last executing test programs: 16.136595115s ago: executing program 5 (id=879): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}]}, &(0x7f0000000440)=0x10) 15.612704385s ago: executing program 5 (id=881): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='l', 0x1) write$char_usb(r1, &(0x7f0000000140)="1b", 0x1) syz_usb_disconnect(r0) 11.264883556s ago: executing program 5 (id=896): io_setup(0x206, &(0x7f0000000200)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r4, 0xa3b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x9, &(0x7f0000000240)=[{0x15, 0x2, 0x2, 0xfffffffd}, {0x102, 0x0, 0x5, 0xffffefff}, {0x0, 0xc, 0x0, 0xffffffff}, {0x7, 0x3, 0x40, 0x3}, {0x1, 0x5, 0x8, 0x2}, {0x3, 0x4, 0x6, 0x6}, {0xe9, 0x8, 0xe0, 0xffffffff}, {0x9a9b, 0x9, 0x81, 0xeb26}, {0x101, 0x7, 0x4, 0x400}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800001000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/240, 0xf0}], 0x1, 0x2, 0x0) 10.125918398s ago: executing program 5 (id=902): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000001880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x100100d, 0x0) r0 = open(&(0x7f00000018c0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x1717, 0x0, 0x0, 0x0, 0x0, "ef35ff013bb93852f7d6d1ce5d202eee5e5ca9000f7c41c660e677df701908b90010f6a0040000000000fd00", "00bb0800002a0000efea000000000000000000000000004efe66f90000000004b9f1e400", "43610000181c208220000000b9000201000000000000f001fffffff2ff00"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 8.197815534s ago: executing program 5 (id=910): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x4) syz_usb_disconnect(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2000}) 7.673619067s ago: executing program 3 (id=917): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) write(r0, &(0x7f0000000240)="2600000012003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) 7.405582898s ago: executing program 5 (id=918): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8}, 0x14}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.068253022s ago: executing program 3 (id=922): r0 = io_uring_setup(0x1afb, &(0x7f0000004b00)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x17, &(0x7f0000004d00)={0x0}, 0x1) 7.0680468s ago: executing program 4 (id=923): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) 6.798358594s ago: executing program 4 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x50}}, 0x0) 6.767861398s ago: executing program 3 (id=925): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x40000000002, 0x0, 0x2) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r2 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x4, &(0x7f0000000080), 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_clone3(&(0x7f00000001c0)={0x400, &(0x7f0000000040), &(0x7f0000000080)=0x0, 0x0, {0xb}, &(0x7f0000000100), 0x0, &(0x7f00000005c0)=""/4096, 0x0}, 0x58) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x40) r4 = open(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x4c07, 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0x3, &(0x7f0000000fc0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000780), 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x63) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x90) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x100}}) 6.285032329s ago: executing program 4 (id=927): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000038500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x2, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x4, 0x1, 0x6, 0x5}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x11, 0x0, 0xc6020000}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180d0000000000dd000000e261ae492dc3f831356c3d4a220686b4ba6ad94bbc4d55491f730806fcd815e696a10000d9d9b257437c1fe00060e52c", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000099000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r8, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r8, &(0x7f00000000c0)}, 0x20) close(r7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 5.522444565s ago: executing program 3 (id=930): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}}) 5.297070682s ago: executing program 4 (id=932): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8}, 0x14}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.208163417s ago: executing program 2 (id=935): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001900)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r3, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) 3.785828701s ago: executing program 0 (id=936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 3.331549757s ago: executing program 2 (id=938): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000002200)="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"/3584, 0xe00) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) sendfile(r0, r1, 0x0, 0x11f06) 3.29600496s ago: executing program 3 (id=939): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b11, &(0x7f0000000040)) 3.144991568s ago: executing program 0 (id=940): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 2.926451097s ago: executing program 1 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 2.808740857s ago: executing program 0 (id=943): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000038500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x2, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x4, 0x1, 0x6, 0x5}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x11, 0x0, 0xc6020000}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180d0000000000dd000000e261ae492dc3f831356c3d4a220686b4ba6ad94bbc4d55491f730806fcd815e696a10000d9d9b257437c1fe00060e52c", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000099000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r8, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r8, &(0x7f00000000c0)}, 0x20) close(r7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 2.807472406s ago: executing program 4 (id=944): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x40000000002, 0x0, 0x2) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000200)=0x2, 0x4) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x4, &(0x7f0000000080), 0x4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_clone3(&(0x7f00000001c0)={0x400, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0xb}, &(0x7f0000000100), 0x0, &(0x7f00000005c0)=""/4096, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa}, 0x58) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x40) r5 = open(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c07, 0x3) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000fc0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000780), 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x90) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x100}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000002040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x1b, 0x0, 0x0, @remote}}}, 0x48) 2.736512861s ago: executing program 2 (id=945): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xffffffff, 0x0, {}, 0x0, 0x6}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='&'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.607895109s ago: executing program 1 (id=946): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x0, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800002}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) 2.396288873s ago: executing program 1 (id=947): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100), 0x8) 2.345073974s ago: executing program 0 (id=948): rename(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x5, 0x0, &(0x7f0000000040)) 2.09943951s ago: executing program 2 (id=949): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x8001) mount$9p_fd(0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[]) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000300)=0x3, 0x2d) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1febeb001800000000000000240000002400000002000000000000000000000d03e0ff000000000000f5ff0b000000000000000000000006040000000000251e3d91b641d85afa22e06d7b748f59165fece7fc8bf1c1e199357665d97effae4b382a8896ed5005eaa65acf782ca4c814cfd6734777e92866c9dd8b8a2ee01137047ba384dfb752cad3a60310d63fec351585005895bacfcc31"], 0x0, 0x3e}, 0x20) unshare(0x400) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) 2.076933252s ago: executing program 0 (id=950): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x44) write$binfmt_script(r1, &(0x7f0000000b40)={'#! ', './file0', [], 0xa, "ee89d3ca2b9a4c838dfd615e0be84a8da9af8b8181be"}, 0x21) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/112, 0x70}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x10000, 0x0) 2.053113945s ago: executing program 1 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504040000ffffffb4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516466df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed4254332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76268923c396b017003ddcd205c05311dcae277e5b0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 601.757099ms ago: executing program 2 (id=952): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@host}, @host, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@host}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8, 0x4}) 600.838559ms ago: executing program 4 (id=953): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r1, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc5614beaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce84bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bcbd4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d7916daf222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7742850b956b609740c913f54225ae18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14a08e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c3792c5d2665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250b089b0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, r2, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000540)='./file0\x00') 567.851656ms ago: executing program 1 (id=954): r0 = syz_io_uring_setup(0x1ed2, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3b2}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', 0x0}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x82d3a, 0x0, 0x0, 0x0, 0x0) 464.930712ms ago: executing program 0 (id=955): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8}, 0x14}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 180.359937ms ago: executing program 1 (id=956): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 90.687627ms ago: executing program 3 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x60, r5, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r3}}}]}}]}, 0x60}}, 0x0) 0s ago: executing program 2 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) kernel console output (not intermixed with test programs): -0000-0000-000000000000. [ 171.331257][ T58] usb 2-1: USB disconnect, device number 11 [ 171.349934][ T58] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 171.503793][ T58] usb 6-1: USB disconnect, device number 9 [ 171.828216][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.324'. [ 172.245203][ T6392] loop1: detected capacity change from 0 to 1024 [ 172.485990][ T6395] netlink: 'syz.5.330': attribute type 1 has an invalid length. [ 172.509726][ T6400] loop1: detected capacity change from 0 to 512 [ 172.560068][ T6400] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 172.574763][ T6400] UDF-fs: Scanning with blocksize 512 failed [ 172.620638][ T6400] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 172.663049][ T6400] UDF-fs: Scanning with blocksize 1024 failed [ 172.708470][ T6400] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 172.718410][ T6400] UDF-fs: Scanning with blocksize 2048 failed [ 172.743888][ T6400] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 172.784418][ T6400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.184268][ T29] audit: type=1326 audit(1724859282.793:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.1.339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa593379ef9 code=0x0 [ 173.300332][ T5230] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.490461][ T5230] usb 4-1: Using ep0 maxpacket: 16 [ 173.507287][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.512373][ T6420] loop4: detected capacity change from 0 to 512 [ 173.541057][ T5230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.561616][ T6420] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 173.581586][ T5230] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.597370][ T6420] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 173.608191][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.631816][ T6420] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.342: bg 0: block 18: invalid block bitmap [ 173.689574][ T5230] usb 4-1: config 0 descriptor?? [ 173.707040][ T6420] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 173.761293][ T6420] EXT4-fs (loop4): 1 truncate cleaned up [ 173.804474][ T6420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.830489][ T6420] ext2 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.849441][ T6401] loop2: detected capacity change from 0 to 32768 [ 173.879987][ T6420] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.342: lblock 0 mapped to illegal pblock 3 (length 1) [ 173.939897][ T6401] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 174.222212][ T6420] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.342: lblock 0 mapped to illegal pblock 3 (length 1) [ 174.245855][ T5230] usbhid 4-1:0.0: can't add hid device: -71 [ 174.266764][ T5230] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 174.286974][ T5230] usb 4-1: USB disconnect, device number 14 [ 174.511418][ T6433] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.342: lblock 0 mapped to illegal pblock 3 (length 1) [ 174.683602][ T6420] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.342: lblock 0 mapped to illegal pblock 3 (length 1) [ 174.708579][ T6420] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.342: lblock 0 mapped to illegal pblock 3 (length 1) [ 175.352203][ T6433] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.342: lblock 0 mapped to illegal pblock 3 (length 1) [ 175.435193][ T6440] loop5: detected capacity change from 0 to 64 [ 175.674496][ T6401] XFS (loop2): Ending clean mount [ 175.700667][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.781388][ T5227] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 175.843833][ T6446] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 175.877668][ T6451] loop4: detected capacity change from 0 to 512 [ 175.904504][ T6451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.004395][ T6451] EXT4-fs (loop4): 1 orphan inode deleted [ 176.058817][ T6451] EXT4-fs (loop4): 1 truncate cleaned up [ 176.074341][ T6451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.127997][ T6456] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.395580][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.473533][ T6468] loop3: detected capacity change from 0 to 128 [ 176.534357][ T6468] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.552193][ T6471] loop0: detected capacity change from 0 to 128 [ 176.561616][ T6468] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.624156][ T6471] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.656674][ T6471] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.700792][ T58] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.766728][ T6477] loop4: detected capacity change from 0 to 4096 [ 176.773120][ T5226] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.820098][ T6477] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 176.900445][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 176.919972][ T58] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.937451][ T58] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.960310][ T58] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 176.970064][ T58] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 176.979949][ T58] usb 2-1: Product: syz [ 177.007270][ T58] usb 2-1: Manufacturer: syz [ 177.025581][ T6477] ntfs3: loop4: failed to convert "c46c" to macturkish [ 177.044203][ T58] hub 2-1:4.0: USB hub found [ 177.071684][ T6483] loop2: detected capacity change from 0 to 512 [ 177.106436][ T6483] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 177.134456][ T5224] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.144735][ T6483] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 177.192850][ T6483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.363: bg 0: block 18: invalid block bitmap [ 177.218833][ T6459] loop5: detected capacity change from 0 to 32768 [ 177.237737][ T6483] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 177.257702][ T58] hub 2-1:4.0: 2 ports detected [ 177.260906][ T6483] EXT4-fs (loop2): 1 truncate cleaned up [ 177.282028][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.327644][ T6483] ext2 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.359611][ T29] audit: type=1800 audit(1724859286.953:6): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.354" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 177.471516][ T6483] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.363: lblock 0 mapped to illegal pblock 3 (length 1) [ 177.520636][ T6483] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.363: lblock 0 mapped to illegal pblock 3 (length 1) [ 177.583976][ T6483] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.363: lblock 0 mapped to illegal pblock 3 (length 1) [ 177.670439][ T58] hub 2-1:4.0: set hub depth failed [ 177.862676][ T58] usb 2-1: USB disconnect, device number 12 [ 177.941830][ T6495] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.363: lblock 0 mapped to illegal pblock 3 (length 1) [ 178.026769][ T6499] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.363: lblock 0 mapped to illegal pblock 3 (length 1) [ 178.061272][ T6483] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.363: lblock 0 mapped to illegal pblock 3 (length 1) [ 178.229335][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.921531][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 180.070537][ T5312] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.171800][ T6530] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 180.218901][ T6530] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.381'. [ 180.218981][ T6530] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 180.219001][ T6530] netlink: 'syz.1.381': attribute type 2 has an invalid length. [ 180.229669][ T6534] loop4: detected capacity change from 0 to 512 [ 180.246626][ T6534] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 180.273656][ T6534] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 180.300894][ T5312] usb 3-1: Using ep0 maxpacket: 8 [ 180.307302][ T5312] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 180.307334][ T5312] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 180.307359][ T5312] usb 3-1: config 0 has no interface number 0 [ 180.307408][ T5312] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 180.307442][ T5312] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 180.307477][ T5312] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.307511][ T5312] usb 3-1: config 0 interface 52 has no altsetting 0 [ 180.312715][ T5312] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 180.312748][ T5312] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 180.312776][ T5312] usb 3-1: Product: syz [ 180.312797][ T5312] usb 3-1: Manufacturer: syz [ 180.312817][ T5312] usb 3-1: SerialNumber: syz [ 180.317437][ T5312] usb 3-1: config 0 descriptor?? [ 180.393508][ T6534] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.383: bg 0: block 18: invalid block bitmap [ 180.572818][ T6534] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 180.573359][ T6534] EXT4-fs (loop4): 1 truncate cleaned up [ 180.575005][ T6534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.575175][ T6534] ext2 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.621235][ T5312] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input12 [ 180.654470][ T6534] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.383: lblock 0 mapped to illegal pblock 3 (length 1) [ 180.658279][ T6534] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.383: lblock 0 mapped to illegal pblock 3 (length 1) [ 180.670344][ T6534] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.383: lblock 0 mapped to illegal pblock 3 (length 1) [ 180.884875][ T6546] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.383: lblock 0 mapped to illegal pblock 3 (length 1) [ 180.937597][ T6548] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.383: lblock 0 mapped to illegal pblock 3 (length 1) [ 181.031420][ T6548] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.383: lblock 0 mapped to illegal pblock 3 (length 1) [ 181.713518][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.734599][ T5312] usb 3-1: USB disconnect, device number 10 [ 181.734719][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 182.550870][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 183.446377][ T6541] loop1: detected capacity change from 0 to 32768 [ 183.459080][ T6541] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop1": -EINTR [ 183.661548][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 184.418403][ T6586] loop0: detected capacity change from 0 to 512 [ 184.449792][ T6586] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 184.457923][ T6587] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 184.481639][ T6586] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 184.498780][ T6586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.402: bg 0: block 18: invalid block bitmap [ 184.512632][ T6586] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 184.531417][ T6586] EXT4-fs (loop0): 1 truncate cleaned up [ 184.555536][ T6586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.569170][ T6586] ext2 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.683906][ T6586] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.402: lblock 0 mapped to illegal pblock 3 (length 1) [ 184.709620][ T6586] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.402: lblock 0 mapped to illegal pblock 3 (length 1) [ 184.723948][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 184.740973][ T6586] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.402: lblock 0 mapped to illegal pblock 3 (length 1) [ 184.842874][ T6598] loop3: detected capacity change from 0 to 1024 [ 184.920023][ T6602] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.402: lblock 0 mapped to illegal pblock 3 (length 1) [ 184.952398][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 184.962431][ T6602] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.402: lblock 0 mapped to illegal pblock 3 (length 1) [ 185.141782][ T6603] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.402: lblock 0 mapped to illegal pblock 3 (length 1) [ 185.159383][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 185.169032][ T6607] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.402: lblock 0 mapped to illegal pblock 3 (length 1) [ 185.183475][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.444132][ T25] usb 2-1: config 0 descriptor?? [ 185.480391][ T25] gspca_main: sq930x-2.14.0 probing 041e:403c [ 185.771070][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.061306][ T2464] hfsplus: b-tree write err: -5, ino 4 [ 186.970248][ T25] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 186.976284][ T25] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 187.033281][ T6608] Zero length message leads to an empty skb [ 187.132515][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.412'. [ 187.814341][ T6637] loop0: detected capacity change from 0 to 764 [ 188.686327][ T58] usb 2-1: USB disconnect, device number 13 [ 189.190312][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.382654][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.435488][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.483136][ T25] usb 1-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 189.517604][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.562039][ T25] usb 1-1: config 0 descriptor?? [ 189.656114][ T6671] loop2: detected capacity change from 0 to 4096 [ 189.754717][ T6674] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.846664][ T6676] program syz.4.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.891339][ T29] audit: type=1800 audit(1724859299.473:7): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.429" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 190.020382][ T29] audit: type=1804 audit(1724859299.513:8): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.429" name="/newroot/78/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 190.146722][ T6645] 9pnet_fd: Insufficient options for proto=fd [ 190.163124][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.201441][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.447456][ T6645] rock: directory entry would overflow storage [ 190.460881][ T6645] rock: sig=0x4f50, size=4, remaining=3 [ 190.653311][ T6645] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 191.450134][ T6698] loop3: detected capacity change from 0 to 4096 [ 191.632258][ T6698] ntfs3: loop3: ino=0, "file0" failed to parse mft record [ 191.670401][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 191.695890][ T6701] futex_wake_op: syz.5.441 tries to shift op by -1; fix this program [ 191.811899][ T5312] usb 1-1: USB disconnect, device number 11 [ 191.890261][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 191.898376][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 191.932597][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 191.969760][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.005386][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.074320][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.074359][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.110815][ T58] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.316529][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 192.339987][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 192.359147][ T25] usbtmc 2-1:16.0: can't read capabilities [ 192.365776][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.383460][ T58] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.408068][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.430400][ T58] usb 4-1: Product: syz [ 192.435867][ T58] usb 4-1: Manufacturer: syz [ 192.453872][ T58] usb 4-1: SerialNumber: syz [ 192.488760][ T58] usb 4-1: config 0 descriptor?? [ 192.505918][ T58] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.532980][ T58] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 192.597494][ T5230] usb 2-1: USB disconnect, device number 14 [ 192.921384][ T6733] loop5: detected capacity change from 0 to 128 [ 192.929795][ T6733] EXT4-fs: Ignoring removed nobh option [ 192.954305][ T6733] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.978547][ T6733] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.016989][ T6705] loop2: detected capacity change from 0 to 40427 [ 193.058088][ T6705] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.130038][ T58] em28xx 4-1:0.0: chip ID is em2710/2820 [ 193.215215][ T5229] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.318047][ T6705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.439414][ T58] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 193.446774][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 193.491068][ T58] em28xx 4-1:0.0: board has no eeprom [ 193.567657][ T6749] loop5: detected capacity change from 0 to 4096 [ 193.590542][ T58] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 193.601565][ T6749] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 193.619702][ T58] em28xx 4-1:0.0: dvb set to bulk mode. [ 193.629813][ T5291] em28xx 4-1:0.0: Binding DVB extension [ 193.662423][ T58] usb 4-1: USB disconnect, device number 15 [ 193.675155][ T5227] syz-executor: attempt to access beyond end of device [ 193.675155][ T5227] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.711241][ T58] em28xx 4-1:0.0: Disconnecting em28xx [ 193.741230][ T5227] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 193.746536][ T6759] loop0: detected capacity change from 0 to 512 [ 193.774727][ T6749] ntfs3: loop5: ino=1b, "file0" failed to parse mft record [ 193.804048][ T5291] em28xx 4-1:0.0: Registering input extension [ 193.806247][ T6749] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 193.825938][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.833599][ T58] em28xx 4-1:0.0: Closing input extension [ 193.835279][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.855742][ T6759] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 193.878894][ T6749] ntfs3: loop5: ino=1b, "file0" attr_set_size [ 193.885030][ T58] em28xx 4-1:0.0: Freeing device [ 193.890478][ T5230] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 193.898167][ T6759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 193.925249][ T6759] System zones: 0-1, 15-15, 18-18, 34-34 [ 193.952957][ T6759] EXT4-fs (loop0): orphan cleanup on readonly fs [ 193.959405][ T6759] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 194.010399][ T6759] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 194.062723][ T6759] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 194.092688][ T6759] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.463: bad orphan inode 16 [ 194.120380][ T5230] usb 2-1: Using ep0 maxpacket: 8 [ 194.130858][ T5230] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 194.150296][ T6759] ext4_test_bit(bit=15, block=18) = 1 [ 194.155714][ T6759] is_bad_inode(inode)=0 [ 194.166557][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.182311][ T6759] NEXT_ORPHAN(inode)=0 [ 194.186407][ T6759] max_ino=32 [ 194.189613][ T6759] i_nlink=2 [ 194.206928][ T5230] usb 2-1: Product: syz [ 194.222243][ T5230] usb 2-1: Manufacturer: syz [ 194.226867][ T5230] usb 2-1: SerialNumber: syz [ 194.233634][ T6759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.262075][ T5230] usb 2-1: config 0 descriptor?? [ 194.364069][ T6770] loop5: detected capacity change from 0 to 4096 [ 194.508235][ T5230] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 194.776863][ T6770] EXT4-fs: Ignoring removed oldalloc option [ 194.819089][ T6770] EXT4-fs (loop5): Test dummy encryption mode enabled [ 194.891281][ T6783] loop4: detected capacity change from 0 to 1024 [ 194.899231][ T6770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.980586][ T6783] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 195.046841][ T6770] fs-verity: sha512 using implementation "sha512-avx2" [ 195.074584][ T6783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.171636][ T29] audit: type=1800 audit(1724859304.773:9): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.470" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 195.288260][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.309455][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.328655][ T5230] usb write operation failed. (-71) [ 195.392692][ T5230] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.411694][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.427814][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.428641][ T5230] dvbdev: DVB: registering new adapter (Terratec H7) [ 195.488907][ T5230] usb 2-1: media controller created [ 195.507041][ T5230] usb read operation failed. (-71) [ 195.537798][ T5230] usb write operation failed. (-71) [ 195.574439][ T5230] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 195.603858][ T5230] usb 2-1: USB disconnect, device number 15 [ 195.630322][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 195.653224][ T6800] syz.4.473[6800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.659428][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 195.689654][ T6800] syz.4.473[6800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.723863][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 195.754750][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.773912][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.839159][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.893726][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.297945][ T25] usb 4-1: usb_control_msg returned -32 [ 196.317490][ T25] usbtmc 4-1:16.0: can't read capabilities [ 197.970188][ C1] sched: RT throttling activated [ 198.405409][ T6814] loop4: detected capacity change from 0 to 262144 [ 198.440272][ T6814] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.479 (6814) [ 198.475660][ T6814] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 198.486088][ T6814] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 198.495411][ T6814] BTRFS info (device loop4): using free-space-tree [ 198.677853][ T5230] usb 4-1: USB disconnect, device number 16 [ 198.742748][ T6829] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 199.217278][ T6836] vlan2: entered promiscuous mode [ 199.222521][ T6836] geneve1: entered promiscuous mode [ 199.440798][ T6836] geneve1: left promiscuous mode [ 200.238638][ T5223] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 200.412090][ T6849] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 200.550523][ T5292] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 200.615672][ T6856] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 200.684930][ T6855] hsr0: entered allmulticast mode [ 200.714058][ T6855] hsr_slave_0: entered allmulticast mode [ 200.719741][ T6855] hsr_slave_1: entered allmulticast mode [ 200.769684][ T5292] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 200.808261][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.859127][ T5292] usb 2-1: config 0 descriptor?? [ 200.906190][ T5292] usb 2-1: selecting invalid altsetting 1 [ 200.914369][ T58] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 200.949222][ T6859] loop2: detected capacity change from 0 to 64 [ 201.279923][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 201.287335][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 201.294823][ T4614] Bluetooth: hci2: command 0x0406 tx timeout [ 201.301610][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 201.303555][ T5247] Bluetooth: hci1: command 0x0406 tx timeout [ 201.331132][ T5292] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 201.383402][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.449580][ T58] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 201.501631][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.513948][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.770744][ T5291] usb 2-1: USB disconnect, device number 16 [ 201.818765][ T58] usb 6-1: config 0 descriptor?? [ 202.062157][ T58] usb 6-1: selecting invalid altsetting 1 [ 202.111539][ T58] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 202.279721][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.300601][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 202.318216][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.390993][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 204.432555][ T6885] loop3: detected capacity change from 0 to 256 [ 204.471231][ T8] usb 6-1: USB disconnect, device number 10 [ 204.899721][ T6894] loop2: detected capacity change from 0 to 1024 [ 204.937578][ T6894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.037822][ T6894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.135135][ T6894] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.504: reserved inode found cleared - inode=18 [ 205.155188][ T6906] loop0: detected capacity change from 0 to 1024 [ 205.217200][ T6906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.260583][ T5230] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 205.341814][ T29] audit: type=1800 audit(1724859314.943:10): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.507" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 205.362108][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.370824][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.380831][ T6906] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.507: missing EA_INODE flag [ 205.444320][ T6906] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.507: error while reading EA inode 11 err=-117 [ 205.516327][ T5230] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 205.560293][ T5230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.599012][ T5230] usb 6-1: Product: syz [ 205.616949][ T5230] usb 6-1: Manufacturer: syz [ 205.634464][ T5230] usb 6-1: SerialNumber: syz [ 205.677382][ T5230] usb 6-1: config 0 descriptor?? [ 205.742164][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.916119][ T5230] usb 6-1: USB disconnect, device number 11 [ 207.215139][ T6897] loop3: detected capacity change from 0 to 32768 [ 207.241813][ T6924] syz.0.513 uses obsolete (PF_INET,SOCK_PACKET) [ 207.450937][ T6929] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 207.804319][ T6940] loop4: detected capacity change from 0 to 512 [ 207.831352][ T6940] EXT4-fs: Ignoring removed nobh option [ 207.850391][ T5292] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 207.992395][ T6940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.048360][ T6940] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.125168][ T5292] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 208.185055][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.237105][ T5292] usb 6-1: config 0 descriptor?? [ 208.283483][ T5292] usb 6-1: selecting invalid altsetting 1 [ 208.615005][ T5292] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 208.627446][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.648655][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.712953][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.055542][ T6960] syzkaller1: entered promiscuous mode [ 209.061433][ T6960] syzkaller1: entered allmulticast mode [ 209.389864][ T6963] syzkaller1: entered promiscuous mode [ 209.413054][ T6963] syzkaller1: entered allmulticast mode [ 209.456538][ T6965] dccp_v6_rcv: dropped packet with invalid checksum [ 209.570437][ T5292] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.802841][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.836587][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.872741][ T5292] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 209.906943][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.950759][ T5292] usb 5-1: config 0 descriptor?? [ 211.867246][ T5289] usb 6-1: USB disconnect, device number 12 [ 212.805662][ T5292] usbhid 5-1:0.0: can't add hid device: -71 [ 212.944215][ T5292] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.025658][ T5292] usb 5-1: USB disconnect, device number 7 [ 213.260607][ T7006] netlink: 48 bytes leftover after parsing attributes in process `syz.0.538'. [ 214.903993][ T7014] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 214.941742][ T7014] netlink: 3440 bytes leftover after parsing attributes in process `syz.3.541'. [ 215.138569][ T7024] loop5: detected capacity change from 0 to 512 [ 215.193986][ T7024] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 215.220619][ T7024] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 215.233574][ T7030] loop4: detected capacity change from 0 to 64 [ 215.252725][ T7024] System zones: 0-1, 15-15, 18-18, 34-34 [ 215.258814][ T7024] EXT4-fs (loop5): orphan cleanup on readonly fs [ 215.294477][ T7024] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 215.380440][ T7024] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 215.455712][ T7024] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 215.491314][ T7024] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.546: bad orphan inode 16 [ 215.540425][ T7024] ext4_test_bit(bit=15, block=18) = 1 [ 215.546045][ T7024] is_bad_inode(inode)=0 [ 215.560443][ T7024] NEXT_ORPHAN(inode)=0 [ 215.564584][ T7024] max_ino=32 [ 215.567796][ T7024] i_nlink=2 [ 215.609557][ T7024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.669905][ T7039] loop4: detected capacity change from 0 to 256 [ 215.712213][ T7024] tipc: Started in network mode [ 215.713932][ T7039] exfat: Deprecated parameter 'utf8' [ 215.717629][ T7024] tipc: Node identity f0, cluster identity 4711 [ 215.751332][ T7039] exfat: Deprecated parameter 'utf8' [ 215.777366][ T7024] tipc: Node number set to 240 [ 215.842652][ T7043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.880395][ T7039] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 216.231059][ T7049] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 217.583146][ T7057] syz.3.558[7057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.583293][ T7057] syz.3.558[7057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.790338][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.035742][ T7065] loop3: detected capacity change from 0 to 2048 [ 218.061496][ T8] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 218.077128][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.080444][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.123263][ T8] usb 3-1: config 0 descriptor?? [ 218.129183][ T7068] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.164121][ T8] usb 3-1: selecting invalid altsetting 1 [ 218.217387][ T8] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 218.541739][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.551402][ T7071] loop4: detected capacity change from 0 to 1024 [ 218.566102][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.575743][ T7068] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 219.292578][ T7068] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 219.335266][ T7071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.390425][ T7068] Remounting filesystem read-only [ 219.406102][ T2506] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 219.452381][ T2506] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 219.500039][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.566466][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.608911][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.659344][ T2506] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 219.698386][ T2506] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 219.730502][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.754158][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.784006][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.786647][ T5291] usb 3-1: USB disconnect, device number 11 [ 219.795396][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.808672][ T2506] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 219.818083][ T2506] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 219.826838][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.836699][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.850312][ T2506] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 219.879941][ T5226] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 220.140820][ T5226] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 220.183951][ T5226] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 220.250456][ T5226] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 220.260608][ T5226] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 220.268062][ T5226] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 220.995604][ T5226] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 221.002638][ T5226] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 221.011111][ T5226] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.020056][ T5226] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.036192][ T5226] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.047270][ T5226] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 221.064976][ T5226] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 221.119710][ T5226] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 221.153900][ T5226] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 221.230308][ T5226] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.279976][ T5226] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 221.300317][ T5226] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.309239][ T5226] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 221.366770][ T5226] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 221.385865][ T5226] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 222.383764][ T5230] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 223.020841][ T5230] usb 6-1: Using ep0 maxpacket: 8 [ 223.061131][ T5230] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.103336][ T5230] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.325176][ T5230] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 223.339777][ T5230] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 223.350369][ T5230] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.363870][ T5230] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.379404][ T5230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.957846][ T5230] usb 6-1: GET_CAPABILITIES returned 0 [ 223.993338][ T5230] usbtmc 6-1:16.0: can't read capabilities [ 224.175791][ T5312] usb 6-1: USB disconnect, device number 13 [ 225.846024][ T7143] veth1_macvtap: left promiscuous mode [ 225.879828][ T7143] macsec0: entered allmulticast mode [ 225.987714][ T7149] veth1_macvtap: entered promiscuous mode [ 226.030542][ T7149] veth1_macvtap: entered allmulticast mode [ 226.229678][ T7156] process 'syz.4.594' launched './file1' with NULL argv: empty string added [ 227.000272][ T58] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 227.200847][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 227.212738][ T58] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.236327][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.272855][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.311859][ T58] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.356314][ T58] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.380771][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.401707][ T7176] loop1: detected capacity change from 0 to 512 [ 227.431038][ T7176] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 227.477896][ T7176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 227.526930][ T7176] System zones: 1-12 [ 227.541104][ T7176] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.615803][ T7176] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.603: Inode bitmap for bg 0 marked uninitialized [ 227.634025][ T7176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 227.647813][ T58] usb 6-1: usb_control_msg returned -32 [ 227.680629][ T58] usbtmc 6-1:16.0: can't read capabilities [ 227.856503][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.995155][ T7189] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 228.203374][ T7194] vlan2: entered promiscuous mode [ 228.293851][ T7198] pim6reg1: entered promiscuous mode [ 228.318938][ T7198] pim6reg1: entered allmulticast mode [ 228.410459][ T58] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 228.647261][ T58] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 228.692899][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.754138][ T58] usb 1-1: config 0 descriptor?? [ 228.804587][ T58] usb 1-1: selecting invalid altsetting 1 [ 228.881208][ T58] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 229.014124][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.051352][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.330357][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 229.705947][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.751861][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.792631][ T25] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 229.815730][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.842027][ T25] usb 4-1: config 0 descriptor?? [ 229.942230][ T5230] usb 6-1: USB disconnect, device number 14 [ 231.579345][ T5289] usb 1-1: USB disconnect, device number 12 [ 231.710510][ T7234] loop2: detected capacity change from 0 to 1024 [ 231.833762][ T7234] hfsplus: keylen 65060 too large [ 231.854921][ T7234] hfsplus: xattr search failed [ 232.199878][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 232.291242][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.360780][ T25] usb 4-1: USB disconnect, device number 17 [ 232.498591][ T7250] Bluetooth: MGMT ver 1.23 [ 232.509463][ T7250] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 232.753850][ T5230] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 232.961582][ T5230] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 232.977108][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.991191][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.030980][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.051971][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.070491][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.090481][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 233.092451][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.121242][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.140843][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.168288][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.196641][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.226451][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.252795][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.271501][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.290719][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.310313][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.320450][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 233.328660][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.350919][ T25] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 233.353592][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.379538][ T25] usb 3-1: config 0 has no interface number 0 [ 233.389698][ T25] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.413079][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.420415][ T25] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.450666][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.457270][ T25] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 233.468646][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.468687][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.496330][ T5230] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.504727][ T25] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 233.528312][ T5230] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.539152][ T25] usb 3-1: Product: syz [ 233.548113][ T7273] Bluetooth: hci3: unsupported parameter 64512 [ 233.554467][ T5230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.561199][ T7273] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 233.581960][ T5230] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.590283][ T25] usb 3-1: SerialNumber: syz [ 233.606471][ T25] usb 3-1: config 0 descriptor?? [ 233.613618][ T7275] loop0: detected capacity change from 0 to 1024 [ 233.613646][ T5230] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.633564][ T25] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 233.652268][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 233.661613][ T5230] usb 6-1: Product: syz [ 233.666559][ T5230] usb 6-1: Manufacturer: syz [ 233.673992][ T7275] EXT4-fs: Ignoring removed oldalloc option [ 233.684093][ T5230] usb 6-1: SerialNumber: syz [ 233.705239][ T7275] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 233.711309][ T5230] usb 6-1: config 0 descriptor?? [ 233.757423][ T5230] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 233.792239][ T7275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.426399][ T5312] usb 6-1: USB disconnect, device number 15 [ 234.449814][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.475890][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 234.476943][ T5312] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 234.990895][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 234.998299][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.005452][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.012629][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.019947][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.027103][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.034281][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.041429][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.048571][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.055710][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 235.113037][ T5291] usb 3-1: USB disconnect, device number 12 [ 235.113103][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 235.130402][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.170568][ T5291] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 235.333108][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 235.342660][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.351403][ T25] usb 1-1: config 0 has no interface number 0 [ 235.357700][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.383492][ T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.410916][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.452879][ T25] usb 1-1: config 0 descriptor?? [ 235.492710][ T25] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 235.686751][ T25] usb 1-1: USB disconnect, device number 13 [ 235.703191][ T7295] loop3: detected capacity change from 0 to 32768 [ 235.731468][ T25] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 235.760371][ T7295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.645 (7295) [ 235.837565][ T7295] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.875237][ T7295] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 235.917302][ T7295] BTRFS info (device loop3): using free-space-tree [ 236.386418][ T5226] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.548434][ T7340] sp0: Synchronizing with TNC [ 236.658105][ T7344] netlink: 7163 bytes leftover after parsing attributes in process `syz.1.656'. [ 238.221619][ T7335] loop4: detected capacity change from 0 to 32768 [ 238.260361][ T7335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.655 (7335) [ 238.398850][ T7355] loop0: detected capacity change from 0 to 32768 [ 238.501140][ T7335] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.545960][ T7335] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 238.587118][ T7355] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.600359][ T7335] BTRFS info (device loop4): using free-space-tree [ 238.652656][ T7350] loop1: detected capacity change from 0 to 32768 [ 238.813732][ T7355] XFS (loop0): Ending clean mount [ 239.020598][ T5224] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.232921][ T5223] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.330466][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 239.550806][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.578934][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.634659][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.665408][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.696115][ T7361] loop5: detected capacity change from 0 to 40427 [ 239.732227][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.755364][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.763592][ T7361] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 239.782219][ T25] usb 3-1: Product: syz [ 239.786424][ T25] usb 3-1: Manufacturer: syz [ 239.792893][ T7361] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 239.830368][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 239.835634][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 239.842646][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 239.862044][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 239.868015][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 239.874926][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 239.910600][ T7361] F2FS-fs (loop5): Found nat_bits in checkpoint [ 240.001508][ T5289] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 240.010435][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 240.110801][ T25] usb 3-1: USB disconnect, device number 13 [ 240.156216][ T7361] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 240.179517][ T7361] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 240.201428][ T5289] usb 1-1: Using ep0 maxpacket: 32 [ 240.217737][ T5289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 240.242324][ T5289] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 240.257471][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.286742][ T5289] usb 1-1: Product: syz [ 240.299541][ T5289] usb 1-1: Manufacturer: syz [ 240.327310][ T5289] usb 1-1: SerialNumber: syz [ 240.365651][ T5289] usb 1-1: config 0 descriptor?? [ 240.391837][ T7399] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 240.419575][ T5289] hub 1-1:0.0: bad descriptor, ignoring hub [ 240.453159][ T5289] hub 1-1:0.0: probe with driver hub failed with error -5 [ 240.522779][ T5289] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 240.695274][ T5289] usb 1-1: USB disconnect, device number 14 [ 240.695323][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 241.270750][ T7442] Bluetooth: hci3: unsupported parameter 64512 [ 241.282598][ T7442] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 241.501297][ T7448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.687'. [ 241.531480][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 242.000645][ T7458] 9pnet_fd: Insufficient options for proto=fd [ 243.171046][ T7466] Bluetooth: hci3: unsupported parameter 65535 [ 243.177350][ T7466] Bluetooth: hci3: invalid length 1, exp 2 for type 16 [ 243.250773][ T7463] syzkaller1: entered promiscuous mode [ 243.271769][ T7463] syzkaller1: entered allmulticast mode [ 243.870324][ T5312] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 244.050345][ T5312] usb 5-1: Using ep0 maxpacket: 8 [ 244.058345][ T5312] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.066395][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.078680][ T5312] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.091805][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.104666][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.135012][ T5312] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.149057][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.178015][ T5312] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.319498][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.330790][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.345128][ T5312] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.353842][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.356983][ T7499] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 244.368282][ T5312] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.388504][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.414537][ T5312] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.457601][ T5312] usb 5-1: string descriptor 0 read error: -22 [ 244.477780][ T5312] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 244.494068][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.717906][ T5312] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 246.582711][ T7512] 9pnet_fd: Insufficient options for proto=fd [ 247.220299][ T5230] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 247.275543][ T25] usb 5-1: USB disconnect, device number 8 [ 247.499586][ T29] audit: type=1326 audit(1724859357.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.5.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93d4579ef9 code=0x0 [ 247.566878][ T7523] loop3: detected capacity change from 0 to 256 [ 247.586863][ T7523] exfat: Deprecated parameter 'namecase' [ 247.598431][ T7523] exfat: Deprecated parameter 'utf8' [ 247.647038][ T7523] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 247.659285][ T5230] usb 4-1: device not accepting address 18, error -71 [ 247.670442][ T7526] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 247.717449][ T29] audit: type=1800 audit(1724859357.323:12): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.711" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 248.941316][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.717'. [ 249.049687][ T7519] loop0: detected capacity change from 0 to 40427 [ 249.071691][ T7519] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 249.280376][ T7519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 249.337530][ T7539] loop4: detected capacity change from 0 to 4096 [ 249.362225][ T7519] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.378410][ T7545] loop2: detected capacity change from 0 to 2048 [ 249.415987][ T7514] loop1: detected capacity change from 0 to 32768 [ 249.485031][ T7514] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 249.507610][ T7545] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 249.544639][ T7514] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 249.572550][ T7545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.597521][ T7539] Process accounting resumed [ 249.601888][ T7514] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 249.617432][ T7519] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 249.627160][ T7553] loop3: detected capacity change from 0 to 512 [ 249.633965][ T5312] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 249.641911][ T5312] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 249.648104][ T7519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 249.751250][ T5312] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms [ 249.774929][ T5312] gfs2: fsid=syz:syz.0: jid=0: Done [ 249.783577][ T7553] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 249.793973][ T7514] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 249.830606][ T7553] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 250.013002][ T7553] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.719: bg 0: block 18: invalid block bitmap [ 250.051308][ T7553] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 250.089801][ T7553] EXT4-fs (loop3): 1 truncate cleaned up [ 250.101894][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.136646][ T7553] ext2 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.180108][ T7566] loop5: detected capacity change from 0 to 764 [ 250.331599][ T7553] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.719: lblock 0 mapped to illegal pblock 3 (length 1) [ 250.394704][ T7553] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.719: lblock 0 mapped to illegal pblock 3 (length 1) [ 250.466792][ T7570] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.719: lblock 0 mapped to illegal pblock 3 (length 1) [ 250.558737][ T7570] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.719: lblock 0 mapped to illegal pblock 3 (length 1) [ 250.619734][ T7570] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.719: lblock 0 mapped to illegal pblock 3 (length 1) [ 250.720178][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.777719][ T7571] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.719: lblock 0 mapped to illegal pblock 3 (length 1) [ 250.836254][ T5312] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 251.281972][ T5226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.369813][ T5312] usb 6-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 251.389197][ T5312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.439025][ T5312] usb 6-1: config 0 descriptor?? [ 251.651133][ T7561] loop2: detected capacity change from 0 to 32768 [ 251.688079][ T7561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.721 (7561) [ 251.762049][ T7561] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.800441][ T7561] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 251.837578][ T7561] BTRFS info (device loop2): using free-space-tree [ 252.007286][ T7599] 9pnet_fd: Insufficient options for proto=fd [ 252.044583][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.127508][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.187404][ T5242] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 252.197673][ T7599] rock: directory entry would overflow storage [ 252.209883][ T7599] rock: sig=0x4f50, size=4, remaining=3 [ 252.223485][ T7602] loop0: detected capacity change from 0 to 2048 [ 252.228069][ T7574] loop4: detected capacity change from 0 to 32768 [ 252.258813][ T7599] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 252.279263][ T29] audit: type=1800 audit(1724859361.883:13): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.721" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 252.303466][ T7574] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.727 (7574) [ 252.338202][ T7602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.352272][ T7602] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.393094][ T7574] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 252.412722][ T7574] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 252.437010][ T7574] BTRFS info (device loop4): using free-space-tree [ 252.493497][ T7561] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 252.607474][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.625993][ T5227] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.728415][ T7627] loop1: detected capacity change from 0 to 512 [ 252.759339][ T5223] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 252.809758][ T7627] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 252.851452][ T7627] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 252.865769][ T7627] System zones: 0-1, 15-15, 18-18, 34-34 [ 252.874946][ T7627] EXT4-fs (loop1): orphan cleanup on readonly fs [ 252.881495][ T7627] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 252.900325][ T7627] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 253.120558][ T7627] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 253.162601][ T7627] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.733: bad orphan inode 16 [ 253.196470][ T7627] ext4_test_bit(bit=15, block=18) = 1 [ 253.206385][ T7627] is_bad_inode(inode)=0 [ 253.240285][ T7627] NEXT_ORPHAN(inode)=0 [ 253.246015][ T7627] max_ino=32 [ 254.219566][ T7627] i_nlink=2 [ 254.240381][ T5289] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.251577][ T7627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.428992][ T5312] usb 6-1: USB disconnect, device number 16 [ 254.501718][ T5289] usb 3-1: Using ep0 maxpacket: 32 [ 254.560367][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.624701][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.702715][ T5289] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.770268][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.789835][ T7644] loop5: detected capacity change from 0 to 256 [ 254.838560][ T5289] usb 3-1: config 0 descriptor?? [ 254.875739][ T5289] hub 3-1:0.0: USB hub found [ 255.112474][ T5289] hub 3-1:0.0: 1 port detected [ 255.169697][ T7644] FAT-fs (loop5): Directory bread(block 64) failed [ 255.959200][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965775][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.992586][ T7644] FAT-fs (loop5): Directory bread(block 65) failed [ 256.040739][ T7644] FAT-fs (loop5): Directory bread(block 66) failed [ 256.047381][ T7644] FAT-fs (loop5): Directory bread(block 67) failed [ 256.113726][ T7644] FAT-fs (loop5): Directory bread(block 68) failed [ 256.132404][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.168349][ T7644] FAT-fs (loop5): Directory bread(block 69) failed [ 256.209944][ T7644] FAT-fs (loop5): Directory bread(block 70) failed [ 256.222431][ T7656] loop4: detected capacity change from 0 to 512 [ 256.254348][ T7644] FAT-fs (loop5): Directory bread(block 71) failed [ 256.270916][ T7644] FAT-fs (loop5): Directory bread(block 72) failed [ 256.279047][ T7656] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 256.311762][ T7644] FAT-fs (loop5): Directory bread(block 73) failed [ 256.339315][ T7656] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 256.394073][ T5289] hub 3-1:0.0: activate --> -90 [ 256.435218][ T7656] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.740: bg 0: block 18: invalid block bitmap [ 256.580247][ T7656] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 256.595284][ T7656] EXT4-fs (loop4): 1 truncate cleaned up [ 256.612523][ T5291] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 256.625872][ T7656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.647810][ T7656] ext2 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.960883][ T8] usb 3-1: USB disconnect, device number 14 [ 256.967521][ T7656] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.740: lblock 0 mapped to illegal pblock 3 (length 1) [ 257.144337][ T5291] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.482410][ T5291] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.780290][ T5289] usb 3-1-port1: config error [ 257.899944][ T5291] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.960302][ T7656] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.740: lblock 0 mapped to illegal pblock 3 (length 1) [ 257.992051][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.010099][ T5291] usb 1-1: can't set config #27, error -71 [ 258.018605][ T1049] kworker/u8:5: attempt to access beyond end of device [ 258.018605][ T1049] loop5: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 258.047625][ T5291] usb 1-1: USB disconnect, device number 15 [ 258.094975][ T7666] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.740: lblock 0 mapped to illegal pblock 3 (length 1) [ 258.183184][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 258.197472][ T7667] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.740: lblock 0 mapped to illegal pblock 3 (length 1) [ 258.218512][ T7662] loop3: detected capacity change from 0 to 4096 [ 258.233793][ T7671] loop2: detected capacity change from 0 to 64 [ 258.250566][ T7656] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.740: lblock 0 mapped to illegal pblock 3 (length 1) [ 258.265818][ T7662] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 258.310668][ T7666] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.740: lblock 0 mapped to illegal pblock 3 (length 1) [ 258.458494][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.277979][ T7693] syzkaller1: entered promiscuous mode [ 259.287574][ T7693] syzkaller1: entered allmulticast mode [ 259.865467][ T7703] netlink: 'syz.5.754': attribute type 1 has an invalid length. [ 259.909718][ T7703] netlink: 'syz.5.754': attribute type 4 has an invalid length. [ 260.230551][ T7703] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.754'. [ 260.924073][ T7714] loop2: detected capacity change from 0 to 512 [ 260.967521][ T7714] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 261.039087][ T7714] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 261.058737][ T7721] loop1: detected capacity change from 0 to 8 [ 261.092706][ T7721] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 261.123339][ T7720] loop4: detected capacity change from 0 to 1024 [ 261.161287][ T7714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.761: bg 0: block 18: invalid block bitmap [ 261.260279][ T5291] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 261.268159][ T7714] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 261.280963][ T5289] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 261.340399][ T7714] EXT4-fs (loop2): 1 truncate cleaned up [ 261.347578][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.380346][ T7714] ext2 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.513591][ T5289] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 261.530285][ T5291] usb 6-1: Using ep0 maxpacket: 32 [ 261.536631][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.549581][ T5291] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.562055][ T7714] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.761: lblock 0 mapped to illegal pblock 3 (length 1) [ 261.608133][ T5291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 261.655601][ T5289] usb 4-1: config 0 descriptor?? [ 261.660593][ T5291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.660663][ T5291] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.660694][ T5291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.663273][ T5291] usb 6-1: config 0 descriptor?? [ 261.687314][ T5289] usb 4-1: selecting invalid altsetting 1 [ 261.760469][ T7714] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.761: lblock 0 mapped to illegal pblock 3 (length 1) [ 261.775498][ T11] hfsplus: b-tree write err: -5, ino 4 [ 261.793502][ T7716] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 261.824318][ T7723] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.761: lblock 0 mapped to illegal pblock 3 (length 1) [ 261.853125][ T5289] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 261.881881][ T5291] hub 6-1:0.0: USB hub found [ 261.891814][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.034972][ T7723] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.761: lblock 0 mapped to illegal pblock 3 (length 1) [ 262.084460][ T7723] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.761: lblock 0 mapped to illegal pblock 3 (length 1) [ 262.576879][ T7725] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.761: lblock 0 mapped to illegal pblock 3 (length 1) [ 262.595073][ T7724] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.761: lblock 0 mapped to illegal pblock 3 (length 1) [ 262.701948][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.724079][ T5291] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 262.771487][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.794219][ T7728] loop4: detected capacity change from 0 to 1024 [ 263.264733][ T5291] hid-generic 0003:046D:C314.000A: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.5-1/input0 [ 264.320894][ T5291] usb 6-1: USB disconnect, device number 17 [ 264.398213][ T58] usb 4-1: USB disconnect, device number 20 [ 264.495299][ T1049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.817904][ T7738] loop2: detected capacity change from 0 to 512 [ 264.865476][ T7738] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 264.921047][ T7738] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 264.963997][ T7738] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.768: bg 0: block 18: invalid block bitmap [ 265.002986][ T7738] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 265.064948][ T1049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.098051][ T7738] EXT4-fs (loop2): 1 truncate cleaned up [ 265.144700][ T7738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.186595][ T7738] ext2 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.308433][ T7738] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.768: lblock 0 mapped to illegal pblock 3 (length 1) [ 265.338546][ T7738] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.768: lblock 0 mapped to illegal pblock 3 (length 1) [ 265.361267][ T7738] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.768: lblock 0 mapped to illegal pblock 3 (length 1) [ 265.761725][ T7754] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.768: lblock 0 mapped to illegal pblock 3 (length 1) [ 266.181391][ T7756] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.768: lblock 0 mapped to illegal pblock 3 (length 1) [ 266.195941][ T7755] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.768: lblock 0 mapped to illegal pblock 3 (length 1) [ 266.222677][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.233145][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.300548][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.343165][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.361626][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.374108][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 266.375511][ T1049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.394818][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.599369][ T7764] loop5: detected capacity change from 0 to 16 [ 266.717108][ T7764] erofs: (device loop5): mounted with root inode @ nid 36. [ 266.797135][ T1049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.528147][ T1049] bridge_slave_1: left allmulticast mode [ 267.550422][ T1049] bridge_slave_1: left promiscuous mode [ 267.577161][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.470560][ T54] Bluetooth: hci3: command tx timeout [ 268.880322][ T1049] bridge_slave_0: left allmulticast mode [ 268.910232][ T1049] bridge_slave_0: left promiscuous mode [ 268.958702][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.156289][ T7792] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 269.241723][ T7768] loop3: detected capacity change from 0 to 32768 [ 269.297343][ T7768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.772 (7768) [ 269.314895][ T7796] loop0: detected capacity change from 0 to 512 [ 269.388329][ T7796] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 269.390213][ T7768] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.420024][ T7796] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 269.455273][ T7768] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 269.510251][ T935] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 269.518265][ T7796] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.784: bg 0: block 18: invalid block bitmap [ 269.518983][ T7768] BTRFS info (device loop3): using free-space-tree [ 269.584466][ T7796] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 269.614517][ T7796] EXT4-fs (loop0): 1 truncate cleaned up [ 269.623244][ T7796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.636111][ T7768] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 269.637009][ T7796] ext2 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.647749][ T7768] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 269.687039][ T7768] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 269.700682][ T935] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 269.719516][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.758296][ T7796] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.784: lblock 0 mapped to illegal pblock 3 (length 1) [ 269.771920][ T7768] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 269.807389][ T935] usb 3-1: config 0 descriptor?? [ 269.830960][ T7811] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.784: lblock 0 mapped to illegal pblock 3 (length 1) [ 269.874379][ T935] usb 3-1: selecting invalid altsetting 1 [ 269.882503][ T7768] BTRFS error (device loop3): open_ctree failed [ 269.959764][ T935] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 269.970469][ T7796] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.784: lblock 0 mapped to illegal pblock 3 (length 1) [ 270.271031][ T7811] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.784: lblock 0 mapped to illegal pblock 3 (length 1) [ 270.379863][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.427623][ T7813] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.784: lblock 0 mapped to illegal pblock 3 (length 1) [ 270.467467][ T7814] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.784: lblock 0 mapped to illegal pblock 3 (length 1) [ 270.518389][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.542259][ T54] Bluetooth: hci3: command tx timeout [ 270.852992][ T7793] loop5: detected capacity change from 0 to 32768 [ 271.166541][ T7793] find_entry called with index >= next_index [ 271.243638][ T7793] find_entry called with index >= next_index [ 271.278961][ T7793] find_entry called with index >= next_index [ 271.303925][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.320346][ T7793] find_entry called with index >= next_index [ 271.332710][ T7793] find_entry called with index >= next_index [ 271.419457][ T7818] loop3: detected capacity change from 0 to 256 [ 271.439167][ T7818] vfat: Unknown parameter 'nnonumtail' [ 271.522251][ T7818] sctp: [Deprecated]: syz.3.785 (pid 7818) Use of int in maxseg socket option. [ 271.522251][ T7818] Use struct sctp_assoc_value instead [ 271.958515][ T1049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.999394][ T1049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.034663][ T1049] bond0 (unregistering): Released all slaves [ 272.081391][ T5289] usb 3-1: USB disconnect, device number 15 [ 272.188558][ T7831] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 272.239198][ T7822] batadv0: entered promiscuous mode [ 272.288270][ T7822] macsec1: entered promiscuous mode [ 272.309825][ T7822] batadv0: left promiscuous mode [ 272.500546][ T5230] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 272.571937][ T7837] loop0: detected capacity change from 0 to 512 [ 272.579140][ T7837] EXT4-fs: Ignoring removed orlov option [ 272.620615][ T54] Bluetooth: hci3: command tx timeout [ 272.624933][ T7837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 272.706779][ T7837] EXT4-fs (loop0): 1 truncate cleaned up [ 272.717093][ T5230] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 272.735835][ T5230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.746331][ T7837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.773613][ T5230] usb 6-1: config 0 descriptor?? [ 272.793885][ T5230] usb 6-1: selecting invalid altsetting 1 [ 272.826338][ T7759] chnl_net:caif_netlink_parms(): no params data found [ 272.865155][ T7828] loop3: detected capacity change from 0 to 40427 [ 272.883865][ T5230] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 272.899423][ T7828] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 272.926945][ T7828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 272.949397][ T7828] F2FS-fs (loop3): invalid crc value [ 272.962227][ T1049] hsr_slave_0: left promiscuous mode [ 272.971905][ T1049] hsr_slave_1: left promiscuous mode [ 272.979899][ T7828] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.988350][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.006861][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.026002][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.036228][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.053970][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.067334][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.079086][ T5291] usb 6-1: USB disconnect, device number 18 [ 273.111269][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.177376][ T1049] veth1_macvtap: left promiscuous mode [ 273.197743][ T7828] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 273.206744][ T1049] veth0_macvtap: left promiscuous mode [ 273.212536][ T7828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.220544][ T1049] veth1_vlan: left promiscuous mode [ 273.226447][ T1049] veth0_vlan: left promiscuous mode [ 273.270993][ T58] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 273.317839][ T7828] syz.3.789: attempt to access beyond end of device [ 273.317839][ T7828] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 273.373602][ T7856] syz.3.789: attempt to access beyond end of device [ 273.373602][ T7856] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 273.490696][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 273.498670][ T58] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.517114][ T58] usb 3-1: config 0 has no interface number 0 [ 273.548997][ T58] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.608607][ T58] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.637725][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.653942][ T2506] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 273.669935][ T58] usb 3-1: config 0 descriptor?? [ 273.686319][ T2506] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 273.716659][ T58] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 274.155258][ T5291] usb 3-1: USB disconnect, device number 16 [ 274.169493][ T5291] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 274.368735][ T7867] loop4: detected capacity change from 0 to 512 [ 274.464611][ T7867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.488916][ T7873] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 274.501104][ T7867] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.635909][ T29] audit: type=1800 audit(1724859384.243:14): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.800" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 274.679652][ T7867] EXT4-fs (loop4): shut down requested (2) [ 274.701086][ T54] Bluetooth: hci3: command tx timeout [ 274.853877][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.879016][ T5230] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 275.059795][ T7877] loop2: detected capacity change from 0 to 256 [ 275.101394][ T7877] exfat: Unknown parameter 'er…)>rors' [ 275.105997][ T5230] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 275.157208][ T5230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.195200][ T5230] usb 1-1: config 0 descriptor?? [ 275.229404][ T5230] usb 1-1: selecting invalid altsetting 1 [ 275.347018][ T5230] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 275.451984][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.478653][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.951814][ T1049] team0 (unregistering): Port device team_slave_1 removed [ 276.260271][ T1049] team0 (unregistering): Port device team_slave_0 removed [ 277.461582][ T5230] usb 1-1: USB disconnect, device number 16 [ 277.626326][ T7896] loop5: detected capacity change from 0 to 512 [ 277.633673][ T7896] EXT4-fs: Ignoring removed bh option [ 277.639223][ T7894] loop0: detected capacity change from 0 to 4096 [ 277.653509][ T7896] EXT4-fs error (device loop5): __ext4_iget:4985: inode #15: block 1803188595: comm syz.5.807: invalid block [ 277.672888][ T7896] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.807: couldn't read orphan inode 15 (err -117) [ 277.695960][ T7896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.704765][ T7894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.761455][ T7896] EXT4-fs (loop5): shut down requested (0) [ 278.024613][ T5229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.109706][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.217685][ T7906] loop5: detected capacity change from 0 to 1024 [ 278.613951][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.656925][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.673975][ T7759] bridge_slave_0: entered allmulticast mode [ 278.711874][ T7759] bridge_slave_0: entered promiscuous mode [ 278.793643][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.841055][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.863087][ T7759] bridge_slave_1: entered allmulticast mode [ 278.890354][ T7759] bridge_slave_1: entered promiscuous mode [ 279.103510][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.201037][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.431674][ T7759] team0: Port device team_slave_0 added [ 279.457194][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 279.494299][ T7759] team0: Port device team_slave_1 added [ 279.682233][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.689282][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.748774][ T7944] loop3: detected capacity change from 0 to 512 [ 279.758072][ T7944] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 279.766526][ T7759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.785760][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.786980][ T7949] loop2: detected capacity change from 0 to 64 [ 279.793871][ T7944] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 279.809081][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.835095][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.846486][ T7759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.861702][ T7943] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 279.872899][ T7944] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.821: bg 0: block 18: invalid block bitmap [ 279.907186][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.820'. [ 279.927606][ T7944] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 279.964334][ T7944] EXT4-fs (loop3): 1 truncate cleaned up [ 279.979557][ T7939] syzkaller1: entered promiscuous mode [ 279.990725][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.992023][ T7939] syzkaller1: entered allmulticast mode [ 280.038647][ T7944] ext2 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.117569][ T7929] loop0: detected capacity change from 0 to 32768 [ 280.141677][ T7944] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.821: lblock 0 mapped to illegal pblock 3 (length 1) [ 280.165587][ T7929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.816 (7929) [ 280.226379][ T7944] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.821: lblock 0 mapped to illegal pblock 3 (length 1) [ 280.267505][ T7929] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.290599][ T7954] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.821: lblock 0 mapped to illegal pblock 3 (length 1) [ 280.315529][ T7759] hsr_slave_0: entered promiscuous mode [ 280.322308][ T7929] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 280.337160][ T7929] BTRFS info (device loop0): using free-space-tree [ 280.345528][ T7759] hsr_slave_1: entered promiscuous mode [ 280.359168][ T7759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.383390][ T7759] Cannot create hsr debugfs directory [ 280.527286][ T7954] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.821: lblock 0 mapped to illegal pblock 3 (length 1) [ 280.640743][ T7964] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.821: lblock 0 mapped to illegal pblock 3 (length 1) [ 280.979123][ T7965] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.821: lblock 0 mapped to illegal pblock 3 (length 1) [ 281.035280][ T7954] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.821: lblock 0 mapped to illegal pblock 3 (length 1) [ 281.684911][ T29] audit: type=1800 audit(1724859391.293:15): pid=7929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.816" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 281.685120][ T5226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.938358][ T7983] loop4: detected capacity change from 0 to 128 [ 281.977397][ T7983] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 282.073935][ T7983] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.089177][ T7983] ext2 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.121140][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.267114][ T5224] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.477765][ T5223] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.073672][ T7995] vlan2: entered promiscuous mode [ 283.098361][ T7995] vlan2: entered allmulticast mode [ 283.121943][ T7995] xfrm0: entered allmulticast mode [ 283.140400][ T7995] xfrm0: entered promiscuous mode [ 283.183449][ T7980] loop5: detected capacity change from 0 to 32768 [ 283.206907][ T7980] XFS: ikeep mount option is deprecated. [ 283.230344][ T7980] XFS: noikeep mount option is deprecated. [ 283.252962][ T7995] team0: Port device vlan2 added [ 283.323124][ T7980] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 283.332125][ T58] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 283.349778][ T8006] loop2: detected capacity change from 0 to 512 [ 283.398949][ T8006] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.445796][ T8013] team0: entered promiscuous mode [ 283.450975][ T8006] EXT4-fs (loop2): unable to read superblock [ 283.457532][ T8013] team_slave_0: entered promiscuous mode [ 283.464066][ T8013] team_slave_1: entered promiscuous mode [ 283.475248][ T8013] team_slave_0: left promiscuous mode [ 283.485972][ T7980] XFS (loop5): Ending clean mount [ 283.720490][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 283.722464][ T8013] team0: Port device team_slave_0 removed [ 283.879089][ T7980] XFS (loop5): Quotacheck needed: Please wait. [ 284.597474][ T7980] XFS (loop5): Quotacheck: Done. [ 284.873317][ T58] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 284.895501][ T5229] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 284.917639][ T8010] team0: left promiscuous mode [ 284.930232][ T8010] team_slave_1: left promiscuous mode [ 284.944198][ T58] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 284.969784][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.977997][ T58] usb 4-1: Product: syz [ 284.982423][ T58] usb 4-1: Manufacturer: syz [ 284.990235][ T58] usb 4-1: SerialNumber: syz [ 285.001118][ T58] usb 4-1: config 0 descriptor?? [ 285.018703][ T58] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 285.046643][ T58] usb 4-1: Detected FT232R [ 285.289296][ T7759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.296220][ T58] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 285.310381][ T8022] loop4: detected capacity change from 0 to 512 [ 285.321713][ T8024] loop2: detected capacity change from 0 to 64 [ 285.333477][ T7759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.351542][ T8022] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 285.374636][ T7759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.412503][ T8022] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 285.439735][ T7759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.508844][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.837'. [ 285.520338][ T8022] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.839: bg 0: block 18: invalid block bitmap [ 285.543311][ T58] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 285.573282][ T8022] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 285.602578][ T8022] EXT4-fs (loop4): 1 truncate cleaned up [ 285.609972][ T8022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.661290][ T8022] ext2 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.703526][ T8022] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 285.767026][ T8022] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 285.790267][ T58] usb 4-1: USB disconnect, device number 21 [ 285.817262][ T8022] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 286.117039][ T8033] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 286.189390][ T8034] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 286.292718][ T8033] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 286.594519][ T8034] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 286.645464][ T58] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 286.691491][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.702933][ T58] ftdi_sio 4-1:0.0: device disconnected [ 287.425618][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.559406][ T2514] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.566905][ T2514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.073064][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.080323][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.095526][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.344270][ T7759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.683568][ T8053] loop2: detected capacity change from 0 to 4096 [ 288.696234][ T8053] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 289.752566][ T8059] loop4: detected capacity change from 0 to 256 [ 289.812877][ T8059] exfat: Deprecated parameter 'utf8' [ 289.858988][ T8059] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 289.950656][ T8053] ntfs3: loop2: ino=1b, "file0" directory corrupted [ 290.353411][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.458031][ T8070] loop0: detected capacity change from 0 to 2048 [ 290.508225][ T8070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.638414][ T8080] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 290.654447][ T7759] veth0_vlan: entered promiscuous mode [ 290.674903][ T8080] netlink: 9336 bytes leftover after parsing attributes in process `syz.3.854'. [ 290.674943][ T8080] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 290.692868][ T7759] veth1_vlan: entered promiscuous mode [ 290.868152][ T7759] veth0_macvtap: entered promiscuous mode [ 290.898347][ T7759] veth1_macvtap: entered promiscuous mode [ 290.915432][ T8086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.015591][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.049773][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.051289][ T8090] loop3: detected capacity change from 0 to 512 [ 291.081991][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.122859][ T8090] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 291.126979][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.180413][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.183394][ T8090] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 291.221338][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.281704][ T8090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.857: bg 0: block 18: invalid block bitmap [ 291.288575][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.339958][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.353159][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.400173][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.432672][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.444535][ T8090] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 291.675977][ T8090] EXT4-fs (loop3): 1 truncate cleaned up [ 291.696321][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.856460][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.866825][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.877639][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.887871][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.898676][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.956559][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.973718][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.053227][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.072506][ T8090] ext2 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.144678][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.412825][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.598671][ T8090] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.857: lblock 0 mapped to illegal pblock 3 (length 1) [ 292.632392][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.665185][ T8111] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.857: lblock 0 mapped to illegal pblock 3 (length 1) [ 292.698877][ T7759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.723903][ T8090] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.857: lblock 0 mapped to illegal pblock 3 (length 1) [ 292.745452][ T7759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.776683][ T7759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.788912][ T8116] syz.4.862[8116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.800499][ T8116] syz.4.862[8116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.815386][ T7759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.935300][ T8111] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.857: lblock 0 mapped to illegal pblock 3 (length 1) [ 292.972492][ T8111] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.857: lblock 0 mapped to illegal pblock 3 (length 1) [ 293.350325][ T8121] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.857: lblock 0 mapped to illegal pblock 3 (length 1) [ 293.366326][ T8119] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.857: lblock 0 mapped to illegal pblock 3 (length 1) [ 293.592008][ T5226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.012566][ T2506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.020853][ T2506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.268435][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.336250][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.470248][ T5292] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 295.626213][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 295.680301][ T5292] usb 6-1: Using ep0 maxpacket: 8 [ 295.701375][ T5292] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.730425][ T5292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.738483][ T5292] usb 6-1: Product: syz [ 295.760198][ T5292] usb 6-1: Manufacturer: syz [ 295.770649][ T5292] usb 6-1: SerialNumber: syz [ 296.011769][ T5292] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 296.254403][ T5292] usb 6-1: USB disconnect, device number 19 [ 296.296958][ T5292] usblp0: removed [ 296.332548][ T8159] syzkaller1: entered promiscuous mode [ 296.348687][ T8159] syzkaller1: entered allmulticast mode [ 296.385215][ T8159] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 296.890588][ T8167] loop4: detected capacity change from 0 to 512 [ 296.917250][ T8167] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 296.942576][ T8167] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 296.982043][ T8167] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.876: bg 0: block 18: invalid block bitmap [ 297.074269][ T8167] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 297.128684][ T8167] EXT4-fs (loop4): 1 truncate cleaned up [ 297.220088][ T8178] loop0: detected capacity change from 0 to 4096 [ 297.222330][ T8167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.264200][ T8178] NILFS (loop0): invalid segment: Checksum error in segment payload [ 297.297404][ T8178] NILFS (loop0): trying rollback from an earlier position [ 297.431341][ T8167] ext2 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.508340][ T8167] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.876: lblock 0 mapped to illegal pblock 3 (length 1) [ 297.511847][ T8178] NILFS (loop0): recovery complete [ 297.577457][ T8183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.640359][ T8167] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.876: lblock 0 mapped to illegal pblock 3 (length 1) [ 297.808980][ T8182] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.876: lblock 0 mapped to illegal pblock 3 (length 1) [ 297.894500][ T8167] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.876: lblock 0 mapped to illegal pblock 3 (length 1) [ 297.909501][ T5289] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 297.924951][ T8182] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.876: lblock 0 mapped to illegal pblock 3 (length 1) [ 297.979724][ T8167] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.876: lblock 0 mapped to illegal pblock 3 (length 1) [ 298.333825][ T5223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.381118][ T5289] usb 6-1: Using ep0 maxpacket: 32 [ 299.131647][ T5289] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 299.172236][ T5289] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 299.236438][ T5289] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 299.290598][ T5289] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 299.368832][ T5289] usb 6-1: config 0 interface 0 has no altsetting 0 [ 299.442241][ T5289] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 299.488118][ T5289] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 299.527477][ T5289] usb 6-1: Product: syz [ 299.550568][ T5289] usb 6-1: Manufacturer: syz [ 299.573994][ T5289] usb 6-1: SerialNumber: syz [ 299.623539][ T5289] usb 6-1: config 0 descriptor?? [ 299.629184][ T8180] loop1: detected capacity change from 0 to 32768 [ 299.636739][ T8180] XFS: attr2 mount option is deprecated. [ 299.648473][ T5289] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 299.712737][ T8180] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 299.719995][ T5289] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 299.862570][ T5230] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 299.918108][ T8180] XFS (loop1): Ending clean mount [ 299.943554][ T5289] usb 6-1: USB disconnect, device number 20 [ 299.957022][ T5289] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 299.974480][ T8180] XFS (loop1): Quotacheck needed: Please wait. [ 300.071175][ T5230] usb 3-1: Using ep0 maxpacket: 32 [ 300.095789][ T5230] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 300.129526][ T5230] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 300.150024][ T8180] XFS (loop1): Quotacheck: Done. [ 300.183139][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 300.425615][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.443100][ T7759] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 301.483853][ T5230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.494309][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 301.507936][ T5230] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 301.518645][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.549182][ T5230] usb 3-1: config 0 descriptor?? [ 301.618624][ T8233] loop4: detected capacity change from 0 to 64 [ 301.810911][ T29] audit: type=1800 audit(1724859411.413:16): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.893" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 301.869535][ T5230] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 302.222228][ T8245] loop0: detected capacity change from 0 to 128 [ 302.293133][ T5230] usb 3-1: USB disconnect, device number 17 [ 302.302382][ T8245] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.337361][ T5230] usblp0: removed [ 302.369828][ T8245] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.446177][ T8245] syz.0.897 (pid 8245) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 302.547069][ T5224] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.596760][ T8253] loop4: detected capacity change from 0 to 2048 [ 302.606385][ T8253] udf: Unknown parameter 'ÿ' [ 303.777702][ T8266] loop5: detected capacity change from 0 to 128 [ 303.856908][ T8266] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.950290][ T8266] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.420645][ T8266] loop5: detected capacity change from 128 to 11 [ 304.469122][ T8280] EXT4-fs warning (device loop5): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 19 [ 304.863938][ T5229] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5810: Out of memory [ 304.960572][ T5229] EXT4-fs error (device loop5): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 305.218149][ T8293] netlink: 'syz.0.911': attribute type 5 has an invalid length. [ 305.438813][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 305.517648][ T5229] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.543691][ T8303] netlink: 6 bytes leftover after parsing attributes in process `syz.3.917'. [ 305.620051][ T8298] loop1: detected capacity change from 0 to 8192 [ 305.655922][ T8298] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.871025][ T2464] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.129250][ T2464] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.200929][ T8313] bridge0: port 3(batadv0) entered blocking state [ 306.220497][ T8313] bridge0: port 3(batadv0) entered disabled state [ 306.253012][ T8313] batadv0: entered allmulticast mode [ 306.278117][ T8313] batadv0: entered promiscuous mode [ 306.314298][ T8313] bridge0: port 3(batadv0) entered blocking state [ 306.321284][ T8313] bridge0: port 3(batadv0) entered forwarding state [ 306.418665][ T2464] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.552373][ T8304] loop0: detected capacity change from 0 to 32768 [ 306.577041][ T8304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.916 (8304) [ 306.586975][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 306.599655][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 306.663319][ T8304] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.714155][ T8304] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 306.762663][ T8304] BTRFS info (device loop0): using free-space-tree [ 306.782244][ T2464] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.978881][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.994103][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.007325][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.018741][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.030208][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.037745][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.099322][ T8341] loop2: detected capacity change from 0 to 1024 [ 307.283994][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.610489][ T5224] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.653996][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.668388][ T2464] bridge_slave_1: left allmulticast mode [ 307.702536][ T2464] bridge_slave_1: left promiscuous mode [ 307.714730][ T2464] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.839740][ T2464] bridge_slave_0: left allmulticast mode [ 307.864246][ T2464] bridge_slave_0: left promiscuous mode [ 307.890505][ T2464] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.919929][ T8364] loop2: detected capacity change from 0 to 1024 [ 308.443277][ T8373] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.929'. [ 308.563032][ T5241] Bluetooth: hci5: command 0x0406 tx timeout [ 308.698279][ T8364] Falling back ldisc for ptm0. [ 309.100811][ T5242] Bluetooth: hci4: command tx timeout [ 309.542834][ T2464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.565489][ T2464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.579335][ T2464] bond0 (unregistering): Released all slaves [ 309.835608][ T8384] loop2: detected capacity change from 0 to 128 [ 309.843921][ T2464] tipc: Left network mode [ 309.908326][ T8384] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.966459][ T8392] hsr0: entered promiscuous mode [ 309.992679][ T8384] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.021049][ T29] audit: type=1800 audit(1724859419.623:17): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.938" name="file0" dev="loop2" ino=12 res=0 errno=0 [ 310.046032][ T29] audit: type=1804 audit(1724859419.653:18): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.938" name="/newroot/159/file1/file0" dev="loop2" ino=12 res=1 errno=0 [ 310.113028][ T5230] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 310.268558][ T8394] netlink: 'syz.1.942': attribute type 3 has an invalid length. [ 310.340874][ T5230] usb 4-1: Using ep0 maxpacket: 8 [ 310.375073][ T5230] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.401329][ T5230] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.420882][ T5227] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.479498][ T5230] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.570595][ T5230] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.622094][ T5230] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.652599][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.843154][ T2464] hsr_slave_0: left promiscuous mode [ 310.902227][ T2464] hsr_slave_1: left promiscuous mode [ 310.928463][ T5230] usb 4-1: GET_CAPABILITIES returned 0 [ 310.945383][ T2464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.954834][ T5230] usbtmc 4-1:16.0: can't read capabilities [ 310.974891][ T2464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.005681][ T2464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.031865][ T2464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.360485][ T2464] veth1_macvtap: left allmulticast mode [ 311.371375][ T5242] Bluetooth: hci4: command tx timeout [ 311.396199][ T58] usb 4-1: USB disconnect, device number 22 [ 311.408994][ T2464] veth1_macvtap: left promiscuous mode [ 311.425549][ T2464] veth0_macvtap: left promiscuous mode [ 311.434817][ T2464] veth1_vlan: left promiscuous mode [ 311.442138][ T2464] veth0_vlan: left promiscuous mode [ 418.180112][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 418.187120][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8439/1:b..l [ 418.195815][ C0] rcu: (detected by 0, t=10502 jiffies, g=29805, q=391 ncpus=2) [ 418.203569][ C0] task:syz.1.956 state:R running task stack:24672 pid:8439 tgid:8439 ppid:7759 flags:0x00000004 [ 418.217507][ C0] Call Trace: [ 418.220810][ C0] [ 418.223804][ C0] __schedule+0x1800/0x4a60 [ 418.228384][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.234075][ C0] ? __pfx___schedule+0x10/0x10 [ 418.238984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.244654][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.250686][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 418.256026][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 418.261184][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 418.266948][ C0] ? mas_preallocate+0xfca/0x1730 [ 418.272018][ C0] ? __split_vma+0x2e5/0xc30 [ 418.276644][ C0] ? vma_modify+0x268/0x350 [ 418.281208][ C0] irqentry_exit+0x5e/0x90 [ 418.285660][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 418.291678][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 418.298486][ C0] Code: 44 0a 20 e9 b5 b0 5c 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 00 d7 03 00 65 8b 05 80 46 70 7e 25 00 01 ff 00 74 [ 418.318164][ C0] RSP: 0018:ffffc9000344f698 EFLAGS: 00000246 [ 418.324265][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88807cd21e00 [ 418.332260][ C0] RDX: ffff88807cd21e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 418.340260][ C0] RBP: ffffc9000344f890 R08: ffffffff8baccac4 R09: ffffffff8baccb75 [ 418.348256][ C0] R10: 0000000000000003 R11: ffff88807cd21e00 R12: 1ffff92000689ef7 [ 418.356254][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888022b4d8b8 [ 418.364266][ C0] ? mt_validate+0x4375/0x4aa0 [ 418.369063][ C0] ? mt_validate+0x42c4/0x4aa0 [ 418.373858][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.379524][ C0] mt_validate+0x42c4/0x4aa0 [ 418.384170][ C0] ? mt_validate+0x1a1/0x4aa0 [ 418.388879][ C0] ? __pfx_mt_validate+0x10/0x10 [ 418.393864][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.399535][ C0] ? mas_store_prealloc+0x2db/0x5f0 [ 418.404775][ C0] validate_mm+0xe7/0x530 [ 418.409154][ C0] ? __pfx_validate_mm+0x10/0x10 [ 418.414139][ C0] ? vma_complete+0xafd/0xb60 [ 418.418944][ C0] __split_vma+0xaca/0xc30 [ 418.423388][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.429151][ C0] ? __pfx___split_vma+0x10/0x10 [ 418.434237][ C0] vma_modify+0x268/0x350 [ 418.438623][ C0] mprotect_fixup+0x3ea/0xa90 [ 418.443356][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 418.448593][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.454270][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.459947][ C0] do_mprotect_pkey+0x908/0xe00 [ 418.464848][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 418.470292][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.476670][ C0] ? do_syscall_64+0x100/0x230 [ 418.481467][ C0] __x64_sys_mprotect+0x80/0x90 [ 418.486355][ C0] do_syscall_64+0xf3/0x230 [ 418.490888][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.496827][ C0] RIP: 0033:0x7f11d6779fb7 [ 418.501258][ C0] RSP: 002b:00007fff4abf7028 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 418.509700][ C0] RAX: ffffffffffffffda RBX: 00007f11d76146c0 RCX: 00007f11d6779fb7 [ 418.517693][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f11d75f5000 [ 418.525690][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 418.533694][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff4abf7180 [ 418.541689][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 418.549706][ C0] [ 418.552749][ C0] rcu: rcu_preempt kthread starved for 10538 jiffies! g29805 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 418.563977][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 418.573959][ C0] rcu: RCU grace-period kthread stack dump: [ 418.579855][ C0] task:rcu_preempt state:R running task stack:24976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 418.591617][ C0] Call Trace: [ 418.594906][ C0] [ 418.597853][ C0] __schedule+0x1800/0x4a60 [ 418.602409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.608082][ C0] ? __pfx___schedule+0x10/0x10 [ 418.612975][ C0] ? __pfx_lock_release+0x10/0x10 [ 418.618031][ C0] ? __asan_memset+0x23/0x50 [ 418.622654][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 418.628492][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.634852][ C0] ? schedule+0x90/0x320 [ 418.639126][ C0] schedule+0x14b/0x320 [ 418.643318][ C0] schedule_timeout+0x1be/0x310 [ 418.648200][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 418.653598][ C0] ? __pfx_process_timeout+0x10/0x10 [ 418.658918][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.664572][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 418.670154][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 418.675029][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 418.680261][ C0] ? rcu_gp_init+0x1256/0x1630 [ 418.685066][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 418.690207][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 418.696741][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 418.702056][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 418.707984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.713645][ C0] ? finish_swait+0xd4/0x1e0 [ 418.718265][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 418.722887][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.728112][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 418.734046][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.739714][ C0] ? __kthread_parkme+0x169/0x1d0 [ 418.744775][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.750001][ C0] kthread+0x2f2/0x390 [ 418.754108][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.759342][ C0] ? __pfx_kthread+0x10/0x10 [ 418.763973][ C0] ret_from_fork+0x4d/0x80 [ 418.768423][ C0] ? __pfx_kthread+0x10/0x10 [ 418.773053][ C0] ret_from_fork_asm+0x1a/0x30 [ 418.777879][ C0] [ 418.780910][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 418.787242][ C0] Sending NMI from CPU 0 to CPUs 1: [ 418.792465][ C1] NMI backtrace for cpu 1 [ 418.792479][ C1] CPU: 1 UID: 0 PID: 8429 Comm: syz.0.955 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 418.792504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 418.792518][ C1] RIP: 0010:unwind_get_return_address+0x4b/0xc0 [ 418.792560][ C1] Code: e8 03 42 0f b6 04 30 84 c0 75 72 8b 2b 31 ff 89 ee e8 a9 6a 52 00 85 ed 74 4a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 1b a9 b9 00 48 8b 3b e8 63 70 1e 00 89 c5 31 ff [ 418.792579][ C1] RSP: 0018:ffffc900034af718 EFLAGS: 00000046 [ 418.792598][ C1] RAX: 0000000000000002 RBX: ffffc900034af788 RCX: 0000000000040000 [ 418.792614][ C1] RDX: ffff88807c1c1e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 418.792629][ C1] RBP: 0000000000000001 R08: ffffffff814125c7 R09: ffffffff814140bf [ 418.792645][ C1] R10: 0000000000000003 R11: ffff88807c1c1e00 R12: ffff88807c1c1e00 [ 418.792661][ C1] R13: ffffffff817f2f00 R14: dffffc0000000000 R15: 1ffff92000695ef1 [ 418.792681][ C1] FS: 00007fc0de5ff6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 418.792701][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.792717][ C1] CR2: 00007f11d6915f8c CR3: 000000006853c000 CR4: 0000000000350ef0 [ 418.792735][ C1] Call Trace: [ 418.792743][ C1] [ 418.792752][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 418.792780][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 418.792816][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 418.792844][ C1] ? nmi_handle+0x2a/0x5a0 [ 418.792880][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 418.792910][ C1] ? nmi_handle+0x151/0x5a0 [ 418.792931][ C1] ? nmi_handle+0x2a/0x5a0 [ 418.792955][ C1] ? unwind_get_return_address+0x4b/0xc0 [ 418.792990][ C1] ? default_do_nmi+0x63/0x160 [ 418.793019][ C1] ? exc_nmi+0x123/0x1f0 [ 418.793047][ C1] ? end_repeat_nmi+0xf/0x53 [ 418.793082][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 418.793114][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 418.793148][ C1] ? unwind_get_return_address+0x37/0xc0 [ 418.793185][ C1] ? unwind_get_return_address+0x4b/0xc0 [ 418.793221][ C1] ? unwind_get_return_address+0x4b/0xc0 [ 418.793258][ C1] ? unwind_get_return_address+0x4b/0xc0 [ 418.793294][ C1] [ 418.793301][ C1] [ 418.793309][ C1] ? bpf_send_signal_common+0x2dd/0x430 [ 418.793341][ C1] arch_stack_walk+0x125/0x1b0 [ 418.793369][ C1] ? bpf_send_signal+0x19/0x30 [ 418.793409][ C1] stack_trace_save+0x118/0x1d0 [ 418.793437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.793470][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 418.793498][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.793528][ C1] ? mark_lock+0x9a/0x350 [ 418.793561][ C1] ? __might_fault+0xaa/0x120 [ 418.793596][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.793630][ C1] kasan_save_track+0x3f/0x80 [ 418.793660][ C1] ? kasan_save_track+0x3f/0x80 [ 418.793689][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 418.793721][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 418.793743][ C1] ? __sigqueue_alloc+0x42e/0x540 [ 418.793769][ C1] ? __send_signal_locked+0x22f/0xdc0 [ 418.793791][ C1] ? group_send_sig_info+0x292/0x310 [ 418.793812][ C1] ? bpf_send_signal_common+0x2dd/0x430 [ 418.793879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.793912][ C1] __kasan_slab_alloc+0x66/0x80 [ 418.793945][ C1] ? __sigqueue_alloc+0x42e/0x540 [ 418.793970][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 418.793998][ C1] __sigqueue_alloc+0x42e/0x540 [ 418.794029][ C1] __send_signal_locked+0x22f/0xdc0 [ 418.794052][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.794088][ C1] ? __lock_task_sighand+0x29/0x2d0 [ 418.794114][ C1] group_send_sig_info+0x292/0x310 [ 418.794140][ C1] ? __pfx_group_send_sig_info+0x10/0x10 [ 418.794165][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.794197][ C1] ? __pfx_signal_setup_done+0x10/0x10 [ 418.794229][ C1] bpf_send_signal_common+0x2dd/0x430 [ 418.794262][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 418.794294][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 418.794322][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.794360][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 418.794384][ C1] bpf_send_signal+0x19/0x30 [ 418.794420][ C1] bpf_prog_7ba5217f62dcd359+0x40/0x48 [ 418.794441][ C1] bpf_trace_run2+0x2ee/0x540 [ 418.794472][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 418.794497][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.794533][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.794566][ C1] ? do_syscall_64+0x100/0x230 [ 418.794592][ C1] trace_sys_enter+0x93/0xd0 [ 418.794612][ C1] syscall_trace_enter+0xf8/0x150 [ 418.794636][ C1] do_syscall_64+0xcc/0x230 [ 418.794659][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.794691][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.794718][ C1] RIP: 0033:0x7fc0deb15849 [ 418.794735][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 418.794753][ C1] RSP: 002b:00007fc0de5feb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 418.794774][ C1] RAX: ffffffffffffffda RBX: 00007fc0ded15f88 RCX: 00007fc0deb15849 [ 418.794791][ C1] RDX: 00007fc0de5feb40 RSI: 00007fc0de5fec70 RDI: 0000000000000011 [ 418.794807][ C1] RBP: 00007fc0ded15f80 R08: 0000000000000000 R09: 0000000000000000 [ 418.794821][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc0ded15f8c [ 418.794836][ C1] R13: 0000000000000000 R14: 00007ffdeafcd4f0 R15: 00007ffdeafcd5d8 [ 418.794866][ C1]