last executing test programs: 3m54.899783833s ago: executing program 1 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000780)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 3m53.728898787s ago: executing program 1 (id=60): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x7, 0x5, 0x1ff, 0x4d942c23, 0x5, 0x3}) 3m53.648844253s ago: executing program 1 (id=51): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'dt2814\x00', [0x260, 0xfffffff9, 0xf, 0x8, 0x9, 0x3, 0x6623, 0x6, 0x8b, 0xc, 0x7, 0x6, 0x2, 0x4, 0x4, 0x0, 0x1, 0x7, 0x10004, 0x7, 0x10, 0x5, 0x10000, 0x6, 0xfffffffd, 0x6, 0xffffffff, 0x3, 0x54, 0x8, 0x4]}) 3m52.412547931s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') accept(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 3m52.250135064s ago: executing program 1 (id=58): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffffffe, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000380)={0x86e, 0x401, 0x92d3, 0x7, 0xa}) 3m51.071033778s ago: executing program 1 (id=64): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f0000000040)="0f", 0x9, 0x1, 0x458, 0x58, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 3m50.840277417s ago: executing program 32 (id=64): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f0000000040)="0f", 0x9, 0x1, 0x458, 0x58, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 3m39.661505786s ago: executing program 0 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 3m39.459020153s ago: executing program 0 (id=132): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_setup(0x40dd, &(0x7f0000000240)={0x0, 0x9db7, 0x10100, 0x0, 0xa8}, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) 3m38.872828369s ago: executing program 0 (id=138): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x0, 0x0, 0x2f, 0x0, "69786d158bd18fffc24718156d1203c4c2cdc7d49dbe9e18437798c76e17ec1d2ea94ed825114f5367907f53a2be8188b1f1d81dba318258dd4b47e2ba6af047e7bbe523192993af972fe638669cabad"}, 0xd8) 3m38.676641665s ago: executing program 0 (id=141): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) dup2(r2, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 3m38.392361747s ago: executing program 0 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 3m37.888773437s ago: executing program 0 (id=146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3m37.743218849s ago: executing program 33 (id=146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m44.268800546s ago: executing program 4 (id=397): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2m44.252537417s ago: executing program 4 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) shutdown(r6, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 2m44.112939758s ago: executing program 4 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 2m44.100254129s ago: executing program 4 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) 2m44.034544554s ago: executing program 4 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000100)) 2m43.152448354s ago: executing program 4 (id=415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xc71}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0, 0x1ae000, 0x2}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000380)={0x60000, 0x0, [0x0, 0x6, 0x7fffffffffffffff, 0x9, 0x101, 0x3ff, 0x2, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m27.493869111s ago: executing program 34 (id=415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xc71}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0, 0x1ae000, 0x2}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000380)={0x60000, 0x0, [0x0, 0x6, 0x7fffffffffffffff, 0x9, 0x101, 0x3ff, 0x2, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.515266034s ago: executing program 2 (id=929): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000003, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fdatasync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f00004af000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) 11.104394676s ago: executing program 2 (id=949): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28402, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 5.39773271s ago: executing program 2 (id=953): syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$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") socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080c0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7800, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x26c601, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r1, &(0x7f0000000180)='\x00', 0xfdfe}]) io_destroy(r2) 5.39706651s ago: executing program 5 (id=955): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0x6000004, 0x0, 0x0, 0xdd, 0x6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.332782375s ago: executing program 7 (id=956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)="32780f64198309", 0x7, 0x20000044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 5.318551536s ago: executing program 7 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x110, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 5.184708847s ago: executing program 7 (id=960): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120150021b7a1340b4041036bae0010203010902120001030040050904480900ffff00053b49c263dc1960dd93703bcd24f63db96335b619f9617f8cc639767f120bdadebb7dc145e0757b81625540cd133f4b0390387214475a32896cf6b4c7d57fbbb4d36165be91b867517a9206a93b42"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000c00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xe5, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x31, 0x1, {0x7, 0x25, 0x1, 0x1, 0x5a, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x7f, 0x6, {0x7, 0x25, 0x1, 0x83, 0x5, 0xfff}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ac9000/0x1000)=nil, 0x1000, 0x200000c, 0x10010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002800)={0x0, 0x0}, &(0x7f0000002840)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x1, 0x2, 0x0) setresuid(r3, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) 4.381533481s ago: executing program 2 (id=963): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 4.287567689s ago: executing program 3 (id=964): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x40f}], 0x1}}], 0x1, 0x40) eventfd2(0x8, 0x80001) close_range(r0, 0xffffffffffffffff, 0x0) 4.194365056s ago: executing program 5 (id=965): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000000000)) 4.124756052s ago: executing program 6 (id=966): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 4.067794306s ago: executing program 5 (id=967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r3) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) 4.036565619s ago: executing program 3 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2000c6, &(0x7f0000001340)=ANY=[], 0x1, 0xac5, &(0x7f00000001c0)="$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") 3.200702035s ago: executing program 5 (id=969): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) chdir(0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) 3.187278036s ago: executing program 3 (id=970): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BLKROGET(r0, 0x125e, 0x0) 3.131760591s ago: executing program 3 (id=971): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r3, 0x1) 3.040783667s ago: executing program 3 (id=972): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200810, &(0x7f0000000240)={[{@ssd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@compress}, {@nodatasum}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 2.943587395s ago: executing program 6 (id=973): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@space_cache}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) 2.054425026s ago: executing program 5 (id=975): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@test_dummy_encryption_v1}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 1.660663828s ago: executing program 6 (id=976): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0x6000004, 0x0, 0x0, 0xdd, 0x6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.600173112s ago: executing program 5 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r2, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) 1.563330905s ago: executing program 7 (id=978): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000000000)) 1.545204067s ago: executing program 6 (id=979): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x7, 0x8, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x14000005) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(r2, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0x4b2d, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e21, 0x4, @loopback}, 0x1c) getgroups(0x27, &(0x7f0000002540)) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 1.436727815s ago: executing program 7 (id=980): fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) userfaultfd(0x801) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.397128649s ago: executing program 3 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.362073791s ago: executing program 6 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 1.136556929s ago: executing program 2 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) shutdown(r5, 0x1) 132.906929ms ago: executing program 2 (id=984): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4000805) socket$netlink(0x10, 0x3, 0x10) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 64.771545ms ago: executing program 7 (id=985): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x1ff], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800, 0x9], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=986): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) kernel console output (not intermixed with test programs): yurex 6-1:0.0: USB YUREX #0 now disconnected [ 83.787665][ T4911] sp0: Synchronizing with TNC [ 83.796545][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.827228][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.853170][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.909579][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 84.004188][ T4914] loop3: detected capacity change from 0 to 32768 [ 84.017651][ T4854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.035480][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 84.038299][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.060140][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.079408][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 84.087131][ T4914] XFS: noikeep mount option is deprecated. [ 84.101545][ T4854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.109401][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.136765][ T7] usb 3-1: config 0 descriptor?? [ 84.168338][ T4917] binder: 4916:4917 ioctl c0306201 200000000080 returned -14 [ 84.213469][ T7] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 84.239404][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 84.314064][ T4925] binder: 4924:4925 ioctl c0306201 200000000080 returned -14 [ 84.370977][ T4914] XFS (loop3): Mounting V5 Filesystem [ 84.626964][ T4914] XFS (loop3): Ending clean mount [ 84.656173][ T4914] XFS (loop3): Quotacheck needed: Please wait. [ 84.671913][ T4854] device hsr_slave_0 entered promiscuous mode [ 84.700675][ T4854] device hsr_slave_1 entered promiscuous mode [ 84.712252][ T4854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.773179][ T4854] Cannot create hsr debugfs directory [ 84.778624][ T4914] XFS (loop3): Quotacheck: Done. [ 85.655925][ T26] audit: type=1800 audit(1756601481.536:4): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 86.331427][ T4195] Bluetooth: hci1: command 0x041b tx timeout [ 86.359574][ T3546] bcm5974 3-1:0.0: could not read from device [ 86.399759][ T7] bcm5974 3-1:0.0: could not read from device [ 86.449918][ T4192] XFS (loop3): Unmounting Filesystem [ 86.459463][ T3546] bcm5974 3-1:0.0: could not read from device [ 86.534866][ T7] input: failed to attach handler mousedev to device input8, error: -5 [ 86.658649][ T4960] loop2: detected capacity change from 0 to 32768 [ 86.669519][ T4958] loop4: detected capacity change from 0 to 1024 [ 86.699597][ T3546] bcm5974 3-1:0.0: could not read from device [ 86.709931][ T4960] XFS: noikeep mount option is deprecated. [ 86.746676][ T7] usb 3-1: USB disconnect, device number 2 [ 86.971766][ T4960] XFS (loop2): Mounting V5 Filesystem [ 87.051705][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 87.088623][ T4958] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.160757][ T4854] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 87.261686][ T4960] XFS (loop2): Ending clean mount [ 87.268721][ T4960] XFS (loop2): Quotacheck needed: Please wait. [ 87.370446][ T4960] XFS (loop2): Quotacheck: Done. [ 87.445078][ T4854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 87.583269][ T4854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 87.611259][ T4854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 87.870059][ T144] device hsr_slave_0 left promiscuous mode [ 87.916789][ T144] device hsr_slave_1 left promiscuous mode [ 87.955838][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.963607][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.095116][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.109116][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.118490][ T144] device bridge_slave_1 left promiscuous mode [ 88.131506][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.147133][ T144] device bridge_slave_0 left promiscuous mode [ 88.749699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 88.759726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 88.787564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.796579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.802750][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 88.818698][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.820239][ T4992] loop3: detected capacity change from 0 to 128 [ 88.888749][ T144] device bond_slave_0 left promiscuous mode [ 88.895003][ T144] device bond_slave_1 left promiscuous mode [ 88.936493][ T144] device veth1_macvtap left promiscuous mode [ 88.957456][ T4992] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.978194][ T144] device veth0_macvtap left promiscuous mode [ 89.001759][ T144] device veth1_vlan left promiscuous mode [ 89.031330][ T4992] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.059519][ T144] device veth0_vlan left promiscuous mode [ 89.455998][ T144] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 89.488814][ T144] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 89.535637][ T144] bond1 (unregistering): Released all slaves [ 89.729540][ T144] team0 (unregistering): Port device team_slave_1 removed [ 89.750321][ T144] team0 (unregistering): Port device team_slave_0 removed [ 89.766163][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.775207][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 89.807426][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.035172][ T144] bond0 (unregistering): Released all slaves [ 90.199239][ T4191] XFS (loop2): Unmounting Filesystem [ 90.345784][ T5022] netlink: 'syz.5.189': attribute type 1 has an invalid length. [ 90.365418][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 90.428588][ T5022] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.438037][ T5022] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.446866][ T5022] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.455653][ T5022] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.476263][ T5022] netlink: 'syz.5.189': attribute type 1 has an invalid length. [ 90.485263][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 90.501956][ T5022] Zero length message leads to an empty skb [ 90.583889][ T4854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.651859][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.660384][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.728654][ T4854] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.770851][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.809757][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.829743][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.836856][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.879759][ T4353] Bluetooth: hci1: command 0x0419 tx timeout [ 90.909972][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.974766][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.996373][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.041834][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.048969][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.071851][ T5043] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.084240][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.095595][ T5043] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.106650][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.142885][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.162843][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.190148][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.208657][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.223315][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.254315][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.264311][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.281638][ T4854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.303005][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.334776][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.358918][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.844485][ T4854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.856250][ T5090] loop5: detected capacity change from 0 to 16 [ 91.886522][ T586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.908342][ T586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.951991][ T5090] erofs: (device loop5): mounted with root inode @ nid 36. [ 92.245148][ T5109] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 92.332063][ T5110] netlink: 'syz.2.207': attribute type 12 has an invalid length. [ 92.527490][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 93.256547][ T5109] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 93.284022][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 93.311929][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 93.321417][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 93.331349][ T5109] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 93.341191][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 93.350556][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 93.360958][ T5109] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 93.379583][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 93.391960][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 93.403434][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 93.414366][ T5109] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 93.423943][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 93.432493][ T5123] 9pnet_virtio: no channels available for device syz [ 93.465295][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 93.487162][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 93.518057][ T5109] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 93.542724][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 93.573716][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 93.597299][ T5109] erofs: (device loop5): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 93.608781][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 93.624079][ T5109] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 93.647116][ T5109] erofs: (device loop5): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 93.670665][ T5109] attempt to access beyond end of device [ 93.670665][ T5109] loop5: rw=524288, want=848, limit=16 [ 93.692789][ T5109] attempt to access beyond end of device [ 93.692789][ T5109] loop5: rw=524288, want=13478624104, limit=16 [ 93.708941][ T5109] attempt to access beyond end of device [ 93.708941][ T5109] loop5: rw=524288, want=13478624080, limit=16 [ 93.735089][ T5109] attempt to access beyond end of device [ 93.735089][ T5109] loop5: rw=524288, want=32, limit=16 [ 93.779752][ T4200] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 94.416491][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.424882][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.654173][ T5119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.690277][ T5119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.011445][ T5119] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.020997][ T5119] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.031050][ T5119] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.040607][ T5119] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.191123][ T5119] syz.2.211 (5119) used greatest stack depth: 20992 bytes left [ 96.449748][ T5182] loop3: detected capacity change from 0 to 32768 [ 96.512397][ T5184] loop5: detected capacity change from 0 to 32768 [ 96.654614][ T5182] XFS: noikeep mount option is deprecated. [ 96.710664][ T5184] XFS: noikeep mount option is deprecated. [ 98.004441][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.027035][ T5182] XFS (loop3): Mounting V5 Filesystem [ 98.101737][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.124816][ T5184] XFS (loop5): Mounting V5 Filesystem [ 98.285455][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.348931][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.359737][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.368177][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.412418][ T4854] device veth0_vlan entered promiscuous mode [ 98.430815][ T5182] XFS (loop3): Ending clean mount [ 98.438057][ T5182] XFS (loop3): Quotacheck needed: Please wait. [ 98.438485][ T5184] XFS (loop5): Ending clean mount [ 98.459100][ T5184] XFS (loop5): Quotacheck needed: Please wait. [ 98.509677][ T4854] device veth1_vlan entered promiscuous mode [ 98.516883][ T5184] XFS (loop5): Quotacheck: Done. [ 98.594519][ T5182] XFS (loop3): Quotacheck: Done. [ 98.727463][ T4854] device veth0_macvtap entered promiscuous mode [ 101.913081][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.948558][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.999566][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.008230][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.062095][ T5227] syz.5.227 (5227) used greatest stack depth: 20808 bytes left [ 102.094632][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.172500][ T4497] XFS (loop5): Unmounting Filesystem [ 102.183081][ T4854] device veth1_macvtap entered promiscuous mode [ 102.219756][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.234776][ T4192] XFS (loop3): Unmounting Filesystem [ 102.245551][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.274668][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.290421][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.310129][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.325972][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.337462][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.355741][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.372994][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.385309][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.397048][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.408721][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.419590][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.431024][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.456049][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.467142][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.483674][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.494239][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.542816][ T4854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.552049][ T4854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.568995][ T4854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.584139][ T4854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.775944][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.802651][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.837911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.853858][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.881718][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.930821][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.328666][ T5286] overlayfs: failed to decode file handle (len=6, type=744, flags=0, err=-22) [ 103.492621][ T5293] program syz.5.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.846576][ T5310] loop5: detected capacity change from 0 to 64 [ 105.227027][ T5298] comedi comedi0: reset error (fatal) [ 105.355982][ T5326] attempt to access beyond end of device [ 105.355982][ T5326] loop5: rw=2049, want=166, limit=64 [ 106.229200][ T5328] batman_adv: batadv0: Adding interface: dummy0 [ 106.260813][ T5328] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.400421][ T5328] batman_adv: batadv0: Interface activated: dummy0 [ 106.429708][ T5334] batadv0: mtu less than device minimum [ 106.431676][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.433796][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.435816][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.437763][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.439780][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.441791][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.443682][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.445610][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.447528][ T5334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.965552][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.267'. [ 107.073029][ T5373] wlan0 speed is unknown, defaulting to 1000 [ 107.331998][ T5379] syz.5.269 (5379) used greatest stack depth: 18592 bytes left [ 107.691020][ T13] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 107.721471][ T13] Bluetooth: hci0: Injecting HCI hardware error event [ 107.727926][ T5421] overlayfs: workdir and upperdir must reside under the same mount [ 107.749690][ T4200] Bluetooth: hci0: hardware error 0x00 [ 108.969894][ T4353] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.053770][ T5437] kvm: emulating exchange as write [ 109.102854][ T5435] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.139437][ T5435] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 109.349872][ T4353] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.366190][ T5463] 9pnet_virtio: no channels available for device syz [ 109.368479][ T4353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.381360][ T5459] loop5: detected capacity change from 0 to 1024 [ 109.434028][ T5466] loop6: detected capacity change from 0 to 16 [ 109.477407][ T5459] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 109.494785][ T4353] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.504033][ T5459] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.518992][ T5466] erofs: (device loop6): mounted with root inode @ nid 36. [ 109.524829][ T4353] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.549438][ T4353] usb 3-1: Manufacturer: syz [ 109.563577][ T4353] usb 3-1: config 0 descriptor?? [ 109.952423][ T5479] loop3: detected capacity change from 0 to 32768 [ 109.965333][ T5480] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 109.981660][ T5480] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 109.994392][ T5480] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.994392][ T5480] [ 110.004067][ T5480] EXT4-fs (loop5): Total free blocks count 0 [ 110.010105][ T5480] EXT4-fs (loop5): Free/Dirty block details [ 110.016087][ T5480] EXT4-fs (loop5): free_blocks=4293918720 [ 110.021979][ T5480] EXT4-fs (loop5): dirty_blocks=80 [ 110.027123][ T5480] EXT4-fs (loop5): Block reservation details [ 110.033178][ T5480] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 110.054922][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 110.063951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 110.099737][ T5479] XFS: noikeep mount option is deprecated. [ 110.151204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 110.331148][ T5476] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 110.341961][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 110.351412][ T5476] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 110.361528][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 110.373559][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 110.599639][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 110.657739][ T5476] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 110.667650][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 110.676916][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 110.686010][ T5476] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 110.695342][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 110.704568][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 110.713682][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 110.723531][ T5476] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 110.732906][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 110.742463][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 110.751654][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 110.760839][ T5476] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 110.771418][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 110.780624][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 110.791128][ T5476] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 110.800633][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 110.809710][ T5476] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 110.819690][ T5476] erofs: (device loop6): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 110.829200][ T5476] attempt to access beyond end of device [ 110.829200][ T5476] loop6: rw=524288, want=848, limit=16 [ 110.840538][ T5476] attempt to access beyond end of device [ 110.840538][ T5476] loop6: rw=524288, want=13478624104, limit=16 [ 110.853973][ T5476] attempt to access beyond end of device [ 110.853973][ T5476] loop6: rw=524288, want=13478624080, limit=16 [ 110.866624][ T5476] attempt to access beyond end of device [ 110.866624][ T5476] loop6: rw=524288, want=32, limit=16 [ 110.880846][ T146] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 111.007059][ T5479] XFS (loop3): Mounting V5 Filesystem [ 111.259393][ T4353] rc_core: IR keymap rc-hauppauge not found [ 111.265331][ T4353] Registered IR keymap rc-empty [ 111.281347][ T4353] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 111.312430][ T5479] XFS (loop3): Ending clean mount [ 111.327852][ T5479] XFS (loop3): Quotacheck needed: Please wait. [ 111.342083][ T5491] loop2: detected capacity change from 0 to 1024 [ 111.359273][ T4353] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 111.420419][ T4353] usb 3-1: USB disconnect, device number 3 [ 111.600731][ T5479] XFS (loop3): Quotacheck: Done. [ 111.630973][ T5491] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 111.648218][ T5491] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.808051][ T5503] sp0: Synchronizing with TNC [ 112.299997][ T26] audit: type=1326 audit(1756601508.626:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 112.410709][ T26] audit: type=1326 audit(1756601508.626:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 112.443376][ T26] audit: type=1326 audit(1756601508.626:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 112.712102][ T5510] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 112.727306][ T5510] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 112.739730][ T5510] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.739730][ T5510] [ 112.749453][ T5510] EXT4-fs (loop2): Total free blocks count 0 [ 112.755464][ T5510] EXT4-fs (loop2): Free/Dirty block details [ 112.761456][ T5510] EXT4-fs (loop2): free_blocks=4293918720 [ 112.767185][ T5510] EXT4-fs (loop2): dirty_blocks=80 [ 112.772325][ T5510] EXT4-fs (loop2): Block reservation details [ 112.778307][ T5510] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 113.143676][ T26] audit: type=1326 audit(1756601508.626:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 113.307128][ T26] audit: type=1326 audit(1756601508.626:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 113.340724][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 113.458529][ T26] audit: type=1326 audit(1756601508.626:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 113.533250][ T26] audit: type=1326 audit(1756601508.626:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 113.589054][ T26] audit: type=1326 audit(1756601508.626:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 113.655102][ T26] audit: type=1326 audit(1756601508.626:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 113.708908][ T26] audit: type=1326 audit(1756601508.626:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7fc00000 [ 114.212780][ T4192] XFS (loop3): Unmounting Filesystem [ 114.553819][ T5549] sp0: Synchronizing with TNC [ 116.250885][ T5157] Bluetooth: hci5: command 0xfc11 tx timeout [ 116.257046][ T146] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 116.464474][ T5588] netlink: 'syz.4.318': attribute type 62 has an invalid length. [ 116.531554][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 116.570164][ T5597] net_ratelimit: 10 callbacks suppressed [ 116.570182][ T5597] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 116.632115][ T5602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 116.671676][ T5602] netlink: 'syz.2.322': attribute type 7 has an invalid length. [ 116.687147][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 116.738274][ T5602] device syz_tun entered promiscuous mode [ 116.812388][ T5602] device batadv_slave_1 entered promiscuous mode [ 117.040495][ T5602] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 117.193267][ T5602] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.757392][ T5635] 9pnet_virtio: no channels available for device syz [ 119.929674][ T5645] fuse: Unknown parameter '0x0000000000000004' [ 120.315579][ T5661] loop2: detected capacity change from 0 to 128 [ 120.419896][ T4195] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 120.423090][ T5661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.443956][ T5661] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.789687][ T4195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.824694][ T4195] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.845776][ T4195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.875156][ T4195] usb 6-1: config 0 descriptor?? [ 121.231625][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.343'. [ 121.279955][ T4195] usbhid 6-1:0.0: can't add hid device: -71 [ 121.289187][ T4195] usbhid: probe of 6-1:0.0 failed with error -71 [ 121.488254][ T4195] usb 6-1: USB disconnect, device number 3 [ 122.099573][ T4195] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 122.389593][ T4195] usb 6-1: Using ep0 maxpacket: 32 [ 122.509953][ T4195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.541551][ T5683] loop6: detected capacity change from 0 to 32768 [ 123.591512][ T4195] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 123.621984][ T5683] XFS: noikeep mount option is deprecated. [ 123.799303][ T4195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.964075][ T5683] XFS (loop6): Mounting V5 Filesystem [ 123.986455][ T4195] usb 6-1: config 0 descriptor?? [ 123.993962][ T5691] wlan0 speed is unknown, defaulting to 1000 [ 124.020754][ T4195] usb 6-1: can't set config #0, error -71 [ 124.071182][ T4195] usb 6-1: USB disconnect, device number 4 [ 124.127202][ T5683] XFS (loop6): Ending clean mount [ 124.135797][ T5683] XFS (loop6): Quotacheck needed: Please wait. [ 124.232190][ T5683] XFS (loop6): Quotacheck: Done. [ 124.289892][ T5705] loop5: detected capacity change from 0 to 128 [ 124.513719][ T5701] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 124.522793][ T5701] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 124.536885][ T5705] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.547763][ T5705] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.292291][ T26] kauditd_printk_skb: 231 callbacks suppressed [ 125.292309][ T26] audit: type=1800 audit(1756601521.146:246): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.345" name="file1" dev="overlay" ino=9286 res=0 errno=0 [ 126.006835][ T5723] loop4: detected capacity change from 0 to 1024 [ 126.286706][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 126.421994][ T5723] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.252820][ T4854] XFS (loop6): Unmounting Filesystem [ 127.350106][ T5742] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 127.365718][ T5742] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 127.378086][ T5742] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.378086][ T5742] [ 127.387839][ T5742] EXT4-fs (loop4): Total free blocks count 0 [ 127.393840][ T5742] EXT4-fs (loop4): Free/Dirty block details [ 127.401551][ T5742] EXT4-fs (loop4): free_blocks=4293918720 [ 127.407298][ T5742] EXT4-fs (loop4): dirty_blocks=80 [ 127.412435][ T5742] EXT4-fs (loop4): Block reservation details [ 127.418409][ T5742] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 127.563790][ T5747] device syzkaller1 entered promiscuous mode [ 127.740327][ T4174] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 127.765720][ T5756] wlan0 speed is unknown, defaulting to 1000 [ 127.875211][ T5760] 9pnet_virtio: no channels available for device syz [ 128.130617][ T4174] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.154840][ T4174] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.184387][ T4174] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.443580][ T4174] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.611030][ T5790] loop4: detected capacity change from 0 to 32768 [ 128.642212][ T5792] siw: device registration error -23 [ 128.719569][ T5160] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.740154][ T5790] XFS: noikeep mount option is deprecated. [ 128.918955][ T4174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.927061][ T4174] usb 6-1: Product: syz [ 128.931272][ T4174] usb 6-1: Manufacturer: syz [ 128.935879][ T4174] usb 6-1: SerialNumber: syz [ 128.988734][ T4174] hub 6-1:1.0: bad descriptor, ignoring hub [ 128.996115][ T5790] XFS (loop4): Mounting V5 Filesystem [ 129.009604][ T4174] hub: probe of 6-1:1.0 failed with error -5 [ 129.033225][ T5804] loop6: detected capacity change from 0 to 128 [ 129.082588][ T5160] usb 4-1: Using ep0 maxpacket: 16 [ 129.091917][ T5790] XFS (loop4): Ending clean mount [ 129.100085][ T5790] XFS (loop4): Quotacheck needed: Please wait. [ 129.193000][ T4174] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 129.199230][ T5804] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.214798][ T5160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.261484][ T5804] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.281613][ T5790] XFS (loop4): Quotacheck: Done. [ 129.589951][ T5160] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.711086][ T5160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.181078][ T5160] usb 4-1: Product: syz [ 130.206134][ T5160] usb 4-1: Manufacturer: syz [ 130.218875][ T5160] usb 4-1: SerialNumber: syz [ 130.229465][ T5744] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 130.305772][ T5160] usb 4-1: config 0 descriptor?? [ 130.352493][ T5160] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.382127][ T5160] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 130.989888][ T4174] usb 6-1: USB disconnect, device number 5 [ 131.016805][ T4174] usblp0: removed [ 131.031785][ T5831] loop5: detected capacity change from 0 to 32768 [ 131.092258][ T5835] device syz_tun left promiscuous mode [ 131.108023][ T5831] XFS: noikeep mount option is deprecated. [ 131.259542][ T5160] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 131.362726][ T5831] XFS (loop5): Mounting V5 Filesystem [ 131.388700][ T4188] XFS (loop4): Unmounting Filesystem [ 131.441921][ T5831] XFS (loop5): Ending clean mount [ 131.457720][ T5831] XFS (loop5): Quotacheck needed: Please wait. [ 131.553348][ T5831] XFS (loop5): Quotacheck: Done. [ 132.643391][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650414][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.829508][ T5160] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 132.837693][ T5160] em28xx 4-1:0.0: board has no eeprom [ 133.212557][ T5160] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 133.247455][ T5160] em28xx 4-1:0.0: dvb set to bulk mode. [ 134.023528][ T5160] usb 4-1: USB disconnect, device number 4 [ 134.030126][ T5160] em28xx 4-1:0.0: Disconnecting em28xx [ 134.047297][ T5157] em28xx 4-1:0.0: Binding DVB extension [ 134.142212][ T4497] XFS (loop5): Unmounting Filesystem [ 134.193867][ T5157] em28xx 4-1:0.0: Registering input extension [ 134.209103][ T5160] em28xx 4-1:0.0: Closing input extension [ 134.242851][ T5160] em28xx 4-1:0.0: Freeing device [ 134.249598][ T5889] device syzkaller1 entered promiscuous mode [ 134.257318][ T5874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.280054][ T26] audit: type=1326 audit(1756601530.636:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d3b185be9 code=0x0 [ 134.545133][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.399'. [ 135.054270][ T5942] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.062286][ T5942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.070157][ T5942] IPv6: NLM_F_CREATE should be set when creating new route [ 135.141731][ T5946] sctp: [Deprecated]: syz.2.410 (pid 5946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.141731][ T5946] Use struct sctp_sack_info instead [ 135.399398][ T4174] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 135.443821][ T4195] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 135.515054][ T4200] Bluetooth: Unexpected continuation frame (len 12) [ 135.642320][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.5.389'. [ 135.653101][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.660557][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.809699][ T4174] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.818353][ T4174] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.828484][ T4174] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.837643][ T4174] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.849462][ T4195] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.860525][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.871608][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.882474][ T4195] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.959502][ T4174] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.968703][ T4174] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.977199][ T4174] usb 7-1: Product: syz [ 135.981644][ T4195] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.990723][ T4174] usb 7-1: Manufacturer: syz [ 135.995376][ T4195] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.004221][ T4195] usb 3-1: Manufacturer: syz [ 136.014523][ T4195] usb 3-1: config 0 descriptor?? [ 136.049544][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 136.057880][ T4174] cdc_wdm 7-1:1.0: skipping garbage [ 136.064452][ T4174] cdc_wdm 7-1:1.0: skipping garbage [ 136.074153][ T4174] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 136.117155][ T5969] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 136.145156][ T5969] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.154373][ T5969] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.163936][ T5969] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.173166][ T5969] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.183542][ T5969] bond1: (slave geneve2): making interface the new active one [ 136.193031][ T5969] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 136.207240][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.418'. [ 136.223051][ T5969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.260480][ T5160] usb 7-1: USB disconnect, device number 2 [ 136.319420][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 136.388402][ T5983] sp0: Synchronizing with TNC [ 136.409846][ T4195] rc_core: IR keymap rc-hauppauge not found [ 136.415987][ T4195] Registered IR keymap rc-empty [ 136.421662][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.466825][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 136.478534][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.486171][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 136.502648][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.516624][ T4195] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 136.530770][ T4195] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 136.554530][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.590727][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.629703][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.659553][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.700405][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.738169][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 136.747349][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.760060][ T7] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 136.768506][ T7] usb 6-1: Product: syz [ 136.773049][ T7] usb 6-1: Manufacturer: syz [ 136.778165][ T7] usb 6-1: SerialNumber: syz [ 136.783255][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.849699][ T5962] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 136.857423][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.872199][ T7] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input12 [ 136.909453][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.949659][ T4195] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.990756][ T4195] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 136.998929][ T4195] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.031353][ T4195] usb 3-1: USB disconnect, device number 4 [ 137.036841][ T6011] binder: 6009:6011 unknown command 0 [ 137.064151][ T6011] binder: 6009:6011 ioctl c0306201 200000000300 returned -22 [ 137.129569][ T5157] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 137.149630][ T5154] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.157785][ T5160] usb 6-1: USB disconnect, device number 6 [ 137.175882][ T5160] appletouch 6-1:1.0: input: appletouch disconnected [ 137.391000][ T5154] usb 4-1: Using ep0 maxpacket: 8 [ 137.499709][ T5157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.517023][ T5154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.523721][ T5154] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.538460][ T5157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.549631][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.558446][ T5157] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.572659][ T5154] usb 4-1: config 0 descriptor?? [ 137.577796][ T5157] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.587269][ T5157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.604346][ T5157] usb 7-1: config 0 descriptor?? [ 137.704928][ T6015] syz.2.433 (6015): drop_caches: 2 [ 137.909654][ T5154] usbhid 4-1:0.0: can't add hid device: -71 [ 137.925027][ T5154] usbhid: probe of 4-1:0.0 failed with error -71 [ 137.947621][ T5154] usb 4-1: USB disconnect, device number 5 [ 138.101654][ T5157] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 138.292299][ T5157] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 138.526893][ T6026] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 138.534920][ T6026] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 138.543958][ T6028] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 138.559578][ T6028] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 139.131188][ T6055] netlink: 'syz.3.445': attribute type 4 has an invalid length. [ 139.149107][ T6057] loop5: detected capacity change from 0 to 1024 [ 139.167094][ T6055] netlink: 'syz.3.445': attribute type 4 has an invalid length. [ 139.217724][ T6057] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 139.218273][ T6061] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 139.243015][ T6057] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.493238][ T6064] loop3: detected capacity change from 0 to 32768 [ 139.579867][ T6064] XFS: noikeep mount option is deprecated. [ 139.634940][ T6064] XFS (loop3): Mounting V5 Filesystem [ 139.702189][ T6077] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 139.717168][ T6077] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 139.729903][ T6077] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.729903][ T6077] [ 139.739612][ T6077] EXT4-fs (loop5): Total free blocks count 0 [ 139.746135][ T6077] EXT4-fs (loop5): Free/Dirty block details [ 139.752240][ T6077] EXT4-fs (loop5): free_blocks=4293918720 [ 139.757987][ T6077] EXT4-fs (loop5): dirty_blocks=80 [ 139.763118][ T6077] EXT4-fs (loop5): Block reservation details [ 139.769097][ T6077] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 139.917929][ T6064] XFS (loop3): Ending clean mount [ 139.931795][ T6064] XFS (loop3): Quotacheck needed: Please wait. [ 140.016312][ T6064] XFS (loop3): Quotacheck: Done. [ 140.880742][ T26] audit: type=1800 audit(1756601536.816:248): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.448" name="file1" dev="overlay" ino=9286 res=0 errno=0 [ 140.941959][ T6081] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 140.958716][ T6081] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 140.986977][ T6085] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 141.024713][ T6085] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 141.764909][ T4192] XFS (loop3): Unmounting Filesystem [ 142.009512][ T5160] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 142.019397][ T5154] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.294529][ T5160] usb 7-1: device firmware changed [ 142.306142][ T5157] usb 7-1: USB disconnect, device number 3 [ 142.383169][ T5154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.393616][ T5158] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.419733][ T5154] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.447004][ T5154] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 142.456688][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.468000][ T5154] usb 3-1: config 0 descriptor?? [ 142.489451][ T5157] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 142.659483][ T5158] usb 4-1: Using ep0 maxpacket: 8 [ 142.759583][ T5160] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 142.789888][ T5157] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 142.812900][ T5158] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.824565][ T5158] usb 4-1: config 0 has no interface number 0 [ 142.835137][ T5158] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 142.847989][ T5158] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 142.862137][ T5158] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.877757][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.891981][ T5158] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 142.903633][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.917900][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.928577][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 142.945629][ T5158] usb 4-1: config 0 descriptor?? [ 143.001266][ T5158] ldusb 4-1:0.55: Interrupt in endpoint not found [ 143.039745][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.048844][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.060336][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.164779][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.174074][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.190905][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.215873][ T5158] usb 4-1: USB disconnect, device number 6 [ 143.239787][ T5160] usb 6-1: unable to get BOS descriptor or descriptor too short [ 143.279694][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.290045][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.306283][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.343814][ T5160] usb 6-1: config 3 has an invalid interface number: 72 but max is 0 [ 143.353782][ T5160] usb 6-1: config 3 has no interface number 0 [ 143.363599][ T5160] usb 6-1: config 3 interface 72 has no altsetting 0 [ 143.389775][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.398893][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.410813][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.499867][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.509174][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.526244][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.543532][ T5160] usb 6-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=e0.ba [ 143.554559][ T5160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.566414][ T5160] usb 6-1: Product: syz [ 143.573314][ T5160] usb 6-1: Manufacturer: syz [ 143.578147][ T5160] usb 6-1: SerialNumber: syz [ 143.634845][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.646664][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.663132][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.749516][ T5157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.758519][ T5157] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.781384][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.889826][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 143.920612][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 143.959638][ T5157] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 143.969873][ T5157] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 143.979463][ T5157] usb 7-1: Product: syz [ 143.983827][ T5157] usb 7-1: Manufacturer: syz [ 143.988433][ T5157] usb 7-1: SerialNumber: syz [ 143.996331][ T5157] usb 7-1: config 0 descriptor?? [ 144.029572][ T5157] usb 7-1: can't set config #0, error -71 [ 144.046892][ T5157] usb 7-1: USB disconnect, device number 4 [ 144.055619][ T6138] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.183945][ T5155] usb 3-1: USB disconnect, device number 5 [ 144.443172][ T6269] netlink: 277 bytes leftover after parsing attributes in process `syz.2.467'. [ 144.475117][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 144.729601][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 144.779634][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 144.804736][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 144.838332][ T6298] netlink: 'syz.5.473': attribute type 4 has an invalid length. [ 144.853660][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 144.856330][ T6298] netlink: 152 bytes leftover after parsing attributes in process `syz.5.473'. [ 144.895894][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 144.959517][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 145.009493][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 145.049688][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 145.089571][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 145.124705][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.125740][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 145.147791][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.165014][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 145.189604][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 145.222403][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 145.253000][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 145.266854][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.291438][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 145.319521][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 146.036805][ T6316] loop2: detected capacity change from 0 to 256 [ 146.080959][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 146.182610][ T6316] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.209947][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 146.224634][ T6316] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 146.240266][ T6316] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 146.252679][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 146.289434][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 146.423312][ T4353] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 146.449124][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 147.655658][ T6329] loop5: detected capacity change from 0 to 1764 [ 147.768332][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 147.889641][ T4353] usb 7-1: Using ep0 maxpacket: 8 [ 148.113669][ T4353] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.133473][ T4353] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.160532][ T4353] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 148.193734][ T4353] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 148.225628][ T4353] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.240955][ T6333] loop3: detected capacity change from 0 to 8192 [ 148.248330][ T4353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.299486][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 148.343627][ T6338] loop2: detected capacity change from 0 to 128 [ 148.359525][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 148.381571][ T4353] hub 7-1:1.0: bad descriptor, ignoring hub [ 148.391667][ T4353] hub: probe of 7-1:1.0 failed with error -5 [ 148.403284][ T4353] cdc_wdm 7-1:1.0: skipping garbage [ 148.404787][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 148.408596][ T4353] cdc_wdm 7-1:1.0: skipping garbage [ 148.425703][ T26] audit: type=1800 audit(1756601544.776:249): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file2" dev="loop3" ino=1048605 res=0 errno=0 [ 148.454703][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 148.456228][ T4353] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 148.484614][ T4353] cdc_wdm 7-1:1.0: Unknown control protocol [ 148.544511][ T5160] ax88179_178a 6-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 148.631370][ T5160] ax88179_178a 6-1:3.72 eth9: register 'ax88179_178a' at usb-dummy_hcd.5-1, Cypress GX3 SuperSpeed to Gigabit Ethernet Controller, e6:68:b2:f8:3b:c8 [ 148.685782][ T5160] usb 6-1: USB disconnect, device number 7 [ 148.705000][ T6344] netlink: 'syz.5.488': attribute type 10 has an invalid length. [ 148.723522][ T5160] ax88179_178a 6-1:3.72 eth9: unregister 'ax88179_178a' usb-dummy_hcd.5-1, Cypress GX3 SuperSpeed to Gigabit Ethernet Controller [ 148.784358][ T6344] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.033813][ T6346] loop2: detected capacity change from 0 to 32768 [ 149.051325][ T5158] usb 7-1: USB disconnect, device number 5 [ 149.102562][ T6346] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.489 (6346) [ 149.132136][ T6346] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 149.141961][ T6346] BTRFS info (device loop2): using free space tree [ 149.148514][ T6346] BTRFS info (device loop2): has skinny extents [ 149.164495][ T6348] loop5: detected capacity change from 0 to 4096 [ 149.238915][ T6346] BTRFS info (device loop2): enabling ssd optimizations [ 149.344268][ T6348] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 149.406542][ T6348] UDF-fs: Scanning with blocksize 512 failed [ 151.241528][ T6348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.580212][ T4342] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4342) [ 153.669607][ T6404] capability: warning: `syz.2.495' uses deprecated v2 capabilities in a way that may be insecure [ 153.862970][ T6393] wlan0 speed is unknown, defaulting to 1000 [ 154.869128][ T6410] loop5: detected capacity change from 0 to 4096 [ 155.265893][ T6416] netlink: 'syz.6.502': attribute type 22 has an invalid length. [ 155.282547][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.502'. [ 155.347106][ T6416] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.355913][ T6416] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.364813][ T6416] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.373561][ T6416] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.405011][ T6410] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.503405][ T6416] netlink: 'syz.6.502': attribute type 22 has an invalid length. [ 155.639958][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.502'. [ 155.684901][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 155.707115][ T6393] chnl_net:caif_netlink_parms(): no params data found [ 156.841960][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.952911][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.040775][ T6393] device bridge_slave_0 entered promiscuous mode [ 157.288534][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.427176][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.685308][ T6393] device bridge_slave_1 entered promiscuous mode [ 157.759648][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 158.053766][ T6393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.104321][ T6393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.750961][ T6393] team0: Port device team_slave_0 added [ 159.781285][ T6393] team0: Port device team_slave_1 added [ 159.935665][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 160.016840][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.031156][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.064611][ T6393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.779697][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.038305][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.003029][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 162.027729][ T6393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.178521][ T6479] loop2: detected capacity change from 0 to 1024 [ 162.416801][ T6393] device hsr_slave_0 entered promiscuous mode [ 162.442587][ T6479] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 162.469145][ T6393] device hsr_slave_1 entered promiscuous mode [ 162.579228][ T6490] loop5: detected capacity change from 0 to 512 [ 162.600804][ T6479] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.112894][ T6490] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.058939][ T6393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.070907][ T6393] Cannot create hsr debugfs directory [ 165.086235][ T6490] EXT4-fs (loop5): 1 truncate cleaned up [ 165.092125][ T6490] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 166.103025][ T6393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.214826][ T6393] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.253494][ T6393] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.283749][ T6393] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.455093][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.525'. [ 166.522535][ T6531] loop5: detected capacity change from 0 to 1024 [ 166.539159][ T6524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.560509][ T6525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.569205][ T6525] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.813853][ T6525] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 166.887758][ T6531] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.240275][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 167.302406][ T6393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.315623][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.324155][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.355098][ T6544] loop2: detected capacity change from 0 to 128 [ 167.366126][ T6393] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.396093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.469861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.539832][ T5150] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 167.544949][ T6544] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nodiscard,,errors=continue. Quota mode: none. [ 167.612831][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.619688][ T6547] loop3: detected capacity change from 0 to 2048 [ 167.619982][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.649649][ T6544] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.809414][ T5150] usb 6-1: Using ep0 maxpacket: 8 [ 167.929521][ T5150] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 167.929647][ T5150] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 167.929701][ T5150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.929757][ T5150] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 167.929835][ T5150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 167.929887][ T5150] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.929974][ T5150] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.930026][ T5150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.439542][ T5150] usb 6-1: GET_CAPABILITIES returned 0 [ 168.470970][ T5150] usbtmc 6-1:16.0: can't read capabilities [ 168.507586][ T6547] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.644729][ T5150] usb 6-1: USB disconnect, device number 8 [ 168.678696][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.6.535'. [ 168.697155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.716431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.736878][ T6560] netlink: 20 bytes leftover after parsing attributes in process `syz.6.535'. [ 168.749652][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.756763][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.805025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.834901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.876163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.885868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.896584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.916615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.929398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.956603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.965952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.975956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.000221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.008826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.019278][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.025394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.050642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.103506][ T6393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.246276][ T6594] loop5: detected capacity change from 0 to 32768 [ 170.449700][ T6594] XFS (loop5): Mounting V5 Filesystem [ 170.696885][ T6594] XFS (loop5): Ending clean mount [ 170.703954][ T6594] XFS (loop5): Quotacheck needed: Please wait. [ 170.826147][ T6594] XFS (loop5): Quotacheck: Done. [ 171.076121][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.127290][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.158582][ T6618] loop2: detected capacity change from 0 to 64 [ 171.186360][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.237247][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.281581][ T6393] device veth0_vlan entered promiscuous mode [ 171.306395][ T6393] device veth1_vlan entered promiscuous mode [ 171.383582][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.410330][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.454259][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.542759][ T586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.573595][ T586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.739707][ T586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.095243][ T6393] device veth0_macvtap entered promiscuous mode [ 172.116831][ T4497] XFS (loop5): Unmounting Filesystem [ 172.167901][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.228853][ T6393] device veth1_macvtap entered promiscuous mode [ 172.268125][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.326617][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.356982][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.368254][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.385261][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.417625][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.439835][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.462451][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.541148][ T6630] loop3: detected capacity change from 0 to 16 [ 172.593248][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.219568][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.229750][ T6630] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 173.273688][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.434331][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.447947][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.461487][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.521733][ T6638] ubi31: attaching mtd0 [ 173.528582][ T6638] ubi31: scanning is finished [ 173.533342][ T6638] ubi31: empty MTD device detected [ 173.673378][ T6638] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 173.864538][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.874465][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.886690][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.939470][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.988317][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.005879][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.016457][ T6393] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.025600][ T6393] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.044990][ T6393] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.095743][ T6393] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.113863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.151654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.399516][ T5153] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.959675][ T5153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.991857][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.011859][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.175164][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.170391][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 176.176507][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 176.184570][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.205011][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.230305][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.269707][ T5153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.288367][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.300759][ T5153] usb 4-1: Product: syz [ 176.306133][ T5153] usb 4-1: Manufacturer: syz [ 176.318618][ T5153] usb 4-1: SerialNumber: syz [ 176.476348][ T5153] hub 4-1:1.0: bad descriptor, ignoring hub [ 176.574635][ T5153] hub: probe of 4-1:1.0 failed with error -5 [ 177.606348][ T6695] loop6: detected capacity change from 0 to 1024 [ 177.756912][ T6695] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.932909][ T6692] loop5: detected capacity change from 0 to 8192 [ 178.841548][ T5156] wlan0 speed is unknown, defaulting to 1000 [ 178.957884][ T4234] usb 4-1: USB disconnect, device number 7 [ 181.468939][ T6751] loop5: detected capacity change from 0 to 512 [ 181.522175][ T6751] EXT4-fs (loop5): Ignoring removed nobh option [ 181.562343][ T6751] EXT4-fs (loop5): Test dummy encryption mode enabled [ 181.595800][ T6751] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.672339][ T6751] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.578: iget: bad i_size value: 38620345925642 [ 181.817363][ T6751] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.578: couldn't read orphan inode 15 (err -117) [ 182.501909][ T6751] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 182.966902][ T6741] loop6: detected capacity change from 0 to 32768 [ 183.920110][ T6789] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 183.983114][ T6789] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 184.459473][ T5156] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.475560][ T5156] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.515724][ T5156] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.576378][ T5156] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.649459][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.749872][ T6795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 186.622244][ T5156] usb 3-1: USB disconnect, device number 6 [ 187.689809][ T4234] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 189.499594][ T4234] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.539967][ T4234] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.587409][ T4234] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.809283][ T6868] ubi31: attaching mtd0 [ 189.825993][ T6868] ubi31: scanning is finished [ 189.857082][ T4234] usb 7-1: string descriptor 0 read error: -71 [ 190.099762][ T4234] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 190.234070][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.239459][ T6863] block device autoloading is deprecated and will be removed. [ 191.079535][ T4234] usb 7-1: can't set config #1, error -71 [ 191.250063][ T4234] usb 7-1: USB disconnect, device number 6 [ 191.265783][ T6868] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 194.082757][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.090076][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.988395][ T6946] loop6: detected capacity change from 0 to 1024 [ 197.361846][ T6946] EXT4-fs (loop6): Ignoring removed nobh option [ 197.485085][ T6946] EXT4-fs (loop6): Ignoring removed bh option [ 197.515047][ T6946] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.038276][ T6946] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 198.269528][ T5156] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 198.539597][ T5156] usb 8-1: Using ep0 maxpacket: 32 [ 198.700003][ T5156] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.719558][ T5156] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.733626][ T5156] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.745589][ T5156] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.790037][ T5156] usb 8-1: config 0 descriptor?? [ 198.910392][ T5156] hub 8-1:0.0: USB hub found [ 199.023629][ T6983] loop5: detected capacity change from 0 to 512 [ 199.309702][ T5156] hub 8-1:0.0: 1 port detected [ 199.398686][ T6983] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.475795][ T6983] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.607447][ T7000] loop6: detected capacity change from 0 to 256 [ 200.032865][ T7000] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.061595][ T7000] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 200.079550][ T26] audit: type=1800 audit(1756601596.406:250): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.630" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 200.137037][ T7000] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 200.519892][ T5156] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 200.549925][ T5156] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 200.850638][ T5156] usbhid 8-1:0.0: can't add hid device: -32 [ 200.856780][ T5156] usbhid: probe of 8-1:0.0 failed with error -32 [ 200.983071][ T7014] loop6: detected capacity change from 0 to 2048 [ 201.064649][ T7014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.081260][ T5156] usb 8-1: USB disconnect, device number 2 [ 201.308227][ T6993] loop3: detected capacity change from 0 to 32768 [ 201.908928][ T6993] XFS (loop3): Mounting V5 Filesystem [ 202.148447][ T6993] XFS (loop3): Ending clean mount [ 202.253367][ T6993] XFS (loop3): Quotacheck needed: Please wait. [ 202.385149][ T6993] XFS (loop3): Quotacheck: Done. [ 202.419164][ T7024] loop6: detected capacity change from 0 to 40427 [ 202.501194][ T7024] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 202.508507][ T7024] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 202.538276][ T7024] F2FS-fs (loop6): Unrecognized mount option "age_extent_cache" or missing value [ 203.106947][ T4192] XFS (loop3): Unmounting Filesystem [ 203.488609][ T7063] syz.2.649 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 203.659204][ T7072] loop6: detected capacity change from 0 to 128 [ 204.503015][ T7072] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.540428][ T7072] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.599498][ T7086] netlink: 'syz.5.655': attribute type 1 has an invalid length. [ 206.607726][ T7086] netlink: 224 bytes leftover after parsing attributes in process `syz.5.655'. [ 206.940912][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 207.026939][ T7092] loop2: detected capacity change from 0 to 1024 [ 207.126839][ T7092] EXT4-fs (loop2): Ignoring removed nobh option [ 207.156671][ T7092] EXT4-fs (loop2): Ignoring removed bh option [ 207.200432][ T7092] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.203346][ T7096] loop6: detected capacity change from 0 to 256 [ 207.321750][ T7100] IPVS: sed: FWM 3 0x00000003 - no destination available [ 207.329221][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 207.467687][ T7092] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 208.594148][ T7096] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 210.420213][ T7148] loop5: detected capacity change from 0 to 128 [ 210.523575][ T7148] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 212.452130][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.677'. [ 212.521210][ T7164] loop5: detected capacity change from 0 to 2048 [ 212.603663][ T4342] udevd[4342]: incorrect nilfs2 checksum on /dev/loop5 [ 212.613336][ T7164] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 212.694342][ T4342] udevd[4342]: incorrect nilfs2 checksum on /dev/loop5 [ 213.519277][ T7181] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.611654][ T7180] loop2: detected capacity change from 0 to 4096 [ 213.623542][ T7180] ntfs3: Unknown parameter 'hide_dot_files' [ 213.735448][ T7184] fuse: Bad value for 'fd' [ 213.908595][ T26] audit: type=1326 audit(1756601610.256:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.6.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dfd7dbe9 code=0x7ffc0000 [ 214.035281][ T26] audit: type=1326 audit(1756601610.256:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.6.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48dfd7dbe9 code=0x7ffc0000 [ 214.062550][ T26] audit: type=1326 audit(1756601610.256:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.6.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dfd7dbe9 code=0x7ffc0000 [ 215.443821][ T26] audit: type=1326 audit(1756601610.256:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.6.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f48dfd7dbe9 code=0x7ffc0000 [ 215.467029][ T26] audit: type=1326 audit(1756601610.256:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.6.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dfd7dbe9 code=0x7ffc0000 [ 215.981173][ T7203] netlink: 96 bytes leftover after parsing attributes in process `syz.6.689'. [ 217.699447][ T5155] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.788274][ T7230] netlink: 'syz.7.699': attribute type 4 has an invalid length. [ 217.799727][ T6853] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 218.251049][ T5155] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 218.297003][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.377456][ T5155] usb 3-1: Product: syz [ 218.422063][ T5155] usb 3-1: Manufacturer: syz [ 218.471483][ T5155] usb 3-1: SerialNumber: syz [ 218.749453][ T6853] usb 6-1: Using ep0 maxpacket: 8 [ 218.970538][ T6853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.298770][ T6853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.318946][ T6853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.345444][ T6853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.358911][ T6853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.374653][ T6853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.499574][ T5155] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 219.529106][ T5155] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 219.581277][ T5155] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 219.593932][ T5155] lan78xx: probe of 3-1:1.0 failed with error -32 [ 219.649558][ T6853] usb 6-1: GET_CAPABILITIES returned 0 [ 219.655218][ T6853] usbtmc 6-1:16.0: can't read capabilities [ 219.704153][ T7256] loop3: detected capacity change from 0 to 4096 [ 219.726887][ T7256] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 219.900011][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 219.911365][ T7227] usbtmc 6-1:16.0: Unable to send data, error -71 [ 219.949561][ T7227] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 219.966803][ T6853] usb 6-1: USB disconnect, device number 9 [ 220.514766][ T4234] usb 3-1: USB disconnect, device number 7 [ 220.558340][ T7279] loop7: detected capacity change from 0 to 256 [ 220.609219][ T7279] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.613819][ T7282] loop3: detected capacity change from 0 to 1024 [ 221.208908][ T7279] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 221.769013][ T7282] EXT4-fs (loop3): Ignoring removed bh option [ 221.848802][ T7279] FAT-fs (loop7): Filesystem has been set read-only [ 221.863515][ T7282] EXT4-fs (loop3): inline encryption not supported [ 222.838309][ T7282] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.710: lblock 2 mapped to illegal pblock 2 (length 1) [ 223.065641][ T7304] hfsplus: unable to find HFS+ superblock [ 223.206471][ T7282] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 223.339517][ T7282] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.710: lblock 0 mapped to illegal pblock 48 (length 1) [ 223.359664][ T7282] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 223.379291][ T7282] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.710: Failed to acquire dquot type 0 [ 223.469801][ T7282] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 223.501515][ T7282] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.710: mark_inode_dirty error [ 223.513421][ T7282] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 223.524518][ T7282] EXT4-fs (loop3): 1 orphan inode deleted [ 223.539369][ T7282] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 223.551236][ T144] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 223.553886][ T144] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 223.554227][ T144] EXT4-fs error (device loop3): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 0 [ 224.023339][ T4192] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 224.026913][ T4192] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 224.028151][ T4192] EXT4-fs error (device loop3): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 226.660093][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 227.174350][ T7365] loop5: detected capacity change from 0 to 128 [ 227.760656][ T7365] attempt to access beyond end of device [ 227.760656][ T7365] loop5: rw=1, want=153, limit=128 [ 228.866212][ T7381] loop5: detected capacity change from 0 to 512 [ 228.928478][ T7382] loop3: detected capacity change from 0 to 2048 [ 228.944587][ T7385] loop7: detected capacity change from 0 to 512 [ 230.135829][ T7382] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 230.170243][ T7385] EXT4-fs (loop7): orphan cleanup on readonly fs [ 230.241028][ T7382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.294838][ T7385] EXT4-fs error (device loop7): ext4_quota_enable:6417: inode #15: comm syz.7.741: iget: bad i_size value: 360287970189639690 [ 230.320595][ T7385] EXT4-fs error (device loop7): ext4_quota_enable:6420: comm syz.7.741: Bad quota inode: 15, type: 2 [ 230.444945][ T7385] EXT4-fs warning (device loop7): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 230.520056][ T7385] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 230.587036][ T7385] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.622281][ T7385] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 230.983386][ T7385] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 2 [ 232.761793][ T7415] loop7: detected capacity change from 0 to 128 [ 236.174253][ T7452] loop5: detected capacity change from 0 to 32768 [ 236.273438][ T7452] JBD2: Ignoring recovery information on journal [ 236.316108][ T7452] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 236.350078][ T26] audit: type=1800 audit(1756601633.700:256): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.762" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 237.341610][ T7465] loop3: detected capacity change from 0 to 40427 [ 237.398393][ T7466] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.516795][ T7456] syz.5.762 (7456) used greatest stack depth: 18144 bytes left [ 237.552157][ T7465] F2FS-fs (loop3): invalid crc value [ 237.572460][ T7465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.620253][ T7465] F2FS-fs (loop3): Start checkpoint disabled! [ 237.684221][ T7465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 237.753735][ T4497] ocfs2: Unmounting device (7,5) on (node local) [ 238.503992][ T9] attempt to access beyond end of device [ 238.503992][ T9] loop3: rw=1, want=45104, limit=40427 [ 238.953112][ T9] attempt to access beyond end of device [ 238.953112][ T9] loop3: rw=2049, want=40968, limit=40427 [ 239.243295][ T7464] loop7: detected capacity change from 0 to 32768 [ 239.250503][ T7476] device geneve2 entered promiscuous mode [ 239.385907][ T7464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.766 (7464) [ 240.342782][ T7464] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 241.596040][ T7464] BTRFS info (device loop7): force clearing of disk cache [ 241.638990][ T7464] BTRFS info (device loop7): metadata ratio 0 [ 241.711492][ T7464] BTRFS info (device loop7): enabling ssd optimizations [ 241.718479][ T7464] BTRFS info (device loop7): using spread ssd allocation scheme [ 241.726222][ T7464] BTRFS info (device loop7): using free space tree [ 241.739418][ T7464] BTRFS info (device loop7): has skinny extents [ 242.703115][ T7499] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.684032][ T7464] BTRFS error (device loop7): open_ctree failed: -12 [ 243.710007][ T4342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (4342) [ 244.040600][ T7547] loop5: detected capacity change from 0 to 2048 [ 247.047014][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.118968][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.153349][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.309508][ T5150] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 247.352939][ T7561] loop2: detected capacity change from 0 to 32768 [ 247.366330][ T7561] XFS: noikeep mount option is deprecated. [ 247.449504][ T7544] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 247.616998][ T7561] XFS (loop2): Mounting V5 Filesystem [ 247.683374][ T7561] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 247.710623][ T5150] usb 6-1: Using ep0 maxpacket: 8 [ 247.733007][ T7561] XFS (loop2): Starting recovery (logdev: internal) [ 247.740876][ T7603] loop7: detected capacity change from 0 to 4096 [ 247.769656][ T7544] usb 4-1: Using ep0 maxpacket: 16 [ 247.806234][ T7561] XFS (loop2): Ending recovery (logdev: internal) [ 247.822103][ T7603] NILFS (loop7): invalid segment: Checksum error in segment payload [ 247.839710][ T5150] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 247.849614][ T7603] NILFS (loop7): trying rollback from an earlier position [ 247.873426][ T5150] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 247.889651][ T7544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.892941][ T5150] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.922905][ T7603] NILFS (loop7): recovery complete [ 247.931449][ T7544] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 247.938489][ T5150] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 247.960328][ T7544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.969813][ T7608] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.986963][ T5150] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.996295][ T5150] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 248.009464][ T5150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.017450][ T7544] usb 4-1: config 0 descriptor?? [ 248.036512][ T5150] usb 6-1: config 0 descriptor?? [ 248.047366][ T5160] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 248.071581][ T5160] XFS (loop2): Unmount and run xfs_repair [ 248.080732][ T5160] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 248.088218][ T5160] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 248.103985][ T5160] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 248.113478][ T5160] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 248.122696][ T5160] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 248.132081][ T5160] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 248.141239][ T5160] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.150607][ T5160] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.159757][ T5160] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.171786][ T7606] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 8 error 117 [ 248.235252][ T4191] XFS (loop2): Unmounting Filesystem [ 248.307108][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.399547][ T7544] usbhid 4-1:0.0: can't add hid device: -71 [ 248.405534][ T7544] usbhid: probe of 4-1:0.0 failed with error -71 [ 248.431704][ T7544] usb 4-1: USB disconnect, device number 8 [ 248.527134][ T5150] microsoft 0003:045E:00F9.0003: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.5-1/input0 [ 248.539252][ T5150] microsoft 0003:045E:00F9.0003: no inputs found [ 248.559131][ T5150] microsoft 0003:045E:00F9.0003: could not initialize ff, continuing anyway [ 248.719494][ T5150] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 248.727259][ T7544] usb 6-1: USB disconnect, device number 10 [ 248.735837][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 248.763428][ T7622] device hsr_slave_1 left promiscuous mode [ 248.954520][ T7628] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 248.954520][ T7628] The task syz.3.809 (7628) triggered the difference, watch for misbehavior. [ 248.985508][ T7627] mkiss: ax0: crc mode is auto. [ 249.009424][ T5150] usb 8-1: Using ep0 maxpacket: 8 [ 250.639493][ T5150] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 250.871770][ T5150] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.880010][ T5150] usb 8-1: Product: syz [ 250.884257][ T5150] usb 8-1: Manufacturer: syz [ 250.888829][ T5150] usb 8-1: SerialNumber: syz [ 250.896339][ T5150] usb 8-1: config 0 descriptor?? [ 250.951405][ T5150] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 251.159494][ T5150] gspca_sonixj: reg_w1 err -71 [ 251.164483][ T5150] sonixj: probe of 8-1:0.0 failed with error -71 [ 251.189546][ T5150] usb 8-1: USB disconnect, device number 3 [ 251.463136][ T7649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 252.249207][ T7654] loop7: detected capacity change from 0 to 128 [ 252.321601][ T7654] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.342090][ T7654] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.427458][ T7641] loop3: detected capacity change from 0 to 32768 [ 252.549221][ T7641] XFS (loop3): Mounting V5 Filesystem [ 252.734040][ T7641] XFS (loop3): Ending clean mount [ 252.858223][ T7641] XFS (loop3): Quotacheck needed: Please wait. [ 253.390969][ T7641] XFS (loop3): Quotacheck: Done. [ 253.684350][ T4192] XFS (loop3): Unmounting Filesystem [ 255.523590][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.529955][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.925568][ T586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.025712][ T586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.965480][ T586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.883175][ T586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.763543][ T7729] netlink: 14 bytes leftover after parsing attributes in process `syz.5.839'. [ 258.831937][ T7730] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 258.859910][ T7698] loop7: detected capacity change from 0 to 32768 [ 258.885330][ T7737] loop2: detected capacity change from 0 to 164 [ 258.969228][ T7698] JBD2: recovery failed [ 258.986960][ T7737] rock: directory entry would overflow storage [ 259.034768][ T7737] rock: sig=0x66, size=4, remaining=3 [ 259.071091][ T7698] (syz.7.830,7698,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 259.108350][ T7737] rock: directory entry would overflow storage [ 259.139875][ T7698] (syz.7.830,7698,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 259.149208][ T7698] (syz.7.830,7698,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 259.157328][ T7698] (syz.7.830,7698,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 259.166448][ T7737] rock: sig=0x66, size=4, remaining=3 [ 259.173000][ T7737] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 259.285820][ T7749] overlayfs: failed to clone upperpath [ 259.301906][ T7698] (syz.7.830,7698,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 260.301450][ T7754] netlink: 64 bytes leftover after parsing attributes in process `syz.2.845'. [ 260.351893][ T26] audit: type=1326 audit(1756601657.700:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7ffc0000 [ 260.374963][ T26] audit: type=1326 audit(1756601657.730:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7ffc0000 [ 260.465837][ T26] audit: type=1326 audit(1756601657.750:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f27d80babe9 code=0x7ffc0000 [ 260.530225][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 260.766089][ T26] audit: type=1326 audit(1756601657.750:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7ffc0000 [ 261.419275][ T26] audit: type=1326 audit(1756601657.750:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d80babe9 code=0x7ffc0000 [ 263.659378][ T21] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 264.199516][ T4353] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 264.879410][ T4353] usb 3-1: Using ep0 maxpacket: 8 [ 265.000758][ T4353] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 265.078014][ T21] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 265.084119][ T7805] netlink: 132 bytes leftover after parsing attributes in process `syz.6.858'. [ 265.112847][ T4353] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.179592][ T21] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.181012][ T4353] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.188496][ T21] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.188524][ T21] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.216017][ T4353] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.229707][ T4353] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.238806][ T4353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.269649][ T21] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.285027][ T21] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.296422][ T21] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.529490][ T4353] usb 3-1: GET_CAPABILITIES returned 0 [ 265.535191][ T4353] usbtmc 3-1:16.0: can't read capabilities [ 265.614473][ T21] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.624141][ T21] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.635077][ T21] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.699627][ T5150] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 265.759658][ T21] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.768697][ T21] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.082980][ T21] usb 8-1: config 0 interface 0 has no altsetting 0 [ 266.089406][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 266.129635][ T7794] usbtmc 3-1:16.0: Unable to send data, error -71 [ 266.268514][ T7794] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 266.295363][ T4234] usb 3-1: USB disconnect, device number 8 [ 266.647385][ T5150] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.980294][ T586] device hsr_slave_0 left promiscuous mode [ 267.016010][ T586] device hsr_slave_1 left promiscuous mode [ 267.025613][ T21] usb 8-1: unable to read config index 4 descriptor/start: -71 [ 267.034356][ T21] usb 8-1: can't read configurations, error -71 [ 267.042067][ T5150] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 267.052927][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.076488][ T5150] usb 4-1: config 0 descriptor?? [ 267.092748][ T586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.122894][ T586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.200837][ T586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.259243][ T586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.286863][ T586] device bridge_slave_1 left promiscuous mode [ 267.306318][ T586] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.336226][ T586] device bridge_slave_0 left promiscuous mode [ 267.346022][ T586] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.363887][ T4234] usb 4-1: USB disconnect, device number 9 [ 267.400245][ T586] device veth1_macvtap left promiscuous mode [ 267.407512][ T586] device veth0_macvtap left promiscuous mode [ 267.427243][ T586] device veth1_vlan left promiscuous mode [ 267.472916][ T586] device veth0_vlan left promiscuous mode [ 268.226462][ T586] team0 (unregistering): Port device team_slave_1 removed [ 268.276989][ T586] team0 (unregistering): Port device team_slave_0 removed [ 268.347459][ T586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.398961][ T586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.511435][ T586] bond0 (unregistering): Released all slaves [ 268.573182][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 268.600917][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 268.607385][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 270.579599][ T4174] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 270.971209][ T4174] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.982657][ T4174] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.003963][ T4174] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.013473][ T4174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.039861][ T7893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.131681][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.139827][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.295311][ T4262] usb 6-1: USB disconnect, device number 11 [ 271.372015][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.396601][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.947777][ T7906] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.997565][ T7906] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.017294][ T7906] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.026334][ T7906] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.094952][ T7924] netlink: 'syz.6.885': attribute type 10 has an invalid length. [ 273.109004][ T7924] bond0: (slave wlan1): Opening slave failed [ 273.197964][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 273.255431][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 273.278838][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 274.118915][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 274.266157][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.277678][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.286042][ T7948] infiniband syz0: set down [ 274.291171][ T7948] infiniband syz0: added vxcan1 [ 274.355940][ T7948] infiniband syz0: Couldn't open port 1 [ 274.426304][ T7948] RDS/IB: syz0: added [ 274.433052][ T7948] smc: adding ib device syz0 with port count 1 [ 274.451309][ T7948] smc: ib device syz0 port 1 has pnetid [ 274.508656][ T7957] batman_adv: batadv0: Adding interface: dummy0 [ 274.535285][ T7957] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.564917][ T7957] batman_adv: batadv0: Interface activated: dummy0 [ 274.584216][ T7959] batadv0: mtu less than device minimum [ 274.603788][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.616784][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.629098][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.641416][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.653652][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.665940][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.678036][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.690302][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.702678][ T7959] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.762560][ T4239] vxcan1 speed is unknown, defaulting to 1000 [ 274.848379][ T7537] vxcan1 speed is unknown, defaulting to 1000 [ 274.868857][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 277.255451][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 277.428283][ T8016] loop5: detected capacity change from 0 to 16 [ 278.122593][ T4233] Bluetooth: hci5: command 0x0406 tx timeout [ 278.179827][ T8016] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 280.167960][ T8038] loop3: detected capacity change from 0 to 512 [ 280.540214][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 280.622926][ T8038] EXT4-fs (loop3): Ignoring removed nobh option [ 280.704055][ T8038] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 280.766253][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 280.777789][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.918'. [ 280.884394][ T8055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.969569][ T8063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.998651][ T8063] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.065326][ T8063] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 281.360913][ T7948] vxcan1 speed is unknown, defaulting to 1000 [ 282.991207][ T8082] loop2: detected capacity change from 0 to 16 [ 283.159548][ T8082] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 285.447547][ T8110] mmap: syz.2.929 (8110) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 293.409067][ T8202] loop2: detected capacity change from 0 to 4096 [ 293.540808][ T8202] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 293.582057][ T8202] UDF-fs: Scanning with blocksize 512 failed [ 293.660989][ T8202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.742747][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.6.962'. [ 293.937125][ T4233] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 293.968616][ T8227] netlink: 'syz.6.962': attribute type 7 has an invalid length. [ 293.976759][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.962'. [ 293.998753][ T8227] device syz_tun entered promiscuous mode [ 294.018122][ T8227] device batadv_slave_1 entered promiscuous mode [ 294.070237][ T8227] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 294.102455][ T8227] Cannot create hsr debugfs directory [ 294.118747][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 294.535380][ T4233] usb 8-1: unable to get BOS descriptor or descriptor too short [ 294.645695][ T4233] usb 8-1: config 3 has an invalid interface number: 72 but max is 0 [ 294.664539][ T4233] usb 8-1: config 3 has no interface number 0 [ 294.762648][ T4233] usb 8-1: config 3 interface 72 has no altsetting 0 [ 295.471563][ T5151] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 295.637237][ T8261] loop5: detected capacity change from 0 to 512 [ 295.759698][ T4233] usb 8-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=e0.ba [ 295.768769][ T4233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.780340][ T8261] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 295.838523][ T8261] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.857713][ T4233] usb 8-1: Product: syz [ 295.867830][ T4233] usb 8-1: Manufacturer: syz [ 295.909564][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.914185][ T4233] usb 8-1: SerialNumber: syz [ 295.930911][ T5151] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 295.949420][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.963289][ T8265] loop3: detected capacity change from 0 to 32768 [ 295.996856][ T8265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.972 (8265) [ 296.016299][ T5151] usb 3-1: config 0 descriptor?? [ 296.086462][ T8265] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 296.109399][ T8265] BTRFS info (device loop3): enabling ssd optimizations [ 296.116377][ T8265] BTRFS info (device loop3): using spread ssd allocation scheme [ 296.239992][ T8265] BTRFS info (device loop3): setting nodatacow, compression disabled [ 296.502248][ T8265] BTRFS info (device loop3): not using ssd optimizations [ 296.509309][ T8265] BTRFS info (device loop3): not using spread ssd allocation scheme [ 296.539662][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 296.561339][ T8265] BTRFS info (device loop3): use zlib compression, level 3 [ 296.568568][ T8265] BTRFS info (device loop3): setting nodatasum [ 296.647864][ T8265] BTRFS info (device loop3): max_inline at 0 [ 296.654844][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 296.686265][ T8265] BTRFS info (device loop3): using free space tree [ 296.738990][ T8265] BTRFS info (device loop3): has skinny extents [ 296.779477][ T5151] usbhid 3-1:0.0: can't add hid device: -71 [ 296.785464][ T5151] usbhid: probe of 3-1:0.0 failed with error -71 [ 296.811255][ T5151] usb 3-1: USB disconnect, device number 9 [ 296.870962][ T8290] loop5: detected capacity change from 0 to 512 [ 296.885799][ T8290] EXT4-fs (loop5): Ignoring removed nobh option [ 296.899525][ T8290] EXT4-fs (loop5): Test dummy encryption mode enabled [ 296.911196][ T8290] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.987380][ T8290] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.975: iget: bad i_size value: 38620345925642 [ 297.010526][ T8290] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.975: couldn't read orphan inode 15 (err -117) [ 297.051252][ T8290] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 297.066435][ T26] audit: type=1800 audit(1756601694.410:262): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.972" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 297.179416][ T5151] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 297.249655][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 297.419475][ T5151] usb 3-1: Using ep0 maxpacket: 32 [ 297.529493][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 297.549671][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.599153][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 297.630871][ T5151] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 297.665914][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 297.665914][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.690481][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 297.822991][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 297.857298][ T5151] usb 3-1: config 0 descriptor?? [ 298.655512][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 298.687879][ T8335] input: syz0 as /devices/virtual/input/input13 [ 298.689769][ T5151] usb 3-1: can't set config #0, error -71 [ 298.730546][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 298.769505][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 298.822500][ T5151] usb 3-1: USB disconnect, device number 10 [ 298.876357][ T5155] [ 298.878701][ T5155] ====================================================== [ 298.885696][ T5155] WARNING: possible circular locking dependency detected [ 298.892695][ T5155] syzkaller #0 Not tainted [ 298.897083][ T5155] ------------------------------------------------------ [ 298.904076][ T5155] kworker/1:11/5155 is trying to acquire lock: [ 298.910200][ T5155] ffff88807b28cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 298.921214][ T5155] [ 298.921214][ T5155] but task is already holding lock: [ 298.928555][ T5155] ffffffff8d4bff28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 298.937576][ T5155] [ 298.937576][ T5155] which lock already depends on the new lock. [ 298.937576][ T5155] [ 298.947955][ T5155] [ 298.947955][ T5155] the existing dependency chain (in reverse order) is: [ 298.956947][ T5155] [ 298.956947][ T5155] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 298.964911][ T5155] __mutex_lock_common+0x1eb/0x2390 [ 298.970614][ T5155] mutex_lock_nested+0x17/0x20 [ 298.975880][ T5155] rfkill_register+0x33/0x8a0 [ 298.981067][ T5155] hci_register_dev+0x452/0x970 [ 298.986417][ T5155] vhci_create_device+0x32c/0x5c0 [ 298.991936][ T5155] vhci_write+0x391/0x450 [ 298.996761][ T5155] vfs_write+0x712/0xd00 [ 299.001498][ T5155] ksys_write+0x14d/0x250 [ 299.006322][ T5155] do_syscall_64+0x4c/0xa0 [ 299.011235][ T5155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.017654][ T5155] [ 299.017654][ T5155] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 299.025451][ T5155] __mutex_lock_common+0x1eb/0x2390 [ 299.031155][ T5155] mutex_lock_nested+0x17/0x20 [ 299.036418][ T5155] vhci_send_frame+0x88/0x100 [ 299.041592][ T5155] hci_send_frame+0x1a9/0x2e0 [ 299.046770][ T5155] hci_tx_work+0x9f9/0x1710 [ 299.051773][ T5155] process_one_work+0x863/0x1000 [ 299.057215][ T5155] worker_thread+0xaa8/0x12a0 [ 299.062392][ T5155] kthread+0x436/0x520 [ 299.066966][ T5155] ret_from_fork+0x1f/0x30 [ 299.071883][ T5155] [ 299.071883][ T5155] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 299.081059][ T5155] __flush_work+0xdd/0x1b0 [ 299.085995][ T5155] hci_dev_do_close+0x1e7/0x1030 [ 299.091428][ T5155] hci_unregister_dev+0x2d7/0x580 [ 299.096947][ T5155] vhci_release+0x73/0xc0 [ 299.101778][ T5155] __fput+0x234/0x930 [ 299.106260][ T5155] task_work_run+0x125/0x1a0 [ 299.111372][ T5155] do_exit+0x61e/0x20a0 [ 299.116025][ T5155] do_group_exit+0x12e/0x300 [ 299.121109][ T5155] get_signal+0x6ca/0x12c0 [ 299.126020][ T5155] arch_do_signal_or_restart+0xc1/0x1300 [ 299.132159][ T5155] exit_to_user_mode_loop+0x9e/0x130 [ 299.137941][ T5155] exit_to_user_mode_prepare+0xb1/0x140 [ 299.143984][ T5155] syscall_exit_to_user_mode+0x16/0x40 [ 299.150089][ T5155] do_syscall_64+0x58/0xa0 [ 299.155008][ T5155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.161453][ T5155] [ 299.161453][ T5155] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 299.169071][ T5155] __mutex_lock_common+0x1eb/0x2390 [ 299.174778][ T5155] mutex_lock_nested+0x17/0x20 [ 299.180040][ T5155] bg_scan_update+0x44/0x3b0 [ 299.185129][ T5155] process_one_work+0x863/0x1000 [ 299.190562][ T5155] worker_thread+0xaa8/0x12a0 [ 299.195739][ T5155] kthread+0x436/0x520 [ 299.200302][ T5155] ret_from_fork+0x1f/0x30 [ 299.205216][ T5155] [ 299.205216][ T5155] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 299.215004][ T5155] __lock_acquire+0x2c33/0x7c60 [ 299.220358][ T5155] lock_acquire+0x197/0x3f0 [ 299.225404][ T5155] __flush_work+0xdd/0x1b0 [ 299.230329][ T5155] __cancel_work_timer+0x3ac/0x520 [ 299.235941][ T5155] hci_request_cancel_all+0xcc/0x300 [ 299.241723][ T5155] hci_dev_do_close+0x4e/0x1030 [ 299.247074][ T5155] hci_rfkill_set_block+0x10a/0x190 [ 299.252773][ T5155] rfkill_set_block+0x1c6/0x420 [ 299.258118][ T5155] rfkill_epo+0x75/0x170 [ 299.262857][ T5155] rfkill_op_handler+0x76/0x220 [ 299.268202][ T5155] process_one_work+0x863/0x1000 [ 299.273636][ T5155] worker_thread+0xaa8/0x12a0 [ 299.278806][ T5155] kthread+0x436/0x520 [ 299.283369][ T5155] ret_from_fork+0x1f/0x30 [ 299.288306][ T5155] [ 299.288306][ T5155] other info that might help us debug this: [ 299.288306][ T5155] [ 299.298505][ T5155] Chain exists of: [ 299.298505][ T5155] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 299.298505][ T5155] [ 299.314198][ T5155] Possible unsafe locking scenario: [ 299.314198][ T5155] [ 299.321623][ T5155] CPU0 CPU1 [ 299.326961][ T5155] ---- ---- [ 299.332296][ T5155] lock(rfkill_global_mutex); [ 299.337033][ T5155] lock(&data->open_mutex); [ 299.344112][ T5155] lock(rfkill_global_mutex); [ 299.351364][ T5155] lock((work_completion)(&hdev->bg_scan_update)); [ 299.357925][ T5155] [ 299.357925][ T5155] *** DEADLOCK *** [ 299.357925][ T5155] [ 299.366042][ T5155] 3 locks held by kworker/1:11/5155: [ 299.371296][ T5155] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 299.381614][ T5155] #1: ffffc90002fc7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 299.391928][ T5155] #2: ffffffff8d4bff28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 299.401372][ T5155] [ 299.401372][ T5155] stack backtrace: [ 299.407233][ T5155] CPU: 1 PID: 5155 Comm: kworker/1:11 Not tainted syzkaller #0 [ 299.414748][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.424800][ T5155] Workqueue: events rfkill_op_handler [ 299.430164][ T5155] Call Trace: [ 299.433423][ T5155] [ 299.436335][ T5155] dump_stack_lvl+0x168/0x230 [ 299.440991][ T5155] ? load_image+0x3b0/0x3b0 [ 299.445474][ T5155] ? show_regs_print_info+0x20/0x20 [ 299.450649][ T5155] ? print_circular_bug+0x12b/0x1a0 [ 299.455822][ T5155] check_noncircular+0x274/0x310 [ 299.460731][ T5155] ? add_chain_block+0x940/0x940 [ 299.465640][ T5155] ? lockdep_lock+0xdc/0x1e0 [ 299.470207][ T5155] ? __lock_acquire+0x12d9/0x7c60 [ 299.475207][ T5155] ? lockdep_lock+0x1e0/0x1e0 [ 299.479856][ T5155] ? mark_lock+0x94/0x320 [ 299.484164][ T5155] __lock_acquire+0x2c33/0x7c60 [ 299.488997][ T5155] ? verify_lock_unused+0x140/0x140 [ 299.494170][ T5155] ? ret_from_fork+0x1e/0x30 [ 299.498735][ T5155] lock_acquire+0x197/0x3f0 [ 299.503212][ T5155] ? __flush_work+0xc1/0x1b0 [ 299.507774][ T5155] ? __lock_acquire+0x7c60/0x7c60 [ 299.512772][ T5155] ? read_lock_is_recursive+0x10/0x10 [ 299.518116][ T5155] ? start_flush_work+0x776/0x820 [ 299.523116][ T5155] __flush_work+0xdd/0x1b0 [ 299.527505][ T5155] ? __flush_work+0xc1/0x1b0 [ 299.532095][ T5155] ? flush_work+0x20/0x20 [ 299.536397][ T5155] ? try_to_grab_pending+0xf3/0x7e0 [ 299.541567][ T5155] ? lockdep_hardirqs_off+0x70/0x100 [ 299.546826][ T5155] ? mark_lock+0x94/0x320 [ 299.551132][ T5155] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 299.557085][ T5155] ? lock_chain_count+0x20/0x20 [ 299.561910][ T5155] ? lockdep_hardirqs_off+0x70/0x100 [ 299.567173][ T5155] ? mark_lock+0x94/0x320 [ 299.571479][ T5155] ? __cancel_work_timer+0x331/0x520 [ 299.576738][ T5155] __cancel_work_timer+0x3ac/0x520 [ 299.581825][ T5155] ? cancel_work_sync+0x20/0x20 [ 299.586651][ T5155] ? __cancel_work+0x1f4/0x2d0 [ 299.591909][ T5155] ? lockdep_hardirqs_on+0x94/0x140 [ 299.597080][ T5155] ? __cancel_work+0x26f/0x2d0 [ 299.601817][ T5155] ? cancel_work+0x20/0x20 [ 299.606206][ T5155] hci_request_cancel_all+0xcc/0x300 [ 299.611472][ T5155] hci_dev_do_close+0x4e/0x1030 [ 299.616296][ T5155] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 299.622193][ T5155] ? _raw_spin_unlock+0x40/0x40 [ 299.627017][ T5155] hci_rfkill_set_block+0x10a/0x190 [ 299.632191][ T5155] ? rcu_lock_release+0x20/0x20 [ 299.637035][ T5155] rfkill_set_block+0x1c6/0x420 [ 299.641863][ T5155] rfkill_epo+0x75/0x170 [ 299.646082][ T5155] rfkill_op_handler+0x76/0x220 [ 299.650906][ T5155] process_one_work+0x863/0x1000 [ 299.655820][ T5155] ? worker_detach_from_pool+0x240/0x240 [ 299.661433][ T5155] ? lockdep_hardirqs_off+0x70/0x100 [ 299.666690][ T5155] ? _raw_spin_lock_irq+0xab/0xe0 [ 299.671707][ T5155] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 299.677077][ T5155] ? wq_worker_running+0x97/0x170 [ 299.682077][ T5155] worker_thread+0xaa8/0x12a0 [ 299.686736][ T5155] kthread+0x436/0x520 [ 299.690779][ T5155] ? rcu_lock_release+0x20/0x20 [ 299.695606][ T5155] ? kthread_blkcg+0xd0/0xd0 [ 299.700170][ T5155] ret_from_fork+0x1f/0x30 [ 299.704583][ T5155] [ 299.719535][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 299.789596][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 300.150438][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 300.249512][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 300.319504][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 300.379519][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 300.439536][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 300.470851][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 300.509543][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 300.539820][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 300.580202][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 300.609570][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 300.639483][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 300.669476][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 300.699468][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 300.729517][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 300.759506][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 300.789519][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 300.819531][ T4233] ax88179_178a 8-1:3.72 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 300.835826][ T4233] ax88179_178a 8-1:3.72 eth13: register 'ax88179_178a' at usb-dummy_hcd.7-1, Cypress GX3 SuperSpeed to Gigabit Ethernet Controller, ba:55:bb:68:bf:24 [ 300.854426][ T4233] usb 8-1: USB disconnect, device number 6 [ 300.860604][ T4233] ax88179_178a 8-1:3.72 eth13: unregister 'ax88179_178a' usb-dummy_hcd.7-1, Cypress GX3 SuperSpeed to Gigabit Ethernet Controller