last executing test programs: 6m34.042344188s ago: executing program 3 (id=299): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard_size={'discard', 0x3d, 0x10}}, {@noquota}, {@discard_size={'discard', 0x3d, 0x7}}, {@discard_size}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m31.588104723s ago: executing program 3 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) 6m31.053560368s ago: executing program 3 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x5c8}, 0xf7e5) sendmsg$kcm(r5, 0x0, 0x8040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) 6m29.846332896s ago: executing program 3 (id=318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x8) 6m28.047208256s ago: executing program 3 (id=325): sched_setscheduler(0x0, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0xdafbe5d6891b6e4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='^\x00', 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000002000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 6m24.417886959s ago: executing program 3 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x9, 0x7, 0x800, 0x8007, 0xc76, 0x10000dd, 0x386, 0x102, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0xff, 0x4, 0x8, 0xa2e, 0xd, 0x3e8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x44bb9663, 0x200, 0x81, 0x0, 0xffff, 0xa5e, 0x360, 0x8, 0x6, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x1, 0x7b, 0x400, 0xd33c, 0x8, 0x5, 0x3, 0x800, 0x7, 0x6, 0x2, 0x83af, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x9, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x200, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x3ff, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x18000000, 0xa, 0x5, 0x9, 0x80, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x5, 0x4f, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x6, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x7d5, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2000002, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0xfffffffe, 0xffffffc0, 0x7, 0x101, 0x8, 0x200, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0xc, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x40000007, 0xcc0, 0xfffffff4, 0x8, 0xf, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x5, 0x2, 0xdd5, 0x7fffffff, 0xfffffffb, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x6, 0x1, 0x101, 0x6, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x7fff, 0x9, 0x1, 0xa, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x2, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xa4c, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c6572726f7274e36e75652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c666c7573682c666d61736b3d30303030303030303030303031323437373137353136352c646d61736b3d30303030303030303030303030303030303030303031302c646f74732c6572726f72733d72656d6f756e742d726f2c747a3d5554432c00"], 0x1, 0x262, &(0x7f00000007c0)="$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") write$tun(r0, 0x0, 0x28) 6m9.18034905s ago: executing program 32 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYe1ig3mG+ZLywSOrUiqqZE74ozWY0/M5wh+c/FEhYNJhwwhQmpzQwpF0MY+RgYGBo23JmTggzP5vbAoWW5BNMoUc5ls6UsDggVHXyp6XmW4dEtxnbnjqwneE5fJxnTUGfoNFxCQanhYL/ZUA+TWhoKNNYy7TUdsGXIo2/El6rjZ0yGNztmZbCApSlAUSuhPJkwXoSkld46GhqGqUkJzRskkhIciswVGbYuodztUADA1K0qTAwMGxnhMUtBFyDMUbBKBgFo2AUjIJRMApGwSgYBaNgFIwIAAgAAP//wQuXFg==") ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x9, 0x7, 0x800, 0x8007, 0xc76, 0x10000dd, 0x386, 0x102, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0xff, 0x4, 0x8, 0xa2e, 0xd, 0x3e8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x44bb9663, 0x200, 0x81, 0x0, 0xffff, 0xa5e, 0x360, 0x8, 0x6, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x1, 0x7b, 0x400, 0xd33c, 0x8, 0x5, 0x3, 0x800, 0x7, 0x6, 0x2, 0x83af, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x9, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x200, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x3ff, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x18000000, 0xa, 0x5, 0x9, 0x80, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x5, 0x4f, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x6, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x7d5, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2000002, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0xfffffffe, 0xffffffc0, 0x7, 0x101, 0x8, 0x200, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0xc, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x40000007, 0xcc0, 0xfffffff4, 0x8, 0xf, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x5, 0x2, 0xdd5, 0x7fffffff, 0xfffffffb, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x6, 0x1, 0x101, 0x6, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x7fff, 0x9, 0x1, 0xa, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x2, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xa4c, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c6572726f7274e36e75652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c666c7573682c666d61736b3d30303030303030303030303031323437373137353136352c646d61736b3d30303030303030303030303030303030303030303031302c646f74732c6572726f72733d72656d6f756e742d726f2c747a3d5554432c00"], 0x1, 0x262, &(0x7f00000007c0)="$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") write$tun(r0, 0x0, 0x28) 1m24.411901896s ago: executing program 2 (id=1240): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m23.929125773s ago: executing program 2 (id=1244): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), 0x4) 1m22.873121462s ago: executing program 2 (id=1247): setuid(0xee01) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1m20.487261754s ago: executing program 2 (id=1254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xe}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0xf5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}, 0x0) 1m20.334592887s ago: executing program 2 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) 1m19.780702955s ago: executing program 2 (id=1258): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0xc2782) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.461427352s ago: executing program 33 (id=1258): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0xc2782) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 19.20442543s ago: executing program 0 (id=1484): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x85, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 17.888572855s ago: executing program 0 (id=1490): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r2, 0x0) 16.991001727s ago: executing program 0 (id=1496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x9, 0x7, 0x800, 0x8007, 0xc76, 0x10000dd, 0x386, 0x102, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0xff, 0x4, 0x8, 0xa2e, 0xd, 0x3e8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x44bb9663, 0x200, 0x81, 0x0, 0xffff, 0xa5e, 0x360, 0x8, 0x6, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x1, 0x7b, 0x400, 0xd33c, 0x8, 0x5, 0x3, 0x800, 0x7, 0x6, 0x2, 0x83af, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x9, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x200, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x3ff, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x18000000, 0xa, 0x5, 0x9, 0x80, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x5, 0x4f, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x6, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x7d5, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2000002, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0xfffffffe, 0xffffffc0, 0x7, 0x101, 0x8, 0x200, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0xc, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x40000007, 0xcc0, 0xfffffff4, 0x8, 0xf, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x5, 0x2, 0xdd5, 0x7fffffff, 0xfffffffb, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x6, 0x1, 0x101, 0x6, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x7fff, 0x9, 0x1, 0xa, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x2, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xa4c, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c6572726f7274e36e75652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c666c7573682c666d61736b3d30303030303030303030303031323437373137353136352c646d61736b3d30303030303030303030303030303030303030303031302c646f74732c6572726f72733d72656d6f756e742d726f2c747a3d5554432c00"], 0x1, 0x262, &(0x7f00000007c0)="$eJzs3bGKE1EUANCbbLKb3cbUYjFgY7WonWWQCOKAEJlCKwOrza4I2Wa0MZ/hN+gf+Rmp0o04M5i4uypCsrNxzoHwLu/mJfelyJviTvL6zrvTk/fnb4tvn2MwSKIXMY9lxDC6sReVTj12y3g/1s0DANg1k8l01HQNbFB5sdZZrs0cRsS0HxEHl56cfbnO0gAAAAAAAAAAANicv/T/l83+V/f/V6P+fwDYPfr//3+z2Wh6VF+//Ur/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCcZVHcKv7waLo+AGDznP8A0D7OfwBoH+c/ALTPi5evno3SdDxJkkHEYp5neVaNVf7J03R8PykNy4luvTDr10E6flDlk9WrLvI868dRvf7hlfn9uHe3yv/IPX6eXsgfxMnWdw8AAAAAAAAAAAAAAAAAAAA3w3Hy03A1u8jzbK/KH/8uX0Vrvw9w4f79XtzuXds2AAAAAAAAAAAAAAAAAAAAYKedf/h4Oj07ezMT7EhQdCK2/V6H8c+rvj4axI34fASbCZr+ZgIAAAAAAAAAAAAAAAAAgPZZ3fR7OfepiYIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAGr///fXtD0HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2+B4AAP//h4iPcg==") write$tun(r0, 0x0, 0x28) 13.112741451s ago: executing program 1 (id=1503): ptrace$pokeuser(0x6, 0x0, 0x358, 0xffffffff8798fa50) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603"], 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010d804df0000000000000109022400010000100009040008020300000009210000ff0122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00_'], 0x0}, 0x0) 13.015276873s ago: executing program 6 (id=1504): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000000)='./file0\x00') ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x8, 0x1) 11.652441553s ago: executing program 0 (id=1508): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x42, 0x4) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x20, 0x2, 0x3}) 10.800584513s ago: executing program 0 (id=1513): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0123:a', 0x6) 9.712190114s ago: executing program 0 (id=1515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x9, 0x7, 0x800, 0x8007, 0xc76, 0x10000dd, 0x386, 0x102, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0xff, 0x4, 0x8, 0xa2e, 0xd, 0x3e8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x44bb9663, 0x200, 0x81, 0x0, 0xffff, 0xa5e, 0x360, 0x8, 0x6, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x1, 0x7b, 0x400, 0xd33c, 0x8, 0x5, 0x3, 0x800, 0x7, 0x6, 0x2, 0x83af, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x9, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x200, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x3ff, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x18000000, 0xa, 0x5, 0x9, 0x80, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x5, 0x4f, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x6, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x7d5, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2000002, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0xfffffffe, 0xffffffc0, 0x7, 0x101, 0x8, 0x200, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0xc, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x40000007, 0xcc0, 0xfffffff4, 0x8, 0xf, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x5, 0x2, 0xdd5, 0x7fffffff, 0xfffffffb, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x6, 0x1, 0x101, 0x6, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x7fff, 0x9, 0x1, 0xa, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x2, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xa4c, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c6572726f7274e36e75652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c666c7573682c666d61736b3d30303030303030303030303031323437373137353136352c646d61736b3d30303030303030303030303030303030303030303031302c646f74732c6572726f72733d72656d6f756e742d726f2c747a3d5554432c00"], 0x1, 0x262, &(0x7f00000007c0)="$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") write$tun(r0, 0x0, 0x28) 9.621254504s ago: executing program 4 (id=1516): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1fd) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.752467724s ago: executing program 1 (id=1518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x9, 0x7, 0x800, 0x8007, 0xc76, 0x10000dd, 0x386, 0x102, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0xff, 0x4, 0x8, 0xa2e, 0xd, 0x3e8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x44bb9663, 0x200, 0x81, 0x0, 0xffff, 0xa5e, 0x360, 0x8, 0x6, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x1, 0x7b, 0x400, 0xd33c, 0x8, 0x5, 0x3, 0x800, 0x7, 0x6, 0x2, 0x83af, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x9, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x200, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x3ff, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x18000000, 0xa, 0x5, 0x9, 0x80, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x5, 0x4f, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x6, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x7d5, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2000002, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0xfffffffe, 0xffffffc0, 0x7, 0x101, 0x8, 0x200, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0xc, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x40000007, 0xcc0, 0xfffffff4, 0x8, 0xf, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x5, 0x2, 0xdd5, 0x7fffffff, 0xfffffffb, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x6, 0x1, 0x101, 0x6, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x7fff, 0x9, 0x1, 0xa, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x2, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xa4c, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c6572726f7274e36e75652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c666c7573682c666d61736b3d30303030303030303030303031323437373137353136352c646d61736b3d30303030303030303030303030303030303030303031302c646f74732c6572726f72733d72656d6f756e742d726f2c747a3d5554432c00"], 0x1, 0x262, &(0x7f00000007c0)="$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") write$tun(r0, 0x0, 0x28) 8.500450655s ago: executing program 6 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x9, 0x7, 0x800, 0x8007, 0xc76, 0x10000dd, 0x386, 0x102, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0xff, 0x4, 0x8, 0xa2e, 0xd, 0x3e8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x44bb9663, 0x200, 0x81, 0x0, 0xffff, 0xa5e, 0x360, 0x8, 0x6, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x1, 0x7b, 0x400, 0xd33c, 0x8, 0x5, 0x3, 0x800, 0x7, 0x6, 0x2, 0x83af, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x9, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x200, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x3ff, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x18000000, 0xa, 0x5, 0x9, 0x80, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x5, 0x4f, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x6, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x7d5, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2000002, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0xfffffffe, 0xffffffc0, 0x7, 0x101, 0x8, 0x200, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0xc, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x40000007, 0xcc0, 0xfffffff4, 0x8, 0xf, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x5, 0x2, 0xdd5, 0x7fffffff, 0xfffffffb, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x6, 0x1, 0x101, 0x6, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x7fff, 0x9, 0x1, 0xa, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x2, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xa4c, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c6572726f7274e36e75652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c666c7573682c666d61736b3d30303030303030303030303031323437373137353136352c646d61736b3d30303030303030303030303030303030303030303031302c646f74732c6572726f72733d72656d6f756e742d726f2c747a3d5554432c00"], 0x1, 0x262, &(0x7f00000007c0)="$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") write$tun(r0, 0x0, 0x28) 7.399644264s ago: executing program 5 (id=1522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r1}) 6.243672505s ago: executing program 5 (id=1523): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) 6.160704424s ago: executing program 4 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x7}}]}}]}, 0x38}}, 0x0) 5.744472949s ago: executing program 5 (id=1525): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/21, 0x15, 0x3, 0x8, 0x1, 0x4, 0x5}}, 0x120) socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010000000002000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8], 0x30}], 0x1}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) write$UHID_INPUT(r0, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) 5.499095165s ago: executing program 1 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='clust', 0x5) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r5, &(0x7f0000001100)="0200"/128, 0x80) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000001300)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r7, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4.684683617s ago: executing program 4 (id=1528): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x7f, 0x8, 0x1e, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.407270538s ago: executing program 7 (id=1529): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 4.274152786s ago: executing program 6 (id=1530): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) shmdt(0x0) shmdt(0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f0000000440)) syz_extract_tcp_res(&(0x7f0000000000), 0x8, 0xb) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000050c0)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000001480)=""/206, 0xce}, {&(0x7f0000001580)=""/174, 0xae}, {0x0}], 0x4}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000004100)=[{0x0}, {&(0x7f00000027c0)=""/147, 0x93}, {&(0x7f0000002880)=""/32, 0x20}, {&(0x7f00000028c0)=""/8, 0x8}], 0x4, &(0x7f0000004180)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}, {{&(0x7f00000041c0)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004240)=""/91, 0x5b}, {&(0x7f00000042c0)=""/48, 0x30}, {&(0x7f0000004300)=""/143, 0x8f}, {&(0x7f0000004440)=""/191, 0xbf}], 0x4, &(0x7f0000004580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000045c0)=@abs, 0x6e, &(0x7f0000004b00), 0x0, &(0x7f0000004b80)}}], 0x4, 0x2002, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}, {{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000001d40)=[{&(0x7f00000017c0)=""/186, 0xba}, {&(0x7f0000001880)=""/162, 0xa2}, {&(0x7f0000001940)=""/44, 0x2c}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f00000019c0)=""/203, 0xcb}, {&(0x7f0000001ac0)=""/102, 0x66}, {0x0}, {&(0x7f0000001c00)=""/128, 0x80}, {0x0}], 0x9}, 0x7ff}, {{&(0x7f0000001ec0)=@hci, 0x80, 0x0, 0x0, &(0x7f0000007380)=""/56, 0x38}, 0xc}, {{0x0, 0x0, &(0x7f00000074c0)=[{&(0x7f00000073c0)=""/148, 0x94}, {&(0x7f0000007480)=""/21, 0x15}], 0x2, &(0x7f0000007500)=""/4096, 0x1000}, 0x9}], 0x4, 0x40000121, 0x0) read$FUSE(r4, 0x0, 0x0) unshare(0x2030b00) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) 4.1339302s ago: executing program 4 (id=1531): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) 3.905601055s ago: executing program 1 (id=1532): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002303"], 0x48}}, 0x0) 3.450197125s ago: executing program 7 (id=1533): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x0, 0x400000000000081, 0x2, 0x3e, 0xfffffff9, 0x3bf, 0x40, 0x103, 0xd35, 0x5, 0x38, 0x1, 0x78, 0x7}, [{0x6474e551, 0x5, 0x1, 0x8dbb, 0xc2d, 0xaf, 0x3, 0x8}]}, 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.072342579s ago: executing program 5 (id=1534): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) set_mempolicy(0x3, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 3.071935913s ago: executing program 1 (id=1535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be004411"], 0xfdef) 3.070658688s ago: executing program 6 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 2.82313283s ago: executing program 4 (id=1537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0xc00, {0x1, 0x0, 0x5}, 0x58, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0xfffffffffffffffe, 0x2, 0x8c6, 0x540b, 0x8, 0x9, 0xc, 0xf, 0x1, 0x8, 0x1, 0x6, 0x8}}, 0xa0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.804021516s ago: executing program 5 (id=1538): syz_open_dev$vim2m(0x0, 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000500)={[{@nodatacow}, {@space_cache}, {@usebackuproot}, {}, {@flushoncommit}, {@discard_async}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@discard_async}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x8483, 0x8) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, 0x0) 2.767816949s ago: executing program 7 (id=1539): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/114, 0x72}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) 2.294627768s ago: executing program 7 (id=1540): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.041849739s ago: executing program 4 (id=1541): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.911496933s ago: executing program 5 (id=1542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x9, 0x7, 0x800, 0x8007, 0xc76, 0x10000dd, 0x386, 0x102, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0xff, 0x4, 0x8, 0xa2e, 0xd, 0x3e8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x44bb9663, 0x200, 0x81, 0x0, 0xffff, 0xa5e, 0x360, 0x8, 0x6, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x1, 0x7b, 0x400, 0xd33c, 0x8, 0x5, 0x3, 0x800, 0x7, 0x6, 0x2, 0x83af, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x9, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x200, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x3ff, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x18000000, 0xa, 0x5, 0x9, 0x80, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0x7, 0x5, 0x4f, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x6, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x7d5, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2000002, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0xfffffffe, 0xffffffc0, 0x7, 0x101, 0x8, 0x200, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0xc, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x40000007, 0xcc0, 0xfffffff4, 0x8, 0xf, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x5, 0x2, 0xdd5, 0x7fffffff, 0xfffffffb, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x6, 0x1, 0x101, 0x6, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x7fff, 0x9, 0x1, 0xa, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x2, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xa4c, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c6572726f7274e36e75652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c666c7573682c666d61736b3d30303030303030303030303031323437373137353136352c646d61736b3d30303030303030303030303030303030303030303031302c646f74732c6572726f72733d72656d6f756e742d726f2c747a3d5554432c00"], 0x1, 0x262, &(0x7f00000007c0)="$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") write$tun(r0, 0x0, 0x28) 1.892998083s ago: executing program 7 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7fff, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1, 0x3, 0x5, 0x85, 0x1, 0xffffffff, {0x0, 0xff, 0x5, 0x8, 0x9, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x11, 0x7f11) 1.845170996s ago: executing program 6 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x180) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) getdents64(r0, 0x0, 0x0) 1.586405132s ago: executing program 6 (id=1545): sched_setscheduler(0x0, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0xdafbe5d6891b6e4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='^\x00', 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000002000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 55.179918ms ago: executing program 7 (id=1546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, 0x0, 0x4800) 0s ago: executing program 1 (id=1547): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$eJzs3V9oHHkdAPDvbJOY6+11Kxyox6FBwTs8Tdom1/M4kDvwH/VynBdftIGStNskdJMNyUYvEbRikYIvPolQKdoHBVGMj31TEbRY9KFQ9KUUKaiFtlD1OTK7O72QbJptm+4k6ecDk/nNb9v9fWe+mc3Mb2d+E8ATqy8iXo+IPRHxUkSUmvWF5hSnG1P678YHlyfTKYmVlZE7SSQRcWRweTJ7r6Q5f7r5Bi9GxO+7kxg/s77d+cWlU2OVSnmuuTxQm54dmF9c+tTU9NhEeaI8M/jqK58+PPjy0OHBLVvX62NHp39ZHX7tZzff+s2HP/6JO0m8HsXma6vXY6v0RV9zm3THM6tfSCK+vtWN5ax3VTnpyjEQ2vbnV57/Yd4xAACdV2ge+3fVj/9LsScaB2+9V0bvluLGXzb6f0dGz/+7k3ECAAAAD29l5SPNOQAAALB7Jfc7958tpj97OxcNAAAAsPWy6wCODC5PZlOnrj24+YVOtcRGbr0REfsb+c/u72680tW8p7c3uiNi73+SWH1bb7Lmnt+HUftcRF9844+10z84mU7xmO7DZnta/kfeEZCnnqG8IyBPz3057wjI01/P5h0BebpyK+8IyNM7I3lHQJ7eOpx3BOTp3J28I+C3bzQGAFzf/1eoj/mX9fKs7f9Jy089Ytu3CxF90fur1XX6fzor6/8bX9f/V7jX/7dng/6/fW22cfFrVz/Uqv6LX03zPzKe9f99cvTH5bT9dP7IK0Zbbn0n4rmuVvlP7uU/2SD/pTbb+MPloZY9/b/bl+b/579I851N8t9ZKz+NeCFa5z+T3H981oGTU5XygcbPlm189O4//9eqfuZvaf4vfSbb/9MpbT/7LoDHL93/926Q/80+//e32caFqRste3pHimn+X/jW/fNfuNmTfKX+y9jTrHl3rFabOxjRk7y5vv7Qg26BJ0u2jbJtmOb/xY+1/vv/wfq89ed/+jvx/jbbfPNo4bVW9UO/TvP//c/b//OT5v/EJvv/Rn//n223javXx1rVT342zf87F+QfAAAAAAAAAB5NISKKkRT675ULhf7+xjO8n429hUp1vvbSyerCzImoPyt7f3QXsiu9So3lJF0+2LweKFs+tGZ5sHm9yNnSU/Xl/uPVyom8Vx4AAAB2uWLEtaPfvfiBp9ec//+r1Dj/BwAAAHa+9Pz/+Z+cP5eW/9vuQD4AAADAjpKe/9/93u1L4fwfAAAAdq1ir/N/AAAA2O2y7//fHh6Ot4eHV7Ln/s1UJ6ZOTc6+euhA//TC8f7j1bnZ/olqdaI+Yt/05u9bqVZnD74cC+8O1MrztYH5xaVj09WFmdqx+nNjj5W7O7BuwObO/P3iaN4xAAAAnVPcYPz/Z1aN3X8gIvZFxOVS9/uysf4BAACA7a8Yce1LP/rmn+YXl06NVSrlOYUHLax8O2IbhKGwrpBdZLJd4tmRhZw/oAAAgC333kF/3pEAAAAAAAAAAAAAAAAAAADAk6sTw4nlvY4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsHP8PAAD//7dI+vA=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59) pwrite64(r1, &(0x7f0000000600)="0080bf", 0x3, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) kernel console output (not intermixed with test programs): 737] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 420ms [ 452.709534][ T5737] gfs2: fsid=syz:syz.0: jid=0: Done [ 452.724988][T10118] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 453.394220][ T5913] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 453.417025][T10149] loop0: detected capacity change from 0 to 32768 [ 453.443249][T10149] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 453.450818][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.0.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.450853][T10149] Tainted: [L]=SOFTLOCKUP [ 453.450862][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 453.450877][T10149] Call Trace: [ 453.450886][T10149] [ 453.450896][T10149] dump_stack_lvl+0xe8/0x150 [ 453.450936][T10149] sysfs_create_dir_ns+0x271/0x2a0 [ 453.450975][T10149] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 453.451014][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451043][T10149] ? do_raw_spin_unlock+0xf5/0x210 [ 453.451078][T10149] kobject_add_internal+0x622/0xcd0 [ 453.451112][T10149] kobject_init_and_add+0x12b/0x1a0 [ 453.451175][T10149] ? __pfx_kobject_init_and_add+0x10/0x10 [ 453.451219][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451247][T10149] ? __raw_spin_lock_init+0x45/0x100 [ 453.451275][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451303][T10149] ? __init_swait_queue_head+0xa8/0x150 [ 453.451346][T10149] gfs2_sys_fs_add+0x257/0x480 [ 453.451375][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451403][T10149] ? is_dynamic_key+0x1aa/0x1c0 [ 453.451436][T10149] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 453.451477][T10149] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 453.451527][T10149] gfs2_fill_super+0x1328/0x20b0 [ 453.451580][T10149] ? __pfx_gfs2_fill_super+0x10/0x10 [ 453.451618][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451652][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451680][T10149] ? sb_set_blocksize+0x155/0x240 [ 453.451715][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451743][T10149] ? setup_bdev_super+0x4c1/0x5b0 [ 453.451787][T10149] get_tree_bdev_flags+0x430/0x4f0 [ 453.451826][T10149] ? __pfx_gfs2_fill_super+0x10/0x10 [ 453.451863][T10149] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 453.451905][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.451942][T10149] gfs2_get_tree+0x51/0x1e0 [ 453.451983][T10149] vfs_get_tree+0x92/0x2a0 [ 453.452026][T10149] do_new_mount+0x319/0xdc0 [ 453.452057][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.452092][T10149] ? __pfx_do_new_mount+0x10/0x10 [ 453.452125][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.452162][T10149] ? ns_capable+0x89/0xe0 [ 453.452191][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.452220][T10149] ? path_mount+0x647/0x1040 [ 453.452254][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.452283][T10149] ? user_path_at+0xd4/0x160 [ 453.452322][T10149] __se_sys_mount+0x31d/0x420 [ 453.452362][T10149] ? __pfx___se_sys_mount+0x10/0x10 [ 453.452393][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.452430][T10149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.452459][T10149] ? __x64_sys_mount+0x20/0xc0 [ 453.452491][T10149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.452518][T10149] do_syscall_64+0x174/0x580 [ 453.452552][T10149] ? trace_irq_disable+0x3b/0x140 [ 453.452591][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.452616][T10149] RIP: 0033:0x7f99b1d9f34a [ 453.452638][T10149] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.452659][T10149] RSP: 002b:00007f99b2d04e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.452686][T10149] RAX: ffffffffffffffda RBX: 00007f99b2d04ee0 RCX: 00007f99b1d9f34a [ 453.452704][T10149] RDX: 0000200000037f40 RSI: 0000200000000000 RDI: 00007f99b2d04ea0 [ 453.452721][T10149] RBP: 0000200000037f40 R08: 00007f99b2d04ee0 R09: 0000000000000000 [ 453.452738][T10149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 453.452754][T10149] R13: 00007f99b2d04ea0 R14: 0000000000037f14 R15: 0000200000037fc0 [ 453.452794][T10149] [ 453.452822][T10149] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 453.836801][T10149] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 453.928291][ T5913] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 453.952294][ T5913] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 453.961753][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.983958][ T5913] usb 5-1: config 0 has no interface number 0 [ 453.996880][ T5913] usb 5-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.011048][ T5913] usb 5-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.032499][ T5913] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 454.084670][ T5913] usb 5-1: config 0 interface 244 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 454.099082][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.121682][ T5913] usb 5-1: config 0 descriptor?? [ 454.144826][T10138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 454.376395][ T5913] usb 5-1: string descriptor 0 read error: -71 [ 454.440728][ T5913] cypress_m8 5-1:0.244: DeLorme Earthmate USB converter detected [ 454.492039][T10165] loop2: detected capacity change from 0 to 4096 [ 454.496992][ T5913] earthmate ttyUSB0: required endpoint is missing [ 454.546334][ T5913] usb 5-1: USB disconnect, device number 7 [ 454.605241][ T5913] cypress_m8 5-1:0.244: device disconnected [ 454.779102][ T31] audit: type=1800 audit(1786379289.153:537): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1075" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 455.545197][T10177] loop0: detected capacity change from 0 to 512 [ 455.583070][T10177] EXT4-fs: Ignoring removed oldalloc option [ 455.640786][T10177] EXT4-fs (loop0): Test dummy encryption mode enabled [ 455.702996][T10167] loop6: detected capacity change from 0 to 40427 [ 455.747201][T10167] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 455.758176][T10167] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 455.776255][T10177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.817544][T10167] F2FS-fs (loop6): invalid crc value [ 455.920673][T10177] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 4294967295 (only 1 groups) [ 457.239512][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.349336][T10167] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 457.404059][T10196] loop1: detected capacity change from 0 to 256 [ 457.451749][T10198] loop0: detected capacity change from 0 to 64 [ 457.812370][T10184] loop2: detected capacity change from 0 to 32768 [ 457.939213][T10184] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 458.078525][ T5746] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 458.243603][T10213] loop1: detected capacity change from 0 to 8 [ 458.339395][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 458.446150][T10213] SQUASHFS error: zlib decompression failed, data probably corrupt [ 458.456657][T10213] SQUASHFS error: Failed to read block 0x9b: -5 [ 458.464976][T10213] SQUASHFS error: Unable to read metadata cache entry [99] [ 458.474864][T10213] SQUASHFS error: Unable to read inode 0x127 [ 458.479473][ T5746] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 458.518060][ T5737] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 458.613284][ T5746] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 458.664141][ T5746] usb 5-1: config 0 has no interface number 0 [ 458.759030][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 458.858588][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.882405][ T5737] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 458.907262][ T5746] usb 5-1: Product: syz [ 458.942002][T10213] loop1: detected capacity change from 0 to 512 [ 458.955707][ T5746] usb 5-1: Manufacturer: syz [ 458.963613][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.980689][ T5746] usb 5-1: SerialNumber: syz [ 458.990001][T10213] msdos: Unknown parameter 'errortănue' [ 459.004818][ T5746] usb 5-1: config 0 descriptor?? [ 459.010100][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.064728][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.087258][ T5746] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 459.151201][ T5737] usb 1-1: config 0 descriptor?? [ 459.261351][ T5746] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 459.327100][ T5746] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 459.620254][ T5737] hid_parser_main: 833 callbacks suppressed [ 459.620279][ T5737] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 459.642429][ T5615] ocfs2: Unmounting device (7,2) on (node local) [ 459.652807][ T5737] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 459.685919][ T5737] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 459.710668][ T5737] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 459.733156][ T5737] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 459.750024][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 459.770396][ T5737] savu 0003:1E7D:2D5A.0013: unbalanced collection at end of report description [ 459.781530][ T5913] usb 5-1: USB disconnect, device number 8 [ 459.792729][ T5737] savu 0003:1E7D:2D5A.0013: parse failed [ 459.812319][ T5737] savu 0003:1E7D:2D5A.0013: probe with driver savu failed with error -22 [ 459.864504][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 459.895806][ T5737] usb 1-1: USB disconnect, device number 12 [ 459.912518][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 459.953037][ T5913] quatech2 5-1:0.51: device disconnected [ 462.365546][T10244] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 462.653187][T10242] loop0: detected capacity change from 0 to 40427 [ 462.678838][T10242] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 462.688248][T10242] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 462.702443][T10242] F2FS-fs (loop0): invalid crc value [ 462.792192][T10242] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 462.813666][T10242] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 462.820809][T10242] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 464.407443][T10275] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1107'. [ 464.629772][T10283] loop5: detected capacity change from 0 to 16 [ 464.662380][T10283] erofs (device loop5): mounted with root inode @ nid 36. [ 465.800422][T10289] loop1: detected capacity change from 0 to 32768 [ 465.942471][T10289] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 465.952663][T10289] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 465.988162][ T5913] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 466.050650][T10289] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 466.076735][ T1546] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 466.095035][ T1546] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 466.248417][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 466.273612][ T5913] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 466.313055][ T5913] usb 7-1: config 0 has no interfaces? [ 466.336288][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.365472][ T5913] usb 7-1: Product: syz [ 466.403561][ T5913] usb 7-1: Manufacturer: syz [ 466.427255][ T5913] usb 7-1: SerialNumber: syz [ 466.442679][ T1546] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 347ms [ 466.469646][ T5913] usb 7-1: config 0 descriptor?? [ 466.477410][ T1546] gfs2: fsid=syz:syz.0: jid=0: Done [ 466.498310][T10289] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 466.639571][T10310] loop5: detected capacity change from 0 to 512 [ 466.658991][T10310] EXT4-fs (loop5): Test dummy encryption mode enabled [ 466.687884][T10310] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1119: inode has both inline data and extents flags [ 466.705504][T10310] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 466.707969][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 466.709530][ T5746] usb 7-1: USB disconnect, device number 6 [ 466.717199][ C0] EXT4-fs (loop5): initial error at time 1786379301: ext4_orphan_get:1399: inode 15 [ 466.726562][T10310] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1119: couldn't read orphan inode 15 (err -117) [ 466.729498][ C0] [ 466.729511][ C0] EXT4-fs (loop5): last error at time 1786379301: ext4_orphan_get:1399: inode 15 [ 466.770967][T10310] loop5: lost filesystem error report for type 5 error -117 [ 466.799286][T10310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.839652][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 466.877786][T10310] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 466.977783][T10310] EXT4-fs error (device loop5): ext4_check_dx_root:2201: inode #2: comm syz.5.1119: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 467.018098][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 467.033156][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 467.045045][ T29] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 467.070418][ T29] usb 3-1: config 4 interface 0 has no altsetting 0 [ 467.088734][ T29] usb 3-1: string descriptor 0 read error: -22 [ 467.095444][ T29] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 467.185306][ T5610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.186050][ T29] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 467.262895][ T29] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 467.316352][ T29] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 467.333103][ T29] usb 3-1: media controller created [ 467.430787][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.419908][T10325] loop4: detected capacity change from 0 to 131072 [ 468.445772][T10325] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 468.452594][T10325] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 468.461836][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 468.492762][T10325] F2FS-fs (loop4): invalid crc value [ 468.635234][T10331] loop5: detected capacity change from 0 to 8 [ 468.781000][T10325] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 468.875633][T10325] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 468.883087][T10325] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 468.915441][T10331] SQUASHFS error: zlib decompression failed, data probably corrupt [ 468.924197][T10331] SQUASHFS error: Failed to read block 0x9b: -5 [ 468.936703][T10331] SQUASHFS error: Unable to read metadata cache entry [99] [ 468.944760][T10331] SQUASHFS error: Unable to read inode 0x127 [ 469.462385][T10331] loop5: detected capacity change from 0 to 512 [ 469.506768][T10331] msdos: Unknown parameter 'errortănue' [ 469.527564][T10340] loop6: detected capacity change from 0 to 512 [ 469.546955][ T29] usb 3-1: USB disconnect, device number 13 [ 469.586607][T10340] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 469.601563][T10340] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 469.661996][T10340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.784501][T10340] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.1130: Unimplemented hash flags: 0x0001 [ 469.808435][T10340] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1130: Corrupt directory, running e2fsck is recommended [ 469.824338][T10342] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 469.874414][T10342] EXT4-fs (loop6): Remounting filesystem read-only [ 470.381993][ T7884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.728283][T10363] loop6: detected capacity change from 0 to 7 [ 470.752415][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 471.179436][ T5913] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 471.358476][ T1546] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 471.395346][ T5913] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.412418][T10382] loop0: detected capacity change from 0 to 256 [ 472.133446][T10382] exfat: Deprecated parameter 'utf8' [ 472.139244][ T5913] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.175949][T10382] exfat: Deprecated parameter 'namecase' [ 472.382944][T10384] loop1: detected capacity change from 0 to 8 [ 472.403870][T10382] exfat: Deprecated parameter 'namecase' [ 472.467122][ T5913] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.566208][ T1546] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 472.665463][T10384] SQUASHFS error: zlib decompression failed, data probably corrupt [ 472.674884][T10384] SQUASHFS error: Failed to read block 0x9b: -5 [ 472.682080][T10384] SQUASHFS error: Unable to read metadata cache entry [99] [ 472.689630][T10384] SQUASHFS error: Unable to read inode 0x127 [ 472.698598][ T5913] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 472.726700][ T5913] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.739475][ T1546] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.747565][ T5913] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.779630][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.790442][ T5913] usb 7-1: Product: syz [ 472.800691][ T5913] usb 7-1: Manufacturer: syz [ 472.807187][ T5913] usb 7-1: SerialNumber: syz [ 472.874007][ T1546] usb 6-1: config 0 descriptor?? [ 472.983214][ T1546] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 473.015005][T10370] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 473.071343][T10389] loop1: detected capacity change from 0 to 512 [ 473.083363][T10382] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 473.112234][T10389] msdos: Unknown parameter 'errortănue' [ 473.851651][ T1546] gspca_stv06xx: I2C: Read error writing address: -71 [ 473.882234][ T1546] usb 6-1: USB disconnect, device number 17 [ 474.102832][ T5913] cdc_ncm 7-1:1.0: bind() failure [ 474.124966][ T5913] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 474.134856][ T5913] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 474.145916][ T5913] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 474.166002][ T5913] usb 7-1: USB disconnect, device number 7 [ 474.224871][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807aa4d000: rx timeout, send abort [ 474.328261][ T5919] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 474.486056][ T5919] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 474.521604][ T5919] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.538051][ T5919] usb 5-1: config 0 has no interface number 0 [ 474.573422][ T5919] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.629210][ T5919] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.676451][ T5919] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.730570][ T5919] usb 5-1: config 0 interface 1 has no altsetting 0 [ 474.737352][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807aa4d000: abort rx timeout. Force session deactivation [ 475.400289][ T5919] usb 5-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 475.409683][ T5919] usb 5-1: Manufacturer: syz [ 475.421130][ T5919] usb 5-1: config 0 descriptor?? [ 475.458241][ T5913] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 475.692007][T10411] loop5: detected capacity change from 0 to 8 [ 476.063081][T10411] SQUASHFS error: zlib decompression failed, data probably corrupt [ 476.074282][T10411] SQUASHFS error: Failed to read block 0x9b: -5 [ 476.092513][T10411] SQUASHFS error: Unable to read metadata cache entry [99] [ 476.115551][T10411] SQUASHFS error: Unable to read inode 0x127 [ 476.132725][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 476.163065][ T5913] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 476.184550][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.226647][ T5913] usb 2-1: config 0 descriptor?? [ 476.291713][T10409] loop5: detected capacity change from 0 to 512 [ 476.301468][T10409] msdos: Unknown parameter 'errortănue' [ 476.317616][T10417] loop0: detected capacity change from 0 to 1024 [ 476.429463][T10417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 476.452369][ T5913] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 476.468814][ T5919] uclogic 0003:145F:0212.0014: pen parameters not found [ 476.486377][ T5919] uclogic 0003:145F:0212.0014: interface is invalid, ignoring [ 476.510073][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 476.529746][ T5913] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 476.543471][ T5919] usb 5-1: USB disconnect, device number 9 [ 476.549603][T10417] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.585419][ T5913] usb 2-1: media controller created [ 476.591187][ T5624] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 476.626208][T10423] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 476.646905][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 476.698954][T10423] EXT4-fs (loop0): Remounting filesystem read-only [ 476.730042][T10417] EXT4-fs (loop0): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -30 [ 476.758770][ T5624] usb 7-1: Using ep0 maxpacket: 16 [ 476.775977][ T5624] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.794726][ T5913] az6027: usb out operation failed. (-71) [ 476.804976][ T5624] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.833758][ T5913] az6027: usb out operation failed. (-71) [ 476.850352][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.863266][ T5913] stb0899_attach: Driver disabled by Kconfig [ 476.885086][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 476.886314][ T5913] az6027: no front-end attached [ 476.886314][ T5913] [ 476.906075][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 476.967998][ T5624] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 476.980495][ T5913] az6027: usb out operation failed. (-71) [ 476.988867][ T5913] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 477.000284][ T5624] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.021548][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 477.044798][ T5624] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 477.062753][ T5624] usb 7-1: Manufacturer: syz [ 477.100830][ T5913] dvb-usb: schedule remote query interval to 400 msecs. [ 477.128792][ T5624] usb 7-1: config 0 descriptor?? [ 477.141092][ T5913] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 477.225039][ T5913] usb 2-1: USB disconnect, device number 7 [ 477.390064][T10433] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 478.328124][ T5624] rc_core: IR keymap rc-hauppauge not found [ 478.357489][ T5624] Registered IR keymap rc-empty [ 478.389451][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 478.428074][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 479.162596][T10444] loop1: detected capacity change from 0 to 131072 [ 479.200099][T10444] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 479.208274][T10444] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 479.218706][T10444] F2FS-fs (loop1): invalid crc value [ 479.229667][ T5624] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 479.323512][T10450] Bluetooth: MGMT ver 1.23 [ 479.340246][T10444] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 479.387040][T10444] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 479.394070][ T5624] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 479.394203][T10444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 479.546387][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 479.611200][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 479.619370][ T5913] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 479.658464][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 479.710025][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 479.749430][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 480.701210][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 480.945868][T10466] loop6: detected capacity change from 0 to 8 [ 481.202893][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 481.279956][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 481.327303][T10466] SQUASHFS error: zlib decompression failed, data probably corrupt [ 481.341838][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 481.361301][T10386] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 481.378399][T10466] SQUASHFS error: Failed to read block 0x9b: -5 [ 481.392762][ T5624] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 481.420142][T10466] SQUASHFS error: Unable to read metadata cache entry [99] [ 481.463480][ T5624] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 481.473496][T10466] SQUASHFS error: Unable to read inode 0x127 [ 481.492496][ T5624] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.579201][T10386] usb 6-1: Using ep0 maxpacket: 8 [ 481.592121][T10459] loop6: detected capacity change from 0 to 512 [ 481.599015][T10459] msdos: Unknown parameter 'errortănue' [ 481.619727][ T5624] usb 7-1: USB disconnect, device number 8 [ 481.628070][T10386] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 481.670316][T10386] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 481.705232][T10386] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 481.767345][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.815408][T10386] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.865407][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.915920][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.968974][T10386] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 482.046695][T10386] usb 6-1: config 168 interface 0 has no altsetting 0 [ 482.064616][T10477] netlink: 'syz.1.1167': attribute type 4 has an invalid length. [ 482.101381][T10386] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 482.150981][T10386] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 482.204113][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 482.275713][T10386] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.347366][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 482.519640][T10484] loop2: detected capacity change from 0 to 8 [ 482.566386][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 482.638356][ T5919] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 482.712520][T10484] SQUASHFS error: zlib decompression failed, data probably corrupt [ 482.713627][T10386] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 482.735570][T10484] SQUASHFS error: Failed to read block 0x9b: -5 [ 482.744285][T10484] SQUASHFS error: Unable to read metadata cache entry [99] [ 482.754925][T10484] SQUASHFS error: Unable to read inode 0x127 [ 482.890306][T10386] usb 6-1: config 168 interface 0 has no altsetting 0 [ 482.992383][T10386] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 483.003036][T10386] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 483.025858][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 483.067355][T10481] loop2: detected capacity change from 0 to 512 [ 483.074395][T10481] msdos: Unknown parameter 'errortănue' [ 483.083534][ T5919] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 483.116858][T10386] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.136362][ T5919] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 483.180451][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 483.183476][ T5919] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 483.395267][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 483.406890][ T5919] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.418890][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 483.430878][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 483.432502][T10386] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 483.442338][ T5919] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 483.442400][ T5919] usb 5-1: config 168 interface 0 has no altsetting 0 [ 483.443860][ T5919] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 483.488985][T10386] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 483.509253][T10386] usb 6-1: config 168 interface 0 has no altsetting 0 [ 484.172655][ T5919] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 484.212400][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 484.273044][ T5919] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.327864][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 484.330021][T10386] usb 6-1: string descriptor 0 read error: -71 [ 484.407149][T10386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.412552][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 484.470007][T10386] usb 6-1: can't set config #168, error -71 [ 484.506125][ T5919] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 484.541145][T10386] usb 6-1: USB disconnect, device number 18 [ 484.585848][ T5919] usb 5-1: config 168 interface 0 has no altsetting 0 [ 484.606667][T10496] loop2: detected capacity change from 0 to 1024 [ 484.632613][ T5919] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 484.658487][ T5919] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 484.699398][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 484.702196][T10496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.718293][ T5919] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.734793][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 484.746177][ T5919] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 484.757562][ T5919] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 484.788104][ T5919] usb 5-1: config 168 interface 0 has no altsetting 0 [ 484.790425][T10504] netlink: 592 bytes leftover after parsing attributes in process `syz.6.1183'. [ 484.803862][ T5919] usb 5-1: string descriptor 0 read error: -22 [ 484.811923][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.874013][ T5919] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 484.878659][T10386] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 485.071903][T10386] usb 6-1: Using ep0 maxpacket: 32 [ 485.097103][T10386] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 485.140756][T10386] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 485.169337][T10386] usb 6-1: config 0 has no interface number 0 [ 485.322174][ T5919] usb 5-1: USB disconnect, device number 10 [ 485.403815][T10386] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.416656][T10386] usb 6-1: config 0 interface 85 has no altsetting 0 [ 485.426536][T10386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.438112][T10386] usb 6-1: Product: syz [ 485.445548][T10386] usb 6-1: Manufacturer: syz [ 485.451768][T10386] usb 6-1: SerialNumber: syz [ 485.452208][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.460231][T10386] usb 6-1: config 0 descriptor?? [ 486.681185][T10386] appletouch 6-1:0.85: Geyser mode initialized. [ 486.746484][T10386] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input14 [ 487.587058][ C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 487.666185][ C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 487.677816][T10386] usb 6-1: USB disconnect, device number 19 [ 487.739842][T10538] loop2: detected capacity change from 0 to 8 [ 487.858469][T10538] SQUASHFS error: zlib decompression failed, data probably corrupt [ 487.866878][T10538] SQUASHFS error: Failed to read block 0x9b: -5 [ 487.877657][T10538] SQUASHFS error: Unable to read metadata cache entry [99] [ 487.886149][T10538] SQUASHFS error: Unable to read inode 0x127 [ 488.212886][T10537] loop6: detected capacity change from 0 to 2048 [ 488.262703][T10535] loop2: detected capacity change from 0 to 512 [ 488.269569][T10535] msdos: Unknown parameter 'errortănue' [ 488.376254][T10386] appletouch 6-1:0.85: input: appletouch disconnected [ 488.459023][T10544] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.577760][T10546] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1198'. [ 488.650340][T10537] NILFS (loop6): error -2 reading inode: ino=835371204608 [ 488.829772][T10544] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 488.944179][T10544] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 489.045108][T10556] loop0: detected capacity change from 0 to 8 [ 489.434430][T10556] SQUASHFS error: zlib decompression failed, data probably corrupt [ 489.444133][T10556] SQUASHFS error: Failed to read block 0x9b: -5 [ 489.451872][T10556] SQUASHFS error: Unable to read metadata cache entry [99] [ 489.459266][T10556] SQUASHFS error: Unable to read inode 0x127 [ 489.508635][T10544] Remounting filesystem read-only [ 489.638887][ T7884] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 489.659542][T10552] loop2: detected capacity change from 0 to 4096 [ 489.749762][T10549] loop0: detected capacity change from 0 to 512 [ 489.756983][T10549] msdos: Unknown parameter 'errortănue' [ 489.811293][ T31] audit: type=1800 audit(1786379324.183:538): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1200" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 489.979937][ T5913] kernel write not supported for file /vcsu (pid: 5913 comm: kworker/0:6) [ 490.376773][T10571] loop1: detected capacity change from 0 to 512 [ 491.671571][T10582] loop0: detected capacity change from 0 to 256 [ 491.697135][T10582] exfat: Deprecated parameter 'utf8' [ 491.723639][T10582] exfat: Deprecated parameter 'namecase' [ 491.745347][T10582] exfat: Deprecated parameter 'namecase' [ 491.770962][T10582] exfat: Deprecated parameter 'utf8' [ 491.833090][T10582] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 491.873022][T10582] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 492.579372][T10563] loop6: detected capacity change from 0 to 40427 [ 492.619120][T10563] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 492.660137][T10590] loop4: detected capacity change from 0 to 8 [ 492.677850][T10590] SQUASHFS error: zlib decompression failed, data probably corrupt [ 492.686774][T10590] SQUASHFS error: Failed to read block 0x9b: -5 [ 492.693123][T10590] SQUASHFS error: Unable to read metadata cache entry [99] [ 492.700437][T10590] SQUASHFS error: Unable to read inode 0x127 [ 492.758159][T10563] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 492.842601][T10563] F2FS-fs (loop6): invalid crc value [ 492.957130][T10590] loop4: detected capacity change from 0 to 512 [ 492.964284][T10590] msdos: Unknown parameter 'errortănue' [ 493.195340][ T5620] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 493.537514][T10609] loop2: detected capacity change from 0 to 40427 [ 493.556728][T10609] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 493.564647][T10609] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 493.586710][T10609] F2FS-fs (loop2): invalid crc value [ 493.672206][T10609] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 493.687835][T10609] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 493.695129][T10609] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 493.994452][T10618] loop0: detected capacity change from 0 to 256 [ 494.791130][T10563] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 494.791278][T10618] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 494.888422][T10618] FAT-fs (loop0): Filesystem has been set read-only [ 495.770198][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 496.325182][T10635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.173555][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1229'. [ 497.278274][T10655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 497.318195][T10655] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 497.571198][T10665] loop4: detected capacity change from 0 to 4096 [ 497.615788][T10655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 497.632706][T10655] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 497.683064][T10655] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 497.706853][T10655] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 497.734367][T10668] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 497.772992][T10655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.789638][T10655] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 497.824156][T10665] capability: warning: `syz.4.1231' uses deprecated v2 capabilities in a way that may be insecure [ 497.878161][T10655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 497.978370][T10671] loop5: detected capacity change from 0 to 256 [ 497.985349][T10655] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 498.175612][T10674] loop1: detected capacity change from 0 to 40427 [ 498.221837][T10674] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 498.229839][T10674] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 498.243827][T10674] F2FS-fs (loop1): invalid crc value [ 498.333974][T10675] loop6: detected capacity change from 0 to 8 [ 498.345861][T10675] SQUASHFS error: zlib decompression failed, data probably corrupt [ 498.354065][T10675] SQUASHFS error: Failed to read block 0x9b: -5 [ 498.360436][T10675] SQUASHFS error: Unable to read metadata cache entry [99] [ 498.367684][T10675] SQUASHFS error: Unable to read inode 0x127 [ 498.433519][T10674] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 498.459569][T10674] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 498.466721][T10674] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 499.278175][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 499.448403][T10675] loop6: detected capacity change from 0 to 512 [ 499.456059][T10675] msdos: Unknown parameter 'errortănue' [ 499.482905][T10655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 499.526467][T10655] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 499.718199][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 499.758502][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 499.953441][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1236'. [ 500.018203][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 500.034037][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 500.801273][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.807869][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.815862][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 501.555842][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 501.768103][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 501.838327][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 502.078792][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 502.084876][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 502.828074][ T5759] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 502.898153][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 503.069373][ T5759] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 503.102049][ T5759] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.598260][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 503.874120][ T5759] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 503.926504][ T5759] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 503.946075][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.992164][T10723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 504.098645][ T5759] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 504.131352][ T5759] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 504.165422][ T5759] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 504.191994][ T5759] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 504.248708][ T5759] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 504.271674][ T5759] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 504.303373][ T5759] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 504.355145][ T5759] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 504.659118][ T1546] usb 1-1: USB disconnect, device number 13 [ 504.697525][ T1546] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 504.734397][ T1546] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 504.773855][T10744] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 504.776835][ T1546] keyspan 1-1:1.0: device disconnected [ 504.878167][ T5759] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 504.995405][T10749] loop4: detected capacity change from 0 to 512 [ 505.058513][ T5759] usb 6-1: Using ep0 maxpacket: 8 [ 505.060746][T10749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.133345][T10749] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.178656][ T5759] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 505.222272][ T5759] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.238466][ T5759] usb 6-1: config 0 has no interface number 0 [ 505.245004][ T5759] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.256297][ T5759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.310288][ T5759] usb 6-1: config 0 descriptor?? [ 505.401818][ T5759] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 505.723118][ T5759] usb 6-1: USB disconnect, device number 20 [ 505.882729][T10758] loop1: detected capacity change from 0 to 8 [ 505.956226][T10758] SQUASHFS error: zlib decompression failed, data probably corrupt [ 506.006307][T10758] SQUASHFS error: Failed to read block 0x9b: -5 [ 506.018705][T10758] SQUASHFS error: Unable to read metadata cache entry [99] [ 506.060630][T10758] SQUASHFS error: Unable to read inode 0x127 [ 506.076355][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.155905][T10763] loop0: detected capacity change from 0 to 512 [ 506.204808][T10763] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1260: bad orphan inode 15 [ 506.229003][T10763] loop0: lost filesystem error report for type 5 error -117 [ 506.229451][T10763] ext4_test_bit(bit=14, block=5) = 0 [ 506.242190][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 506.242216][ C0] EXT4-fs (loop0): initial error at time 1786379340: ext4_orphan_get:1425 [ 506.242245][ C0] EXT4-fs (loop0): last error at time 1786379340: ext4_orphan_get:1425 [ 506.298679][T10763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.357430][T10755] loop1: detected capacity change from 0 to 512 [ 507.400499][T10755] msdos: Unknown parameter 'errortănue' [ 507.598552][T10765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 507.632522][ T5737] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 507.724113][T10779] random: crng reseeded on system resumption [ 507.833241][ T5737] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 507.898737][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 507.961386][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 508.009891][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.049022][ T5737] usb 1-1: config 0 descriptor?? [ 508.405373][T10790] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1266'. [ 508.739581][ T5737] hid-led 0003:1D34:000A.0015: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 508.781928][ T5737] hid-led 0003:1D34:000A.0015: Dream Cheeky Webmail Notifier initialized [ 508.967446][ T5737] usb 1-1: USB disconnect, device number 14 [ 509.228825][ T5773] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 509.390689][ T5773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 509.409268][ T5773] usb 5-1: not running at top speed; connect to a high speed hub [ 509.428078][ T5773] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 509.442281][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.458276][ T5773] usb 5-1: Product: syz [ 509.468963][T10386] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 509.480609][ T5773] usb 5-1: Manufacturer: syz [ 509.491740][ T5773] usb 5-1: SerialNumber: syz [ 509.508807][T10811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1277'. [ 509.638153][T10386] usb 6-1: Using ep0 maxpacket: 8 [ 509.659103][T10386] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 509.669879][T10809] loop1: detected capacity change from 0 to 32768 [ 509.681134][T10809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1276 (10809) [ 509.726156][T10809] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 509.733763][T10386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.740915][T10809] BTRFS info (device loop1): using sha256 checksum algorithm [ 509.772013][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.816600][T10386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.839641][ T5773] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 509.872641][T10386] usb 6-1: config 0 descriptor?? [ 509.916914][ T5773] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 509.946412][T10809] BTRFS info (device loop1): enabling ssd optimizations [ 509.955369][T10809] BTRFS info (device loop1): turning on sync discard [ 509.962126][T10809] BTRFS info (device loop1): enabling free space tree [ 509.969033][T10809] BTRFS info (device loop1): use zlib compression, level 3 [ 510.157646][T10386] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 510.438809][ T5773] usb 5-1: USB disconnect, device number 11 [ 510.490927][T10834] loop0: detected capacity change from 0 to 8 [ 510.961339][T10834] SQUASHFS error: zlib decompression failed, data probably corrupt [ 511.024183][T10834] SQUASHFS error: Failed to read block 0x9b: -5 [ 511.038919][T10836] loop6: detected capacity change from 0 to 128 [ 511.068524][T10834] SQUASHFS error: Unable to read metadata cache entry [99] [ 511.070823][T10836] FAT-fs (loop6): invalid media value (0x06) [ 511.087622][T10834] SQUASHFS error: Unable to read inode 0x127 [ 511.173638][T10836] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 511.198639][T10836] FAT-fs (loop6): Can't find a valid FAT filesystem [ 511.324402][ T29] usb 6-1: USB disconnect, device number 21 [ 511.368979][ T5614] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 511.393790][T10834] loop0: detected capacity change from 0 to 512 [ 511.441184][T10834] msdos: Unknown parameter 'errortănue' [ 511.594368][T10843] input: syz0 as /devices/virtual/input/input15 [ 511.624632][ T5773] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 511.782839][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.880464][ T5773] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 511.954580][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 512.004779][ T5773] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 512.091872][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.176391][ T5773] usb 5-1: config 0 descriptor?? [ 512.195664][T10838] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 512.593249][T10855] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1288'. [ 512.644330][ T5773] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 512.658118][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 512.658335][ T5913] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 512.676145][ T5773] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 512.689740][ T5773] kone 0003:1E7D:2CED.0016: item fetching failed at offset 2/44 [ 512.711856][ T5773] kone 0003:1E7D:2CED.0016: parse failed [ 512.728671][ T5773] kone 0003:1E7D:2CED.0016: probe with driver kone failed with error -22 [ 512.838837][ T29] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 512.842118][ T5624] usb 5-1: USB disconnect, device number 12 [ 512.869962][ T5913] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 512.870866][ T29] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 512.903590][ T5913] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 512.919097][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.941097][ T29] usb 2-1: config 0 has no interface number 0 [ 512.948247][ T29] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 512.954246][ T5913] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 512.966056][ T29] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 512.984104][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.026210][ T29] usb 2-1: config 0 descriptor?? [ 513.032726][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 513.082880][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 513.120521][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 513.177757][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.212072][ T5913] usb 1-1: Product: syz [ 513.239232][ T5913] usb 1-1: Manufacturer: syz [ 513.326441][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 513.329668][ T5773] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 513.345537][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 513.370828][ T29] usb 2-1: USB disconnect, device number 8 [ 513.401074][ T5913] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 513.425973][ T5913] cdc_wdm 1-1:1.0: Unknown control protocol [ 513.510933][ T5773] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 513.538077][ T5913] usb 1-1: USB disconnect, device number 15 [ 513.549446][ T5773] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 513.583593][ T5773] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 513.624438][ T5773] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 513.648616][ T5773] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 513.687878][ T5773] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 513.724043][ T5773] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.741779][ T5773] usb 7-1: Product: syz [ 513.766775][ T5773] usb 7-1: Manufacturer: syz [ 513.793661][ T5773] cdc_wdm 7-1:1.0: skipping garbage [ 513.809850][ T5773] cdc_wdm 7-1:1.0: skipping garbage [ 513.821369][ T5773] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 513.828585][ T5773] cdc_wdm 7-1:1.0: Unknown control protocol [ 513.982517][ T1546] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 514.002495][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1293'. [ 514.085709][T10878] serio: Serial port ptm0 [ 514.124067][ T1546] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 514.279350][ C1] cdc_wdm 7-1:1.0: unknown notification 100 received: index 26159 len 29557 [ 514.292003][T10882] loop5: detected capacity change from 0 to 128 [ 514.306873][ T5773] usb 7-1: USB disconnect, device number 9 [ 515.048430][ T5773] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 515.062313][T10901] netlink: 592 bytes leftover after parsing attributes in process `syz.6.1301'. [ 515.094492][ T31] audit: type=1800 audit(1786379349.453:539): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1300" name="local" dev="configfs" ino=22986 res=0 errno=0 [ 515.173487][ T31] audit: type=1800 audit(1786379349.463:540): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1300" name="scan_secs" dev="configfs" ino=22988 res=0 errno=0 [ 515.288426][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 515.299559][ T5773] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.354120][ T5773] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.394810][ T5773] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.465201][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.490659][ T5773] usb 1-1: Product: syz [ 515.505566][ T5773] usb 1-1: Manufacturer: syz [ 515.561067][ T5773] usb 1-1: SerialNumber: syz [ 515.714903][ T5773] usb 1-1: 0:2 : does not exist [ 515.829153][ T5773] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 515.937961][T10916] loop4: detected capacity change from 0 to 256 [ 515.967415][T10919] loop1: detected capacity change from 0 to 256 [ 515.987751][ T31] audit: type=1800 audit(1786379350.353:541): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1305" name="file2" dev="loop4" ino=1048694 res=0 errno=0 [ 516.056252][ T5773] usb 1-1: USB disconnect, device number 16 [ 516.058514][T10919] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xd07b663d, utbl_chksum : 0xe619d30d) [ 516.158168][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.858389][ T31] audit: type=1800 audit(1786379351.223:542): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1306" name="file2" dev="loop1" ino=1048695 res=0 errno=0 [ 516.900812][T10922] loop5: detected capacity change from 0 to 8 [ 516.967339][ T7210] udevd[7210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.054881][T10922] SQUASHFS error: zlib decompression failed, data probably corrupt [ 517.116427][T10922] SQUASHFS error: Failed to read block 0x9b: -5 [ 517.172314][T10926] loop0: detected capacity change from 0 to 512 [ 517.203603][T10922] SQUASHFS error: Unable to read metadata cache entry [99] [ 517.212871][T10922] SQUASHFS error: Unable to read inode 0x127 [ 517.315608][T10926] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1309: corrupted in-inode xattr: invalid ea_ino [ 517.458075][T10926] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 517.467976][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 517.483814][ C1] EXT4-fs (loop0): initial error at time 1786379351: ext4_iget_extra_inode:5180: inode 15 [ 517.493838][ C1] EXT4-fs (loop0): last error at time 1786379351: ext4_iget_extra_inode:5180: inode 15 [ 517.504071][T10926] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1309: couldn't read orphan inode 15 (err -117) [ 517.538241][T10926] loop0: lost filesystem error report for type 5 error -117 [ 517.563434][T10926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.604428][T10922] loop5: detected capacity change from 0 to 512 [ 517.612712][T10922] msdos: Unknown parameter 'errortănue' [ 517.898730][T10936] loop1: detected capacity change from 0 to 128 [ 517.925014][T10936] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 518.246929][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.878400][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 519.484863][T10931] loop4: detected capacity change from 0 to 32768 [ 519.531830][T10931] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1307 (10931) [ 519.591538][T10931] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 519.624106][T10931] BTRFS info (device loop4): using blake2b checksum algorithm [ 519.796509][T10931] BTRFS info (device loop4): enabling ssd optimizations [ 519.810664][T10931] BTRFS info (device loop4): turning on async discard [ 519.818148][T10931] BTRFS info (device loop4): enabling free space tree [ 520.008114][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 520.031470][ T1546] IPVS: starting estimator thread 0... [ 520.149366][T10982] IPVS: using max 35 ests per chain, 84000 per kthread [ 520.213599][ T29] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 520.270510][ T29] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 520.308076][ T29] usb 7-1: Product: syz [ 520.378675][ T29] usb 7-1: config 0 descriptor?? [ 520.438889][ T29] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 520.507076][ T29] usb 7-1: Detected FT232H [ 520.575651][ T5613] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 520.641255][ T29] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 521.246370][ T29] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 521.602983][ T5913] usb 7-1: USB disconnect, device number 10 [ 521.690962][ T5913] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 521.741299][ T5913] ftdi_sio 7-1:0.0: device disconnected [ 522.182703][T11008] loop0: detected capacity change from 0 to 128 [ 522.270311][T11010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 522.293944][T11010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 522.305275][T11010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 522.319844][T11008] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.347318][T11010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 522.364570][T11008] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 522.428642][T11010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.692941][ T7040] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.721718][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 523.901241][T11011] loop5: detected capacity change from 0 to 8 [ 523.966858][T11011] SQUASHFS error: zlib decompression failed, data probably corrupt [ 523.977209][T11011] SQUASHFS error: Failed to read block 0x9b: -5 [ 523.995828][T11011] SQUASHFS error: Unable to read metadata cache entry [99] [ 524.017633][T11011] SQUASHFS error: Unable to read inode 0x127 [ 524.220139][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 524.374246][T11033] loop1: detected capacity change from 0 to 64 [ 524.406001][T11022] loop5: detected capacity change from 0 to 512 [ 524.439360][T11022] msdos: Unknown parameter 'errortănue' [ 524.598228][ T31] audit: type=1800 audit(1786379358.973:543): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1335" name="local" dev="configfs" ino=23136 res=0 errno=0 [ 524.727198][ T31] audit: type=1800 audit(1786379358.973:544): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1335" name="scan_secs" dev="configfs" ino=23138 res=0 errno=0 [ 524.861290][ T7040] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.880996][ T4927] Bluetooth: hci2: command tx timeout [ 525.294778][ T7040] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.569874][ T7040] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.784402][ T31] audit: type=1800 audit(1786379360.153:545): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1342" name="local" dev="configfs" ino=23166 res=0 errno=0 [ 525.905914][ T31] audit: type=1800 audit(1786379360.153:546): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1342" name="scan_secs" dev="configfs" ino=23168 res=0 errno=0 [ 526.413681][T11085] loop6: detected capacity change from 0 to 2048 [ 526.446313][T11085] EXT4-fs: Ignoring removed i_version option [ 526.572572][T11085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.600097][T11085] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.958122][ T4927] Bluetooth: hci2: command tx timeout [ 527.590415][T11101] loop4: detected capacity change from 0 to 131072 [ 527.621261][T11101] F2FS-fs (loop4): invalid crc value [ 527.713466][T11101] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 527.729578][T11101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 527.993741][T11085] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 528.014427][ T7040] bridge_slave_1: left allmulticast mode [ 528.036305][T11085] overlayfs: failed to verify index dir 'upper' xattr [ 528.042612][ T7040] bridge_slave_1: left promiscuous mode [ 528.075447][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.080280][T11085] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 528.135265][ T7040] bridge_slave_0: left allmulticast mode [ 528.156247][ T7040] bridge_slave_0: left promiscuous mode [ 528.183327][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.368179][ T31] audit: type=1800 audit(1786379362.733:547): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1352" name="local" dev="configfs" ino=23285 res=0 errno=0 [ 528.920740][ T7884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.062921][ T4927] Bluetooth: hci2: command tx timeout [ 529.068573][ T31] audit: type=1800 audit(1786379362.763:548): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1352" name="scan_secs" dev="configfs" ino=23287 res=0 errno=0 [ 529.089918][ T31] audit: type=1326 audit(1786379362.843:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.1.1351" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b599e0d9 code=0x7ffc0000 [ 529.115156][ T31] audit: type=1326 audit(1786379362.843:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.1.1351" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b599e0d9 code=0x7ffc0000 [ 529.144538][ T31] audit: type=1326 audit(1786379362.843:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.1.1351" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b599e0d9 code=0x7ffc0000 [ 529.187988][ T31] audit: type=1326 audit(1786379362.843:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.1.1351" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b599e0d9 code=0x7ffc0000 [ 529.509479][ T5624] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 529.840106][ T5913] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 530.068700][ T5624] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 530.117544][ T5624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.135314][ T5624] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 530.155980][ T5624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.209036][ T5624] usb 2-1: config 0 descriptor?? [ 530.218279][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 530.225245][ T5913] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 530.267279][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.292649][ T7040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.306780][T11134] loop4: detected capacity change from 0 to 8 [ 530.317582][T11134] SQUASHFS error: zlib decompression failed, data probably corrupt [ 530.325825][T11134] SQUASHFS error: Failed to read block 0x9b: -5 [ 530.332139][T11134] SQUASHFS error: Unable to read metadata cache entry [99] [ 530.339387][T11134] SQUASHFS error: Unable to read inode 0x127 [ 530.352716][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.390200][ T7040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.420598][ T5913] usb 7-1: config 0 descriptor?? [ 530.437809][ T7040] bond0 (unregistering): Released all slaves [ 530.523255][T11137] loop4: detected capacity change from 0 to 512 [ 530.539255][T11137] msdos: Unknown parameter 'errortănue' [ 530.867813][ T5624] Bluetooth: Can't get version to change to load ram patch err [ 530.890976][ T5913] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 530.911597][ T5624] Bluetooth: Loading sysconfig file failed [ 530.918603][ T5624] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 530.951882][ T5624] usb 2-1: USB disconnect, device number 9 [ 531.150007][ T4927] Bluetooth: hci2: command tx timeout [ 531.376441][T10386] usb 7-1: USB disconnect, device number 11 [ 532.127764][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 532.127787][ T31] audit: type=1800 audit(1786379366.483:574): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1360" name="local" dev="configfs" ino=23374 res=0 errno=0 [ 532.381633][ T31] audit: type=1800 audit(1786379366.493:575): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1360" name="scan_secs" dev="configfs" ino=23376 res=0 errno=0 [ 532.409483][T11159] loop4: detected capacity change from 0 to 8 [ 532.503999][T11159] SQUASHFS error: zlib decompression failed, data probably corrupt [ 532.544172][T11159] SQUASHFS error: Failed to read block 0x9b: -5 [ 532.595369][T11159] SQUASHFS error: Unable to read metadata cache entry [99] [ 532.643901][T11159] SQUASHFS error: Unable to read inode 0x127 [ 532.767708][ T7040] hsr_slave_0: left promiscuous mode [ 532.863589][ T7040] hsr_slave_1: left promiscuous mode [ 532.901323][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.948834][T11177] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 532.979793][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.040001][ T7040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.050751][T11180] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 533.146188][T11182] loop4: detected capacity change from 0 to 512 [ 533.150902][ T7040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.167315][T11182] msdos: Unknown parameter 'errortănue' [ 533.209555][T11180] 9p: Bad value for 'rfdno' [ 533.351057][ T7040] veth1_macvtap: left promiscuous mode [ 533.396880][ T7040] veth1_vlan: left promiscuous mode [ 533.427348][ T7040] veth0_vlan: left promiscuous mode [ 534.190705][ T31] audit: type=1800 audit(1786379368.563:576): pid=11202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1368" name="local" dev="configfs" ino=23935 res=0 errno=0 [ 534.288148][ T31] audit: type=1800 audit(1786379368.563:577): pid=11202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1368" name="scan_secs" dev="configfs" ino=23937 res=0 errno=0 [ 534.582601][T11173] loop0: detected capacity change from 0 to 40427 [ 534.615445][T11173] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 534.634861][T11173] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 534.661610][T11173] F2FS-fs (loop0): invalid crc value [ 534.907629][T11173] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 534.964791][T11173] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 534.990945][T11173] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 535.301314][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 535.517758][T11221] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1369'. [ 535.914856][T11233] loop1: detected capacity change from 0 to 64 [ 536.286051][T11009] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.326482][T11009] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.360023][T11009] bridge_slave_0: entered allmulticast mode [ 536.404999][T11009] bridge_slave_0: entered promiscuous mode [ 536.461063][T11009] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.482694][T11009] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.502061][T11009] bridge_slave_1: entered allmulticast mode [ 536.513509][ T31] audit: type=1800 audit(1786379370.883:578): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1376" name="local" dev="configfs" ino=23993 res=0 errno=0 [ 536.553707][T11009] bridge_slave_1: entered promiscuous mode [ 536.590963][ T31] audit: type=1800 audit(1786379370.883:579): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1376" name="scan_secs" dev="configfs" ino=23998 res=0 errno=0 [ 536.798832][T11262] loop5: detected capacity change from 0 to 2048 [ 536.801276][T11009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.906383][T11262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.913776][T11009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.186260][T11009] team0: Port device team_slave_0 added [ 537.230515][T11009] team0: Port device team_slave_1 added [ 537.528497][T11009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.567441][ T31] audit: type=1800 audit(1786379371.933:580): pid=11275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1381" name="local" dev="configfs" ino=24025 res=0 errno=0 [ 537.587855][T11009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.680801][T11228] loop4: detected capacity change from 0 to 40427 [ 537.688399][T11009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.718987][ T31] audit: type=1800 audit(1786379372.083:581): pid=11275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1381" name="scan_secs" dev="configfs" ino=24027 res=0 errno=0 [ 537.752482][T11228] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 537.776703][T11228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 537.804114][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 537.850423][T11228] F2FS-fs (loop4): invalid crc value [ 537.857560][T11009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.879227][T11009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.917515][T11009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.470822][T11009] hsr_slave_0: entered promiscuous mode [ 538.562312][T11009] hsr_slave_1: entered promiscuous mode [ 538.585527][T11009] debugfs: 'hsr0' already exists in 'hsr' [ 538.603166][T11228] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 538.612518][T11009] Cannot create hsr debugfs directory [ 538.958756][T11284] loop1: detected capacity change from 0 to 8 [ 538.970987][T11284] SQUASHFS error: zlib decompression failed, data probably corrupt [ 538.979097][T11284] SQUASHFS error: Failed to read block 0x9b: -5 [ 538.985364][T11284] SQUASHFS error: Unable to read metadata cache entry [99] [ 538.992666][T11284] SQUASHFS error: Unable to read inode 0x127 [ 539.331016][T11288] loop1: detected capacity change from 0 to 512 [ 539.352498][T11288] msdos: Unknown parameter 'errortănue' [ 539.533877][T11303] netlink: 592 bytes leftover after parsing attributes in process `syz.6.1386'. [ 539.621823][T11305] loop5: detected capacity change from 0 to 512 [ 539.647696][T11305] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 540.113019][ T31] audit: type=1800 audit(1786379374.483:582): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1391" name="local" dev="configfs" ino=24089 res=0 errno=0 [ 540.245322][ T31] audit: type=1800 audit(1786379374.483:583): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1391" name="scan_secs" dev="configfs" ino=24092 res=0 errno=0 [ 540.354342][T11318] binder: 11316:11318 ioctl c0306201 200000000080 returned -14 [ 540.900050][T11009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 540.926697][ T31] audit: type=1800 audit(1786379375.293:584): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1396" name="local" dev="configfs" ino=24280 res=0 errno=0 [ 540.935550][T11009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.020972][T11337] loop5: detected capacity change from 0 to 8 [ 541.031840][ T31] audit: type=1800 audit(1786379375.363:585): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1396" name="scan_secs" dev="configfs" ino=24286 res=0 errno=0 [ 541.129052][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 541.174905][T11009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 541.399653][T11009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.420661][T11009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.243261][T11009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.295492][T11009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 542.370503][T11009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.528962][T10386] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 542.816132][T11009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.862165][T11364] loop6: detected capacity change from 0 to 64 [ 542.917418][T10386] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.928892][T10386] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 543.004607][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1402'. [ 543.634324][T11009] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.649950][T10386] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 543.670485][T10386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.699320][T10386] usb 5-1: Product: syz [ 543.714049][T10386] usb 5-1: Manufacturer: syz [ 543.734822][T10386] usb 5-1: SerialNumber: syz [ 543.771431][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.778765][ T8719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.888342][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.895620][ T8719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.975436][T10386] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 544.136210][T11378] loop1: detected capacity change from 0 to 4096 [ 544.178620][T10386] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 544.244639][T10386] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 544.303510][ T31] audit: type=1800 audit(1786379378.673:586): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1406" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 544.324475][T11381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.452851][T11347] loop5: detected capacity change from 0 to 40427 [ 544.502485][T11347] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 544.527588][T11347] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 544.572684][T11347] F2FS-fs (loop5): invalid crc value [ 544.590398][T10386] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 544.635591][T10386] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 544.787670][T10386] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 545.256253][T11347] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 545.285042][T10386] usb 5-1: USB disconnect, device number 13 [ 545.314711][T11347] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 545.344126][T11347] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 545.827561][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 545.873311][T11406] loop1: detected capacity change from 0 to 2048 [ 545.935925][T11406] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 545.994942][T11406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 547.676925][T11429] loop6: detected capacity change from 0 to 4096 [ 547.710099][T11429] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 547.826223][T11009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.845701][T11429] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 548.003838][T11445] loop1: detected capacity change from 0 to 64 [ 548.075241][ T31] audit: type=1800 audit(1786379382.443:587): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1418" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 548.792714][T11461] loop0: detected capacity change from 0 to 40427 [ 548.822193][T11461] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 548.830342][T11461] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 548.842976][T11461] F2FS-fs (loop0): invalid crc value [ 548.927098][T11461] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 548.944789][T11461] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 548.951881][T11461] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 549.997461][T11477] loop5: detected capacity change from 0 to 512 [ 550.043686][T11477] EXT4-fs (loop5): orphan cleanup on readonly fs [ 550.062892][T11477] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1424: corrupted inode contents [ 550.191759][T11477] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 550.197934][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 550.213631][ C1] EXT4-fs (loop5): initial error at time 1786379384: ext4_do_update_inode:5742: inode 15 [ 550.223526][ C1] EXT4-fs (loop5): last error at time 1786379384: ext4_do_update_inode:5742: inode 15 [ 550.420867][T11477] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 550.477347][T11477] loop5: lost filesystem error report for type 5 error -117 [ 550.541450][T11477] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1424: corrupted inode contents [ 551.030883][T11477] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 551.036752][T11477] EXT4-fs error (device loop5): ext4_evict_inode:315: inode #15: comm syz.5.1424: mark_inode_dirty error [ 551.100196][ T31] audit: type=1800 audit(1786379385.443:588): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1426" name="scan_secs" dev="configfs" ino=24449 res=0 errno=0 [ 551.205850][T11477] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 551.208522][T11477] EXT4-fs (loop5): 1 orphan inode deleted [ 551.265405][ T31] audit: type=1800 audit(1786379385.443:589): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1426" name="local" dev="configfs" ino=24450 res=0 errno=0 [ 551.302148][T11477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 551.348981][T11009] veth0_vlan: entered promiscuous mode [ 551.443332][T11009] veth1_vlan: entered promiscuous mode [ 551.614581][T11009] veth0_macvtap: entered promiscuous mode [ 551.656766][ T5610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.691546][T11009] veth1_macvtap: entered promiscuous mode [ 551.744765][T11009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.815989][T11009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.858504][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 551.973281][T11473] loop6: detected capacity change from 0 to 40427 [ 552.011069][T11473] F2FS-fs (loop6): Unable to read 1th superblock [ 552.023832][T11473] F2FS-fs (loop6): Unable to read 2th superblock [ 552.038717][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 552.054834][ T5913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 552.091052][ T5913] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 552.107830][ T5913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.137979][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 552.168050][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.197940][ T5913] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.239466][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.510834][ T5913] usb 2-1: usb_control_msg returned -32 [ 552.526797][ T5913] usbtmc 2-1:16.0: can't read capabilities [ 553.188413][ T3293] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.225985][ T3293] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.344267][ T3293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.361782][ T8719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.385826][ T3293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.397089][ T8719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.625396][T11537] loop5: detected capacity change from 0 to 8 [ 553.793611][T11537] SQUASHFS error: zlib decompression failed, data probably corrupt [ 553.806558][T11537] SQUASHFS error: Failed to read block 0x9b: -5 [ 553.813374][T11537] SQUASHFS error: Unable to read metadata cache entry [99] [ 553.825264][T11537] SQUASHFS error: Unable to read inode 0x127 [ 554.295300][ T8719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.337136][ T8719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.347484][T11537] loop5: detected capacity change from 0 to 512 [ 554.362671][T11537] msdos: Unknown parameter 'errortănue' [ 554.662633][T10386] usb 2-1: USB disconnect, device number 10 [ 554.708589][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 554.816692][ T31] audit: type=1800 audit(1786379389.183:590): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1440" name="local" dev="configfs" ino=25735 res=0 errno=0 [ 554.898066][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 554.918906][ T5913] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 554.982838][ T5913] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 555.033215][T11562] loop5: detected capacity change from 0 to 512 [ 555.055051][ T5913] usb 5-1: config 0 has no interface number 0 [ 555.087843][ T5913] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 555.089795][ T31] audit: type=1800 audit(1786379389.223:591): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1440" name="scan_secs" dev="configfs" ino=25739 res=0 errno=0 [ 555.092536][T11562] EXT4-fs: Ignoring removed nobh option [ 555.220035][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.261391][ T5913] usb 5-1: Product: syz [ 555.299070][ T5913] usb 5-1: Manufacturer: syz [ 555.407829][ T5913] usb 5-1: SerialNumber: syz [ 555.728533][T11562] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 555.789366][ T5913] usb 5-1: config 0 descriptor?? [ 555.873798][T11562] EXT4-fs (loop5): 1 truncate cleaned up [ 555.882103][ T5913] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 555.918703][ T5913] em28xx 5-1:0.132: Video interface 132 found: [ 555.941501][T11562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.972893][T11575] loop6: detected capacity change from 0 to 512 [ 556.048973][T10386] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 556.128579][T11575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.176038][T11575] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.262898][T10386] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 556.288079][ T5913] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 556.297374][T10386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.320776][ T5610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.331920][T10386] usb 2-1: Product: syz [ 556.347831][T10386] usb 2-1: Manufacturer: syz [ 556.359821][T10386] usb 2-1: SerialNumber: syz [ 556.400782][T10386] usb 2-1: config 0 descriptor?? [ 556.493364][T11575] EXT4-fs error (device loop6): ext4_empty_dir:3082: inode #12: comm syz.6.1444: invalid size [ 556.596126][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 556.695456][ T7884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.763484][ T5913] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 556.798603][ T5913] em28xx 5-1:0.132: board has no eeprom [ 556.829921][T10386] usb 2-1: Firmware version (0.0) predates our first public release. [ 556.868163][T10386] usb 2-1: Please update to version 0.2 or newer [ 556.906368][T10386] usb 2-1: Firmware: build [ 557.028208][ T5913] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 557.037226][ T5913] em28xx 5-1:0.132: analog set to bulk mode. [ 557.048690][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 557.072506][ T5913] usb 5-1: USB disconnect, device number 14 [ 557.082339][ T5913] em28xx 5-1:0.132: Disconnecting em28xx [ 557.484056][T10386] usb 2-1: USB disconnect, device number 11 [ 557.520521][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 557.560237][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 557.618793][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 557.939085][T11631] loop5: detected capacity change from 0 to 8 [ 558.076740][T11631] SQUASHFS error: zlib decompression failed, data probably corrupt [ 558.087308][T11631] SQUASHFS error: Failed to read block 0x9b: -5 [ 558.094295][T11631] SQUASHFS error: Unable to read metadata cache entry [99] [ 558.102163][T11631] SQUASHFS error: Unable to read inode 0x127 [ 558.463604][ T10] usb 5-1: Decoder not found [ 558.486462][ T10] em28xx 5-1:0.132: failed to create media graph [ 558.658664][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 559.397835][ T31] audit: type=1800 audit(1786379393.763:592): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1456" name="local" dev="configfs" ino=25812 res=0 errno=0 [ 559.448666][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1458'. [ 559.575118][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 559.659492][ T5913] em28xx 5-1:0.132: Closing input extension [ 559.672515][T11627] loop5: detected capacity change from 0 to 512 [ 559.744122][ T31] audit: type=1800 audit(1786379393.793:593): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1456" name="scan_secs" dev="configfs" ino=25814 res=0 errno=0 [ 559.842783][T11627] msdos: Unknown parameter 'errortănue' [ 560.040983][T11660] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1461'. [ 560.800948][ T1546] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 560.867687][ T5913] em28xx 5-1:0.132: Freeing device [ 560.933362][T11661] loop6: detected capacity change from 0 to 8 [ 560.949242][T11661] SQUASHFS error: zlib decompression failed, data probably corrupt [ 560.957242][T11661] SQUASHFS error: Failed to read block 0x9b: -5 [ 560.964123][T11661] SQUASHFS error: Unable to read metadata cache entry [99] [ 560.971564][T11661] SQUASHFS error: Unable to read inode 0x127 [ 561.058109][ T1546] usb 1-1: Using ep0 maxpacket: 8 [ 561.076498][ T1546] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 561.144097][T11658] loop6: detected capacity change from 0 to 512 [ 561.159211][ T1546] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 561.195419][ T1546] usb 1-1: config 179 has no interface number 0 [ 561.203146][T11658] msdos: Unknown parameter 'errortănue' [ 561.230713][ T1546] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 561.278677][ T1546] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 561.389770][ T1546] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.450185][ T1546] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 561.540197][ T1546] usb 1-1: config 179 interface 65 has no altsetting 0 [ 561.586485][ T1546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.201702][ T1546] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 562.242119][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.251397][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.334090][ T1546] usb 1-1: USB disconnect, device number 17 [ 562.340309][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 562.363563][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 562.431536][ T4963] input input16: unable to receive magic message: -19 [ 562.883656][ T5624] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 563.210989][T11711] input: syz0 as /devices/virtual/input/input17 [ 563.236986][ T5624] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 563.264236][ T5624] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.338419][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 563.991402][ T5624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.013401][ T5624] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 564.194645][ T31] audit: type=1800 audit(1786379398.563:594): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1475" name="local" dev="configfs" ino=25935 res=0 errno=0 [ 564.318048][ T31] audit: type=1800 audit(1786379398.593:595): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1475" name="scan_secs" dev="configfs" ino=25938 res=0 errno=0 [ 564.628067][T10386] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 564.665123][T11736] loop7: detected capacity change from 0 to 256 [ 564.687168][T11736] exfat: Deprecated parameter 'namecase' [ 564.781666][T11736] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 564.808908][T10386] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 564.857647][T10386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.052224][T10386] usb 5-1: Product: syz [ 565.084647][T10386] usb 5-1: Manufacturer: syz [ 565.108133][T10386] usb 5-1: SerialNumber: syz [ 565.256511][T11745] loop6: detected capacity change from 0 to 8 [ 565.478661][T11746] loop5: detected capacity change from 0 to 4096 [ 565.554792][T11745] SQUASHFS error: zlib decompression failed, data probably corrupt [ 565.569034][T11745] SQUASHFS error: Failed to read block 0x9b: -5 [ 565.575484][T11745] SQUASHFS error: Unable to read metadata cache entry [99] [ 565.583351][T11745] SQUASHFS error: Unable to read inode 0x127 [ 565.769058][ T2350] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 565.783796][ T2350] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 565.824635][T11751] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.016467][T11745] loop6: detected capacity change from 0 to 512 [ 566.036279][T11745] msdos: Unknown parameter 'errortănue' [ 566.087708][ T31] audit: type=1800 audit(1786379400.453:596): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1483" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 566.279633][T10386] rtl8150 5-1:1.0: couldn't reset the device [ 566.302502][T10386] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 566.397108][T11753] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 566.420743][T10386] usb 5-1: USB disconnect, device number 15 [ 566.655627][ T29] usb 2-1: USB disconnect, device number 12 [ 567.151917][T11767] loop4: detected capacity change from 0 to 128 [ 567.515166][T11778] loop0: detected capacity change from 0 to 128 [ 567.524838][T11776] loop1: detected capacity change from 0 to 8 [ 567.595214][T11778] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 567.860843][ T31] audit: type=1800 audit(1786379402.223:597): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1492" name="local" dev="configfs" ino=25243 res=0 errno=0 [ 567.889224][T11778] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 567.973819][T11778] ext2 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.984598][ T5773] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 567.993136][ T31] audit: type=1800 audit(1786379402.233:598): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1492" name="scan_secs" dev="configfs" ino=25245 res=0 errno=0 [ 567.998129][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 568.188343][ T5773] usb 7-1: Using ep0 maxpacket: 8 [ 568.223412][ T5773] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 568.254248][ T5773] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.280423][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 568.308018][ T5773] pvrusb2: Hardware description: Terratec Grabster AV400 [ 568.312828][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 568.348295][ T5773] pvrusb2: ********** [ 568.355917][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 568.356980][ T5773] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 568.402660][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.422231][ T5773] pvrusb2: Important functionality might not be entirely working. [ 568.437803][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.457730][ T5773] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 568.464025][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.508320][ T5773] pvrusb2: ********** [ 568.526458][ T10] usb 8-1: Product: syz [ 568.538492][ T10] usb 8-1: Manufacturer: syz [ 568.556548][ T10] usb 8-1: SerialNumber: syz [ 568.595854][ T10] hub 8-1:1.0: bad descriptor, ignoring hub [ 568.626116][ T10] hub 8-1:1.0: probe with driver hub failed with error -5 [ 568.640956][T11773] loop5: detected capacity change from 0 to 32768 [ 568.720579][T11773] btrfs: Deprecated parameter 'usebackuproot' [ 568.759071][T11773] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 568.835677][T11773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1488 (11773) [ 568.852015][ T1546] usb 7-1: USB disconnect, device number 12 [ 568.884750][ T10] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 569.034353][ T1546] pvrusb2: Device being rendered inoperable [ 569.521549][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 570.136725][T11773] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 570.178265][T11773] BTRFS info (device loop5): using crc32c checksum algorithm [ 570.466674][T11820] loop6: detected capacity change from 0 to 40427 [ 570.479632][T11818] loop0: detected capacity change from 0 to 8 [ 570.494470][T11820] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 570.502383][T11820] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 570.511780][T11773] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 570.523307][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 570.532537][T11820] F2FS-fs (loop6): invalid crc value [ 570.556780][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 570.557198][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 570.625183][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 570.697812][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 570.729492][T11818] SQUASHFS error: zlib decompression failed, data probably corrupt [ 570.758386][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 570.758883][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 570.799163][T11820] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 570.824647][ T10] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 570.846289][T11820] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 570.853531][T11820] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 570.874821][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 570.875162][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 570.889971][T11818] SQUASHFS error: Failed to read block 0x9b: -5 [ 571.003956][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 571.004334][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 571.127286][T11818] SQUASHFS error: Unable to read metadata cache entry [99] [ 571.265453][T11773] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 571.817498][T11818] SQUASHFS error: Unable to read inode 0x127 [ 571.875806][T11773] BTRFS error (device loop5): open_ctree failed: -12 [ 572.699824][ T10] usb 8-1: USB disconnect, device number 2 [ 572.709953][T11858] loop7: detected capacity change from 0 to 8 [ 572.721109][ T10] usblp0: removed [ 572.867238][T11858] SQUASHFS error: zlib decompression failed, data probably corrupt [ 572.914964][T11851] loop4: detected capacity change from 0 to 4096 [ 572.925202][T11858] SQUASHFS error: Failed to read block 0x9b: -5 [ 572.996707][T11851] EXT4-fs (loop4): Test dummy encryption mode enabled [ 573.004350][T11858] SQUASHFS error: Unable to read metadata cache entry [99] [ 573.045395][T11851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.060841][T11858] SQUASHFS error: Unable to read inode 0x127 [ 573.243057][T11854] loop7: detected capacity change from 0 to 512 [ 573.250066][T11854] msdos: Unknown parameter 'errortănue' [ 573.479439][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.787264][T11873] loop3: detected capacity change from 0 to 7 [ 573.844447][T11872] cgroup: fork rejected by pids controller in /syz0 [ 573.877063][T11873] Dev loop3: unable to read RDB block 7 [ 573.877397][T11873] loop3: unable to read partition table [ 573.877634][T11873] loop3: partition table beyond EOD, truncated [ 574.009612][ T31] audit: type=1800 audit(1786379408.373:599): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1509" name="local" dev="configfs" ino=26109 res=0 errno=0 [ 574.036621][T11873] loop_reread_partitions: partition scan of loop3 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 574.110548][ T31] audit: type=1800 audit(1786379408.423:600): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1509" name="scan_secs" dev="configfs" ino=26111 res=0 errno=0 [ 574.528266][ T5773] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 574.609868][T11994] loop4: detected capacity change from 0 to 4096 [ 574.652947][T11994] EXT4-fs (loop4): Test dummy encryption mode enabled [ 574.684409][T11994] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 574.708870][ T5773] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 574.724903][T11994] System zones: 0-5 [ 574.981357][T11994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.988688][ T5773] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 575.024421][ T5773] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 575.035424][ T5773] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.075913][ T5773] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 575.106690][T11994] EXT4-fs (loop4): shut down requested (0) [ 575.131243][ T5773] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 575.396866][T11877] loop6: detected capacity change from 0 to 32768 [ 575.441145][T11877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1504 (11877) [ 575.538144][T11991] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 575.549490][T11877] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 575.571544][T11991] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 575.579427][T11877] BTRFS info (device loop6): using sha256 checksum algorithm [ 575.620913][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.641647][T11991] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 575.780010][T11979] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 575.834233][ T5773] usb 8-1: USB disconnect, device number 3 [ 575.864756][T11877] BTRFS info (device loop6): enabling ssd optimizations [ 575.885009][T11877] BTRFS info (device loop6): turning on async discard [ 575.893098][T11877] BTRFS info (device loop6): enabling free space tree [ 575.987351][ T5773] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 576.080953][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.084399][ T5773] spcp8x5 8-1:1.0: device disconnected [ 576.368062][ T5746] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 576.560307][ T5746] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 576.570831][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.629992][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.660789][ T5746] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 576.674896][ T5746] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.713054][ T7884] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 576.769925][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 576.805765][T12039] loop1: detected capacity change from 0 to 8 [ 577.213794][T12039] SQUASHFS error: zlib decompression failed, data probably corrupt [ 577.261693][ T5746] usb 5-1: Product: syz [ 577.294282][ T5746] usb 5-1: Manufacturer: syz [ 577.296845][T12039] SQUASHFS error: Failed to read block 0x9b: -5 [ 577.323854][T12039] SQUASHFS error: Unable to read metadata cache entry [99] [ 577.353094][T12039] SQUASHFS error: Unable to read inode 0x127 [ 577.400271][T11010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 577.426155][T11010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 577.442770][T11010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 577.443272][T12027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 577.511239][T11010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 577.533662][T11010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 577.560098][ T5737] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 577.645074][ T5746] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 577.655052][T12035] loop1: detected capacity change from 0 to 512 [ 577.674070][T12035] msdos: Unknown parameter 'errortănue' [ 577.766296][ T5746] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 577.827705][ T5737] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 577.920849][ T5737] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.978453][ T5737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.088830][ T5746] usb 5-1: USB disconnect, device number 16 [ 578.151671][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.165903][ T5737] as10x_usb: device has been detected [ 578.510830][ T5737] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 578.646034][ T5746] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 578.668548][ T5737] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 578.682834][ T5746] garmin_gps 5-1:1.0: device disconnected [ 579.371752][T12068] loop6: detected capacity change from 0 to 512 [ 579.395926][T12068] msdos: Unknown parameter 'errortănue' [ 579.679757][ T4927] Bluetooth: hci0: command tx timeout [ 579.761373][ T5737] as10x_usb: error during firmware upload part1 [ 579.782236][ T5737] Registered device Abilis Systems DVB-Titan [ 579.795205][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 579.876325][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.895236][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 579.922678][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 579.950691][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 579.968870][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 579.991770][T12060] usb 8-1: USB disconnect, device number 4 [ 580.016829][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 580.052303][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 580.058172][ T5737] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 580.090218][ T31] audit: type=1800 audit(1786379414.463:601): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1526" name="local" dev="configfs" ino=25409 res=0 errno=0 [ 580.093847][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 580.180598][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 580.233942][T12089] netlink: 592 bytes leftover after parsing attributes in process `syz.7.1527'. [ 580.300062][ T31] audit: type=1800 audit(1786379414.503:602): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1526" name="scan_secs" dev="configfs" ino=25411 res=0 errno=0 [ 580.307994][ T5624] hid-generic 0003:0008:0001.0019: unknown main item tag 0x0 [ 580.362446][T12060] Unregistered device Abilis Systems DVB-Titan [ 580.373809][ T5737] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 580.425090][T12060] as10x_usb: device has been disconnected [ 580.464700][ T5737] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 580.555765][ T5624] hid-generic 0003:0008:0001.0019: hidraw0: USB HID v0.04 Device [syz1] on syz0 [ 580.606881][ T5737] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 580.744581][ T5737] usb 6-1: config 220 has no interface number 2 [ 580.803948][ T5737] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 580.842149][T12097] Bluetooth: MGMT ver 1.23 [ 580.890851][ T5737] usb 6-1: config 220 interface 0 has no altsetting 0 [ 580.927025][ T5737] usb 6-1: config 220 interface 76 has no altsetting 0 [ 580.949118][ T5737] usb 6-1: config 220 interface 1 has no altsetting 0 [ 580.971305][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.988223][ T5737] usb 6-1: Product: syz [ 580.992607][ T5737] usb 6-1: Manufacturer: syz [ 581.013715][ T5737] usb 6-1: SerialNumber: syz [ 581.239071][T12099] nbd7: detected capacity change from 0 to 63 [ 581.255540][T12102] block nbd7: NBD_DISCONNECT [ 581.299286][ T5737] usb 6-1: selecting invalid altsetting 0 [ 581.325219][ T5737] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 581.346796][ T5737] uvcvideo 6-1:220.0: No valid video chain found. [ 581.391148][T12106] loop4: detected capacity change from 0 to 512 [ 581.440015][T12102] block nbd7: Disconnected due to user request. [ 581.461242][ T5737] usb 6-1: selecting invalid altsetting 0 [ 581.490637][ T5737] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 581.519129][T12106] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 581.529732][T12102] block nbd7: shutting down sockets [ 581.549611][ C0] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.559360][ C0] Buffer I/O error on dev nbd7, logical block 0, async page read [ 581.577250][ C0] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.587024][ C0] Buffer I/O error on dev nbd7, logical block 1, async page read [ 581.591323][ T5737] usb 6-1: USB disconnect, device number 22 [ 581.610138][ C0] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.620196][ C0] Buffer I/O error on dev nbd7, logical block 2, async page read [ 581.628054][ C0] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.637593][ C0] Buffer I/O error on dev nbd7, logical block 3, async page read [ 581.673286][ T5904] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.689209][ T5904] Buffer I/O error on dev nbd7, logical block 0, async page read [ 581.699951][ T5904] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 581.710404][ T5904] Buffer I/O error on dev nbd7, logical block 1, async page read [ 581.718360][ T5904] Buffer I/O error on dev nbd7, logical block 2, async page read [ 581.726116][ T5904] Buffer I/O error on dev nbd7, logical block 3, async page read [ 581.755350][ T4939] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.758721][ T4927] Bluetooth: hci0: command tx timeout [ 581.768760][ T4939] Buffer I/O error on dev nbd7, logical block 0, async page read [ 581.780314][ T4939] Buffer I/O error on dev nbd7, logical block 1, async page read [ 581.798812][ T4939] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.811141][ T49] bridge_slave_1: left allmulticast mode [ 581.811990][ T4939] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.826893][ T4939] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.838351][ T7210] ldm_validate_partition_table(): Disk read failed. [ 581.849488][ T7210] Dev nbd7: unable to read RDB block 0 [ 581.850459][T12106] EXT4-fs (loop4): 1 truncate cleaned up [ 581.858958][ T7210] nbd7: unable to read partition table [ 581.877568][ T49] bridge_slave_1: left promiscuous mode [ 581.889514][ T7210] ldm_validate_partition_table(): Disk read failed. [ 581.917727][ T7210] Dev nbd7: unable to read RDB block 0 [ 581.923643][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.933365][ T7210] nbd7: unable to read partition table [ 582.007068][T12106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.049739][T12115] loop7: detected capacity change from 0 to 128 [ 582.063914][ T49] bridge_slave_0: left allmulticast mode [ 582.083151][ T49] bridge_slave_0: left promiscuous mode [ 582.100488][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.146547][T12115] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 582.170411][T12115] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 582.341266][T12115] Invalid argument reading file caps for ./file0 [ 582.394260][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.511565][T11009] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 582.815769][T12129] loop5: detected capacity change from 0 to 32768 [ 582.823341][T12129] btrfs: Deprecated parameter 'usebackuproot' [ 582.829561][T12129] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 582.839682][T12129] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1538 (12129) [ 582.867547][T12129] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 582.877725][T12129] BTRFS info (device loop5): using sha256 checksum algorithm [ 583.025399][T12129] BTRFS info (device loop5): rebuilding free space tree [ 583.042554][T12129] BTRFS info (device loop5): disabling free space tree [ 583.049574][T12129] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 583.059399][T12129] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 583.078230][T12129] BTRFS info (device loop5): setting nodatasum [ 583.084494][T12129] BTRFS info (device loop5): allowing degraded mounts [ 583.091374][T12129] BTRFS info (device loop5): setting nodatacow [ 583.097702][T12129] BTRFS info (device loop5): turning off barriers [ 583.104725][T12129] BTRFS info (device loop5): turning on flush-on-commit [ 583.111752][T12129] BTRFS info (device loop5): turning on async discard [ 583.118612][T12129] BTRFS info (device loop5): force clearing of disk cache [ 583.125769][T12129] BTRFS info (device loop5): trying to use backup root at mount time [ 583.334360][ T5610] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 583.660331][T12156] loop7: detected capacity change from 0 to 32768 [ 583.674066][T12156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1543 (12156) [ 583.721732][T12156] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 583.732859][T12156] BTRFS info (device loop7): using sha256 checksum algorithm [ 583.789894][ T49] geneve0 (unregistering): left promiscuous mode [ 583.838550][ T4927] Bluetooth: hci0: command tx timeout [ 584.054435][T12160] loop6: detected capacity change from 0 to 40427 [ 584.062035][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.079564][T12160] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 584.087313][T12160] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 584.101615][T12160] F2FS-fs (loop6): invalid crc value [ 584.168153][T12156] BTRFS info (device loop7): enabling ssd optimizations [ 584.175209][T12156] BTRFS info (device loop7): turning on sync discard [ 584.182092][T12156] BTRFS info (device loop7): enabling free space tree [ 584.188991][T12156] BTRFS info (device loop7): use zlib compression, level 3 [ 584.204227][T12160] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 584.221337][T12160] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 584.228494][T12160] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 584.274844][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.346513][ T49] bond0 (unregistering): Released all slaves [ 584.535335][ T31] audit: type=1800 audit(1786379418.793:603): pid=12156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1543" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 585.353149][T12194] loop1: detected capacity change from 0 to 512 [ 585.859997][T12185] loop5: detected capacity change from 0 to 8 [ 585.927531][ T4927] Bluetooth: hci0: command tx timeout [ 585.999530][T12194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.018319][T12185] SQUASHFS error: zlib decompression failed, data probably corrupt [ 586.037144][T12185] SQUASHFS error: Failed to read block 0x9b: -5 [ 586.112561][T11009] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 586.147767][T12185] SQUASHFS error: Unable to read metadata cache entry [99] [ 586.205512][T12185] SQUASHFS error: Unable to read inode 0x127 [ 586.283044][T12194] [ 586.285432][T12194] ====================================================== [ 586.292442][T12194] WARNING: possible circular locking dependency detected [ 586.299456][T12194] syzkaller #0 Tainted: G L [ 586.305424][T12194] ------------------------------------------------------ [ 586.312428][T12194] syz.1.1547/12194 is trying to acquire lock: [ 586.318648][T12194] ffff88807df3e640 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 586.327744][T12194] [ 586.327744][T12194] but task is already holding lock: [ 586.335090][T12194] ffff88807fe6ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 586.345320][T12194] [ 586.345320][T12194] which lock already depends on the new lock. [ 586.345320][T12194] [ 586.355722][T12194] [ 586.355722][T12194] the existing dependency chain (in reverse order) is: [ 586.364800][T12194] [ 586.364800][T12194] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 586.373327][T12194] percpu_down_read_internal+0x48/0x1c0 [ 586.379499][T12194] ext4_writepages+0x205/0x3b0 [ 586.384795][T12194] do_writepages+0x338/0x560 [ 586.389919][T12194] __writeback_single_inode+0x12e/0xf90 [ 586.396027][T12194] writeback_single_inode+0x4ef/0xe70 [ 586.401929][T12194] write_inode_now+0x1c2/0x290 [ 586.407656][T12194] iput+0x98b/0xf00 [ 586.412054][T12194] ext4_xattr_block_set+0x1b0c/0x2a80 [ 586.418142][T12194] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 586.424580][T12194] __ext4_expand_extra_isize+0x30d/0x400 [ 586.430745][T12194] __ext4_mark_inode_dirty+0x455/0x700 [ 586.436890][T12194] ext4_evict_inode+0x976/0x10c0 [ 586.442380][T12194] evict+0x624/0xb50 [ 586.446898][T12194] ext4_orphan_cleanup+0xc7a/0x14c0 [ 586.452609][T12194] ext4_fill_super+0x5cb4/0x65c0 [ 586.458082][T12194] get_tree_bdev_flags+0x430/0x4f0 [ 586.463742][T12194] vfs_get_tree+0x92/0x2a0 [ 586.468702][T12194] do_new_mount+0x319/0xdc0 [ 586.473745][T12194] __se_sys_mount+0x31d/0x420 [ 586.478952][T12194] do_syscall_64+0x174/0x580 [ 586.484077][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.490514][T12194] [ 586.490514][T12194] -> #0 (sb_internal){++++}-{0:0}: [ 586.497814][T12194] __lock_acquire+0x1520/0x2cf0 [ 586.503196][T12194] lock_acquire+0x106/0x350 [ 586.508251][T12194] percpu_down_read_internal+0x48/0x1c0 [ 586.514341][T12194] ext4_evict_inode+0x426/0x10c0 [ 586.519827][T12194] evict+0x624/0xb50 [ 586.524241][T12194] ext4_ext_migrate+0xddf/0x10e0 [ 586.529711][T12194] ext4_ioctl+0x2346/0x4b70 [ 586.534741][T12194] __se_sys_ioctl+0xfc/0x170 [ 586.539874][T12194] do_syscall_64+0x174/0x580 [ 586.544990][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.551400][T12194] [ 586.551400][T12194] other info that might help us debug this: [ 586.551400][T12194] [ 586.561631][T12194] Possible unsafe locking scenario: [ 586.561631][T12194] [ 586.569092][T12194] CPU0 CPU1 [ 586.574531][T12194] ---- ---- [ 586.579882][T12194] lock(&sbi->s_writepages_rwsem); [ 586.585079][T12194] lock(sb_internal); [ 586.591675][T12194] lock(&sbi->s_writepages_rwsem); [ 586.599387][T12194] rlock(sb_internal); [ 586.603532][T12194] [ 586.603532][T12194] *** DEADLOCK *** [ 586.603532][T12194] [ 586.611657][T12194] 3 locks held by syz.1.1547/12194: [ 586.616878][T12194] #0: ffff88807df3e450 (sb_writers#4){++++}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 586.626649][T12194] #1: ffff8880696d6140 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: ext4_ioctl+0x233e/0x4b70 [ 586.637215][T12194] #2: ffff88807fe6ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 586.647845][T12194] [ 586.647845][T12194] stack backtrace: [ 586.653773][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.1.1547 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.653801][T12194] Tainted: [L]=SOFTLOCKUP [ 586.653808][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 586.653820][T12194] Call Trace: [ 586.653827][T12194] [ 586.653837][T12194] dump_stack_lvl+0xe8/0x150 [ 586.653867][T12194] print_circular_bug+0x2e1/0x300 [ 586.653900][T12194] check_noncircular+0x12e/0x150 [ 586.653934][T12194] __lock_acquire+0x1520/0x2cf0 [ 586.653976][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654016][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654040][T12194] ? __asan_memset+0x22/0x50 [ 586.654064][T12194] ? ext4_evict_inode+0x426/0x10c0 [ 586.654095][T12194] lock_acquire+0x106/0x350 [ 586.654119][T12194] ? ext4_evict_inode+0x426/0x10c0 [ 586.654150][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654176][T12194] percpu_down_read_internal+0x48/0x1c0 [ 586.654202][T12194] ? ext4_evict_inode+0x426/0x10c0 [ 586.654231][T12194] ext4_evict_inode+0x426/0x10c0 [ 586.654260][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654284][T12194] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 586.654302][T12194] ? do_raw_spin_lock+0x12b/0x2f0 [ 586.654322][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654345][T12194] ? __pfx_ext4_evict_inode+0x10/0x10 [ 586.654380][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654406][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654427][T12194] ? do_raw_spin_unlock+0xf5/0x210 [ 586.654448][T12194] ? __pfx_ext4_evict_inode+0x10/0x10 [ 586.654476][T12194] evict+0x624/0xb50 [ 586.654498][T12194] ? __pfx_evict+0x10/0x10 [ 586.654515][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654536][T12194] ? do_raw_spin_unlock+0xf5/0x210 [ 586.654556][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654579][T12194] ? _raw_spin_unlock+0x28/0x50 [ 586.654611][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654640][T12194] ? iput+0xb84/0xf00 [ 586.654692][T12194] ext4_ext_migrate+0xddf/0x10e0 [ 586.654725][T12194] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 586.654751][T12194] ? __pfx_down_write+0x10/0x10 [ 586.654779][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654801][T12194] ? sb_start_write+0x114/0x1c0 [ 586.654832][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654853][T12194] ? mnt_want_write_file+0x164/0x200 [ 586.654883][T12194] ext4_ioctl+0x2346/0x4b70 [ 586.654915][T12194] ? __pfx_ext4_ioctl+0x10/0x10 [ 586.654940][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.654960][T12194] ? is_bpf_text_address+0x292/0x2b0 [ 586.654986][T12194] ? is_bpf_text_address+0x26/0x2b0 [ 586.655012][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655033][T12194] ? kernel_text_address+0xa5/0xe0 [ 586.655065][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655093][T12194] ? __kernel_text_address+0xd/0x30 [ 586.655130][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655152][T12194] ? unwind_get_return_address+0x4d/0x90 [ 586.655171][T12194] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 586.655194][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655215][T12194] ? arch_stack_walk+0xfb/0x150 [ 586.655238][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655259][T12194] ? stack_trace_save+0xa9/0x100 [ 586.655279][T12194] ? __pfx_stack_trace_save+0x10/0x10 [ 586.655299][T12194] ? kasan_save_track+0x4f/0x80 [ 586.655324][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655345][T12194] ? stack_depot_save_flags+0x33/0x800 [ 586.655367][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655388][T12194] ? __lock_acquire+0x683/0x2cf0 [ 586.655413][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655434][T12194] ? kasan_save_track+0x4f/0x80 [ 586.655455][T12194] ? kasan_save_track+0x3e/0x80 [ 586.655476][T12194] ? kasan_save_free_info+0x40/0x50 [ 586.655494][T12194] ? __kasan_slab_free+0x5c/0x80 [ 586.655516][T12194] ? kfree+0x1c5/0x640 [ 586.655534][T12194] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 586.655561][T12194] ? security_file_ioctl+0xc3/0x2a0 [ 586.655585][T12194] ? __se_sys_ioctl+0x47/0x170 [ 586.655600][T12194] ? do_syscall_64+0x174/0x580 [ 586.655626][T12194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.655655][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655676][T12194] ? file_ioctl+0x253/0x7d0 [ 586.655699][T12194] ? __pfx_file_ioctl+0x10/0x10 [ 586.655722][T12194] ? kasan_quarantine_put+0xbb/0x1f0 [ 586.655744][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655767][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655790][T12194] ? tomoyo_path_number_perm+0x219/0x5f0 [ 586.655816][T12194] ? tomoyo_path_number_perm+0x219/0x5f0 [ 586.655843][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655864][T12194] ? do_vfs_ioctl+0x116f/0x1530 [ 586.655882][T12194] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 586.655901][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655921][T12194] ? vfs_write+0x9ce/0xba0 [ 586.655951][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.655972][T12194] ? hook_file_ioctl+0x1f0/0x5f0 [ 586.656009][T12194] ? __fget_files+0x2a/0x420 [ 586.656034][T12194] ? __fget_files+0x2a/0x420 [ 586.656060][T12194] ? __fget_files+0x3a2/0x420 [ 586.656090][T12194] ? __fget_files+0x2a/0x420 [ 586.656116][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.656146][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 586.656176][T12194] ? __pfx_ext4_ioctl+0x10/0x10 [ 586.656208][T12194] __se_sys_ioctl+0xfc/0x170 [ 586.656225][T12194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.656245][T12194] do_syscall_64+0x174/0x580 [ 586.656270][T12194] ? trace_irq_disable+0x3b/0x140 [ 586.656303][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.656322][T12194] RIP: 0033:0x7fb1b599e0d9 [ 586.656340][T12194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.656356][T12194] RSP: 002b:00007fb1b68fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.656375][T12194] RAX: ffffffffffffffda RBX: 00007fb1b5c25fa0 RCX: 00007fb1b599e0d9 [ 586.656389][T12194] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005 [ 586.656400][T12194] RBP: 00007fb1b5a35024 R08: 0000000000000000 R09: 0000000000000000 [ 586.656412][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.656423][T12194] R13: 00007fb1b5c26038 R14: 00007fb1b5c25fa0 R15: 00007ffc2ff48bc8 [ 586.656445][T12194] [ 587.781762][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.140830][ T49] hsr_slave_0: left promiscuous mode [ 588.199100][ T49] hsr_slave_1: left promiscuous mode [ 588.219561][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.254292][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.284502][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.296719][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.332935][ T49] veth1_macvtap: left promiscuous mode [ 588.344979][ T49] veth0_macvtap: left promiscuous mode [ 588.378299][ T49] veth1_vlan: left promiscuous mode [ 588.384817][ T49] veth0_vlan: left promiscuous mode [ 588.611927][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 588.917434][T12044] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.934509][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.944896][T12044] bridge_slave_0: entered allmulticast mode [ 588.956387][T12044] bridge_slave_0: entered promiscuous mode [ 588.970040][ T49] IPVS: stop unused estimator thread 0... [ 588.978982][T12044] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.998117][T12044] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.008455][T12044] bridge_slave_1: entered allmulticast mode [ 589.023003][T12044] bridge_slave_1: entered promiscuous mode [ 589.069745][T12044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.081436][T12044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.115348][T12044] team0: Port device team_slave_0 added [ 589.124168][T12044] team0: Port device team_slave_1 added [ 589.148811][T12044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.155930][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.182405][T12044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.194949][T12044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.203119][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.231872][T12044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.280765][T12044] hsr_slave_0: entered promiscuous mode [ 589.287017][T12044] hsr_slave_1: entered promiscuous mode [ 589.294549][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 589.667117][T12044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 589.677162][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.686870][T12044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 589.696977][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.706008][T12044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 589.715312][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.726338][T12044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 589.735831][T12044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.810850][T12044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.833186][T12044] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.845930][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.853482][ T3313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.870339][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.877457][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.292710][T12044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.345479][T12044] veth0_vlan: entered promiscuous mode [ 590.357258][T12044] veth1_vlan: entered promiscuous mode [ 590.388980][T12044] veth0_macvtap: entered promiscuous mode [ 590.400949][T12044] veth1_macvtap: entered promiscuous mode [ 590.421313][T12044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.436056][T12044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.468368][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.497598][T12044] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 590.527622][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.536640][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.546696][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.555702][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.566668][T12044] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 590.596221][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.605770][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.613255][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0