fcbc378c942f1886742a767c7a16ea03d45863b2d1cb3c0b110fce5adcfb2a8b7eaeb511b156d10fcaff3dc0e49dab7a3f17f23f991b330ebbbe05cf266927dbfaf48e5a94cc269103cc3becda023f5c580b23c1692efe1242191b52e58260985c320a9fe27a1cb3b4d1fa1494038ee8af6168a9d6ec2c35671b71eaac01cf09c1df4cd5cf00ae24e0191a460c21f04f00c70d4", @ANYRES16], 0x1, 0x2d0, &(0x7f00000004c0)="$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") r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000001c0)=ANY=[@ANYRES32=r7], 0xdd, 0x2dd, &(0x7f0000001400)="$eJzs3U9rE08YwPGnadMmKW1y+PEDBemDXvSytPEVBGlBDCi1KepB2NqNhqxJycZIRKyevHrzPRSP3gTrG+jFm3fxUgTBgz1IV5LNmj+utalNN7XfD5RMZ+bJTHaW8uzSnWzfeHG/mHeMvFmVSEwlJiKyI5KSiHjist4qNWpGZFw6PZULk99c171560omm51fVF3ILF1Mq+r0zNuHj1+dfVedXH49/WZCtlK3t7+kP279v3Vqe3fJf/dy9ZnoSrlcNVdsS1cLTtFQvWZbpmNpoeRYlaqa7fa8XV5bq6tZWp1KrFUsx1GzVNeiVddqWauVupp3zUJJDcPQqYScNKN7NcaDKnMbi4tmpq9BIn1OCkcpcJUrlYw5GtiY2ziKSQEAgOHSm/9HGil9V/7fyPk9v8v/v344c73f/P9ewdGCo6VyV37/a/4fEfL/wWnm/7tBSWM0hNlgABoLWcmYicBLN/J/AAAAAAAAAAAAAAAAAAAAAACOgx3XTbqum/Rf/Z8JEYnJbszr5SbDnicGY+/1F/F/7wgZCXG6OGQdD+7FROzntVwt57167Zm8FMQWS2ajIt+b50OLV164nJ2f1aaUbNrrrfjmQ4ITfrwvFRw/58VrR/x6LReVROf4aUnKf8Hx6Z74qIjUcuNy/lxHvCFJeX9HymLLavO8bsc/mVO9dDXbM3682Q8AAAAAgH+BoT+luq9/vd0kDUP9bUN62r3K9v0BSf7h/oDK5ri048fk9Fh4nxsAAAAAgJPEqT8qmrZtVQ5emFn+q/AhKMSl/6hDOXTHrGC0/h1sz86u6za/MGaf7/wyLtJdI34hIr1NR1b4LCJDcMAP+xz79MBbwP10DvOvEgAAAIBBaCf9Yc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICTa7+bh/n9D7L3WMdwo+F8SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA4/AgAAP//iQYV8g==") dup3(0xffffffffffffffff, r2, 0x80000) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) 2.491655161s ago: executing program 5 (id=1472): r0 = inotify_init1(0x0) unshare(0x26020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) 2.313719498s ago: executing program 4 (id=1474): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff}) 2.312349158s ago: executing program 3 (id=1484): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 2.235281308s ago: executing program 5 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getgroups(0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0xee01, 0x0, 0x0]) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x7671693a61b9ff27, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) munmap(&(0x7f000052e000/0x2000)=nil, 0x2000) ioctl$KDSKBSENT(r7, 0x4b49, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000b80)=ANY=[@ANYBLOB='nls=iso8859-1,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c61e5b36965722c666f1363be2c005227577315236fef2950e74c5d92ddaa610f0555988528c3d81a2b2e1cda6b1da9e337a08b064aed0677d3af0839bc07e3d7c374f2c4a37996f6d007e805c4af050c6eefc25953120e5e3dd5aaeb8bd82e75483866dff6a2501a14b08dced12b7108b8869a0d04c133a19dc6cc093a9e75cbd3e6ad790f24529eeb71fd0cdd216b3956f1975f8a9827129010b3d890f843951588fb9384d14dceb5ea98104ff887054230f29ef078affd5eb63bc7aeb356c7ee7bc5dc255f6c96d341c06e6fd33def0f544ba21e1953dfb48bcfc3c78777561e14a52b5227a930252244b3bb641c523f3c65481a3a268367bbb92171af1dfd94f6570fd1c3ac933de1f04669452276abb071a73fd268cd73614bf25bd918c48553c1eceec42b9f7e9b747bcd9267f800490c94fcf4f74ad7d58772658b27c7b4654dcac12b1fa1"], 0xff, 0x6c5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.15215869s ago: executing program 3 (id=1476): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x141a82, 0x20) sendfile(r1, r1, 0x0, 0x4) fanotify_mark(0xffffffffffffffff, 0x698, 0x8, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x34, "e71fefea00aed2dbc2c9adc6296a524d530835ce1d98c75b1d59bb82f3535a8e"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x6, "88705c525cd8a00c97ec37488eccc0391ab6f5000000000000000000001b00"}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r6, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 1.013129946s ago: executing program 3 (id=1477): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) finit_module(0xffffffffffffffff, 0x0, 0x7) 982.374994ms ago: executing program 8 (id=1478): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x4002, &(0x7f0000000000), 0x1, 0x75d, &(0x7f0000001240)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x30d38000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x800) 421.17877ms ago: executing program 7 (id=1479): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) syz_emit_vhci(0x0, 0xb) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 420.93389ms ago: executing program 3 (id=1480): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061111c002af0ffff3f060000000000000095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xfffb}, 0x6) socketpair(0x11, 0x2, 0x2, &(0x7f0000000180)) 420.79656ms ago: executing program 4 (id=1481): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001280)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000001540)=[{}, {}], 0x0, 0x0) io_destroy(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x9, 0x0, 0x0) 100.903813ms ago: executing program 5 (id=1482): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./bus\x00', 0x10000, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 100.028624ms ago: executing program 3 (id=1483): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000016c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 1.507979ms ago: executing program 3 (id=1485): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @local}, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x28, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xde, 0x47c, &(0x7f0000000540)="$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") r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2022400, &(0x7f00000009c0)={[{@nodiscard}, {}]}, 0x5, 0x4ba, &(0x7f00000002c0)="$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") splice(r2, &(0x7f0000000f80)=0x3, r1, 0x0, 0x1, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x4007) 0s ago: executing program 4 (id=1486): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) syz_open_pts(r1, 0x101000) write(r0, &(0x7f0000000000)='3', 0x4e) kernel console output (not intermixed with test programs): 876306][ T26] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 245.889732][ T26] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 245.896263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.907471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.910030][ T26] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 245.973583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.005741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.025828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.034870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.069445][ T7187] device veth0_vlan entered promiscuous mode [ 246.098402][ T2855] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 246.126165][ T7187] device veth1_vlan entered promiscuous mode [ 246.216695][ T4228] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 246.246577][ T4228] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 246.254698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.269303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.298826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.314943][ T4228] usb 1-1: USB disconnect, device number 4 [ 246.321701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.321781][ T26] usb 6-1: USB disconnect, device number 2 [ 246.393812][ T7187] device veth0_macvtap entered promiscuous mode [ 246.432604][ T7187] device veth1_macvtap entered promiscuous mode [ 246.437768][ T26] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 246.476739][ T2855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 246.493149][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.514636][ T26] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 246.524581][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.544601][ T2855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 246.554578][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.554597][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.554605][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.554615][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.554633][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.554643][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.554656][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.554667][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.555896][ T7187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.659787][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.670922][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.681322][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.691837][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.701757][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.716532][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.726351][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.731612][ T26] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 246.737027][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.759110][ T7187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.776503][ T7187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.793526][ T7187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.829411][ T2855] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 246.838767][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.847124][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.855942][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.878400][ T7382] loop5: detected capacity change from 0 to 2048 [ 246.889363][ T26] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 246.914110][ T2855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.931414][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.941363][ T26] keyspan 6-1:1.0: device disconnected [ 246.960746][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.973237][ T7387] loop0: detected capacity change from 0 to 1024 [ 246.997444][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.132251][ T7187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.153949][ T7187] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.187975][ T7187] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.739736][ T7187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.386111][ T7406] loop0: detected capacity change from 0 to 256 [ 248.394590][ T7406] ======================================================= [ 248.394590][ T7406] WARNING: The mand mount option has been deprecated and [ 248.394590][ T7406] and is ignored by this kernel. Remove the mand [ 248.394590][ T7406] option from the mount to silence this warning. [ 248.394590][ T7406] ======================================================= [ 248.429536][ T7406] exfat: Deprecated parameter 'utf8' [ 248.434851][ T7406] exfat: Deprecated parameter 'namecase' [ 248.440628][ T7406] exfat: Deprecated parameter 'utf8' [ 248.458700][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.478707][ T7406] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 248.496641][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.529044][ T7406] attempt to access beyond end of device [ 248.529044][ T7406] loop0: rw=524288, want=34359738496, limit=256 [ 248.529069][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.548241][ T2855] pegasus: probe of 5-1:1.0 failed with error -71 [ 248.549236][ T7406] attempt to access beyond end of device [ 248.549236][ T7406] loop0: rw=0, want=34359738496, limit=256 [ 248.569980][ T7406] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 248.583412][ T25] audit: type=1800 audit(1790352651.539:4): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.828" name="file1" dev="loop0" ino=1048599 res=0 errno=0 [ 248.634605][ T2855] usb 5-1: USB disconnect, device number 4 [ 249.390525][ T5531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.429908][ T5531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.449301][ T7414] loop4: detected capacity change from 0 to 512 [ 249.816263][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.917976][ T25] audit: type=1800 audit(1790352652.889:5): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.831" name="idProduct" dev="configfs" ino=50329 res=0 errno=0 [ 249.959986][ T7414] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.830: casefold flag without casefold feature [ 250.020820][ T3041] device hsr_slave_0 left promiscuous mode [ 250.076637][ T7414] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.830: couldn't read orphan inode 15 (err -117) [ 250.157384][ T7414] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 250.218816][ T3041] device hsr_slave_1 left promiscuous mode [ 250.266648][ T3041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.291141][ T3041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.351646][ T3041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.376201][ T3041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.418296][ T3041] device bridge_slave_1 left promiscuous mode [ 250.426515][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 250.464313][ T3041] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.477540][ T3041] device bridge_slave_0 left promiscuous mode [ 250.491458][ T3041] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.512722][ T3041] device veth1_macvtap left promiscuous mode [ 250.529774][ T3041] device veth0_macvtap left promiscuous mode [ 250.546884][ T3041] device veth1_vlan left promiscuous mode [ 250.596557][ T1322] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 250.605240][ T3041] device veth0_vlan left promiscuous mode [ 250.843523][ T7444] loop7: detected capacity change from 0 to 512 [ 250.898778][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 250.910403][ T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 250.926305][ T7] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 250.936811][ T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 250.956527][ T7] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 250.966750][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.987527][ T1322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 251.025279][ T1322] usb 5-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 251.034930][ T7429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.043347][ T7444] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 251.077591][ T7] ims_pcu 1-1:1.0: Second endpoint on data interface is not BULK IN [ 251.093101][ T7444] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.161665][ T1322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.170517][ T7] ims_pcu: probe of 1-1:1.0 failed with error -22 [ 251.327351][ T7] usb 1-1: USB disconnect, device number 5 [ 251.435017][ T7453] FAULT_INJECTION: forcing a failure. [ 251.435017][ T7453] name failslab, interval 1, probability 0, space 0, times 1 [ 251.464741][ T7453] CPU: 0 PID: 7453 Comm: syz.7.836 Not tainted syzkaller #0 [ 251.472070][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.482120][ T7453] Call Trace: [ 251.485383][ T7453] [ 251.488291][ T7453] dump_stack_lvl+0x188/0x250 [ 251.492969][ T7453] ? show_regs_print_info+0x20/0x20 [ 251.498169][ T7453] ? load_image+0x410/0x410 [ 251.502657][ T7453] ? __might_sleep+0xf0/0xf0 [ 251.507237][ T7453] ? __lock_acquire+0x7b50/0x7b50 [ 251.512272][ T7453] should_fail+0x383/0x4b0 [ 251.516724][ T7453] should_failslab+0x5/0x20 [ 251.521210][ T7453] slab_pre_alloc_hook+0x51/0xc0 [ 251.526277][ T7453] kmem_cache_alloc_trace+0x47/0x290 [ 251.531562][ T7453] ? request_key_auth_new+0x101/0x920 [ 251.536931][ T7453] request_key_auth_new+0x101/0x920 [ 251.542120][ T7453] ? request_key_auth_rcu_disposal+0x20/0x20 [ 251.548084][ T7453] ? up_write+0x1b6/0x410 [ 251.552405][ T7453] request_key_and_link+0xd26/0x13b0 [ 251.557700][ T7453] ? complete_request_key+0xa0/0xa0 [ 251.562924][ T7453] ? __might_sleep+0xf0/0xf0 [ 251.567505][ T7453] ? asymmetric_key_cmp+0x240/0x240 [ 251.572731][ T7453] ? keyring_search_rcu+0x280/0x280 [ 251.577916][ T7453] ? down_read+0x1aa/0x2e0 [ 251.582325][ T7453] __se_sys_request_key+0x293/0x350 [ 251.587509][ T7453] ? __x64_sys_request_key+0xa0/0xa0 [ 251.592778][ T7453] ? lockdep_hardirqs_on+0x94/0x140 [ 251.597981][ T7453] do_syscall_64+0x4c/0xa0 [ 251.602380][ T7453] ? clear_bhb_loop+0x30/0x80 [ 251.607039][ T7453] ? clear_bhb_loop+0x30/0x80 [ 251.611707][ T7453] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.617621][ T7453] RIP: 0033:0x7fbb7a538159 [ 251.622022][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.641607][ T7453] RSP: 002b:00007fbb78790028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 251.650003][ T7453] RAX: ffffffffffffffda RBX: 00007fbb7a7bffa0 RCX: 00007fbb7a538159 [ 251.657958][ T7453] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 251.665912][ T7453] RBP: 00007fbb7a5cf06b R08: 0000000000000000 R09: 0000000000000000 [ 251.673888][ T7453] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 251.681847][ T7453] R13: 00007fbb7a7c0038 R14: 00007fbb7a7bffa0 R15: 00007fff434bff18 [ 251.689813][ T7453] [ 251.891331][ T3041] team0 (unregistering): Port device team_slave_1 removed [ 251.906807][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 251.912903][ T1322] input input6: Device does not respond to id packet M [ 251.938862][ T3041] team0 (unregistering): Port device team_slave_0 removed [ 251.949172][ T7455] loop5: detected capacity change from 0 to 1024 [ 251.969242][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 251.976742][ T3041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.996525][ T1322] input input6: Device does not respond to id packet P [ 252.016605][ T7455] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 252.060283][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 252.067134][ T1322] input input6: Device does not respond to id packet B [ 252.091787][ T3041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.113946][ T7455] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.837: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 252.136881][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 252.153160][ T1322] input input6: Device does not respond to id packet N [ 252.176591][ T7455] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.837: couldn't read orphan inode 11 (err -117) [ 252.224776][ T7455] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,noload,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 252.249847][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 252.356301][ T7455] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.837: Invalid block bitmap block 0 in block_group 0 [ 252.371205][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 252.416541][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 252.431582][ T7455] Quota error (device loop5): write_blk: dquota write failed [ 252.439472][ T1322] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 252.447121][ T7462] FAULT_INJECTION: forcing a failure. [ 252.447121][ T7462] name failslab, interval 1, probability 0, space 0, times 0 [ 252.461306][ T7455] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 252.484274][ T1322] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 252.569212][ T7464] loop4: detected capacity change from 0 to 256 [ 252.576128][ T7464] exfat: Deprecated parameter 'utf8' [ 252.577249][ T1322] usb 5-1: USB disconnect, device number 5 [ 252.581658][ T7464] exfat: Deprecated parameter 'namecase' [ 252.587357][ C0] iforce 5-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 252.593187][ T7464] exfat: Deprecated parameter 'utf8' [ 252.626495][ T7462] CPU: 0 PID: 7462 Comm: syz.0.849 Not tainted syzkaller #0 [ 252.633811][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.643858][ T7462] Call Trace: [ 252.647134][ T7462] [ 252.650055][ T7462] dump_stack_lvl+0x188/0x250 [ 252.654748][ T7462] ? show_regs_print_info+0x20/0x20 [ 252.659936][ T7462] ? load_image+0x410/0x410 [ 252.664423][ T7462] ? __might_sleep+0xf0/0xf0 [ 252.669036][ T7462] ? __lock_acquire+0x7b50/0x7b50 [ 252.674052][ T7462] should_fail+0x383/0x4b0 [ 252.678456][ T7462] should_failslab+0x5/0x20 [ 252.682942][ T7462] slab_pre_alloc_hook+0x51/0xc0 [ 252.687868][ T7462] kmem_cache_alloc_trace+0x47/0x290 [ 252.693145][ T7462] ? assoc_array_insert+0x3da/0x2e70 [ 252.698421][ T7462] assoc_array_insert+0x3da/0x2e70 [ 252.703522][ T7462] ? restrict_link_reject+0x10/0x10 [ 252.708749][ T7462] ? rcu_lock_release+0x5/0x20 [ 252.713498][ T7462] ? __lock_acquire+0x7b50/0x7b50 [ 252.718510][ T7462] __key_link_begin+0xd2/0x1e0 [ 252.723268][ T7462] request_key_and_link+0xb36/0x13b0 [ 252.728580][ T7462] ? complete_request_key+0xa0/0xa0 [ 252.733764][ T7462] ? __might_sleep+0xf0/0xf0 [ 252.738340][ T7462] ? asymmetric_key_cmp+0x240/0x240 [ 252.743524][ T7462] ? keyring_search_rcu+0x280/0x280 [ 252.748726][ T7462] ? down_read+0x1aa/0x2e0 [ 252.753124][ T7462] __se_sys_request_key+0x293/0x350 [ 252.758308][ T7462] ? __x64_sys_request_key+0xa0/0xa0 [ 252.763620][ T7462] ? lockdep_hardirqs_on+0x94/0x140 [ 252.768814][ T7462] do_syscall_64+0x4c/0xa0 [ 252.773241][ T7462] ? clear_bhb_loop+0x30/0x80 [ 252.777910][ T7462] ? clear_bhb_loop+0x30/0x80 [ 252.782582][ T7462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.788478][ T7462] RIP: 0033:0x7f1fcb38d159 [ 252.792893][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.812484][ T7462] RSP: 002b:00007f1fc95e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 252.820885][ T7462] RAX: ffffffffffffffda RBX: 00007f1fcb614fa0 RCX: 00007f1fcb38d159 [ 252.828839][ T7462] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 252.836807][ T7462] RBP: 00007f1fcb42406b R08: 0000000000000000 R09: 0000000000000000 [ 252.844845][ T7462] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 252.852815][ T7462] R13: 00007f1fcb615038 R14: 00007f1fcb614fa0 R15: 00007fff92388b68 [ 252.860979][ T7462] [ 252.867789][ T7455] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.837: Failed to acquire dquot type 0 [ 252.902198][ T7464] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 252.936244][ T3041] bond0 (unregistering): Released all slaves [ 253.004563][ T7464] attempt to access beyond end of device [ 253.004563][ T7464] loop4: rw=524288, want=34359738496, limit=256 [ 253.016598][ T7464] attempt to access beyond end of device [ 253.016598][ T7464] loop4: rw=0, want=34359738496, limit=256 [ 253.028126][ T25] audit: type=1800 audit(1790352655.999:6): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.839" name="file1" dev="loop4" ino=1048603 res=0 errno=0 [ 253.028303][ T7464] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 254.194590][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 254.230425][ T7485] loop5: detected capacity change from 0 to 1024 [ 254.287450][ T7485] hfsplus: failed to load catalog file [ 254.332060][ T7490] loop7: detected capacity change from 0 to 1024 [ 254.519766][ T7498] loop4: detected capacity change from 0 to 2048 [ 254.554229][ T144] hfsplus: b-tree write err: -5, ino 25 [ 254.641149][ T144] hfsplus: b-tree write err: -5, ino 4 [ 254.675458][ T144] hfsplus: b-tree write err: -5, ino 2 [ 254.719794][ T144] hfsplus: b-tree write err: -5, ino 26 [ 255.316558][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 255.906846][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913201][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.014762][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.026799][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.455577][ T7520] FAULT_INJECTION: forcing a failure. [ 256.455577][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 256.468701][ T7520] CPU: 0 PID: 7520 Comm: syz.5.854 Not tainted syzkaller #0 [ 256.476000][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.486068][ T7520] Call Trace: [ 256.489350][ T7520] [ 256.492289][ T7520] dump_stack_lvl+0x188/0x250 [ 256.496973][ T7520] ? show_regs_print_info+0x20/0x20 [ 256.502175][ T7520] ? load_image+0x410/0x410 [ 256.506691][ T7520] ? __might_sleep+0xf0/0xf0 [ 256.511280][ T7520] ? __lock_acquire+0x7b50/0x7b50 [ 256.516314][ T7520] should_fail+0x383/0x4b0 [ 256.520745][ T7520] should_failslab+0x5/0x20 [ 256.525289][ T7520] slab_pre_alloc_hook+0x51/0xc0 [ 256.530239][ T7520] ? key_alloc+0x302/0x1030 [ 256.534744][ T7520] kmem_cache_alloc+0x3d/0x280 [ 256.539522][ T7520] key_alloc+0x302/0x1030 [ 256.543863][ T7520] keyring_alloc+0x41/0xa0 [ 256.548286][ T7520] call_sbin_request_key+0x33f/0xc70 [ 256.553588][ T7520] ? rcu_lock_release+0x20/0x20 [ 256.558487][ T7520] ? request_key_auth_rcu_disposal+0x20/0x20 [ 256.564598][ T7520] ? up_write+0x1b6/0x410 [ 256.568948][ T7520] request_key_and_link+0xd98/0x13b0 [ 256.574258][ T7520] ? complete_request_key+0xa0/0xa0 [ 256.579466][ T7520] ? __might_sleep+0xf0/0xf0 [ 256.584065][ T7520] ? asymmetric_key_cmp+0x240/0x240 [ 256.589276][ T7520] ? keyring_search_rcu+0x280/0x280 [ 256.594485][ T7520] ? down_read+0x1aa/0x2e0 [ 256.598912][ T7520] __se_sys_request_key+0x293/0x350 [ 256.604123][ T7520] ? __x64_sys_request_key+0xa0/0xa0 [ 256.609419][ T7520] ? lockdep_hardirqs_on+0x94/0x140 [ 256.614635][ T7520] do_syscall_64+0x4c/0xa0 [ 256.619063][ T7520] ? clear_bhb_loop+0x30/0x80 [ 256.623743][ T7520] ? clear_bhb_loop+0x30/0x80 [ 256.628429][ T7520] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.634332][ T7520] RIP: 0033:0x7fa5b28e5159 [ 256.638751][ T7520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.658361][ T7520] RSP: 002b:00007fa5b0b3d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 256.666784][ T7520] RAX: ffffffffffffffda RBX: 00007fa5b2b6cfa0 RCX: 00007fa5b28e5159 [ 256.674761][ T7520] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 256.682746][ T7520] RBP: 00007fa5b297c06b R08: 0000000000000000 R09: 0000000000000000 [ 256.690721][ T7520] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 256.698696][ T7520] R13: 00007fa5b2b6d038 R14: 00007fa5b2b6cfa0 R15: 00007fff962e8148 [ 256.706688][ T7520] [ 257.106822][ T4230] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 257.165599][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.257426][ T4230] usb 4-1: Product: syz [ 257.279815][ T7545] loop7: detected capacity change from 0 to 256 [ 257.291952][ T4230] usb 4-1: Manufacturer: syz [ 257.317137][ T7545] exfat: Deprecated parameter 'utf8' [ 257.322533][ T7545] exfat: Deprecated parameter 'namecase' [ 257.328288][ T7545] exfat: Deprecated parameter 'utf8' [ 257.338244][ T4230] usb 4-1: SerialNumber: syz [ 257.391122][ T7545] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 257.412016][ T7545] attempt to access beyond end of device [ 257.412016][ T7545] loop7: rw=524288, want=34359738496, limit=256 [ 257.423943][ T7545] attempt to access beyond end of device [ 257.423943][ T7545] loop7: rw=0, want=34359738496, limit=256 [ 257.435543][ T25] audit: type=1800 audit(1790352660.399:7): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.859" name="file1" dev="loop7" ino=1048605 res=0 errno=0 [ 257.435737][ T7545] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 257.466898][ T4230] usb 4-1: config 0 descriptor?? [ 257.508103][ T4230] ch341 4-1:0.0: ch341-uart converter detected [ 257.806548][ T4230] usb 4-1: failed to receive control message: -71 [ 257.826913][ T4230] ch341-uart: probe of ttyUSB0 failed with error -71 [ 257.835104][ T4230] usb 4-1: USB disconnect, device number 4 [ 258.268735][ T4230] ch341 4-1:0.0: device disconnected [ 258.487495][ T7575] loop7: detected capacity change from 0 to 1024 [ 258.591803][ T7575] hfsplus: failed to load catalog file [ 258.609448][ T7586] capability: warning: `syz.3.865' uses deprecated v2 capabilities in a way that may be insecure [ 259.125605][ T7592] loop4: detected capacity change from 0 to 2048 [ 259.923428][ T7597] loop7: detected capacity change from 0 to 2048 [ 259.929476][ T7599] loop3: detected capacity change from 0 to 512 [ 260.242626][ T7599] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 260.256150][ T7592] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.356609][ T7599] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.414526][ T7631] loop5: detected capacity change from 0 to 256 [ 261.426783][ T4268] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 261.437074][ T7631] exfat: Deprecated parameter 'utf8' [ 261.442399][ T7631] exfat: Deprecated parameter 'namecase' [ 261.448140][ T7631] exfat: Deprecated parameter 'utf8' [ 261.464279][ T7631] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 261.497036][ T7631] attempt to access beyond end of device [ 261.497036][ T7631] loop5: rw=524288, want=34359738496, limit=256 [ 261.509232][ T7631] attempt to access beyond end of device [ 261.509232][ T7631] loop5: rw=0, want=34359738496, limit=256 [ 261.520803][ T25] audit: type=1800 audit(1790352664.489:8): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.873" name="file1" dev="loop5" ino=1048607 res=0 errno=0 [ 261.521112][ T7631] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 263.886095][ T4268] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 263.956659][ T4268] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 263.994120][ T4268] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 264.026524][ T4268] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 264.157101][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.169386][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.560596][ T4268] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 264.604604][ T7663] loop7: detected capacity change from 0 to 512 [ 264.810222][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.866845][ T4268] usb 5-1: can't set config #1, error -71 [ 264.917846][ T7663] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #15: comm syz.7.888: casefold flag without casefold feature [ 264.931916][ T4268] usb 5-1: USB disconnect, device number 6 [ 264.975095][ T7663] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.888: couldn't read orphan inode 15 (err -117) [ 265.514286][ T7674] loop5: detected capacity change from 0 to 512 [ 265.526687][ T7663] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 265.666120][ T7677] loop3: detected capacity change from 0 to 1024 [ 265.714420][ T7674] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.715926][ T7677] hfsplus: failed to load catalog file [ 266.746229][ T7674] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.760995][ T7685] loop4: detected capacity change from 0 to 256 [ 266.824644][ T7685] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 269.956183][ T7738] FAULT_INJECTION: forcing a failure. [ 269.956183][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 270.166597][ T7738] CPU: 1 PID: 7738 Comm: syz.3.899 Not tainted syzkaller #0 [ 270.173921][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.183991][ T7738] Call Trace: [ 270.187274][ T7738] [ 270.190209][ T7738] dump_stack_lvl+0x188/0x250 [ 270.194890][ T7738] ? show_regs_print_info+0x20/0x20 [ 270.200096][ T7738] ? load_image+0x410/0x410 [ 270.204617][ T7738] ? __might_sleep+0xf0/0xf0 [ 270.209216][ T7738] ? __lock_acquire+0x7b50/0x7b50 [ 270.214258][ T7738] should_fail+0x383/0x4b0 [ 270.218690][ T7738] should_failslab+0x5/0x20 [ 270.223198][ T7738] slab_pre_alloc_hook+0x51/0xc0 [ 270.228144][ T7738] kmem_cache_alloc_trace+0x47/0x290 [ 270.233437][ T7738] ? __list_lru_init+0x535/0xac0 [ 270.238390][ T7738] __list_lru_init+0x535/0xac0 [ 270.243175][ T7738] alloc_super+0x787/0x970 [ 270.247594][ T7738] ? kill_litter_super+0xa0/0xa0 [ 270.252537][ T7738] sget_fc+0x2d4/0x6f0 [ 270.256619][ T7738] ? kill_litter_super+0xa0/0xa0 [ 270.261563][ T7738] ? proc_reconfigure+0x370/0x370 [ 270.266589][ T7738] get_tree_nodev+0x26/0x160 [ 270.271183][ T7738] vfs_get_tree+0x88/0x270 [ 270.275608][ T7738] do_new_mount+0x247/0xa40 [ 270.280129][ T7738] __se_sys_mount+0x2e3/0x3d0 [ 270.284822][ T7738] ? __x64_sys_mount+0xc0/0xc0 [ 270.289598][ T7738] ? lockdep_hardirqs_on+0x94/0x140 [ 270.294808][ T7738] ? __x64_sys_mount+0x1c/0xc0 [ 270.299583][ T7738] do_syscall_64+0x4c/0xa0 [ 270.304007][ T7738] ? clear_bhb_loop+0x30/0x80 [ 270.308694][ T7738] ? clear_bhb_loop+0x30/0x80 [ 270.313388][ T7738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.319296][ T7738] RIP: 0033:0x7ff2cdc72159 [ 270.323719][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.343329][ T7738] RSP: 002b:00007ff2cbeca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 270.351729][ T7738] RAX: ffffffffffffffda RBX: 00007ff2cdef9fa0 RCX: 00007ff2cdc72159 [ 270.359689][ T7738] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 270.367663][ T7738] RBP: 00007ff2cdd0906b R08: 0000000000000000 R09: 0000000000000000 [ 270.375640][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.383597][ T7738] R13: 00007ff2cdefa038 R14: 00007ff2cdef9fa0 R15: 00007ffd09b25c78 [ 270.391562][ T7738] [ 271.453239][ T7753] loop3: detected capacity change from 0 to 512 [ 271.557688][ T7759] loop5: detected capacity change from 0 to 256 [ 271.585366][ T7753] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.901: casefold flag without casefold feature [ 272.250478][ T7753] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.901: couldn't read orphan inode 15 (err -117) [ 272.319549][ T7753] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 273.113544][ T7777] loop4: detected capacity change from 0 to 4096 [ 273.237155][ T7777] EXT4-fs (loop4): Test dummy encryption mode enabled [ 273.251427][ T7777] EXT4-fs (loop4): Ignoring removed bh option [ 273.299940][ T7777] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x000000000000000a,dioread_nolock,test_dummy_encryption,lazytime,nodioread_nolock,block_validity,bh,,errors=continue. Quota mode: writeback. [ 273.327353][ T4233] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 273.667754][ T7777] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 273.716641][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 273.735790][ T4233] usb 4-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 273.747010][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.286575][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 274.293783][ T4233] input input7: Device does not respond to id packet M [ 274.346585][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 274.374882][ T4233] input input7: Device does not respond to id packet P [ 274.434467][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 274.446550][ T4233] input input7: Device does not respond to id packet B [ 274.521377][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 274.554479][ T4233] input input7: Device does not respond to id packet N [ 274.610439][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 274.652136][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 275.116555][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 276.515449][ T4233] iforce 4-1:1.0: usb_submit_urb failed: -71 [ 276.590051][ T4233] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 276.801538][ T4233] usb 4-1: USB disconnect, device number 5 [ 277.257414][ T7841] loop3: detected capacity change from 0 to 736 [ 277.453023][ T7846] loop7: detected capacity change from 0 to 256 [ 278.308782][ T7853] loop5: detected capacity change from 0 to 2048 [ 278.360195][ T7853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.586025][ T7864] loop3: detected capacity change from 0 to 4096 [ 278.878350][ T7864] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.994241][ T7864] EXT4-fs (loop3): Ignoring removed bh option [ 279.688182][ T7864] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x000000000000000a,dioread_nolock,test_dummy_encryption,lazytime,nodioread_nolock,block_validity,bh,,errors=continue. Quota mode: writeback. [ 280.192038][ T7889] loop7: detected capacity change from 0 to 736 [ 280.956760][ T7889] rock: directory entry would overflow storage [ 280.963379][ T7889] rock: sig=0x3b10, size=4, remaining=3 [ 281.189832][ T7894] loop5: detected capacity change from 0 to 2048 [ 281.927806][ T7914] loop3: detected capacity change from 0 to 256 [ 282.002194][ T7894] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.194554][ T7923] loop7: detected capacity change from 0 to 1024 [ 282.273676][ T7923] EXT4-fs (loop7): Ignoring removed orlov option [ 282.313253][ T7929] Need at least one configuration in g1. [ 282.319837][ T7929] udc dummy_udc.0: failed to start g1: -22 [ 282.355296][ T7927] loop3: detected capacity change from 0 to 512 [ 282.575607][ T7923] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x000000000000726e,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resuid=0x0000000000000000,. Quota mode: none. [ 282.781749][ T7927] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 283.095788][ T7927] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.937: corrupted in-inode xattr [ 283.205059][ T7927] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.937: couldn't read orphan inode 15 (err -117) [ 283.247704][ T7927] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 283.701395][ T7958] loop4: detected capacity change from 0 to 512 [ 284.376461][ T13] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 284.384448][ T7958] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.395617][ T7958] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.616133][ T13] usb 4-1: device descriptor read/64, error -71 [ 284.696068][ T7969] loop7: detected capacity change from 0 to 4096 [ 284.777667][ T7969] EXT4-fs (loop7): Test dummy encryption mode enabled [ 284.784490][ T7969] EXT4-fs (loop7): Ignoring removed bh option [ 284.877284][ T7969] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x000000000000000a,dioread_nolock,test_dummy_encryption,lazytime,nodioread_nolock,block_validity,bh,,errors=continue. Quota mode: writeback. [ 284.961074][ T13] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 286.842770][ T8000] loop4: detected capacity change from 0 to 736 [ 290.423363][ T8057] loop3: detected capacity change from 0 to 256 [ 290.558617][ T8057] exfat: Deprecated parameter 'utf8' [ 290.563969][ T8057] exfat: Deprecated parameter 'namecase' [ 290.569725][ T8057] exfat: Deprecated parameter 'utf8' [ 290.640889][ T8057] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 290.658411][ T8057] attempt to access beyond end of device [ 290.658411][ T8057] loop3: rw=524288, want=34359738496, limit=256 [ 290.670293][ T8057] attempt to access beyond end of device [ 290.670293][ T8057] loop3: rw=0, want=34359738496, limit=256 [ 290.681754][ T25] audit: type=1800 audit(1790352693.649:9): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.962" name="file1" dev="loop3" ino=1048610 res=0 errno=0 [ 290.682158][ T8057] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 290.786545][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 291.368351][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.418511][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 291.457712][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.496439][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 291.526472][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 292.197319][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 292.207359][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 292.219363][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 292.238225][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 292.268414][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 292.281783][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 292.298337][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 292.313192][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.339564][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.354565][ T8072] loop3: detected capacity change from 0 to 1024 [ 292.391141][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 292.656628][ T13] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 292.692044][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.718810][ T13] usb 5-1: Product: syz [ 292.726687][ T13] usb 5-1: Manufacturer: syz [ 292.736769][ T13] usb 5-1: SerialNumber: syz [ 292.776695][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.783742][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.831889][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.844457][ T8086] loop3: detected capacity change from 0 to 512 [ 292.851462][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.875274][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.897872][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.904916][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.936675][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.975597][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 293.002693][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 293.961169][ T8059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 293.981208][ T8090] loop7: detected capacity change from 0 to 736 [ 294.086641][ T13] usb 5-1: can't set config #1, error -71 [ 294.093730][ T13] usb 5-1: USB disconnect, device number 7 [ 295.354032][ T8114] loop9: detected capacity change from 0 to 16384 [ 295.609250][ T8116] loop_set_status: loop9 () has still dirty pages (nrpages=2) [ 295.720627][ T8120] loop3: detected capacity change from 0 to 4096 [ 295.940045][ T8120] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: writeback. [ 296.508267][ T8119] EXT4-fs (loop3): shut down requested (0) [ 296.660351][ T8139] loop4: detected capacity change from 0 to 512 [ 296.757269][ T8136] loop7: detected capacity change from 0 to 4096 [ 296.783945][ T25] audit: type=1800 audit(1790352699.749:10): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.978" name="file1" dev="loop4" ino=1048620 res=0 errno=0 [ 296.849823][ T8139] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 296.881803][ T8136] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 296.906943][ T8139] FAT-fs (loop4): Filesystem has been set read-only [ 296.914040][ T8139] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 297.049863][ T8136] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 297.284733][ T8155] loop5: detected capacity change from 0 to 4096 [ 297.467012][ T8155] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 298.044572][ T8155] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 298.216084][ T8165] loop4: detected capacity change from 0 to 1024 [ 298.336175][ T8165] EXT4-fs (loop4): Ignoring removed orlov option [ 298.366699][ T8165] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.460871][ T8165] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,grpquota,grpquota,nojournal_checksum,orlov,delalloc,delalloc,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 298.488843][ T8175] loop3: detected capacity change from 0 to 512 [ 298.559174][ T8175] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 298.596545][ T7] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 298.625597][ T8175] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.845519][ T8201] loop4: detected capacity change from 0 to 256 [ 300.061490][ T8201] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 300.134681][ T25] audit: type=1800 audit(1790352703.099:11): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.989" name="file1" dev="loop4" ino=1048621 res=0 errno=0 [ 300.776640][ T8201] attempt to access beyond end of device [ 300.776640][ T8201] loop4: rw=16777216, want=3439, limit=256 [ 300.836643][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.886677][ T7] usb 6-1: not running at top speed; connect to a high speed hub [ 300.966669][ T7] usb 6-1: config 8 has an invalid interface number: 9 but max is 0 [ 300.982581][ T7] usb 6-1: config 8 has no interface number 0 [ 301.001272][ T7] usb 6-1: config 8 interface 9 has no altsetting 0 [ 301.164391][ T8221] loop4: detected capacity change from 0 to 2048 [ 301.216765][ T7] usb 6-1: New USB device found, idVendor=19d2, idProduct=0161, bcdDevice=a3.90 [ 301.230095][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.248828][ T7] usb 6-1: Product: syz [ 301.261177][ T8221] device syzkaller0 entered promiscuous mode [ 301.266359][ T7] usb 6-1: Manufacturer: 籱壜伻碒녤鿟䗹ᎉ챗탎èŽâ–²ì‚žç±´å¸–箳尺彿馊汚䔘฼⩮࿦韨á„껱猦ᰕᙜﵷ䂟ꅶ뚼ዺê‚맪뇔ꗙ领푓꾴찅咡ᓙᷣ買햕時é«î¢ºï¤€æ²¼ê¹®çª’뺟ᠥ꿞ꗰ喷ï¬á¯â±é¯šå¶¨è¬å¹„åªï¡›í„šî‚ä–ï£æ—–ꄃ㋔꼡鹰㧻쪶ሟ쮅ꉒ実₇ⓗ秴ãŸç¹½ã ³ã¹‹æ‘•îƒ”惿볦ᨇⓂᰄäšì«‹á¹Åª [ 301.402026][ T7] usb 6-1: SerialNumber: syz [ 301.450728][ T7] usb 6-1: can't set config #8, error -71 [ 301.459097][ T8224] loop3: detected capacity change from 0 to 4096 [ 301.472347][ T7] usb 6-1: USB disconnect, device number 3 [ 301.523312][ T8228] loop5: detected capacity change from 0 to 512 [ 301.577293][ T8224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.651803][ T8224] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 301.759457][ T25] audit: type=1800 audit(1790352704.729:12): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.994" name="file1" dev="loop5" ino=1048622 res=0 errno=0 [ 301.813991][ T8228] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 301.836548][ T8228] FAT-fs (loop5): Filesystem has been set read-only [ 301.861799][ T8228] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 301.916761][ T8228] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 302.337327][ T8240] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 303.070312][ T8258] loop4: detected capacity change from 0 to 512 [ 304.072775][ T8258] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 304.089260][ T8258] FAT-fs (loop4): Filesystem has been set read-only [ 305.068536][ T4357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.076559][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 305.161872][ T4357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.249548][ T4357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.361382][ T4357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.469688][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 305.496683][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.607720][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.631367][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.658967][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.673872][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.709554][ T8285] device bridge_slave_0 entered promiscuous mode [ 305.807706][ T7] usb 4-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 305.831830][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.842775][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.855544][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.870414][ T7] usb 4-1: Product: syz [ 305.882649][ T7] usb 4-1: Manufacturer: syz [ 305.891509][ T8285] device bridge_slave_1 entered promiscuous mode [ 305.901499][ T7] usb 4-1: SerialNumber: syz [ 305.989167][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.037804][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.122577][ T8285] team0: Port device team_slave_0 added [ 306.137143][ T8285] team0: Port device team_slave_1 added [ 306.206796][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.227979][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.266642][ T7] usb 4-1: unit 3 not found! [ 306.281236][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.304675][ T7] usb 4-1: USB disconnect, device number 8 [ 306.330233][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.341607][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.375565][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.408308][ T8330] loop7: detected capacity change from 0 to 2048 [ 306.546821][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 306.949936][ T8326] device syzkaller0 entered promiscuous mode [ 307.085058][ T8285] device hsr_slave_0 entered promiscuous mode [ 307.136974][ T8285] device hsr_slave_1 entered promiscuous mode [ 307.224158][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.266687][ T26] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 307.294828][ T8285] Cannot create hsr debugfs directory [ 307.715193][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.239520][ T8362] loop5: detected capacity change from 0 to 256 [ 308.286696][ T26] usb 5-1: not running at top speed; connect to a high speed hub [ 308.326744][ T8361] loop7: detected capacity change from 0 to 256 [ 308.341188][ T25] audit: type=1800 audit(1790352711.309:13): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1019" name="file1" dev="loop5" ino=1048625 res=0 errno=0 [ 308.392518][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 308.422696][ T8361] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 308.481293][ T8285] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 308.498350][ T8285] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 308.524376][ T25] audit: type=1800 audit(1790352711.489:14): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1017" name="file1" dev="loop7" ino=1048626 res=0 errno=0 [ 308.555097][ T8285] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 308.626763][ T4175] Bluetooth: hci2: command 0x041b tx timeout [ 308.645390][ T8285] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 308.652774][ T26] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 308.671093][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.694831][ T26] usb 5-1: Product: syz [ 308.707110][ T26] usb 5-1: Manufacturer: syz [ 308.715797][ T8361] attempt to access beyond end of device [ 308.715797][ T8361] loop7: rw=16777216, want=4671, limit=256 [ 308.730632][ T26] usb 5-1: SerialNumber: syz [ 308.780876][ T26] oti6858 5-1:1.0: oti6858 converter detected [ 308.813425][ T26] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 308.832033][ T8361] attempt to access beyond end of device [ 308.832033][ T8361] loop7: rw=16777216, want=6775, limit=256 [ 308.994023][ T8361] attempt to access beyond end of device [ 308.994023][ T8361] loop7: rw=16777216, want=8823, limit=256 [ 309.226933][ T4357] device hsr_slave_0 left promiscuous mode [ 309.240300][ T8361] attempt to access beyond end of device [ 309.240300][ T8361] loop7: rw=16777216, want=11031, limit=256 [ 309.252035][ T4357] device hsr_slave_1 left promiscuous mode [ 309.259714][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.276361][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.288631][ T4175] usb 5-1: USB disconnect, device number 8 [ 309.302894][ T4175] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 309.303429][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.314249][ T4175] oti6858 5-1:1.0: device disconnected [ 309.332401][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.345316][ T4357] device bridge_slave_1 left promiscuous mode [ 309.352500][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.361049][ T4357] device bridge_slave_0 left promiscuous mode [ 309.367445][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.379934][ T4357] device veth1_macvtap left promiscuous mode [ 309.386050][ T4357] device veth0_macvtap left promiscuous mode [ 309.414989][ T4357] device veth1_vlan left promiscuous mode [ 309.427349][ T4357] device veth0_vlan left promiscuous mode [ 310.238594][ T8398] loop7: detected capacity change from 0 to 2048 [ 310.720850][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 310.738285][ T8398] UDF-fs: bad mount option "01777777777777777777777ÿÿÿÿ" or missing value [ 311.580991][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 311.603003][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 311.623146][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.649784][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.746255][ T4357] bond0 (unregistering): Released all slaves [ 311.872978][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.104006][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.339110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.385566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.610853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.681954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.690536][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.697646][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.705968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.722992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.788258][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.795388][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.820906][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 312.898749][ T8435] loop7: detected capacity change from 0 to 512 [ 312.929869][ T8437] loop5: detected capacity change from 0 to 2048 [ 312.955599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.967100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.995675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.035413][ T25] audit: type=1800 audit(1790352715.999:15): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1030" name="file1" dev="loop7" ino=1048627 res=0 errno=0 [ 313.055547][ T8435] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 313.077935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.110994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.122235][ T8435] FAT-fs (loop7): Filesystem has been set read-only [ 313.137340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.156152][ T8435] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 313.157040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.176624][ T8435] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 313.221478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.244134][ T8454] loop3: detected capacity change from 0 to 2048 [ 313.251448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.273621][ T8285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.298045][ T8454] UDF-fs: bad mount option "01777777777777777777777ÿÿÿÿ" or missing value [ 313.307537][ T8285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.327180][ T8449] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 313.346980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.358636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.387511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.606246][ T8466] loop5: detected capacity change from 0 to 256 [ 313.677309][ T8466] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 313.826817][ T8466] loop_set_status: loop5 () has still dirty pages (nrpages=3) [ 313.862507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.887658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.920591][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.962533][ T8512] loop3: detected capacity change from 0 to 164 [ 315.045259][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.072000][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.302964][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.428129][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.470232][ T8285] device veth0_vlan entered promiscuous mode [ 315.490523][ T8285] device veth1_vlan entered promiscuous mode [ 315.647651][ T8285] device veth0_macvtap entered promiscuous mode [ 315.705620][ T8285] device veth1_macvtap entered promiscuous mode [ 315.736886][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.707443][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.730369][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.748685][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 317.203603][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210065][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.302836][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.339888][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.352522][ T8545] loop5: detected capacity change from 0 to 8 [ 317.386871][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.420706][ T8545] SQUASHFS error: lzo decompression failed, data probably corrupt [ 317.516708][ T4229] Bluetooth: hci0: command 0x0c1a tx timeout [ 317.523681][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 317.540380][ T8545] SQUASHFS error: Failed to read block 0x91: -5 [ 317.620553][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.638737][ T8545] SQUASHFS error: Unable to read metadata cache entry [8f] [ 317.661205][ T8552] loop7: detected capacity change from 0 to 512 [ 317.666466][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.669928][ T8545] SQUASHFS error: Unable to read inode 0x11f [ 317.701792][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.736406][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.767878][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.806418][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.816257][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.855441][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.894195][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.925550][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.984041][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.039036][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.072879][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.085649][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.099508][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.152286][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.176491][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.201725][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.279732][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.323254][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.358640][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.392831][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.414587][ T8285] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.427023][ T8285] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.443071][ T8285] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.455231][ T8285] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.676931][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.691424][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.798986][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 318.840390][ T8567] loop5: detected capacity change from 0 to 128 [ 319.076967][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.132901][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.433558][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.690350][ T8588] xt_hashlimit: max too large, truncated to 1048576 [ 319.748072][ T8590] loop8: detected capacity change from 0 to 1024 [ 319.760757][ T8590] EXT4-fs (loop8): Ignoring removed orlov option [ 319.843389][ T8590] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 320.810630][ T8592] kvm [8586]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 321.613088][ T8614] loop8: detected capacity change from 0 to 1024 [ 321.652046][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 321.686455][ T8580] FAT-fs (loop5): Filesystem has been set read-only [ 321.715431][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 321.739356][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 321.856339][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 321.868458][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 321.879198][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 322.140419][ T8625] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 322.618693][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 322.665685][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 322.718949][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 322.887368][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 322.906623][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 322.916318][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.555211][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.563901][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.600169][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.654089][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.721536][ T8648] loop4: detected capacity change from 0 to 8 [ 323.747050][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.756251][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.772261][ T8648] SQUASHFS error: Failed to read block 0x62: -5 [ 323.825987][ T8648] squashfs image failed sanity check [ 323.965192][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.979131][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 323.989482][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.009812][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.021179][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.029821][ T8252] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 324.339051][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.347843][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.359001][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.374205][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.397765][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.407145][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.423107][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.432114][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.441304][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.450220][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.474764][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.483958][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.533045][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.544547][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.552724][ T8677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 324.581720][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.590538][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.616509][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.640377][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.650574][ T8580] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 324.796720][ T25] audit: type=1800 audit(1790352727.759:16): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1060" name="file1" dev="loop5" ino=1048643 res=0 errno=0 [ 324.831819][ T8682] loop7: detected capacity change from 0 to 512 [ 325.410297][ T8682] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 325.452832][ T8682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 325.516706][ T8252] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.537070][ T8682] System zones: 0-1, 15-15, 18-18, 34-34 [ 325.567156][ T8682] EXT4-fs (loop7): orphan cleanup on readonly fs [ 325.592825][ T8682] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 325.610267][ T8682] EXT4-fs warning (device loop7): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 325.634570][ T8682] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 325.660405][ T8682] EXT4-fs (loop7): 1 truncate cleaned up [ 325.673407][ T8682] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.766549][ T8252] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.775697][ T8252] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.738454][ T8350] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 326.767952][ T8252] usb 9-1: Product: syz [ 326.772517][ T8252] usb 9-1: Manufacturer: syz [ 326.777689][ T8252] usb 9-1: SerialNumber: syz [ 326.837011][ T8252] usb 9-1: can't set config #1, error -71 [ 326.858925][ T8252] usb 9-1: USB disconnect, device number 2 [ 327.117195][ T8350] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.162667][ T8350] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.248250][ T8709] loop8: detected capacity change from 0 to 8 [ 327.302156][ T8350] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.323300][ T8709] SQUASHFS error: lzo decompression failed, data probably corrupt [ 327.350883][ T8350] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 327.370384][ T8709] SQUASHFS error: Failed to read block 0x91: -5 [ 327.396558][ T8709] SQUASHFS error: Unable to read metadata cache entry [8f] [ 327.403934][ T8350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.446534][ T8709] SQUASHFS error: Unable to read inode 0x11f [ 327.494937][ T8350] usb 5-1: config 0 descriptor?? [ 327.766113][ T8252] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 327.797069][ T8252] Bluetooth: hci4: Injecting HCI hardware error event [ 327.831188][ T4201] Bluetooth: hci4: hardware error 0x00 [ 327.944206][ T8724] Illegal XDP return value 518379068, expect packet loss! [ 328.092966][ T8729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 328.179694][ T8731] loop8: detected capacity change from 0 to 128 [ 328.291245][ T8731] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.378253][ T8731] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.436659][ T8350] sony 0003:054C:09CC.0002: Retrying DualShock 4 get calibration report (0x02) request [ 328.646883][ T8350] sony 0003:054C:09CC.0002: Failed to get calibration data from Dualshock 4 [ 328.833914][ T8350] sony 0003:054C:09CC.0002: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 329.208113][ T8350] sony 0003:054C:09CC.0002: failed to claim input [ 329.278394][ T8350] usb 5-1: USB disconnect, device number 9 [ 329.354759][ T8747] fido_id[8747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 329.467034][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 330.571355][ T8776] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 330.663103][ T8750] kvm [8749]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 330.690878][ T8780] loop8: detected capacity change from 0 to 128 [ 330.755939][ T8783] loop5: detected capacity change from 0 to 1024 [ 330.760258][ T8770] loop7: detected capacity change from 0 to 8 [ 330.874652][ T8770] SQUASHFS error: lzo decompression failed, data probably corrupt [ 331.046052][ T8770] SQUASHFS error: Failed to read block 0x91: -5 [ 331.402156][ T8770] SQUASHFS error: Unable to read metadata cache entry [8f] [ 331.839519][ T8770] SQUASHFS error: Unable to read inode 0x11f [ 332.075763][ T8803] loop7: detected capacity change from 0 to 512 [ 332.090398][ T8798] binder_alloc: 8797: binder_alloc_buf, no vma [ 332.147137][ T8803] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 332.176609][ T8803] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.247752][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 332.257610][ T8789] FAT-fs (loop8): Filesystem has been set read-only [ 332.267507][ T8813] loop5: detected capacity change from 0 to 256 [ 332.276718][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 332.282492][ T8803] fs-verity (loop7, inode 15): Unrecognized descriptor size: 0 bytes [ 332.293700][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 332.296995][ T8813] exfat: Deprecated parameter 'utf8' [ 332.310332][ T8813] exfat: Deprecated parameter 'namecase' [ 332.315990][ T8813] exfat: Deprecated parameter 'utf8' [ 332.331550][ T8813] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 332.350387][ T8813] attempt to access beyond end of device [ 332.350387][ T8813] loop5: rw=524288, want=34359738496, limit=256 [ 332.363112][ T8813] attempt to access beyond end of device [ 332.363112][ T8813] loop5: rw=0, want=34359738496, limit=256 [ 332.374786][ T25] audit: type=1800 audit(1790352735.349:17): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1116" name="file1" dev="loop5" ino=1048645 res=0 errno=0 [ 332.374870][ T8813] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 333.269028][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 333.295366][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 333.808748][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 333.848328][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 333.865756][ T8842] loop4: detected capacity change from 0 to 136 [ 333.869239][ T8837] binder: 8834:8837 unknown command 34 [ 333.917050][ T8837] binder: 8834:8837 ioctl c0306201 2000000001c0 returned -22 [ 333.924653][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 333.973526][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 333.989667][ T8842] rock: directory entry would overflow storage [ 334.021459][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.039055][ T8837] netlink: 'syz.7.1118': attribute type 11 has an invalid length. [ 334.053816][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.065593][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.084341][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.093812][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.107715][ T8845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.123728][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.129540][ T8842] rock: sig=0x4f50, size=4, remaining=3 [ 334.149134][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.165957][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.168321][ T8842] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 334.193430][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.211098][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.220052][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.232627][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.249332][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.305659][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.315081][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.324344][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.336329][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.356975][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.527754][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.536707][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.546253][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.596213][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.613264][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.622300][ T8862] loop7: detected capacity change from 0 to 512 [ 334.637216][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.658179][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.689466][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.718185][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.738699][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.758669][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.770571][ T8866] loop4: detected capacity change from 0 to 512 [ 334.772396][ T8870] loop5: detected capacity change from 0 to 256 [ 334.805677][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.815160][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.817080][ T8870] exfat: Deprecated parameter 'utf8' [ 334.829046][ T8870] exfat: Deprecated parameter 'namecase' [ 334.834696][ T8870] exfat: Deprecated parameter 'utf8' [ 335.515732][ T8870] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 335.537041][ T8870] attempt to access beyond end of device [ 335.537041][ T8870] loop5: rw=524288, want=34359738496, limit=256 [ 335.548878][ T8870] attempt to access beyond end of device [ 335.548878][ T8870] loop5: rw=0, want=34359738496, limit=256 [ 335.560648][ T8870] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 335.568168][ T25] audit: type=1800 audit(1790352994.535:18): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1130" name="file1" dev="loop5" ino=1048647 res=0 errno=0 [ 335.699289][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 335.726475][ T8862] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 335.937153][ T8866] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 336.081162][ T8789] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 336.089949][ T8862] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.106794][ T25] audit: type=1800 audit(1790352995.075:19): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1107" name="file1" dev="loop8" ino=1048644 res=0 errno=0 [ 336.126881][ T8866] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 336.134890][ T8866] System zones: 0-1, 15-15, 18-18, 34-34 [ 336.167988][ T8866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 336.176328][ T8862] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1128: corrupted inode contents [ 336.205008][ T8866] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 336.255067][ T8866] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 336.282077][ T8862] EXT4-fs (loop7): Remounting filesystem read-only [ 336.310915][ T8862] EXT4-fs error (device loop7): ext4_dirty_inode:6087: inode #2: comm syz.7.1128: mark_inode_dirty error [ 336.334469][ T8866] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 336.821164][ T8896] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1134'. [ 336.858829][ T8866] EXT4-fs (loop4): 1 truncate cleaned up [ 336.867991][ T8862] EXT4-fs (loop7): Remounting filesystem read-only [ 336.953332][ T8866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 336.965709][ T8862] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1128: corrupted inode contents [ 337.031428][ T8862] EXT4-fs (loop7): Remounting filesystem read-only [ 337.101788][ T8889] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1128: corrupted inode contents [ 338.173134][ T8889] EXT4-fs (loop7): Remounting filesystem read-only [ 338.181004][ T8889] EXT4-fs error (device loop7): ext4_dirty_inode:6087: inode #2: comm syz.7.1128: mark_inode_dirty error [ 338.197299][ T8889] EXT4-fs (loop7): Remounting filesystem read-only [ 338.205192][ T8889] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1128: corrupted inode contents [ 338.313185][ T8889] EXT4-fs (loop7): Remounting filesystem read-only [ 338.368872][ T8889] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.1128: mark_inode_dirty error [ 338.385681][ T8902] binder_alloc: 8901: binder_alloc_buf, no vma [ 338.424462][ T8889] EXT4-fs (loop7): Remounting filesystem read-only [ 338.432917][ T8889] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.1128: corrupted inode contents [ 338.475278][ T8889] EXT4-fs (loop7): Remounting filesystem read-only [ 338.519554][ T8889] EXT4-fs error (device loop7): ext4_dirty_inode:6087: inode #2: comm syz.7.1128: mark_inode_dirty error [ 338.565767][ T8889] EXT4-fs (loop7): Remounting filesystem read-only [ 340.478802][ T8937] loop5: detected capacity change from 0 to 256 [ 340.488146][ T8937] exfat: Deprecated parameter 'utf8' [ 340.493482][ T8937] exfat: Deprecated parameter 'namecase' [ 340.499218][ T8937] exfat: Deprecated parameter 'utf8' [ 341.183291][ T8937] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 341.286930][ T8937] attempt to access beyond end of device [ 341.286930][ T8937] loop5: rw=524288, want=34359738496, limit=256 [ 341.298801][ T8937] attempt to access beyond end of device [ 341.298801][ T8937] loop5: rw=0, want=34359738496, limit=256 [ 341.310323][ T25] audit: type=1800 audit(1790353000.275:20): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1145" name="file1" dev="loop5" ino=1048657 res=0 errno=0 [ 341.310504][ T8937] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 341.578055][ T8954] loop7: detected capacity change from 0 to 16 [ 341.654386][ T8954] erofs: (device loop7): check_layout_compatibility: unidentified incompatible feature 10, please upgrade kernel version [ 341.959923][ T8967] binder: 8963:8967 unknown command 34 [ 341.987808][ T8967] binder: 8963:8967 ioctl c0306201 2000000001c0 returned -22 [ 341.989715][ T8967] netlink: 'syz.4.1152': attribute type 11 has an invalid length. [ 342.066625][ T8967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.067138][ T8969] binder_alloc: 8968: binder_alloc_buf, no vma [ 342.396549][ T4175] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 343.017249][ T4175] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 343.268995][ T4175] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.406078][ T4175] usb 9-1: Product: syz [ 343.424636][ T4175] usb 9-1: Manufacturer: syz [ 343.446400][ T4175] usb 9-1: SerialNumber: syz [ 343.650554][ T8999] loop7: detected capacity change from 0 to 1024 [ 346.343831][ T8997] loop5: detected capacity change from 0 to 8 [ 346.383771][ T9020] loop8: detected capacity change from 0 to 16 [ 346.445217][ T9020] erofs: (device loop8): check_layout_compatibility: unidentified incompatible feature 10, please upgrade kernel version [ 346.464874][ T8997] unable to read xattr id index table [ 346.706537][ T8350] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 346.840419][ T9030] binder_alloc: 9029: binder_alloc_buf, no vma [ 347.053863][ T9039] loop8: detected capacity change from 0 to 1024 [ 347.076652][ T8350] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 347.076678][ T8350] usb 5-1: config 0 has no interface number 0 [ 347.076698][ T8350] usb 5-1: too many endpoints for config 0 interface 16 altsetting 5: 66, using maximum allowed: 30 [ 347.076721][ T8350] usb 5-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.076743][ T8350] usb 5-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 347.076766][ T8350] usb 5-1: config 0 interface 16 has no altsetting 0 [ 347.076792][ T8350] usb 5-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 347.076814][ T8350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.078372][ T8350] usb 5-1: config 0 descriptor?? [ 347.840053][ T8350] input: HID 0738:1709 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.16/0003:0738:1709.0003/input/input9 [ 348.035981][ T8350] saitek 0003:0738:1709.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.4-1/input16 [ 348.524371][ T8350] usb 5-1: USB disconnect, device number 10 [ 348.658818][ T9082] loop8: detected capacity change from 0 to 2048 [ 348.784752][ T9078] device syzkaller0 entered promiscuous mode [ 349.086949][ T4175] rtl8150 9-1:1.0: couldn't reset the device [ 349.110932][ T4175] rtl8150: probe of 9-1:1.0 failed with error -5 [ 349.306321][ T4175] usb 9-1: USB disconnect, device number 3 [ 351.093096][ T9118] loop5: detected capacity change from 0 to 1024 [ 351.117865][ T9119] loop4: detected capacity change from 0 to 128 [ 352.102273][ T9133] loop7: detected capacity change from 0 to 512 [ 353.297932][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.348964][ T9128] FAT-fs (loop4): Filesystem has been set read-only [ 353.373571][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.386506][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.406845][ T9133] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000007,abort,,errors=continue. Quota mode: writeback. [ 353.425964][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.469530][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.470377][ T9133] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.566933][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.593778][ T9133] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 3: comm syz.7.1179: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 353.626066][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.661613][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.735194][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.800646][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.811755][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.823199][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.839842][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.854369][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 353.866574][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 353.887122][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.083518][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.123937][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.136777][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.197697][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.243769][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.275238][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.284511][ T21] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 354.343184][ T21] usb 6-1: config 0 has no interface number 0 [ 354.350933][ T21] usb 6-1: too many endpoints for config 0 interface 16 altsetting 5: 66, using maximum allowed: 30 [ 354.986292][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 354.986562][ T21] usb 6-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.011211][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.019918][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.030702][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.040715][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.049560][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.082923][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.100694][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.112467][ T21] usb 6-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 355.128453][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.133005][ T21] usb 6-1: config 0 interface 16 has no altsetting 0 [ 355.548835][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.558303][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.575342][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.585305][ T21] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 355.594988][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.604420][ T9128] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 355.635455][ T25] audit: type=1800 audit(1790353014.595:21): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1180" name="file1" dev="loop4" ino=1048667 res=0 errno=0 [ 355.665823][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.734221][ T21] usb 6-1: config 0 descriptor?? [ 356.272456][ T21] input: HID 0738:1709 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.16/0003:0738:1709.0004/input/input10 [ 356.285652][ T9205] loop7: detected capacity change from 0 to 2048 [ 356.409185][ T9205] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.428165][ T21] saitek 0003:0738:1709.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input16 [ 356.598188][ T9205] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 356.665397][ T9205] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 356.768335][ T9205] EXT4-fs (loop7): This should not happen!! Data will be lost [ 356.768335][ T9205] [ 356.808575][ T9205] EXT4-fs (loop7): Total free blocks count 0 [ 356.835074][ T9205] EXT4-fs (loop7): Free/Dirty block details [ 356.849286][ T9220] loop4: detected capacity change from 0 to 8192 [ 356.866074][ T9205] EXT4-fs (loop7): free_blocks=4096 [ 356.873433][ T9205] EXT4-fs (loop7): dirty_blocks=64 [ 356.890356][ T9205] EXT4-fs (loop7): Block reservation details [ 356.903870][ T9205] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 356.952776][ T9218] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 58 with error 28 [ 356.972932][ T21] usb 6-1: USB disconnect, device number 4 [ 356.987296][ T9218] EXT4-fs (loop7): This should not happen!! Data will be lost [ 356.987296][ T9218] [ 360.466476][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 361.306523][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 361.716970][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.793843][ T21] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 361.902407][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.213914][ T9339] loop5: detected capacity change from 0 to 128 [ 362.315507][ T9339] FAT-fs (loop5): Unrecognized mount option "UæíZ¡¬=“ìü‘œ‹KÚXL. %‰ì" or missing value [ 363.047394][ T21] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 363.065143][ T21] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 363.078558][ T21] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0005/input/input11 [ 364.066307][ T4238] usb 5-1: USB disconnect, device number 11 [ 364.492749][ T9379] loop7: detected capacity change from 0 to 16 [ 364.558479][ T9379] erofs: (device loop7): mounted with root inode @ nid 36. [ 365.308601][ T9386] loop4: detected capacity change from 0 to 256 [ 365.362363][ T9386] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.926719][ T9386] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.796654][ T9409] loop4: detected capacity change from 0 to 1024 [ 366.939633][ T9417] loop8: detected capacity change from 0 to 128 [ 367.206334][ T9417] FAT-fs (loop8): Unrecognized mount option "UæíZ¡¬=“ìü‘œ‹KÚXL. %‰ì" or missing value [ 367.766280][ T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 367.799173][ T9424] loop7: detected capacity change from 0 to 512 [ 367.983989][ T9424] EXT4-fs (loop7): mounted filesystem without journal. Opts: sysvgroups,grpid,,errors=continue. Quota mode: writeback. [ 368.219578][ T9424] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.256576][ T13] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.699113][ T13] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 368.727042][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.914095][ T9459] loop7: detected capacity change from 0 to 512 [ 368.934074][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.003037][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.009852][ T13] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 370.050905][ T13] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 370.092139][ T13] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0006/input/input14 [ 370.896753][ C1] wacom 0003:056A:033B.0006: Event data for report 2 was too short (9 vs 0) [ 371.141776][ T9488] loop4: detected capacity change from 0 to 8 [ 371.202755][ T4238] usb 6-1: USB disconnect, device number 5 [ 371.341689][ T9488] SQUASHFS error: Failed to read block 0x285: -5 [ 371.366476][ T9488] SQUASHFS error: Unable to read metadata cache entry [283] [ 371.383331][ T9488] SQUASHFS error: Unable to read symlink [8f:60] [ 372.645275][ T9528] loop5: detected capacity change from 0 to 512 [ 373.655062][ T9545] loop4: detected capacity change from 0 to 1024 [ 373.722886][ T9550] loop7: detected capacity change from 0 to 256 [ 373.747042][ T9550] exfat: Deprecated parameter 'utf8' [ 373.752380][ T9550] exfat: Deprecated parameter 'namecase' [ 373.758069][ T9550] exfat: Deprecated parameter 'utf8' [ 373.878081][ T9550] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 373.904290][ T9550] attempt to access beyond end of device [ 373.904290][ T9550] loop7: rw=524288, want=34359738496, limit=256 [ 373.916509][ T9550] attempt to access beyond end of device [ 373.916509][ T9550] loop7: rw=0, want=34359738496, limit=256 [ 373.928825][ T9550] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 373.936884][ T25] audit: type=1800 audit(1790353032.895:22): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1271" name="file1" dev="loop7" ino=1048669 res=0 errno=0 [ 375.801377][ T9565] loop7: detected capacity change from 0 to 2048 [ 375.839643][ T9565] device syzkaller0 entered promiscuous mode [ 376.643156][ T9596] kvm [9595]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.961625][ T9617] loop8: detected capacity change from 0 to 256 [ 376.997092][ T9617] exfat: Deprecated parameter 'utf8' [ 377.002455][ T9617] exfat: Deprecated parameter 'namecase' [ 377.008351][ T9617] exfat: Deprecated parameter 'utf8' [ 377.039970][ T9617] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 377.061115][ T9617] attempt to access beyond end of device [ 377.061115][ T9617] loop8: rw=524288, want=34359738496, limit=256 [ 377.073134][ T9617] attempt to access beyond end of device [ 377.073134][ T9617] loop8: rw=0, want=34359738496, limit=256 [ 377.084845][ T9617] exFAT-fs (loop8): error, tried to truncate zeroed cluster. [ 377.092396][ T25] audit: type=1800 audit(1790353036.045:23): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1286" name="file1" dev="loop8" ino=1048679 res=0 errno=0 [ 377.205975][ T9623] loop5: detected capacity change from 0 to 2048 [ 377.298669][ T9623] device syzkaller0 entered promiscuous mode [ 379.544535][ T9678] loop8: detected capacity change from 0 to 256 [ 379.727029][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.736099][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.768776][ T9678] exfat: Deprecated parameter 'utf8' [ 379.775474][ T9678] exfat: Deprecated parameter 'namecase' [ 379.781311][ T9678] exfat: Deprecated parameter 'utf8' [ 379.849667][ T9678] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 379.891587][ T9678] attempt to access beyond end of device [ 379.891587][ T9678] loop8: rw=524288, want=34359738496, limit=256 [ 379.903909][ T9678] attempt to access beyond end of device [ 379.903909][ T9678] loop8: rw=0, want=34359738496, limit=256 [ 379.904800][ T9682] loop5: detected capacity change from 0 to 2048 [ 379.915712][ T9678] exFAT-fs (loop8): error, tried to truncate zeroed cluster. [ 379.922727][ T25] audit: type=1800 audit(1790353038.885:24): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1306" name="file1" dev="loop8" ino=1048689 res=0 errno=0 [ 380.300910][ T9682] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 380.441746][ T9682] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 380.547464][ T9682] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 380.626505][ T9682] UDF-fs: Scanning with blocksize 512 failed [ 380.662834][ T9682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.763449][ T9707] loop8: detected capacity change from 0 to 8 [ 380.867240][ T9707] SQUASHFS error: zlib decompression failed, data probably corrupt [ 380.898028][ T9707] SQUASHFS error: Failed to read block 0x4de: -5 [ 380.912764][ T9707] SQUASHFS error: Failed to read block 0x4e2: -5 [ 380.959650][ T9707] SQUASHFS error: Failed to read block 0x9ca: -5 [ 380.999591][ T9707] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 381.006141][ T9707] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 381.034966][ T9707] SQUASHFS error: Failed to read block 0x535f2: -5 [ 381.051530][ T25] audit: type=1800 audit(1790353040.015:25): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1314" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 381.603468][ T9739] loop5: detected capacity change from 0 to 512 [ 381.748766][ T9742] loop4: detected capacity change from 0 to 16 [ 381.788141][ T9739] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.1324: inode has both inline data and extents flags [ 381.812084][ T9739] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1324: couldn't read orphan inode 15 (err -117) [ 381.866535][ T9742] erofs: (device loop4): mounted with root inode @ nid 36. [ 381.954610][ T9739] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 382.707090][ T9757] EXT4-fs (loop5): shut down requested (1) [ 384.593120][ T9788] loop4: detected capacity change from 0 to 512 [ 384.653276][ T9791] loop8: detected capacity change from 0 to 16 [ 384.774312][ T9791] erofs: (device loop8): mounted with root inode @ nid 36. [ 384.872871][ T9788] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 384.907071][ T9788] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.975596][ T9787] kvm [9783]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 385.041479][ T9800] loop5: detected capacity change from 0 to 128 [ 385.198490][ T9802] loop4: detected capacity change from 0 to 1024 [ 385.239762][ T9800] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 385.298788][ T9800] FAT-fs (loop5): Filesystem has been set read-only [ 385.323947][ T9800] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 385.433772][ T9787] kvm [9783]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 386.085417][ T9823] loop5: detected capacity change from 0 to 1024 [ 387.070457][ T9823] hfsplus: request for non-existent node 33554434 in B*Tree [ 387.117821][ T9823] hfsplus: request for non-existent node 33554434 in B*Tree [ 387.155247][ T9842] loop7: detected capacity change from 0 to 8 [ 387.177297][ T9823] hfsplus: request for non-existent node 33554434 in B*Tree [ 387.191455][ T9823] hfsplus: request for non-existent node 33554434 in B*Tree [ 387.204844][ T9823] hfsplus: request for non-existent node 33554434 in B*Tree [ 387.209967][ T9844] loop8: detected capacity change from 0 to 16 [ 387.236481][ T9823] hfsplus: request for non-existent node 33554434 in B*Tree [ 387.264325][ T9842] SQUASHFS error: zlib decompression failed, data probably corrupt [ 387.292490][ T9842] SQUASHFS error: Failed to read block 0x4de: -5 [ 387.293513][ T9844] erofs: (device loop8): mounted with root inode @ nid 36. [ 387.311464][ T9842] SQUASHFS error: Failed to read block 0x4e2: -5 [ 387.327194][ T9842] SQUASHFS error: Failed to read block 0x9ca: -5 [ 387.349902][ T9842] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 387.385564][ T9842] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 387.425632][ T9842] SQUASHFS error: Failed to read block 0x535f2: -5 [ 387.435999][ T1107] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 387.446388][ T25] audit: type=1800 audit(1790353046.395:26): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1351" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 387.504167][ T9858] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1357'. [ 387.603133][ T9866] loop8: detected capacity change from 0 to 512 [ 387.633351][ T9868] loop7: detected capacity change from 0 to 1024 [ 388.166744][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1358'. [ 388.609161][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1358'. [ 389.616559][ T1107] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 389.624752][ T1107] usb 5-1: config 0 has no interface number 0 [ 389.631211][ T1107] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 389.643167][ T1107] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 389.675554][ T9885] loop5: detected capacity change from 0 to 256 [ 389.686463][ T1107] usb 5-1: config 0 interface 255 has no altsetting 0 [ 389.693262][ T1107] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 389.736998][ T9885] exfat: Deprecated parameter 'utf8' [ 389.742337][ T9885] exfat: Deprecated parameter 'namecase' [ 389.748084][ T9885] exfat: Deprecated parameter 'utf8' [ 389.756563][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.797356][ T1107] usb 5-1: config 0 descriptor?? [ 389.817333][ T9885] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 389.838281][ T1107] cp210x 5-1:0.255: cp210x converter detected [ 389.884877][ T9885] attempt to access beyond end of device [ 389.884877][ T9885] loop5: rw=524288, want=34359738496, limit=256 [ 389.896896][ T9885] attempt to access beyond end of device [ 389.896896][ T9885] loop5: rw=0, want=34359738496, limit=256 [ 389.909002][ T25] audit: type=1800 audit(1790353048.875:27): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1365" name="file1" dev="loop5" ino=1048700 res=0 errno=0 [ 389.909171][ T9885] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 390.071135][ T9897] loop7: detected capacity change from 0 to 16 [ 390.152152][ T9897] erofs: (device loop7): mounted with root inode @ nid 36. [ 390.266658][ T1107] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 390.345724][ T1107] usb 5-1: cp210x converter now attached to ttyUSB0 [ 390.365858][ T1107] usb 5-1: USB disconnect, device number 12 [ 390.402300][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 390.427500][ T1107] cp210x 5-1:0.255: device disconnected [ 390.581820][ T9913] binder: 9912:9913 ioctl c0306201 0 returned -14 [ 391.109898][ T9927] loop5: detected capacity change from 0 to 1024 [ 391.193938][ T9927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.386583][ T9935] loop_set_status: loop5 () has still dirty pages (nrpages=112) [ 392.423902][ T9946] loop7: detected capacity change from 0 to 16 [ 392.476784][ T9950] loop5: detected capacity change from 0 to 256 [ 392.496841][ T9950] exfat: Deprecated parameter 'utf8' [ 392.502189][ T9950] exfat: Deprecated parameter 'namecase' [ 392.508070][ T9950] exfat: Deprecated parameter 'utf8' [ 392.527688][ T9950] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 392.543286][ T9950] attempt to access beyond end of device [ 392.543286][ T9950] loop5: rw=524288, want=34359738496, limit=256 [ 392.555163][ T9950] attempt to access beyond end of device [ 392.555163][ T9950] loop5: rw=0, want=34359738496, limit=256 [ 392.568060][ T9950] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 392.575690][ T25] audit: type=1800 audit(1790353051.535:28): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1383" name="file1" dev="loop5" ino=1048710 res=0 errno=0 [ 392.666453][ T7326] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 392.679644][ T9946] erofs: (device loop7): mounted with root inode @ nid 36. [ 392.936525][ T7326] usb 9-1: Using ep0 maxpacket: 16 [ 392.998508][ T9966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1389'. [ 393.056656][ T7326] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 225, changing to 7 [ 393.126807][ T9969] loop4: detected capacity change from 0 to 4096 [ 393.191467][ T9969] EXT4-fs (loop4): Test dummy encryption mode enabled [ 393.241138][ T9969] EXT4-fs (loop4): Ignoring removed orlov option [ 393.393201][ T9969] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x00000000000000b6,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 393.522256][ T7326] usb 9-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 393.544129][ T7326] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.581476][ T7326] usb 9-1: Product: syz [ 393.585672][ T7326] usb 9-1: Manufacturer: syz [ 393.594902][ T7326] usb 9-1: SerialNumber: syz [ 393.781027][ T9990] loop4: detected capacity change from 0 to 512 [ 393.799502][ T9993] loop7: detected capacity change from 0 to 256 [ 393.907049][ T9993] exfat: Deprecated parameter 'utf8' [ 393.912430][ T9993] exfat: Deprecated parameter 'namecase' [ 393.918162][ T9993] exfat: Deprecated parameter 'utf8' [ 394.023955][ T9993] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 394.063954][ T9993] attempt to access beyond end of device [ 394.063954][ T9993] loop7: rw=524288, want=34359738496, limit=256 [ 394.075943][ T9993] attempt to access beyond end of device [ 394.075943][ T9993] loop7: rw=0, want=34359738496, limit=256 [ 394.087714][ T9993] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 394.095290][ T25] audit: type=1800 audit(1790353053.055:29): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1395" name="file1" dev="loop7" ino=1048720 res=0 errno=0 [ 394.257617][ T9990] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.1393: inode has both inline data and extents flags [ 394.419040][ T9990] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1393: couldn't read orphan inode 15 (err -117) [ 394.446713][ T7326] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 394.456762][ T9990] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 394.486558][ T7326] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 394.548167][ T7326] usb 9-1: USB disconnect, device number 4 [ 394.769594][T10014] loop5: detected capacity change from 0 to 16 [ 395.111019][T10014] erofs: (device loop5): mounted with root inode @ nid 36. [ 395.174335][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.551991][T10030] loop5: detected capacity change from 0 to 1024 [ 395.822165][T10030] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 396.044333][T10030] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,quota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 396.076105][T10029] ip_tables: iptables: counters copy to user failed while replacing table [ 396.166109][ T25] audit: type=1326 audit(1790353055.125:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.206292][ T25] audit: type=1326 audit(1790353055.125:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.255842][ T25] audit: type=1326 audit(1790353055.125:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.281556][ T25] audit: type=1326 audit(1790353055.165:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.317928][ T25] audit: type=1326 audit(1790353055.165:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.412195][ T25] audit: type=1326 audit(1790353055.165:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.458926][ T25] audit: type=1326 audit(1790353055.165:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.543198][ T25] audit: type=1326 audit(1790353055.165:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.4.1406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f5d69627159 code=0x7ffc0000 [ 396.712357][T10045] loop5: detected capacity change from 0 to 128 [ 396.725159][T10045] UDF-fs: bad mount option "01777777777777777777777ÿ" or missing value [ 396.854699][T10057] loop8: detected capacity change from 0 to 16 [ 396.909421][T10057] erofs: (device loop8): mounted with root inode @ nid 36. [ 396.990384][T10059] loop8: detected capacity change from 0 to 1024 [ 397.136427][ T4229] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 397.185220][ T7326] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 397.626500][ T7326] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.766542][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 397.816634][ T7326] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.835990][ T7326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.845056][ T7326] usb 6-1: Product: syz [ 397.850746][ T7326] usb 6-1: Manufacturer: syz [ 397.861382][ T7326] usb 6-1: SerialNumber: syz [ 397.901471][ T4229] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 225, changing to 7 [ 397.923629][T10072] loop7: detected capacity change from 0 to 128 [ 398.036591][ T8350] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 398.096775][ T4229] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 398.106308][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.114713][ T4229] usb 5-1: Product: syz [ 398.120453][ T4229] usb 5-1: Manufacturer: syz [ 398.125138][ T4229] usb 5-1: SerialNumber: syz [ 398.363315][ T8350] usb 9-1: Using ep0 maxpacket: 16 [ 398.486741][ T8350] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 398.536717][ T4229] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 398.566517][ T4229] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 398.619743][ T4229] usb 5-1: USB disconnect, device number 13 [ 398.667168][ T8350] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 398.681227][ T8350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.725681][ T8350] usb 9-1: Product: syz [ 398.738001][ T8350] usb 9-1: Manufacturer: syz [ 398.743300][ T8350] usb 9-1: SerialNumber: syz [ 398.750081][ T8350] usb 9-1: config 0 descriptor?? [ 398.788888][ T8350] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 398.810865][ T8350] usb 9-1: Detected FT232RL [ 398.899429][ T6597] udevd[6597]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.006571][ T8350] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 399.026609][ T7326] cdc_ncm 6-1:1.0: bind() failure [ 399.076587][ T7326] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 399.096818][ T7326] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 399.136548][ T7326] usbtest: probe of 6-1:1.1 failed with error -71 [ 399.149378][ T7326] usb 6-1: USB disconnect, device number 6 [ 399.234402][T10102] loop7: detected capacity change from 0 to 8 [ 399.280836][ T8350] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 399.345654][T10102] SQUASHFS error: zlib decompression failed, data probably corrupt [ 399.361415][T10102] SQUASHFS error: Failed to read block 0x4de: -5 [ 399.387211][T10102] SQUASHFS error: Failed to read block 0x4e2: -5 [ 399.398474][T10102] SQUASHFS error: Failed to read block 0x9ca: -5 [ 399.415610][T10102] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 399.482135][T10102] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 399.543351][ T4229] usb 9-1: USB disconnect, device number 5 [ 399.588618][T10102] SQUASHFS error: Failed to read block 0x535f2: -5 [ 399.669405][ T4229] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 399.702405][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 399.702454][ T25] audit: type=1800 audit(1790353058.665:43): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1426" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 399.764548][ T4229] ftdi_sio 9-1:0.0: device disconnected [ 400.461780][T10129] loop7: detected capacity change from 0 to 256 [ 400.604332][T10129] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 400.755227][T10135] loop4: detected capacity change from 0 to 512 [ 400.777143][T10137] loop8: detected capacity change from 0 to 8 [ 400.841858][T10137] SQUASHFS error: zlib decompression failed, data probably corrupt [ 400.887685][T10137] SQUASHFS error: Failed to read block 0x4de: -5 [ 400.894439][T10137] SQUASHFS error: Failed to read block 0x4e2: -5 [ 400.911160][T10137] SQUASHFS error: Failed to read block 0x9ca: -5 [ 401.871270][T10137] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 401.878626][T10137] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 401.885292][T10137] SQUASHFS error: Failed to read block 0x535f2: -5 [ 401.908382][T10144] loop5: detected capacity change from 0 to 256 [ 401.941229][ T25] audit: type=1800 audit(1790353060.905:44): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1446" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 401.976973][T10144] exfat: Deprecated parameter 'utf8' [ 401.982319][T10144] exfat: Deprecated parameter 'namecase' [ 401.988164][T10144] exfat: Deprecated parameter 'utf8' [ 402.068768][T10144] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 402.107055][T10144] attempt to access beyond end of device [ 402.107055][T10144] loop5: rw=524288, want=34359738496, limit=256 [ 402.118976][T10144] attempt to access beyond end of device [ 402.118976][T10144] loop5: rw=0, want=34359738496, limit=256 [ 402.130638][T10144] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 402.138122][ T25] audit: type=1800 audit(1790353061.095:45): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1438" name="file1" dev="loop5" ino=1048724 res=0 errno=0 [ 402.445958][T10149] loop8: detected capacity change from 0 to 16 [ 402.491049][T10149] erofs: (device loop8): mounted with root inode @ nid 36. [ 403.096452][ T1107] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 403.466620][ T1107] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 403.485899][ T1107] usb 9-1: config 0 has no interface number 0 [ 403.495187][ T1107] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 403.504023][T10178] loop4: detected capacity change from 0 to 2048 [ 403.524111][ T1107] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 403.541623][ T1107] usb 9-1: config 0 interface 255 has no altsetting 0 [ 403.566125][ T1107] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 403.588091][T10178] EXT4-fs (loop4): failed to initialize system zone (-117) [ 403.595504][T10178] EXT4-fs (loop4): mount failed [ 403.599238][ T1107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.649605][ T1107] usb 9-1: config 0 descriptor?? [ 403.707431][ T1107] cp210x 9-1:0.255: cp210x converter detected [ 404.206725][ T1107] cp210x 9-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 404.426458][ T1107] usb 9-1: cp210x converter now attached to ttyUSB0 [ 404.435541][T10192] loop5: detected capacity change from 0 to 128 [ 404.473025][ T1107] usb 9-1: USB disconnect, device number 6 [ 404.515034][T10194] loop4: detected capacity change from 0 to 512 [ 404.580430][T10192] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 404.591160][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.636880][ T1107] cp210x 9-1:0.255: device disconnected [ 406.631196][T10192] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.642899][T10192] ext2 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.675657][ T25] audit: type=1326 audit(1790353065.635:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.5.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5b28e5159 code=0x0 [ 406.790885][T10213] loop8: detected capacity change from 0 to 4096 [ 406.848829][T10213] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 406.886048][T10213] EXT4-fs (loop8): Test dummy encryption mode enabled [ 406.904991][T10213] EXT4-fs (loop8): Ignoring removed orlov option [ 406.956030][T10213] EXT4-fs (loop8): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 407.076303][T10213] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 407.646739][T10237] loop8: detected capacity change from 0 to 256 [ 407.686962][T10237] exfat: Deprecated parameter 'utf8' [ 407.692570][T10237] exfat: Deprecated parameter 'namecase' [ 407.698376][T10237] exfat: Deprecated parameter 'utf8' [ 407.732025][T10237] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 407.784891][T10237] attempt to access beyond end of device [ 407.784891][T10237] loop8: rw=524288, want=34359738496, limit=256 [ 407.796963][T10237] attempt to access beyond end of device [ 407.796963][T10237] loop8: rw=0, want=34359738496, limit=256 [ 407.808860][T10237] exFAT-fs (loop8): error, tried to truncate zeroed cluster. [ 407.816620][ T25] audit: type=1800 audit(1790353066.775:47): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1457" name="file1" dev="loop8" ino=1048734 res=0 errno=0 [ 408.844612][T10254] loop7: detected capacity change from 0 to 128 [ 409.392733][T10262] loop5: detected capacity change from 0 to 2048 [ 409.492662][T10262] EXT4-fs (loop5): failed to initialize system zone (-117) [ 409.538955][T10262] EXT4-fs (loop5): mount failed [ 409.861118][T10278] loop4: detected capacity change from 0 to 1024 [ 411.489669][T10306] loop5: detected capacity change from 0 to 1024 [ 413.533016][T10331] loop5: detected capacity change from 0 to 1024 [ 413.597320][T10331] hfsplus: unable to parse mount options [ 414.590596][T10367] loop8: detected capacity change from 0 to 2048 [ 414.783433][T10367] EXT4-fs (loop8): failed to initialize system zone (-117) [ 414.794657][T10367] EXT4-fs (loop8): mount failed [ 415.582140][T10376] FAULT_INJECTION: forcing a failure. [ 415.582140][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 415.582375][T10376] [ 415.582380][T10376] ====================================================== [ 415.582385][T10376] WARNING: possible circular locking dependency detected [ 415.582471][T10376] syzkaller #0 Not tainted [ 415.582480][T10376] ------------------------------------------------------ [ 415.582485][T10376] syz.4.1486/10376 is trying to acquire lock: [ 415.582493][T10376] ffffffff8c3139c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 415.582661][T10376] [ 415.582661][T10376] but task is already holding lock: [ 415.582665][T10376] ffff888024363958 (&port->lock){-...}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 415.582752][T10376] [ 415.582752][T10376] which lock already depends on the new lock. [ 415.582752][T10376] [ 415.582756][T10376] [ 415.582756][T10376] the existing dependency chain (in reverse order) is: [ 415.582761][T10376] [ 415.582761][T10376] -> #2 (&port->lock){-...}-{2:2}: [ 415.582780][T10376] _raw_spin_lock_irqsave+0xb0/0x100 [ 415.582860][T10376] tty_port_default_wakeup+0x1f/0xf0 [ 415.582875][T10376] serial8250_tx_chars+0x615/0x800 [ 415.582924][T10376] serial8250_handle_irq+0x4f5/0x5f0 [ 415.582938][T10376] serial8250_default_handle_irq+0xb4/0x1a0 [ 415.582954][T10376] serial8250_interrupt+0x9b/0x1c0 [ 415.582968][T10376] __handle_irq_event_percpu+0x299/0x9d0 [ 415.582984][T10376] handle_irq_event+0xa5/0x220 [ 415.582998][T10376] handle_edge_irq+0x242/0xb20 [ 415.583014][T10376] __common_interrupt+0xd7/0x1e0 [ 415.583076][T10376] common_interrupt+0xb0/0xd0 [ 415.583132][T10376] asm_common_interrupt+0x22/0x40 [ 415.583173][T10376] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 415.583189][T10376] uart_write+0x62f/0x880 [ 415.583201][T10376] n_tty_write+0xd19/0x1220 [ 415.583241][T10376] file_tty_write+0x50c/0x8a0 [ 415.583255][T10376] vfs_write+0x748/0xd70 [ 415.583314][T10376] ksys_write+0x153/0x260 [ 415.583327][T10376] do_syscall_64+0x4c/0xa0 [ 415.583341][T10376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.583357][T10376] [ 415.583357][T10376] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 415.583378][T10376] _raw_spin_lock_irqsave+0xb0/0x100 [ 415.583392][T10376] serial8250_console_write+0x16c/0xf50 [ 415.583407][T10376] console_unlock+0xb47/0x10f0 [ 415.583428][T10376] vprintk_emit+0xc0/0x150 [ 415.583440][T10376] _printk+0xda/0x130 [ 415.583458][T10376] register_console+0x693/0x970 [ 415.583471][T10376] univ8250_console_init+0x41/0x50 [ 415.583524][T10376] console_init+0x177/0x5d0 [ 415.583546][T10376] start_kernel+0x2fc/0x540 [ 415.583564][T10376] secondary_startup_64_no_verify+0xb1/0xbb [ 415.583593][T10376] [ 415.583593][T10376] -> #0 (console_owner){-.-.}-{0:0}: [ 415.583611][T10376] __lock_acquire+0x2c66/0x7b50 [ 415.583653][T10376] lock_acquire+0x19e/0x400 [ 415.583669][T10376] console_lock_spinning_enable+0x51/0x60 [ 415.583683][T10376] console_unlock+0x8b5/0x10f0 [ 415.583695][T10376] vprintk_emit+0xc0/0x150 [ 415.583707][T10376] _printk+0xda/0x130 [ 415.583718][T10376] should_fail+0x364/0x4b0 [ 415.583803][T10376] should_failslab+0x5/0x20 [ 415.583850][T10376] slab_pre_alloc_hook+0x51/0xc0 [ 415.583888][T10376] __kmalloc+0x6b/0x340 [ 415.583900][T10376] __tty_buffer_request_room+0x1db/0x500 [ 415.583914][T10376] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 415.583928][T10376] n_tty_write+0x5dc/0x1220 [ 415.583942][T10376] file_tty_write+0x50c/0x8a0 [ 415.583957][T10376] vfs_write+0x748/0xd70 [ 415.583969][T10376] ksys_write+0x153/0x260 [ 415.583981][T10376] do_syscall_64+0x4c/0xa0 [ 415.583995][T10376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.584010][T10376] [ 415.584010][T10376] other info that might help us debug this: [ 415.584010][T10376] [ 415.584015][T10376] Chain exists of: [ 415.584015][T10376] console_owner --> &port_lock_key --> &port->lock [ 415.584015][T10376] [ 415.584036][T10376] Possible unsafe locking scenario: [ 415.584036][T10376] [ 415.584039][T10376] CPU0 CPU1 [ 415.584043][T10376] ---- ---- [ 415.584046][T10376] lock(&port->lock); [ 415.584054][T10376] lock(&port_lock_key); [ 415.584062][T10376] lock(&port->lock); [ 415.584072][T10376] lock(console_owner); [ 415.584080][T10376] [ 415.584080][T10376] *** DEADLOCK *** [ 415.584080][T10376] [ 415.584089][T10376] 6 locks held by syz.4.1486/10376: [ 415.584098][T10376] #0: ffff88807be4f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 415.584134][T10376] #1: ffff88807be4f130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x23c/0x8a0 [ 415.584171][T10376] #2: ffff88807be4f2e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1ec/0x1220 [ 415.584207][T10376] #3: ffffc900013ce378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x592/0x1220 [ 415.584247][T10376] #4: ffff888024363958 (&port->lock){-...}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 415.584312][T10376] #5: ffffffff8c313aa0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 415.584346][T10376] [ 415.584346][T10376] stack backtrace: [ 415.584351][T10376] CPU: 1 PID: 10376 Comm: syz.4.1486 Not tainted syzkaller #0 [ 415.584366][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.584407][T10376] Call Trace: [ 415.584443][T10376] [ 415.584505][T10376] dump_stack_lvl+0x188/0x250 [ 415.584551][T10376] ? load_image+0x410/0x410 [ 415.584565][T10376] ? show_regs_print_info+0x20/0x20 [ 415.584583][T10376] ? print_circular_bug+0x12b/0x1a0 [ 415.584599][T10376] check_noncircular+0x296/0x330 [ 415.584616][T10376] ? add_chain_block+0x9b0/0x9b0 [ 415.584630][T10376] ? lockdep_lock+0xf1/0x1f0 [ 415.584653][T10376] ? lockdep_unlock+0x143/0x2e0 [ 415.584673][T10376] __lock_acquire+0x2c66/0x7b50 [ 415.584696][T10376] ? format_decode+0x19b/0x1330 [ 415.584745][T10376] ? verify_lock_unused+0x140/0x140 [ 415.584769][T10376] ? sprintf+0xe4/0x140 [ 415.584793][T10376] lock_acquire+0x19e/0x400 [ 415.584811][T10376] ? console_lock_spinning_enable+0x2c/0x60 [ 415.584828][T10376] ? prb_read_valid+0x60/0x60 [ 415.584844][T10376] ? read_lock_is_recursive+0x10/0x10 [ 415.584860][T10376] ? do_raw_spin_lock+0x128/0x2f0 [ 415.584876][T10376] ? __rwlock_init+0x140/0x140 [ 415.584890][T10376] ? do_raw_spin_unlock+0x11d/0x230 [ 415.584905][T10376] console_lock_spinning_enable+0x51/0x60 [ 415.584920][T10376] ? console_lock_spinning_enable+0x2c/0x60 [ 415.584933][T10376] console_unlock+0x8b5/0x10f0 [ 415.584947][T10376] ? read_lock_is_recursive+0x10/0x10 [ 415.584966][T10376] ? console_trylock_spinning+0x370/0x370 [ 415.584982][T10376] ? __down_trylock_console_sem+0x19f/0x1f0 [ 415.584997][T10376] ? vprintk_emit+0xa7/0x150 [ 415.585029][T10376] ? printk_parse_prefix+0x310/0x310 [ 415.585043][T10376] ? vprintk_emit+0xa7/0x150 [ 415.585057][T10376] ? console_trylock+0x70/0x70 [ 415.585070][T10376] ? __lock_acquire+0x13dc/0x7b50 [ 415.585092][T10376] ? vprintk_emit+0x150/0x150 [ 415.585108][T10376] ? verify_lock_unused+0x140/0x140 [ 415.585127][T10376] vprintk_emit+0xc0/0x150 [ 415.585142][T10376] _printk+0xda/0x130 [ 415.585159][T10376] ? load_image+0x410/0x410 [ 415.585177][T10376] should_fail+0x364/0x4b0 [ 415.585195][T10376] should_failslab+0x5/0x20 [ 415.585210][T10376] slab_pre_alloc_hook+0x51/0xc0 [ 415.585225][T10376] __kmalloc+0x6b/0x340 [ 415.585238][T10376] ? __tty_buffer_request_room+0x1db/0x500 [ 415.585255][T10376] __tty_buffer_request_room+0x1db/0x500 [ 415.585274][T10376] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 415.585295][T10376] n_tty_write+0x5dc/0x1220 [ 415.585321][T10376] ? n_tty_read+0x1a50/0x1a50 [ 415.585338][T10376] ? wait_woken+0x1b0/0x1b0 [ 415.585391][T10376] ? __virt_addr_valid+0x3c6/0x470 [ 415.585450][T10376] ? __phys_addr_symbol+0x2b/0x70 [ 415.585464][T10376] ? __check_object_size+0x30c/0x410 [ 415.585509][T10376] file_tty_write+0x50c/0x8a0 [ 415.585527][T10376] ? n_tty_read+0x1a50/0x1a50 [ 415.585544][T10376] vfs_write+0x748/0xd70 [ 415.585561][T10376] ? file_end_write+0x250/0x250 [ 415.585578][T10376] ? __fget_files+0x402/0x470 [ 415.585623][T10376] ? __fdget_pos+0x1e2/0x370 [ 415.585637][T10376] ? ksys_write+0x70/0x260 [ 415.585653][T10376] ksys_write+0x153/0x260 [ 415.585668][T10376] ? __ia32_sys_read+0x80/0x80 [ 415.585684][T10376] ? lockdep_hardirqs_on+0x94/0x140 [ 415.585703][T10376] do_syscall_64+0x4c/0xa0 [ 415.585717][T10376] ? clear_bhb_loop+0x30/0x80 [ 415.585731][T10376] ? clear_bhb_loop+0x30/0x80 [ 415.585747][T10376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.585770][T10376] RIP: 0033:0x7f5d69627159 [ 415.585809][T10376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.585855][T10376] RSP: 002b:00007f5d6787f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.585872][T10376] RAX: ffffffffffffffda RBX: 00007f5d698aefa0 RCX: 00007f5d69627159 [ 415.585884][T10376] RDX: 000000000000bfb3 RSI: 00002000000000c0 RDI: 0000000000000004 [ 415.585895][T10376] RBP: 00007f5d696be06b R08: 0000000000000000 R09: 0000000000000000 [ 415.585905][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.585915][T10376] R13: 00007f5d698af038 R14: 00007f5d698aefa0 R15: 00007ffdb0aed0d8 [ 415.585932][T10376] [ 416.505753][T10376] CPU: 1 PID: 10376 Comm: syz.4.1486 Not tainted syzkaller #0 [ 416.513204][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.523262][T10376] Call Trace: [ 416.526538][T10376] [ 416.529495][T10376] dump_stack_lvl+0x188/0x250 [ 416.534259][T10376] ? show_regs_print_info+0x20/0x20 [ 416.539438][T10376] ? load_image+0x410/0x410 [ 416.543924][T10376] should_fail+0x383/0x4b0 [ 416.548327][T10376] should_failslab+0x5/0x20 [ 416.552809][T10376] slab_pre_alloc_hook+0x51/0xc0 [ 416.557733][T10376] __kmalloc+0x6b/0x340 [ 416.561870][T10376] ? __tty_buffer_request_room+0x1db/0x500 [ 416.567655][T10376] __tty_buffer_request_room+0x1db/0x500 [ 416.573270][T10376] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 416.579930][T10376] n_tty_write+0x5dc/0x1220 [ 416.584427][T10376] ? n_tty_read+0x1a50/0x1a50 [ 416.589088][T10376] ? wait_woken+0x1b0/0x1b0 [ 416.593575][T10376] ? __virt_addr_valid+0x3c6/0x470 [ 416.598674][T10376] ? __phys_addr_symbol+0x2b/0x70 [ 416.603713][T10376] ? __check_object_size+0x30c/0x410 [ 416.608990][T10376] file_tty_write+0x50c/0x8a0 [ 416.613662][T10376] ? n_tty_read+0x1a50/0x1a50 [ 416.618328][T10376] vfs_write+0x748/0xd70 [ 416.622555][T10376] ? file_end_write+0x250/0x250 [ 416.627385][T10376] ? __fget_files+0x402/0x470 [ 416.632054][T10376] ? __fdget_pos+0x1e2/0x370 [ 416.636626][T10376] ? ksys_write+0x70/0x260 [ 416.641023][T10376] ksys_write+0x153/0x260 [ 416.645335][T10376] ? __ia32_sys_read+0x80/0x80 [ 416.650168][T10376] ? lockdep_hardirqs_on+0x94/0x140 [ 416.655370][T10376] do_syscall_64+0x4c/0xa0 [ 416.659773][T10376] ? clear_bhb_loop+0x30/0x80 [ 416.664443][T10376] ? clear_bhb_loop+0x30/0x80 [ 416.669107][T10376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.675084][T10376] RIP: 0033:0x7f5d69627159 [ 416.679494][T10376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.699187][T10376] RSP: 002b:00007f5d6787f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.707947][T10376] RAX: ffffffffffffffda RBX: 00007f5d698aefa0 RCX: 00007f5d69627159 [ 416.715918][T10376] RDX: 000000000000bfb3 RSI: 00002000000000c0 RDI: 0000000000000004 [ 416.723907][T10376] RBP: 00007f5d696be06b R08: 0000000000000000 R09: 0000000000000000 [ 416.731893][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.739857][T10376] R13: 00007f5d698af038 R14: 00007f5d698aefa0 R15: 00007ffdb0aed0d8 [ 416.747860][T10376] [ 416.872457][T10392] loop5: detected capacity change from 0 to 128 [ 416.894938][T10392] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 416.921988][T10392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)