last executing test programs: 3m42.470885574s ago: executing program 3 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x30, 0x6, 0x0, @local, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x1, 0xe5, 0xbcfa}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @dev}]}}}}}}}}, 0x0) 3m42.246807594s ago: executing program 3 (id=212): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x30000010}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000040)={r2, r1}) 3m42.07062848s ago: executing program 3 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_FDB={0x4}]}, 0x28}}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 3m41.896042965s ago: executing program 3 (id=214): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000002c0)={0x7f, 0x1}, 0x0) 3m41.382838861s ago: executing program 3 (id=219): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x7d, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) 3m40.521735237s ago: executing program 3 (id=226): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 3m40.26801352s ago: executing program 32 (id=226): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 3m21.369449923s ago: executing program 0 (id=348): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002000006800128008000100736974005c00028006000e000b0000000600080031000000080002007f00000108000c008800000043000b00ff010000000000000000000000000001050009002900000014000b00fe88000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m20.309241138s ago: executing program 0 (id=351): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1, 0x19b, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1, 0x9}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bbb, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x1}}]}, 0xa0}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa00012, &(0x7f0000000000)=ANY=[], 0x5, 0x65c, &(0x7f00000000c0)="$eJzs3c1PHOcdB/DvLMsCrkRIYiduFakoltKqqDYvIi29xK6qlkNURemhZ2TjGHlNIiAViaqWvks99ZA/ID1w66lS75bSc3vLlWOkSr3kxI1qZmdhsRcChnhx8/lYs8/zzDPzzG9+Ozu7s2s0Ab6yFqfSfJgii1Nvbpbtne259s723Ejd3U5S1htJs1OkWE2KT5Kb6Uz5ejmzXr44ajsfrSy8/ennO591Ws16+uL1TmarnjKZZKguH9H682nGG+5UynFu9x/vNH7S3cMyYde6iYNB2+tVzdgadEjAU1Z03jcfM5FcSjJafw5IfXZoPN3ozp+zHAAAAF8Fz+1mN5sZH3QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cyp7/9f1FOjW59M0b3/fyvJrXrx1oDDPbOHgw4AAAAAAAAAAM7BN3ezm82Md9t7RfWb/6tV43L1+LW8n/UsZy3Xs5mlbGQja5lJMrG/1q875drMCdac7V0zSWtzaWNjbfbp7C8AAAAAAAAA/J/6bRYPfv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBGqrLolMt6ulytz6RRjPJaHf5reTfSVqDi/jUin4zHz79OAAAAOBMRp9gned2s5vNjHfbe0V1zf9Sdb08mvezmo2sZCPtLOdOfQ1dXvU3drbn2jvbcw/K6fFxb/33VGFUI+5/DdFvy1erJcZyNyvVnOu5XQVzJ41qzdLVbjz94/pNGVPxRu2Ekd2py3JjfznqW4SBmKgyMryfkek6tjIbzx+fiS98dprHbmkmjf1vfi5/CTm/VJfl/vzxYua8kSoTsz1H30vHZyL51j/+9vN77dX79+6uT12cXXpCjx4Tcz2ZePmZzkT32D9pYNNVJq7stxfz4/wsU5nMW1kbTX6RpWysLWev7l+qRy4fJ47P1M1Drbf2ayP9I2nVz0vnLHpkTFnpxJTlTOZHVW0pr1brjmclRd7NnSzn9erfbGbyvcxnPgs9z/CVI+Ou9q161TdO96q/9u26MpbkT3U5aJ231DKvz/fktfecO1H19c45yNIL539ubH6jrpTb+F1dXgyPZmKmJxMvHp+Jv1avjfX26v21e0vvHTH+1iPt1+qyPOL+cKHeJcrj5YWM1meSw0dH2ffi/lnmcL5a9S8unb7GY31Xqr6i6L5Sf3rkK7VVf4Z7fKTZqu/lvn1zVd/Vnr5Dn7fybtr7n4cAuMAufedSa+w/Y/8a+3js92P3xt4c/eHI90deaWX4n8M/aE4PvdZ4pfh7Ps6vDq7/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+wYf3l9rt5bX+lcbRXedbKeob+Ry3TPNkMQ+q0ryogV28Svcmgmce8ObA9uLWoHN4XpWhJP266qfoSW4uCjwTbmw8eO/G+gcffnflwdI7y+8srw7Pzy9ML8y/Pnfj7kp7ebrzOOgogS/DwZt+//7iQt1gEwAAAAAAAAAAAMjJ/pZmr/7/f905GyPJSf/AoFluYtD7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzbFqfSfJgiM9PXp8v2zvZcu5y69YMlm0kajaT4ZVJ8ktxMZ8pEz3DFG0ds56OVhbc//Xzns4OxmtXy5aB1eSLjfedu1VMmkwzV5RkcGu/2mccr9vewTNi1buJg0P4XAAD//1dq9eU=") 3m18.538686006s ago: executing program 0 (id=358): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000000000010000000c0002000c000000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 3m17.539409825s ago: executing program 0 (id=363): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x10fff9, 0x10fff9) 3m16.735793196s ago: executing program 0 (id=368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000200)="1268a3db5ba40fe82ecf3465af3b9884890941251ee0", 0x16}, {&(0x7f0000001e80)="764ed94d526fcf4f632778c60aa50a21e7fdb60791cb5cc1599eecd2e141278b6cd46986faad9f9d7884a1ee48d1f54d1fd0ea68eb", 0x35}, {&(0x7f0000002140)="2a6a98c76e119c6145b5003076e2820c70f80924e1610f46a8c232a0f421f8dfb88d01318446c33a8e908d54cfdc039a0a4c7456dfb64a66c1a8546d6e499287bfc31aaf2726f80b63c70e9fc8e96886f41a262e3486ac77b9eabcfa6f49ed07e8ac31f05f8657a48045086e7c88f97af83dddac4dc7dc02cf8d544fee6f3f1a0061510a6eb6f7644550e1028685668a67fa9c57d82efdd087223f02d274a6e6bab5ad64c0065a7eb067620f3c89", 0xae}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="56a8c6ad830a8f74a318", 0xa}], 0x1}}], 0x2, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) 3m15.380345257s ago: executing program 0 (id=376): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="21000000030000000000000000000000010000"], 0x21) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x8) 3m15.259327658s ago: executing program 33 (id=376): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="21000000030000000000000000000000010000"], 0x21) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x8) 2m39.992816749s ago: executing program 4 (id=605): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000001c0)=0x3f8) 2m39.787209017s ago: executing program 4 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$qrtrtun(r0, &(0x7f00000000c0)=""/167, 0xffffff18) 2m39.566964087s ago: executing program 4 (id=610): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 2m39.245046795s ago: executing program 4 (id=616): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@dax_never}, {@max_batch_time={'max_batch_time', 0x3d, 0x8000000000000001}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 2m38.995041027s ago: executing program 4 (id=618): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@ssd}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x35, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x650ce4b086bd440d) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m38.370109053s ago: executing program 4 (id=621): open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xe0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0xdf6, 0x0, 0x0, 0x14, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e67fdf701905b9aafab4afaaf755a3f6a004", "3f5b19c0a2a6e4b1cbf79616cd0ee3a91590d59bffbcc254e1a311ef5432d71e14ef3dc177e9b48b00", "0000d300e6d60200000000000000000000000100", [0x0, 0x2]}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 2m38.130962504s ago: executing program 34 (id=621): open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xe0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0xdf6, 0x0, 0x0, 0x14, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e67fdf701905b9aafab4afaaf755a3f6a004", "3f5b19c0a2a6e4b1cbf79616cd0ee3a91590d59bffbcc254e1a311ef5432d71e14ef3dc177e9b48b00", "0000d300e6d60200000000000000000000000100", [0x0, 0x2]}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 12.753661044s ago: executing program 7 (id=1695): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x244021, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11.823235556s ago: executing program 7 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="660f6f262ef3460fa6c0440f0748b82a5c0000000000000f23c80f21f8350400f0000f23f80fbb2d5ecc0000f30f7e462b66baf80cb8ceb83880ef66bafc0c66ed4c0fc76f3766bad00466edc401e0546f67", 0x52}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.525097893s ago: executing program 7 (id=1704): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 11.343477879s ago: executing program 7 (id=1706): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 4.725203029s ago: executing program 6 (id=1747): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="0ac878817a65131328975df69c3f01fd3809f6d38c", 0x15}, {&(0x7f0000001d00)="2ec0214ffce8a659b1035837d56e94540e7cba454243b3841d99339ff2d3aff3f898c343a73108bc5d4d17469ea2353f16bbb70d84fad62856dec101f287355f9653e4a07681f2e1685cd83cd72b7895cedd5c3bfd103f1ab8b66f7c001d97b3c526528eb8fc20dda143c2a7baf7beea474c063cfef732344b5260d83b68a23b5c819e4b7d615e3d55c61e", 0x8b}, {&(0x7f0000001dc0)="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", 0xff}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="b93bb4ec4d8e", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000480)="192d9afc643e42b77c75d97412596234f47009939dfbb9843579f9c053925b59825fbfac21b5e7ab133ed309edecde3635252ed60f780d1e3c4a7ed793cf1fd1381965750f78f946165dffe35d7f5d76fdf1504f91cb91e8ecc813e2cdd13a88d9a8a44579b616abe9c16237f36a534851bcd8cf993efb09656352187c9a148f4b794768a4ca4db2fa2a8a8229850b9d7e22580ba752745acf8f3d1c", 0x9c}, {&(0x7f00000002c0)="3c2583413bd60d11d6d1298a3b75cb06109cf27daba0666d087fa016e73197025a9476beef1e96b192ddd7a72735cccb02df3514665b5895ae91bf5aa6f8eff74619f49c952f7d92c469517b299468", 0x4f}, {&(0x7f0000000540)="f496137b1801de5b3411f28b10586ea5674ee0344457b7491bdd1efc733a2369115c9573094f2e7f04e4346d280d8c14dd5359b6ea9ec3bf73d4e7058cd62b5d034560337bf1e8c1aed9f3fd566a25f299f1ae87044213e55da0e8bf9a7516a52341544c6f3610526b522c5d831bce062b842ea53cf5ef3305b40b448b03d32621727e2eee3b576c5eeed3f9ceb468e8ff60ba39a660cb58a696d3400c8f2f5e3799be9c25a9546c2e4460af45d07e236cf522ea646407d628eb01c6a5b6c0200a681b887fbd013979ecb8bc7d7b33087f7e709cd1c34df2475c52ed1606", 0xde}, {&(0x7f0000000640)="356b27f6de88dc98ea6af97ce55698135af0cbeb6087714123dfc2f23f99d683b30c04d5415c21cc63060bfbc476a5fa3f52163f13bd5ade4fbec1975a47dcd30801655089c5d460c6d8f67fec06d5bb740bc95a8e4fb7a272a67249cbce87c42db886175b1cbdf745df81fbcec89ebffbd7796de54a3397d6764a9c1b5d6bae865bf7c64ed1174d75397fd2378e44401fa5938e27b2852bdf6586bfb80f3e10be22295ec02a682cc5079ea0e58633e5ce9334159a4e", 0xb6}, {&(0x7f0000000700)="dcc0d705e98d17d6703347c49c16d77e29a35fddc748c3ada837956cbfb26b11a2df0dbccd7074bc87ed7c4c51cfe90bb9d3002e9069c44fe2d19f2aa6c29cb0e02310c5ccefe14f18ae97da29b1445fd8ec01a552fb711ed93675a9d8b3661a14ef051a6378f0", 0x67}, {&(0x7f0000000a00)="3f453017ae5ec8e4122e641d17be891916ac1385ac08d8d1110c616823a6e0b88347925d70c58156c4f1eebe9bc3279716e2669c7c88fca5c182cc3ce921cf645f09200e12496b956a90e5c3235a5d3618dbc46d3921d947313eadbc35d276ef7b4b417f44896187a30bc1c5ba8fba9f4f7d98edf56b72adb9f5a09fa0d593aee2bda6b76a5f4d8e944bcded9169750cc8227f9d3d14ca9474cb438a7846020f26fe5cfd6f3465322afcf8837fc65d74755baafab6bf3dc4187683ea8917f9186ea6be2b04986e26fadbc3f8f5a362c3e36b805784f55044d7d354b2db437dd00cf69704b170aaaed778aecc509b89be0e6233cf4718a0e57c3003899430baffdfc91507f8c7ca59bf833dcf6e130866a7461c5903b0246e9ad24e6f85334709d617e68c7265c4564c4515e1e79342b27bd139d9bac3b2975c461ba4f306ea1d759fbfff87e681798a181adf96daecbac5e77a6231f10c5dd504666877305f337775fd90d0402cd50ca8e4a8fc87e8b50338a61fce024bf8e1ebe894cebbf40b291452f9b4ce61f199c0ca5b14ac9fee3c3275492911d2975a62d3921a4af08c67e4e076e21c95c6623d6a02854fc06ff47131f3d3e57e024e8868a609dabe24c34772f770ef3f10fba7bac30a2eab883f212ce90a6a1f2ede0a19d3b717cdc1830dd3ad1c8b93f02a5e073a816f78936b5b8bd76b8d3081b3c106c6a2c0cfd082ab780b4e70bbffc24379c6373d67506c9f7c81199aa6d7168df4b28cf50084b2f9160564bc83249c2b3b13be6704e6337dda823d5288d41c1934f630ff42da8ca4827e3993b0b43cae428cc3cd3d5fc64e5325199cd58693ee900afd981d2c00f5ff29c0fad51e8c3a217e27004976df8bfbaa98a9113de16d10074edd406cfd959616e550580fead0a98357f5520bed8fb1ce81b173237365fcb47de411fef75d40879295a63c273f26f7ed788009682c521998bb64c7040ffa9fd4fc3f3bba36f0767d346d220d104e2235c47a0da15b346862e29cf9069b465b999edd8e45e6d8974958f8b37aacf7ab3d2c2495e303ab10c1e71f08bb6de87f80837e9e92c758fa0cd1c05b7eab44868c0035442b2da52fca8c35d475462e02de3055d5f62bcb801988c0a1b2d986e955eeb8e3f033509afab4015af8f1dd17573c3811ddcb818bf2e701604dcbe58592b9be503dc074c997d9782ce44038d6bc7ecd1c29dc554cece3f5950ad1bdff1d06ffc4731c4f02d9e56970f0dba9a7b16e0a208dc6176d0f5c005e82f64ff79a918fbc3e376f50da97e7b55505749c8a4213c8abad8f39b4032afe3c8d45928f6a9fd6e672bf72789ff27c418da79d274cabf77e66bc235ac490706fe8b8f727bdb242736155bf78c82d4f0df6a41cdd2acfa322f455e936c4d436b9d0f75b08388c1ac0bb2f02a81bef52164d3e11f62db98c7ac37a8e2d57ae8245256f6ece41f2720fc3ba2be08ad30ee3e6524e604a24f88b9e24151f099c307b300939318ab995f72315d5eb39b69fabccac3d0122af3cf1c4e06c258ea52bb8ff2c5e86cfd0a46c69a3ed192368b42153918846618a41fcb6cbc23a53d93b705d076f1424ce39bca55d6ee693bb0c22ff834af41e8bb2bd8922b4bf5c0a059b2cef680fb6553d9d674954c097311c78b7ed7ff6dc6b1c60c0b6a9e38a4b24649792386ac7a2da16fed2a8d58a89bdeccc98432bac969fcce59b806d4dbd7eb6630ccf9e71c28a827a1055cd6c0272de80f006d46829afd70a773a0fd1d7171fb679fc112f35bd33d3c2d69aa9e8479bb585743f193783770142c2974f5816913c452b89763722b8ccdd124a911eb29240c5446a0d7cada8ff3937604eade11e31098813db57c554c00687f7bc02a2ccc28ca2d70e18ff7ccfba5e2de3ed304ba278ea6a26b8933f9dd4a15445966098a17fade2046d626bc463afbed97ee76065d91d887ba6b66ea1e5964f6f274f819e60e6a06afac564882677f6a7356ee5a9e8d938ad027be50e241c69c1b702f7794346a448c732081ff33b3bc1f77ee85e3d8039b52da9dcd58a4d835bb730649c6e4fb637e4ccb66b4abf8ccb20948eaaccb6492a7109bc1ce87465d6bdae5a5f0abe3da89250519ae81fb1cdca85692d778a98632467e7475a52d2f6862d1d9453033f24f8e16ac20c77d9c4a724d5e14714dedef01df63773bb628acb9aa439da6c78356eb58975f037d6db028e9b4a37ec011c4ff00efebeb2008e9ebad7c34de6b2e37f79baaaa93d4cccf2bc73c31d94db6329d8baacd2627a1d35037e8ab46e1724b23257ba2b01f802c7dc86080f4deed5777d2626f0443a91e862ceb3b43a68ac74315592b704a0ec9fa37f8ad792705afff1e87a5d11b0ac47e03b92e6eafce8eaf33fc57a49ab0eec700223d8c91675ec339bab0c0c5fa47618d179e683e2c4f6295fa898c4a05c96278e6c0c82738571a17214d9315347d7439312f4c0d5d5dc2f93dfd0a7d16fdb59da49c8197492e52fb79aeea8b7e3e9433d57ad6e67037f84289df13edd1e1aeac5afccbdcbe1fe0edf3d6be202638294f16e2473c0757ebd0291b7e0091f0981fdb10878de3bc0f13099cabda3d94de00e8b500b542bcc27fa8639cd83d7a5bd7151c05f16e8a1b34d7c8043e634138e71f9375cae12e7a0d9fd6f6ab1d233c640c3b53ee54e476bff34cc759317b55a1d4b4c7a5b6a83207c605e5193e7730794d73bc716c072c9f25c1aaec0a38f6c650b2dafa188597cc1a3d88bf59ddd9383b37c5110b57c2a901467cf8f426e851281d0bace84d758f8ff5bcbe6de8cd77eab976eff887a64ca443fe733c8ab18c6ee52adec6e4bd629988bd0d988b6bdec7cec2d6ed750c13db7fb39688972d3d21e8f6c613bc5ee4eaad62a6aae61d2a17ad7e72394ac5c5ab2eb749a944e7f8733fe83f5afaeb5792afdf8ad22f7103ebd256e9e327f3ad9ea061db6c7ce63e1076f4520708b118b18b97b8a6e5eb70e8616e96e7893b36f55d90cc40905c352c45500830ec90c755af45a088e59e96fb90d163a9f30ddd84db8d1f47c6cd8001a302e735304d0e0ef6ca35095a650a454374d96ab5a921f3b125edf31a14acbe1bdedaa95392c739b99667bb25f022f83a00812ca611328930553a92aa15b1d38229475c3e7d3e4bc165fd1571ef48e21cfbf8f4601fe7ee944955dcf405a8a33e6ff1b74bad0f68148dfd3d36b2ba29d80c307ec5f345087aa3b7d2069f14fd266e81658cb9087b801a74755fa75f7aae8a5e24d6f609a5bb735cfe0c7334b88feb9ab19be0c04f2778cd131bbdcec93b67209665020c9535b504085668b23327efa437a61121aa992d88d9220a9aca921e3d806a042ab7ac1705f74b29b0ebcf47deceefdbb516193b62adff4ca721f8220e1821ca949e13cf6bd8a224a58932cce8bb95c336f902dc1f1fdfe6a8908930e6933443569aaac107c9e76b4dcf5608c7963d354185909963685ef129b8c41d4d64b4887a9f4df809a8e41d0fc67df4e1bfa6a3a1097fdb625dcf1e11ed37607e3bc2fe708b131a97786b13c40da9b2b2912667e5fdd3bd77cd0d6d431c5fafcbf8e3eac2c103009826240d136cf4c214b606820d728139fd95ab3eca5cb24779d92825ba5ee8790e9b6db0cf7c864b62abaa6685ff5269e135bb746dfe3f7fe42267d895044daab547d4981cb3e41a3e0543c79b8542334d9f64252070f5fedd1943c9ec916e3fb620066f2c73b16821f9df5efed81a52c1fc0465416e6a31812994a586e3cd62d4a785f7bfe71a277cf903796d347d9e919b59b60087d02ca000af4361e75ade488bf60e071f84eb37ff445d04e2326367fdb56843bf3decf050c1743aaf265cea03c4841d7f18cc4e39f58bee19d4ee70ff478b08a097d1aed4bd84287c968f13392b4f1fc4e01ea5be88c0fd67454823e1dd75690772832d684a486b9713c1a081e1ba2b6efb3a592f9bab148c677abbce2656f54d7d75febac7491b4dc7bbcca7ab5d125c760993b85656718bb4e58e808ab692ec787f4fc2bb82551a48a836d54b54279c5e31273fcf6740b9923ae7ec0a8eb1f4c0249903f898c006390a05542e791256ef875459c25c356cbbd2a515c765d9dafe1f8d08efe904aa5b7740de7", 0xb76}], 0x6}}], 0x3, 0x88040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 4.616639208s ago: executing program 1 (id=1748): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f0000000000)) 3.304646235s ago: executing program 7 (id=1752): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtquqF8qpQqgSokcO25B4o2jtOIqd0oSVyB65I1GJE5w4c0DigNQTdyQOcONSDkgFVqAGCQkjj8eJ88eJu5vYu/HvJ438Zp7j773Mznujz5t5AUysaxGxExGXIuLdiJjLjyf5Fm92t877Pnl4f2n34f2lJNrtd/6RZPWdY9H3Mx3P5J9ZjIjvvRXxg+RQ0D9GNLe27y3WatWN/FC5VV8vN7e2b67WF1eqK9W1SuX2wu3512+9Vjmzvr5U//XHlyPid7/94kd/2PnGjzrNms3r+vtxlrpdn9mLE9HOfsXfOY9gYzAVEdP5v59P7ZF+iLOURsRnIuLl7Pqfi6nsbB508DR9c4StAwDOQ7s9l9+R9vYBgIsuzXJgSVrKcwGzkaalUjeH90JcSWuNZuvG3cbm2nI3V3Y1ZtK7q7XqfJ4rvBozyd3V6epCVu7t16qVQ/u3IuL5iPhp4XK2X1pq1JbHeeMDABPsmUPz/78L3fkfALjgivvFwjjbAQCMTnHcDQAARs78DwCTx/wPAJPH/A8Ak8f8DwCTx/wPABPlu2+/3dnau/nzr5ff29q813jv5nK1ea9U31wqLTU21ksrjcZK9sye+mmfV2s01hdejc33y61qs1Vubm3fqTc211p3sud636nOjKRXAMBJnn/pwz8nEbHzxuVsi77n/Z86V7943q0DzlM67gYAYzM17gYAY3N0tS9gUsjHw+T6X7vdjr61eyPiwV6p72GgA/+L0AdDhUmtGwpPnuuff4z8P/BUk/+HyfVo+X/38nARyP/D5Gq3E2v+A8CEkeMHklPq+7//n2/37Qz3/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcSLPZlqSlfC3w2UjTUini2Yi4GjPJ3dVadT4inouIPxVmCp39hYiwbhAAPM3SvyX5+l/X516ZPVx7qfCfQvYaET/8+Ts/e3+x1dpYiLiU/HPveOuD/HhlHO0HAE7Tm6d783jPJw/vL/W2Ubbn4291FxftxN3Nt27NdExnr8Us13DlX0m+39W5X5k6g/g7DyLic8f1P8lyI1fzlU8Px+/Efnak8dMD8dOsrvva+V189gzaApPmw8748+Zx118a17LX46//YjZCPb7e+Ld7ZPxL98a/qQHj37VhY7z6+28fOdie69Y9iPjCdMRu78P7xp9e/GRA/FeGjP+XF7/08qC69i8irsdx/U8OxCq36uvl5tb2zdX64kp1pbpWqdxeuD3/+q3XKuUsR13uZaqP+vsbN54bFL/T/ysD4hdP6f9Xh+z/L//77ve/fEL8r39lP/6PY//8v3BC/M6c+LUh4y9e+U1xUF0n/vKA/p92/m8MGf+jv24vD/lWAGAEmlvb9xZrterG4xeKJ74nPYsQQxSSiJ1zDrFfKPzqJ2+d/ubCyNrziIUYVDX1pLTwwhQKT0YzhiiMe2QCztv+RT/ulgAAAAAAAAAAAAAAAIOM4s+Jxt1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7/BwAA//8inNZ5") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.764245883s ago: executing program 7 (id=1753): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000480)={0x0, 0x18, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0}) 2.406303325s ago: executing program 1 (id=1754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x1000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 2.291964845s ago: executing program 1 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.058965546s ago: executing program 1 (id=1756): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) 1.919541899s ago: executing program 2 (id=1757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x71, 0x40000009, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.833376736s ago: executing program 2 (id=1758): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) close_range(r0, r0, 0x0) 1.79347729s ago: executing program 1 (id=1759): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.708665047s ago: executing program 2 (id=1760): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x6, 0x4}, 0x9c) 1.642697583s ago: executing program 1 (id=1761): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b01, 0x0) ioctl$EVIOCGMASK(r1, 0x5b06, 0x0) syz_usb_disconnect(r0) 1.526116474s ago: executing program 6 (id=1762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.494287286s ago: executing program 2 (id=1763): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x24d, &(0x7f00000009c0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x8800, 0x34) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x1, @auto="7e72350bda9533b3"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') readlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)=""/72, 0x48) 1.295849274s ago: executing program 2 (id=1764): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x1, 0x400, 0x800008, 0x80000000004, 0x346a, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x2}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 1.271164626s ago: executing program 6 (id=1765): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 1.083617523s ago: executing program 6 (id=1767): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe1d, 0x280000e1, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 1.031213318s ago: executing program 5 (id=1768): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0xc0000) ftruncate(r0, 0x8800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) sendfile(r1, r0, 0x0, 0x558410e8) 764.464391ms ago: executing program 5 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 659.8787ms ago: executing program 5 (id=1770): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e20, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 594.182027ms ago: executing program 5 (id=1771): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 566.346889ms ago: executing program 2 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r1, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xbc, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x84}, 0x24008005) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, r2, 0x1, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) 411.722983ms ago: executing program 5 (id=1773): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x13, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000009000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000740)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 312.765082ms ago: executing program 5 (id=1774): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="0ac878817a65131328975df69c3f01fd3809f6d38c", 0x15}, {&(0x7f0000001d00)="2ec0214ffce8a659b1035837d56e94540e7cba454243b3841d99339ff2d3aff3f898c343a73108bc5d4d17469ea2353f16bbb70d84fad62856dec101f287355f9653e4a07681f2e1685cd83cd72b7895cedd5c3bfd103f1ab8b66f7c001d97b3c526528eb8fc20dda143c2a7baf7beea474c063cfef732344b5260d83b68a23b5c819e4b7d615e3d55c61e", 0x8b}, {&(0x7f0000001dc0)="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", 0xff}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="b93bb4ec4d8e", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000480)="192d9afc643e42b77c75d97412596234f47009939dfbb9843579f9c053925b59825fbfac21b5e7ab133ed309edecde3635252ed60f780d1e3c4a7ed793cf1fd1381965750f78f946165dffe35d7f5d76fdf1504f91cb91e8ecc813e2cdd13a88d9a8a44579b616abe9c16237f36a534851bcd8cf993efb09656352187c9a148f4b794768a4ca4db2fa2a8a8229850b9d7e22580ba752745acf8f3d1c", 0x9c}, {&(0x7f00000002c0)="3c2583413bd60d11d6d1298a3b75cb06109cf27daba0666d087fa016e73197025a9476beef1e96b192ddd7a72735cccb02df3514665b5895ae91bf5aa6f8eff74619f49c952f7d92c469517b299468", 0x4f}, {&(0x7f0000000540)="f496137b1801de5b3411f28b10586ea5674ee0344457b7491bdd1efc733a2369115c9573094f2e7f04e4346d280d8c14dd5359b6ea9ec3bf73d4e7058cd62b5d034560337bf1e8c1aed9f3fd566a25f299f1ae87044213e55da0e8bf9a7516a52341544c6f3610526b522c5d831bce062b842ea53cf5ef3305b40b448b03d32621727e2eee3b576c5eeed3f9ceb468e8ff60ba39a660cb58a696d3400c8f2f5e3799be9c25a9546c2e4460af45d07e236cf522ea646407d628eb01c6a5b6c0200a681b887fbd013979ecb8bc7d7b33087f7e709cd1c34df2475c52ed1606", 0xde}, {&(0x7f0000000640)="356b27f6de88dc98ea6af97ce55698135af0cbeb6087714123dfc2f23f99d683b30c04d5415c21cc63060bfbc476a5fa3f52163f13bd5ade4fbec1975a47dcd30801655089c5d460c6d8f67fec06d5bb740bc95a8e4fb7a272a67249cbce87c42db886175b1cbdf745df81fbcec89ebffbd7796de54a3397d6764a9c1b5d6bae865bf7c64ed1174d75397fd2378e44401fa5938e27b2852bdf6586bfb80f3e10be22295ec02a682cc5079ea0e58633e5ce9334159a4e", 0xb6}, {&(0x7f0000000700)="dcc0d705e98d17d6703347c49c16d77e29a35fddc748c3ada837956cbfb26b11a2df0dbccd7074bc87ed7c4c51cfe90bb9d3002e9069c44fe2d19f2aa6c29cb0e02310c5ccefe14f18ae97da29b1445fd8ec01a552fb711ed93675a9d8b3661a14ef051a6378f0", 0x67}, {&(0x7f0000000a00)="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", 0xb76}], 0x6}}], 0x3, 0x88040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 194.161462ms ago: executing program 6 (id=1775): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000940)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="74edec5c6d79ee1d37a75eb0d8f43498d1662903ef2039017f0671c6bd0309e9b383b6a67f2d04f0062fd4", @ANYRES64, @ANYRES32, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8f800000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b51328ac152bd7edc66d4e962cbc2d2b0c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8df68b97f4dcb5652f2b13aa941b7ff56c48fb7162e91ef53c70938a92e4bf55d65319f74766a309722f767fc8f3db2a194a2f098336601be2edcbcc9b562f2fc64e2deff9a16e84f1e8bc5fb82c91f4d10e34f5a093fc4fcbdb89342274857c8e6aa8864b3214f51b9e515bf645235007cede04000000000000000a3b43bc0466340c195a515f779d0333dd467bb665508d9c89e18e86d1975e273f937e3bd112c51cdf0a9b14a7155a40271e13d7e480862ab2b9b1d37afc08b2cab635f063e80ba043a7d2dd405e492341a60b4985ea09cdc7e241dc40c4d283779b14e3b675f98fc52ce3d47d2827e7747e58328e0b7056371041fdd49f6ec4fd936d635b20acf515de4a47bdec8040d65a9ad05d97f652af6db5271c03b50d6ccafe580fec3a70da75a2316833f9ce842d7275a9cd038b4eb89d2eba0eb0d12e7e1960c2a39c6f8ba03f64adab0ebe35f7116fbaf99a218acf882c38a9c2855ec5fe5936", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT], 0x1, 0x1e4, &(0x7f0000000500)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 0s ago: executing program 6 (id=1776): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x600}]) kernel console output (not intermixed with test programs): 000,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: none. [ 197.554700][ T7521] loop7: detected capacity change from 0 to 32768 [ 197.579325][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 197.621189][ T7530] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 197.661519][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.672568][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 197.711179][ T7526] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.837: Allocating blocks 497-513 which overlap fs metadata [ 197.779983][ T7526] EXT4-fs (loop6): pa ffff8880569fb1c0: logic 128, phys. 385, len 8 [ 197.788220][ T7526] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 197.804112][ T7521] XFS (loop7): Mounting V5 Filesystem [ 197.900925][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.974461][ T7541] loop5: detected capacity change from 0 to 8192 [ 198.054654][ T7521] XFS (loop7): Ending clean mount [ 198.224409][ T4993] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 198.273421][ T4993] FAT-fs (loop5): Filesystem has been set read-only [ 198.361000][ T6590] XFS (loop7): Unmounting Filesystem [ 198.464024][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.493850][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.513875][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.594299][ T7553] device bridge_slave_0 left promiscuous mode [ 198.665234][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.702016][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.736451][ T7553] device bridge_slave_1 left promiscuous mode [ 198.791254][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.806394][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.959289][ T7553] bond0: (slave bond_slave_0): Releasing backup interface [ 199.015637][ T7553] bond0: (slave bond_slave_1): Releasing backup interface [ 199.316155][ T7553] team0: Port device team_slave_0 removed [ 199.413291][ T7553] team0: Port device team_slave_1 removed [ 199.455016][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.479592][ T7553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.533937][ T7558] loop5: detected capacity change from 0 to 32768 [ 199.539050][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.566841][ T7553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.622441][ T7558] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 199.628470][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.7.854'. [ 199.647675][ T7558] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 199.660651][ T7560] netlink: 'syz.6.843': attribute type 10 has an invalid length. [ 199.680598][ T7558] BTRFS info (device loop5): trying to use backup root at mount time [ 199.699530][ T7558] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 199.723090][ T7558] BTRFS info (device loop5): use zstd compression, level 3 [ 199.740863][ T7558] BTRFS error (device loop5): unrecognized mount option 'fsuuid=7' [ 199.753661][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.771392][ T7558] BTRFS error (device loop5): open_ctree failed: -22 [ 199.788457][ T7560] team0: Port device bond0 added [ 199.832806][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.854390][ T4742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4742) [ 200.113830][ T7584] loop7: detected capacity change from 0 to 8192 [ 200.412541][ T7591] loop2: detected capacity change from 0 to 256 [ 200.453766][ T7591] exfat: Deprecated parameter 'utf8' [ 200.459133][ T7591] exfat: Deprecated parameter 'utf8' [ 200.494985][ T7591] exfat: Deprecated parameter 'utf8' [ 200.612533][ T7591] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 200.647515][ T419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.709500][ T419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.847015][ T419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.876418][ T7591] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 200.879163][ T419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.906538][ T7591] exFAT-fs (loop2): Filesystem has been set read-only [ 201.088964][ T419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.130775][ T419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.261034][ T5358] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 201.268822][ T419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.298596][ T7622] loop2: detected capacity change from 0 to 512 [ 201.315318][ T419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.357014][ T7622] EXT4-fs (loop2): Ignoring removed oldalloc option [ 201.369899][ T7622] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.450895][ T7622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.870: Parent and EA inode have the same ino 15 [ 201.522281][ T7622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.870: Parent and EA inode have the same ino 15 [ 201.545283][ T7622] EXT4-fs (loop2): 1 orphan inode deleted [ 201.551321][ T7622] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 201.552681][ T5358] usb 8-1: Using ep0 maxpacket: 32 [ 201.591160][ T7622] EXT4-fs (loop2): shut down requested (1) [ 201.810767][ T5358] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.825661][ T5358] usb 8-1: config 0 has no interfaces? [ 201.838361][ T5358] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 201.854910][ T5358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.903606][ T5358] usb 8-1: config 0 descriptor?? [ 201.924267][ T7630] loop2: detected capacity change from 0 to 512 [ 201.984948][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.871'. [ 202.097910][ T7630] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.132269][ T7632] netlink: 'syz.6.871': attribute type 1 has an invalid length. [ 202.219275][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.871'. [ 202.316973][ T6760] usb 8-1: USB disconnect, device number 4 [ 202.820900][ T6760] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.908242][ T7659] loop5: detected capacity change from 0 to 256 [ 202.974552][ T7659] exfat: Deprecated parameter 'utf8' [ 202.979935][ T7659] exfat: Deprecated parameter 'utf8' [ 202.999212][ T7659] exfat: Deprecated parameter 'utf8' [ 203.034831][ T7659] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 203.226505][ T6760] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 203.251512][ T6760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.284319][ T6760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.295346][ T6760] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 203.313695][ T7668] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 203.340555][ T7668] exFAT-fs (loop5): Filesystem has been set read-only [ 203.400939][ T6760] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 203.402237][ T7645] loop6: detected capacity change from 0 to 32768 [ 203.421784][ T6760] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 203.435528][ T419] device hsr_slave_0 left promiscuous mode [ 203.435529][ T6760] usb 3-1: Manufacturer: syz [ 203.451333][ T419] device hsr_slave_1 left promiscuous mode [ 203.458206][ T6760] usb 3-1: config 0 descriptor?? [ 203.471569][ T419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.480871][ T6197] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.494743][ T419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.536759][ T419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.606937][ T419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.615508][ T419] batman_adv: batadv0: Removing interface: macvlan2 [ 203.638348][ T7645] XFS (loop6): Mounting V5 Filesystem [ 203.646249][ T419] device bridge_slave_1 left promiscuous mode [ 203.660550][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.679442][ T419] device bridge_slave_0 left promiscuous mode [ 203.696392][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.736480][ T419] device veth1_macvtap left promiscuous mode [ 203.753681][ T419] device veth0_macvtap left promiscuous mode [ 203.773976][ T419] device veth1_vlan left promiscuous mode [ 203.779924][ T419] device veth0_vlan left promiscuous mode [ 203.806896][ T7645] XFS (loop6): Ending clean mount [ 203.846551][ T7645] XFS (loop6): Quotacheck needed: Please wait. [ 203.855615][ T6197] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.952661][ T6760] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 203.965763][ T7645] XFS (loop6): Quotacheck: Done. [ 203.987036][ T6760] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 204.018755][ T7693] loop5: detected capacity change from 0 to 2048 [ 204.037701][ T7645] XFS (loop6): User initiated shutdown received. [ 204.056282][ T6197] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 204.061047][ T7645] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 204.091622][ T6197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 204.101272][ T6760] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 204.122640][ T6197] usb 2-1: Product: syz [ 204.126883][ T6197] usb 2-1: Manufacturer: syz [ 204.147625][ T4567] Alternate GPT is invalid, using primary GPT. [ 204.154886][ T7645] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 204.173890][ T4567] loop5: p1 p2 p3 [ 204.212170][ T6197] usb 2-1: SerialNumber: syz [ 204.276906][ T4369] usb 3-1: USB disconnect, device number 9 [ 204.330299][ T5688] XFS (loop6): Unmounting Filesystem [ 204.345992][ T7696] fido_id[7696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 204.362340][ T7693] Alternate GPT is invalid, using primary GPT. [ 204.398488][ T7693] loop5: p1 p2 p3 [ 204.556154][ T6197] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 204.619741][ T4742] udevd[4742]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 204.650677][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 204.669596][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 204.727745][ T7699] loop5: detected capacity change from 0 to 2048 [ 204.773462][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 204.784944][ T6691] udevd[6691]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 204.798244][ T4742] udevd[4742]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 204.823082][ T5362] usb 2-1: USB disconnect, device number 9 [ 204.840526][ C1] usblp0: nonzero write bulk status received: -108 [ 204.851044][ T5362] usblp0: removed [ 205.057265][ T419] team0 (unregistering): Port device team_slave_1 removed [ 205.129193][ T419] team0 (unregistering): Port device team_slave_0 removed [ 205.170151][ T419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.210795][ T419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.348462][ T419] bond0 (unregistering): Released all slaves [ 205.492317][ T7715] device pim6reg1 entered promiscuous mode [ 205.670173][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.6.884'. [ 205.699625][ T7721] loop5: detected capacity change from 0 to 128 [ 205.767831][ T7711] netlink: 64 bytes leftover after parsing attributes in process `syz.6.884'. [ 205.891506][ T7721] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.910801][ T7721] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 206.034163][ T7721] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 206.150963][ T7721] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 206.367078][ T7726] loop1: detected capacity change from 0 to 8192 [ 206.537168][ T7737] loop6: detected capacity change from 0 to 512 [ 206.643859][ T7737] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.802979][ T6197] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.050923][ T6197] usb 6-1: Using ep0 maxpacket: 16 [ 207.190795][ T6197] usb 6-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config [ 207.208772][ T7761] loop6: detected capacity change from 0 to 512 [ 207.220565][ T6197] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.353099][ T7761] EXT4-fs (loop6): Unrecognized mount option "smackfshat=" or missing value [ 207.410907][ T6197] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.440575][ T6197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.460557][ T6197] usb 6-1: Product: syz [ 207.469933][ T6197] usb 6-1: Manufacturer: syz [ 207.494437][ T6197] usb 6-1: SerialNumber: syz [ 207.774635][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.905'. [ 207.839550][ T7780] netlink: 'syz.6.905': attribute type 14 has an invalid length. [ 207.860872][ T6197] usb 6-1: 0:2 : does not exist [ 207.895552][ T7780] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.904731][ T7780] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.913626][ T7780] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.922899][ T7780] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.940593][ T6197] usb 6-1: USB disconnect, device number 10 [ 208.126405][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.905'. [ 208.135605][ T7792] loop1: detected capacity change from 0 to 256 [ 208.157935][ T7780] netlink: 'syz.6.905': attribute type 14 has an invalid length. [ 208.232079][ T4742] udevd[4742]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.431161][ T7797] loop6: detected capacity change from 0 to 128 [ 208.502245][ T7767] loop2: detected capacity change from 0 to 32768 [ 208.582398][ T7797] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.685878][ T7767] XFS (loop2): Mounting V5 Filesystem [ 208.722993][ T7797] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.770264][ T7797] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 208.779946][ T7797] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 208.824248][ T7767] XFS (loop2): Ending clean mount [ 209.039576][ T4194] XFS (loop2): Unmounting Filesystem [ 209.529004][ T7837] loop5: detected capacity change from 0 to 1024 [ 209.614665][ T7837] EXT4-fs (loop5): inline encryption not supported [ 209.655317][ T7837] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #3: block 1: comm syz.5.919: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.679029][ T7837] EXT4-fs (loop5): Remounting filesystem read-only [ 209.686012][ T7837] Quota error (device loop5): write_blk: dquota write failed [ 209.699404][ T7837] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 209.726338][ T7837] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.919: Failed to acquire dquot type 0 [ 209.744604][ T7837] EXT4-fs (loop5): Remounting filesystem read-only [ 209.759154][ T7837] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.919: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.798589][ T7837] EXT4-fs (loop5): Remounting filesystem read-only [ 209.865805][ T7837] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.919: Invalid inode bitmap blk 0 in block_group 0 [ 209.908066][ T7837] EXT4-fs (loop5): Remounting filesystem read-only [ 209.921358][ T7837] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 209.931173][ T7837] EXT4-fs (loop5): Remounting filesystem read-only [ 209.937786][ T7837] EXT4-fs (loop5): 1 orphan inode deleted [ 209.950602][ T7837] EXT4-fs (loop5): mounted filesystem without journal. Opts: €; dioread_lock,min_batch_time=0x0000000000000008,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 209.990540][ T154] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.049555][ T154] EXT4-fs (loop5): Remounting filesystem read-only [ 210.084693][ T154] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 210.113939][ T154] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 0 [ 210.164997][ T154] EXT4-fs (loop5): Remounting filesystem read-only [ 210.602370][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880219de800: rx timeout, send abort [ 210.611445][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880219de800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 210.792027][ T7871] tipc: Enabling of bearer rejected, failed to enable media [ 211.050552][ T5362] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.284873][ T7881] loop7: detected capacity change from 0 to 512 [ 211.330599][ T5362] usb 3-1: Using ep0 maxpacket: 8 [ 211.470294][ T7881] EXT4-fs (loop7): Ignoring removed oldalloc option [ 211.559156][ T7881] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.680792][ T5362] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 211.695448][ T5362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.724321][ T7881] EXT4-fs error (device loop7): ext4_xattr_inode_iget:397: comm syz.7.927: Parent and EA inode have the same ino 15 [ 211.740497][ T5362] usb 3-1: Product: syz [ 211.750906][ T5362] usb 3-1: Manufacturer: syz [ 211.770476][ T5362] usb 3-1: SerialNumber: syz [ 211.792634][ T7881] EXT4-fs error (device loop7): ext4_xattr_inode_iget:397: comm syz.7.927: Parent and EA inode have the same ino 15 [ 211.832350][ T5362] usb 3-1: config 0 descriptor?? [ 211.838387][ T7875] loop5: detected capacity change from 0 to 32768 [ 211.913297][ T5362] gspca_main: sq905-2.14.0 probing 2770:9120 [ 211.948577][ T7881] EXT4-fs (loop7): 1 orphan inode deleted [ 211.989373][ T7881] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 212.024875][ T7875] XFS (loop5): Mounting V5 Filesystem [ 212.168356][ T7875] XFS (loop5): Ending clean mount [ 212.263166][ T7899] loop6: detected capacity change from 0 to 8192 [ 212.284866][ T7881] EXT4-fs (loop7): shut down requested (1) [ 212.355870][ T7899] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 212.430609][ T7899] REISERFS (device loop6): using ordered data mode [ 212.437178][ T7899] reiserfs: using flush barriers [ 212.515959][ T4993] XFS (loop5): Unmounting Filesystem [ 212.530234][ T7899] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.657424][ T7899] REISERFS (device loop6): checking transaction log (loop6) [ 212.728605][ T7901] loop1: detected capacity change from 0 to 32768 [ 212.805384][ T7915] loop8: detected capacity change from 0 to 8 [ 212.825008][ T4567] Dev loop8: unable to read RDB block 8 [ 212.841151][ T4567] loop8: unable to read partition table [ 212.852666][ T4567] loop8: partition table beyond EOD, truncated [ 212.900093][ T7915] Dev loop8: unable to read RDB block 8 [ 212.936929][ T7901] XFS (loop1): Mounting V5 Filesystem [ 213.010862][ T5362] gspca_sq905: bulk read fail (-22) len 0/4 [ 213.011701][ T7915] loop8: unable to read partition table [ 213.016878][ T5362] sq905: probe of 3-1:0.0 failed with error -5 [ 213.093307][ T7899] REISERFS (device loop6): Using tea hash to sort names [ 213.115856][ T7915] loop8: partition table beyond EOD, truncated [ 213.123092][ T7899] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 213.180286][ T7901] XFS (loop1): Ending clean mount [ 213.245037][ T4271] usb 3-1: USB disconnect, device number 10 [ 213.258097][ T7899] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 213.267294][ T7915] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 213.350028][ T26] audit: type=1804 audit(1771535759.148:137): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.930" name="/newroot/196/file1/file1" dev="loop1" ino=4422 res=1 errno=0 [ 213.494641][ T4190] XFS (loop1): Unmounting Filesystem [ 214.016352][ T7949] loop5: detected capacity change from 0 to 128 [ 214.151448][ T7949] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 214.200878][ T7949] hpfs: filesystem error: improperly stopped [ 214.227486][ T7949] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 214.290513][ T7949] hpfs: You really don't want any checks? You are crazy... [ 214.355687][ T7949] hpfs: hpfs_map_sector(): read error [ 214.380667][ T7949] hpfs: code page support is disabled [ 214.411039][ T7949] hpfs: hpfs_map_4sectors(): unaligned read [ 214.438230][ T7949] hpfs: hpfs_map_4sectors(): unaligned read [ 214.460853][ T7949] hpfs: filesystem error: unable to find root dir [ 215.257157][ T7984] bond1: (slave lo): Releasing backup interface [ 215.295909][ T7984] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 215.379238][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.403139][ T7953] loop6: detected capacity change from 0 to 40427 [ 215.423273][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.460749][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.503705][ T7984] bond0: (slave bond_slave_0): Releasing backup interface [ 215.536171][ T7953] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff [ 215.563955][ T7953] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x2 [ 215.595489][ T7984] bond0: (slave bond_slave_1): Releasing backup interface [ 215.634801][ T7953] F2FS-fs (loop6): invalid crc value [ 215.664560][ T7953] F2FS-fs (loop6): Found nat_bits in checkpoint [ 215.839979][ T7984] team0: Port device team_slave_0 removed [ 215.884692][ T7953] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 215.905140][ T7984] team0: Port device team_slave_1 removed [ 215.961421][ T7984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.023514][ T7984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.065595][ T7984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.110145][ T7984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.130997][ T5688] attempt to access beyond end of device [ 216.130997][ T5688] loop6: rw=2049, want=45104, limit=40427 [ 216.167911][ T7985] netlink: 'syz.1.943': attribute type 10 has an invalid length. [ 216.225353][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.284598][ T7985] team0: Port device bond0 added [ 216.784214][ T7992] loop5: detected capacity change from 0 to 32768 [ 217.085827][ T8004] loop6: detected capacity change from 0 to 512 [ 217.150582][ T8009] nbd: socks must be embedded in a SOCK_ITEM attr [ 217.186815][ T8009] block nbd0: shutting down sockets [ 217.266815][ T8004] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.946: invalid block [ 217.290802][ T8013] loop7: detected capacity change from 0 to 64 [ 217.303086][ T8004] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.946: invalid indirect mapped block 10 (level 1) [ 217.317547][ T8004] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.946: invalid indirect mapped block 8 (level 1) [ 217.340902][ T8004] EXT4-fs (loop6): 1 truncate cleaned up [ 217.346714][ T8004] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 217.410746][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.951'. [ 217.419688][ T8020] netlink: 'syz.5.951': attribute type 14 has an invalid length. [ 217.556012][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.951'. [ 217.598450][ T8020] netlink: 'syz.5.951': attribute type 14 has an invalid length. [ 217.635456][ T8013] hfs: bad allocation block size 0 [ 217.694774][ T8025] device bridge1 entered promiscuous mode [ 217.701118][ T8013] hfs: can't find a HFS filesystem on dev loop7 [ 218.521712][ T8052] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 218.550779][ T8015] loop1: detected capacity change from 0 to 32768 [ 218.793940][ T8015] XFS (loop1): Mounting V5 Filesystem [ 219.007631][ T8015] XFS (loop1): Ending clean mount [ 219.223431][ T4190] XFS (loop1): Unmounting Filesystem [ 219.640374][ T8076] loop5: detected capacity change from 0 to 1024 [ 219.678642][ T8046] loop7: detected capacity change from 0 to 32768 [ 219.977596][ T8046] XFS (loop7): Mounting V5 Filesystem [ 220.127121][ T8090] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.141859][ T8046] XFS (loop7): Ending clean mount [ 220.306943][ T26] audit: type=1804 audit(1771535766.108:138): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.957" name="/newroot/54/file1/file1" dev="loop7" ino=4422 res=1 errno=0 [ 220.456750][ T8100] input: syz1 as /devices/virtual/input/input23 [ 220.464213][ T6590] XFS (loop7): Unmounting Filesystem [ 220.875324][ T8113] loop5: detected capacity change from 0 to 8 [ 221.140104][ T8113] SQUASHFS error: xz decompression failed, data probably corrupt [ 221.228634][ T8113] SQUASHFS error: Failed to read block 0x108: -5 [ 221.316417][ T8113] SQUASHFS error: Unable to read metadata cache entry [106] [ 221.370603][ T8113] SQUASHFS error: Unable to read inode 0x11f [ 221.725330][ T8143] netlink: 51 bytes leftover after parsing attributes in process `syz.6.989'. [ 222.000679][ T5577] Bluetooth: hci3: command 0x0406 tx timeout [ 222.200145][ T8137] loop2: detected capacity change from 0 to 8192 [ 222.295315][ T8137] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 222.382034][ T8152] loop7: detected capacity change from 0 to 4096 [ 222.471054][ T8137] REISERFS (device loop2): using ordered data mode [ 222.528554][ T8137] reiserfs: using flush barriers [ 222.656190][ T8137] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.681399][ T8152] ntfs3: loop7: ino=5, "/" directory corrupted [ 222.789612][ T6590] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 222.808783][ T8137] REISERFS (device loop2): checking transaction log (loop2) [ 222.837739][ T6590] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 223.309639][ T8137] REISERFS (device loop2): Using tea hash to sort names [ 223.323052][ T8137] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 223.344615][ T8137] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 223.413161][ T4369] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 223.490547][ T5577] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 223.670657][ T4369] usb 8-1: Using ep0 maxpacket: 8 [ 223.719348][ T8198] loop1: detected capacity change from 0 to 1024 [ 223.794097][ T4369] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 223.822987][ T4369] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.854611][ T8198] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 223.867360][ T4369] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.880722][ T5577] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 223.923269][ T5577] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 223.936427][ T4369] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.950023][ T5577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.964959][ T4369] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.978695][ T8198] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 224.019752][ T5577] usb 7-1: config 0 descriptor?? [ 224.065113][ T4369] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.150669][ T4369] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.320668][ T5577] ath6kl: Failed to submit usb control message: -71 [ 224.327376][ T5577] ath6kl: unable to send the bmi data to the device: -71 [ 224.353953][ T5577] ath6kl: Unable to send get target info: -71 [ 224.389164][ T5577] ath6kl: Failed to init ath6kl core: -71 [ 224.494580][ T4369] usb 8-1: GET_CAPABILITIES returned 0 [ 224.505095][ T4369] usbtmc 8-1:16.0: can't read capabilities [ 224.558331][ T5577] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 224.590941][ T8206] loop5: detected capacity change from 0 to 40427 [ 224.602906][ T5577] usb 7-1: USB disconnect, device number 6 [ 224.682489][ T8206] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 224.714528][ T4369] usb 8-1: USB disconnect, device number 5 [ 224.780009][ T8206] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 224.866743][ T8206] F2FS-fs (loop5): invalid crc value [ 224.986614][ T8206] F2FS-fs (loop5): Found nat_bits in checkpoint [ 225.045640][ T4363] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 225.118917][ T8227] loop1: detected capacity change from 0 to 2048 [ 225.132046][ T4363] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.297231][ T8227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.466191][ T8206] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 225.486891][ T8239] fido_id[8239]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.509597][ T8246] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.552737][ T8206] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 225.764767][ T4363] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 225.771456][ T4363] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.872909][ T8252] loop6: detected capacity change from 0 to 2048 [ 225.938499][ T8260] F2FS-fs (loop5): Unrecognized mount option "./file0" or missing value [ 225.981019][ T8252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.055872][ T8258] fido_id[8258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.106177][ T8254] loop7: detected capacity change from 0 to 8192 [ 226.199324][ T8254] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 226.251463][ T4437] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 226.273120][ T8254] REISERFS (device loop7): using ordered data mode [ 226.279824][ T8254] reiserfs: using flush barriers [ 226.290542][ T8254] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.308172][ T8254] REISERFS (device loop7): checking transaction log (loop7) [ 226.356034][ T4437] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 226.527058][ T8254] REISERFS (device loop7): Using tea hash to sort names [ 226.560230][ T8254] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 226.599893][ T8254] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 226.940742][ T5577] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 226.960883][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 227.181091][ T5577] usb 2-1: Using ep0 maxpacket: 8 [ 227.302913][ T5577] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 227.322783][ T5577] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.340629][ T5577] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.360555][ T5577] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.380586][ T5577] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.410545][ T5577] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.429117][ T8280] loop2: detected capacity change from 0 to 40427 [ 227.435884][ T5577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.495766][ T8280] F2FS-fs (loop2): invalid crc value [ 227.541821][ T8280] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 227.590563][ T4363] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 227.730069][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1035'. [ 227.756556][ T8280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 227.840681][ T4363] usb 7-1: Using ep0 maxpacket: 16 [ 227.960852][ T4363] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.978571][ T4194] attempt to access beyond end of device [ 227.978571][ T4194] loop2: rw=2049, want=45104, limit=40427 [ 227.993969][ T4363] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.170976][ T4363] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.190338][ T4363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.210763][ T5577] usb 2-1: usb_control_msg returned -71 [ 228.216543][ T5577] usbtmc 2-1:16.0: can't read capabilities [ 228.240276][ T4363] usb 7-1: Product: syz [ 228.250532][ T4363] usb 7-1: Manufacturer: syz [ 228.270551][ T5577] usb 2-1: USB disconnect, device number 10 [ 228.284647][ T4363] usb 7-1: SerialNumber: syz [ 228.377260][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 228.536743][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.567201][ T8326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.781025][ T4363] usb 7-1: cannot find UAC_HEADER [ 228.831722][ T4363] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 228.913386][ T4742] udevd[4742]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.028625][ T4363] usb 7-1: USB disconnect, device number 7 [ 229.448477][ T8335] loop5: detected capacity change from 0 to 32768 [ 229.579642][ T8335] XFS (loop5): Mounting V5 Filesystem [ 229.803520][ T8335] XFS (loop5): Ending clean mount [ 229.818590][ T8335] XFS (loop5): Quotacheck needed: Please wait. [ 230.006528][ T8335] XFS (loop5): Quotacheck: Done. [ 230.030621][ T4271] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 230.071553][ T26] audit: type=1804 audit(1771535775.878:139): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1043" name="/newroot/154/file0/file1" dev="loop5" ino=4422 res=1 errno=0 [ 230.170361][ T4993] XFS (loop5): Unmounting Filesystem [ 230.265540][ T8361] loop1: detected capacity change from 0 to 40427 [ 230.341264][ T4271] usb 7-1: Using ep0 maxpacket: 8 [ 230.352715][ T8361] F2FS-fs (loop1): invalid crc value [ 230.383394][ T8361] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 230.506277][ T4271] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 230.520586][ T4271] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.550226][ T4271] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.569299][ T8361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 230.585942][ T4271] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.626692][ T4271] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.665364][ T4271] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.680864][ T4271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.735012][ T4190] attempt to access beyond end of device [ 230.735012][ T4190] loop1: rw=2049, want=45104, limit=40427 [ 230.957388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 230.970760][ T4271] usb 7-1: GET_CAPABILITIES returned 0 [ 230.976312][ T4271] usbtmc 7-1:16.0: can't read capabilities [ 231.569121][ T8412] loop2: detected capacity change from 0 to 32768 [ 231.600565][ T4364] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 231.711515][ T8412] XFS (loop2): Mounting V5 Filesystem [ 231.734193][ T5577] usb 7-1: USB disconnect, device number 8 [ 231.882239][ T8412] XFS (loop2): Ending clean mount [ 231.898529][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1056'. [ 231.908708][ T8412] XFS (loop2): Quotacheck needed: Please wait. [ 231.918461][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1056'. [ 231.933766][ T8450] loop6: detected capacity change from 0 to 512 [ 232.014685][ T8412] XFS (loop2): Quotacheck: Done. [ 232.030149][ T8450] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.046960][ T8450] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.120784][ T4364] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 232.129946][ T4364] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 232.160753][ T8412] XFS (loop2): User initiated shutdown received. [ 232.174122][ T8412] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 232.190235][ T8412] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 232.210606][ T4364] usb 8-1: Product: syz [ 232.214840][ T4364] usb 8-1: Manufacturer: syz [ 232.219486][ T4364] usb 8-1: SerialNumber: syz [ 232.332356][ T4364] usb 8-1: config 0 descriptor?? [ 232.380906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 232.390496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 232.402388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 232.413339][ T4194] XFS (loop2): Unmounting Filesystem [ 232.462418][ T4364] ch341 8-1:0.0: ch341-uart converter detected [ 232.738809][ T8472] loop5: detected capacity change from 0 to 1024 [ 232.860105][ T8472] hfsplus: bad catalog entry type [ 233.001937][ T4440] hfsplus: b-tree write err: -5, ino 4 [ 233.096909][ T8485] loop1: detected capacity change from 0 to 512 [ 233.141836][ T8487] loop5: detected capacity change from 0 to 512 [ 233.189492][ T8487] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.203041][ T8487] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.213978][ T8485] EXT4-fs (loop1): Ignoring removed bh option [ 233.282477][ T8493] loop6: detected capacity change from 0 to 512 [ 233.322861][ T8493] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 233.334166][ T8485] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 233.433084][ T8485] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.452436][ T8493] EXT4-fs (loop6): 1 orphan inode deleted [ 233.458324][ T8493] EXT4-fs (loop6): 1 truncate cleaned up [ 233.495332][ T8493] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 233.570750][ T4364] ch341-uart ttyUSB0: failed to read break control: -71 [ 233.578017][ T4364] ch341-uart: probe of ttyUSB0 failed with error -71 [ 233.628809][ T4364] usb 8-1: USB disconnect, device number 6 [ 233.642083][ T5358] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 233.669835][ T4364] ch341 8-1:0.0: device disconnected [ 233.756756][ T8511] binder: 8509:8511 ioctl c0306201 0 returned -14 [ 233.911597][ T5358] usb 3-1: Using ep0 maxpacket: 16 [ 234.030776][ T5358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.051789][ T5358] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.099429][ T8524] loop1: detected capacity change from 0 to 512 [ 234.248396][ T8524] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.260081][ T5358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.277335][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.297286][ T8524] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.322561][ T5358] usb 3-1: Product: syz [ 234.326864][ T5358] usb 3-1: Manufacturer: syz [ 234.362163][ T5358] usb 3-1: SerialNumber: syz [ 234.513539][ T8539] loop6: detected capacity change from 0 to 2048 [ 234.664732][ T8539] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.830919][ T8548] loop5: detected capacity change from 0 to 1024 [ 234.862974][ T8541] loop7: detected capacity change from 0 to 32768 [ 234.875248][ T5358] usb 3-1: cannot find UAC_HEADER [ 234.893900][ T8548] EXT4-fs (loop5): Ignoring removed nobh option [ 234.902735][ T8548] EXT4-fs (loop5): inline encryption not supported [ 234.909438][ T8548] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.962621][ T5358] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 234.970186][ T8541] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 234.998496][ T8541] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 235.021263][ T8548] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,nolazytime,resgid=0x0000000000000000,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: none. [ 235.026827][ T8541] BTRFS info (device loop7): trying to use backup root at mount time [ 235.098225][ T5358] usb 3-1: USB disconnect, device number 11 [ 235.139691][ T8548] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.1087: Allocating blocks 497-513 which overlap fs metadata [ 235.171359][ T8541] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 235.182089][ T8541] BTRFS info (device loop7): use zstd compression, level 3 [ 235.189403][ T8541] BTRFS error (device loop7): unrecognized mount option 'fsuuid=7' [ 235.214355][ T8541] BTRFS error (device loop7): open_ctree failed: -22 [ 235.242730][ T8548] EXT4-fs (loop5): pa ffff8880569fbee0: logic 128, phys. 385, len 8 [ 235.250871][ T8548] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 235.300714][ T4363] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.340395][ T4742] udevd[4742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.732239][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'. [ 235.814900][ T8570] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1095'. [ 235.841284][ T4363] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.867866][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.890670][ T8573] loop6: detected capacity change from 0 to 1024 [ 235.899798][ T4363] usb 2-1: Product: syz [ 235.911753][ T4363] usb 2-1: Manufacturer: syz [ 235.918061][ T4363] usb 2-1: SerialNumber: syz [ 235.950352][ T8573] EXT4-fs (loop6): Ignoring removed orlov option [ 236.000910][ T8573] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,quota,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: writeback. [ 236.031346][ T26] audit: type=1800 audit(1771535781.838:140): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1096" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 236.088779][ T26] audit: type=1800 audit(1771535781.888:141): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1096" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 236.125074][ T26] audit: type=1326 audit(1771535781.928:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.7.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07c0f01629 code=0x0 [ 236.984176][ T8594] loop6: detected capacity change from 0 to 32768 [ 237.125267][ T8594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1103 (8594) [ 237.183073][ T8607] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 237.211220][ T8594] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 237.222087][ T8594] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 237.249874][ T8607] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.260900][ T8594] BTRFS info (device loop6): trying to use backup root at mount time [ 237.269148][ T8594] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 237.327256][ T8594] BTRFS info (device loop6): use zstd compression, level 3 [ 237.340606][ T4363] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 237.340654][ T4363] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 237.390903][ T8594] BTRFS error (device loop6): unrecognized mount option 'fsuuid=7' [ 237.399983][ T8607] fs-verity (loop7, inode 18): Unknown hash algorithm number: 3 [ 237.465472][ T4363] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 237.497041][ T4363] lan78xx: probe of 2-1:1.0 failed with error -71 [ 237.537078][ T4363] usb 2-1: USB disconnect, device number 11 [ 237.559601][ T8594] BTRFS error (device loop6): open_ctree failed: -22 [ 237.576668][ T4742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (4742) [ 237.790456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 238.897926][ T8650] set_capacity_and_notify: 1 callbacks suppressed [ 238.897944][ T8650] loop7: detected capacity change from 0 to 512 [ 239.060190][ T8650] EXT4-fs (loop7): Ignoring removed oldalloc option [ 239.098534][ T8650] EXT4-fs (loop7): Ignoring removed bh option [ 239.148879][ T8650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 239.168747][ T8650] System zones: 1-12 [ 239.184229][ T8650] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.1123: corrupted in-inode xattr [ 239.207375][ T8650] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1123: couldn't read orphan inode 15 (err -117) [ 239.240788][ T8650] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,lazytime,oldalloc,lazytime,bh,,errors=continue. Quota mode: none. [ 239.415725][ T8662] loop5: detected capacity change from 0 to 128 [ 239.542749][ T8662] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 239.618698][ T8662] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.206997][ T8660] loop6: detected capacity change from 0 to 131072 [ 240.319795][ T8660] F2FS-fs (loop6): invalid crc value [ 240.359064][ T8660] F2FS-fs (loop6): Found nat_bits in checkpoint [ 240.418861][ T8660] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 240.767196][ T5577] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 241.020569][ T5577] usb 8-1: Using ep0 maxpacket: 8 [ 241.177914][ T8700] loop5: detected capacity change from 0 to 256 [ 241.300740][ T5577] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.320128][ T5577] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.348776][ T5577] usb 8-1: Product: syz [ 241.358907][ T5577] usb 8-1: Manufacturer: syz [ 241.365268][ T8700] FAT-fs (loop5): Directory bread(block 64) failed [ 241.383862][ T5577] usb 8-1: SerialNumber: syz [ 241.412828][ T8700] FAT-fs (loop5): Directory bread(block 65) failed [ 241.419511][ T8700] FAT-fs (loop5): Directory bread(block 66) failed [ 241.427129][ T5577] usb 8-1: config 0 descriptor?? [ 241.477308][ T8700] FAT-fs (loop5): Directory bread(block 67) failed [ 241.490679][ T8700] FAT-fs (loop5): Directory bread(block 68) failed [ 241.501817][ T8700] FAT-fs (loop5): Directory bread(block 69) failed [ 241.530739][ T8700] FAT-fs (loop5): Directory bread(block 70) failed [ 241.551008][ T8700] FAT-fs (loop5): Directory bread(block 71) failed [ 241.557784][ T8700] FAT-fs (loop5): Directory bread(block 72) failed [ 241.589281][ T8684] loop1: detected capacity change from 0 to 40427 [ 241.600586][ T8700] FAT-fs (loop5): Directory bread(block 73) failed [ 241.629233][ T8707] loop2: detected capacity change from 0 to 256 [ 241.668282][ T8684] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 241.689680][ T8684] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 241.691660][ T5577] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.738529][ T8707] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 241.780965][ T8684] F2FS-fs (loop1): invalid crc value [ 241.795437][ T8684] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.982813][ T8684] F2FS-fs (loop1): Start checkpoint disabled! [ 242.037795][ T8684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 242.160869][ T8684] attempt to access beyond end of device [ 242.160869][ T8684] loop1: rw=2049, want=45104, limit=40427 [ 242.268943][ T8712] attempt to access beyond end of device [ 242.268943][ T8712] loop1: rw=10241, want=45112, limit=40427 [ 242.377291][ T8694] loop6: detected capacity change from 0 to 65536 [ 242.483888][ T4445] attempt to access beyond end of device [ 242.483888][ T4445] loop1: rw=2049, want=40984, limit=40427 [ 242.550656][ T8694] XFS (loop6): Mounting V5 Filesystem [ 242.565899][ T8728] loop5: detected capacity change from 0 to 4096 [ 242.631737][ T5577] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 242.671421][ T5577] usb 8-1: USB disconnect, device number 7 [ 242.702704][ T8733] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.780790][ T8694] XFS (loop6): Ending clean mount [ 242.786523][ T26] audit: type=1800 audit(1771535788.588:143): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1151" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 242.914450][ T8728] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 243.006939][ T8728] Remounting filesystem read-only [ 243.038686][ T8739] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 243.146107][ T8739] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 243.161700][ T8743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1153'. [ 243.202623][ T8739] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 243.258171][ T26] audit: type=1800 audit(1771535789.058:144): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1151" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 243.378862][ T8748] loop2: detected capacity change from 0 to 7 [ 243.407757][ T4567] Dev loop2: unable to read RDB block 7 [ 243.439431][ T4567] loop2: unable to read partition table [ 243.472737][ T4567] loop2: partition table beyond EOD, truncated [ 243.488587][ T8748] Dev loop2: unable to read RDB block 7 [ 243.516922][ T8748] loop2: unable to read partition table [ 243.526873][ T8748] loop2: partition table beyond EOD, truncated [ 243.533721][ T8748] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.696197][ T8694] syz.6.1135 (8694): drop_caches: 2 [ 243.704781][ T8753] overlayfs: failed to resolve './file0': -2 [ 243.711438][ T4993] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 243.820932][ T4364] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 243.856700][ T8760] loop5: detected capacity change from 0 to 512 [ 243.907164][ T8760] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 243.981802][ T8760] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 244.001184][ T8760] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.060761][ T4364] usb 2-1: Using ep0 maxpacket: 32 [ 244.180628][ T4364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.217650][ T4364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.238168][ T4364] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 244.251279][ T4364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.278462][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.286020][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.302786][ T4364] usb 2-1: config 0 descriptor?? [ 244.327932][ T8775] device bridge_slave_1 left promiscuous mode [ 244.341778][ T4364] hub 2-1:0.0: USB hub found [ 244.351947][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.437992][ T5688] XFS (loop6): Unmounting Filesystem [ 244.491249][ T8775] device bridge_slave_0 left promiscuous mode [ 244.510752][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.571359][ T4364] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 244.965938][ T8780] input: syz0 as /devices/virtual/input/input24 [ 245.073068][ T4364] hid-generic 0003:046D:C31C.0011: unknown main item tag 0x0 [ 245.122455][ T4364] hid-generic 0003:046D:C31C.0011: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 245.275520][ T8778] loop5: detected capacity change from 0 to 40427 [ 245.325346][ T8788] loop2: detected capacity change from 0 to 256 [ 245.367155][ T8778] F2FS-fs (loop5): invalid crc value [ 245.412741][ T8778] F2FS-fs (loop5): Found nat_bits in checkpoint [ 245.431486][ T8788] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 245.567371][ T8778] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 245.653541][ T8778] attempt to access beyond end of device [ 245.653541][ T8778] loop5: rw=10241, want=45104, limit=40427 [ 245.760900][ T4364] usb 2-1: USB disconnect, device number 12 [ 245.915168][ T5362] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 246.145241][ T8802] loop6: detected capacity change from 0 to 32768 [ 246.325639][ T8808] loop7: detected capacity change from 0 to 1024 [ 246.334731][ T8802] jfs_lookup: iget failed on inum 4 [ 246.342364][ T5362] usb 3-1: config index 0 descriptor too short (expected 63780, got 36) [ 246.361726][ T5362] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 246.385197][ T8802] jfs_lookup: iget failed on inum 4 [ 246.399223][ T5362] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 246.422774][ T8810] jfs_lookup: iget failed on inum 4 [ 246.429386][ T8810] jfs_lookup: iget failed on inum 4 [ 246.440865][ T5362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 30, changing to 8 [ 246.462317][ T5362] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 246.481129][ T5362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.512847][ T5362] usb 3-1: config 0 descriptor?? [ 246.587549][ T8808] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.617576][ T8822] loop5: detected capacity change from 0 to 512 [ 246.724240][ T8822] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 246.823495][ T8822] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.869200][ T8808] overlayfs: conflicting lowerdir path [ 246.904087][ T8822] EXT4-fs warning (device loop5): verify_group_input:165: Last group not full [ 247.013874][ T5362] waltop 0003:172F:0501.0012: unbalanced delimiter at end of report description [ 247.064117][ T5362] waltop: probe of 0003:172F:0501.0012 failed with error -22 [ 247.247768][ T4258] usb 3-1: USB disconnect, device number 12 [ 247.349707][ T8851] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1190'. [ 247.406314][ T8855] syz.6.1192 sent an empty control message without MSG_MORE. [ 247.540748][ T5362] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 247.626029][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1196'. [ 247.642197][ T8863] netlink: 'syz.6.1196': attribute type 10 has an invalid length. [ 247.669987][ T8863] team0: Device vxcan1 is of different type [ 247.980861][ T5362] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.001906][ T5362] usb 8-1: config 0 interface 0 has no altsetting 0 [ 248.201161][ T5362] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.210330][ T5362] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.250258][ T5362] usb 8-1: Product: syz [ 248.272682][ T5362] usb 8-1: Manufacturer: syz [ 248.284438][ T5362] usb 8-1: SerialNumber: syz [ 248.316573][ T5362] usb 8-1: config 0 descriptor?? [ 248.383984][ T5362] usb 8-1: selecting invalid altsetting 0 [ 248.393541][ T8888] loop1: detected capacity change from 0 to 4096 [ 248.413242][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1207'. [ 248.431988][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1207'. [ 248.485600][ T8888] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 248.579334][ T8888] ntfs3: loop1: Failed to load $Extend. [ 248.656354][ T8845] usb 8-1: selecting invalid altsetting 0 [ 248.669993][ T8845] usb 8-1: 0:0: usb_set_interface failed (-22) [ 248.689024][ T5362] usb 8-1: USB disconnect, device number 8 [ 248.760673][ T8888] loop_set_status: loop1 () has still dirty pages (nrpages=8) [ 248.930043][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'. [ 249.144803][ T8907] loop2: detected capacity change from 0 to 2048 [ 249.153288][ T8909] loop1: detected capacity change from 0 to 64 [ 249.210144][ T8907] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.225563][ T8907] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.508427][ T8959] loop2: detected capacity change from 0 to 512 [ 250.627161][ T8959] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 250.650738][ T8959] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.739702][ T8939] loop7: detected capacity change from 0 to 32768 [ 250.784336][ T8939] XFS: attr2 mount option is deprecated. [ 250.950881][ T8939] XFS (loop7): Mounting V5 Filesystem [ 251.137652][ T8942] loop5: detected capacity change from 0 to 4096 [ 251.199421][ T8973] netlink: 'syz.2.1233': attribute type 10 has an invalid length. [ 251.229539][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.237215][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.255464][ T8942] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.269344][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.276704][ T8973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.284546][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.291717][ T8973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.342222][ T8973] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 251.355466][ T8939] XFS (loop7): Ending clean mount [ 251.371501][ T8939] XFS (loop7): Quotacheck needed: Please wait. [ 251.579754][ T8939] XFS (loop7): Quotacheck: Done. [ 251.659720][ T6590] XFS (loop7): Unmounting Filesystem [ 251.679469][ T8983] loop1: detected capacity change from 0 to 64 [ 251.838066][ T8985] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 251.838066][ T8985] program syz.5.1238 not setting count and/or reply_len properly [ 251.855178][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.230030][ T8994] user requested TSC rate below hardware speed [ 252.237196][ T8994] Disabled LAPIC found during irq injection [ 252.348378][ T8998] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 252.419068][ T8998] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 252.450030][ T8998] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1243'. [ 252.679341][ T9013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'. [ 253.121079][ T9031] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+¼ingult [ 253.683252][ T9053] loop2: detected capacity change from 0 to 512 [ 253.753809][ T9053] EXT4-fs (loop2): Ignoring removed bh option [ 253.838550][ T9053] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 253.886903][ T9053] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.917955][ T9029] loop1: detected capacity change from 0 to 32768 [ 253.961379][ T9029] gfs2: Unknown parameter '' [ 254.340591][ T4369] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 254.590556][ T4369] usb 8-1: Using ep0 maxpacket: 16 [ 254.641563][ T9074] loop6: detected capacity change from 0 to 256 [ 254.711276][ T4369] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.731996][ T9074] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.751574][ T4369] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.761830][ T9074] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 254.772617][ T4369] usb 8-1: config 0 interface 0 has no altsetting 0 [ 254.781594][ T9074] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 254.793935][ T4369] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 254.803190][ T4369] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.853563][ T4369] usb 8-1: config 0 descriptor?? [ 254.907814][ T9082] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 255.007581][ T9082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.083897][ T9088] loop2: detected capacity change from 0 to 512 [ 255.171204][ T9085] bond2: (slave dummy0): making interface the new active one [ 255.187053][ T9085] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 255.202432][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 255.247592][ T9088] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1278: bad orphan inode 11862016 [ 255.271735][ T9094] loop5: detected capacity change from 0 to 256 [ 255.320566][ T9088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.340602][ T9088] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.363492][ T4369] hid-generic 0003:1E71:2009.0013: unknown main item tag 0x0 [ 255.380593][ T4369] hid-generic 0003:1E71:2009.0013: unknown main item tag 0x0 [ 255.449141][ T4369] hid-generic 0003:1E71:2009.0013: unknown main item tag 0x0 [ 255.489859][ T4369] hid-generic 0003:1E71:2009.0013: unknown main item tag 0x0 [ 255.501022][ T9088] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #18: comm syz.2.1278: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 255.530386][ T4369] hid-generic 0003:1E71:2009.0013: unknown main item tag 0x0 [ 255.605195][ T4369] hid-generic 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 255.705182][ T4369] usb 8-1: USB disconnect, device number 9 [ 255.745677][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.752488][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.984784][ T9098] loop1: detected capacity change from 0 to 65536 [ 256.021591][ T9098] XFS (loop1): Mounting V5 Filesystem [ 256.056985][ T9104] fido_id[9104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 256.301449][ T9098] XFS (loop1): Ending clean mount [ 256.430240][ T4190] XFS (loop1): Unmounting Filesystem [ 256.570713][ T4363] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 256.835150][ T4363] usb 3-1: Using ep0 maxpacket: 8 [ 256.890675][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1289'. [ 257.121331][ T4363] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 257.132123][ T4363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.140167][ T4363] usb 3-1: Product: syz [ 257.144592][ T4363] usb 3-1: Manufacturer: syz [ 257.149234][ T4363] usb 3-1: SerialNumber: syz [ 257.169298][ T4363] usb 3-1: config 0 descriptor?? [ 257.430781][ T4363] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 258.169310][ T9176] loop7: detected capacity change from 0 to 512 [ 258.224784][ T9176] FAT-fs (loop7): bogus number of FAT sectors [ 258.277285][ T9176] FAT-fs (loop7): Can't find a valid FAT filesystem [ 258.552932][ T6197] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 258.636730][ T9187] loop5: detected capacity change from 0 to 128 [ 258.664547][ T9187] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc,. Quota mode: none. [ 258.680867][ T9187] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.780956][ T4363] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 258.793092][ T4363] usb 3-1: USB disconnect, device number 13 [ 258.800690][ T6197] usb 7-1: Using ep0 maxpacket: 8 [ 258.935150][ T6197] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 258.949279][ T6197] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.964886][ T6197] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.976280][ T6197] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.999163][ T6197] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.016670][ T6197] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.026055][ T6197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.223588][ T9201] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.307225][ T6197] usb 7-1: usb_control_msg returned -32 [ 259.316879][ T6197] usbtmc 7-1:16.0: can't read capabilities [ 259.429023][ C0] Unknown status report in ack skb [ 259.616015][ T4271] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 259.771209][ T9215] loop5: detected capacity change from 0 to 512 [ 259.809599][ T9215] EXT4-fs (loop5): Ignoring removed oldalloc option [ 259.833345][ T9215] EXT4-fs (loop5): Ignoring removed bh option [ 259.862506][ T9215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 259.873873][ T4363] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 259.881159][ T9215] System zones: 1-12 [ 259.891023][ T9213] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -71 [ 259.896755][ T6760] usb 7-1: USB disconnect, device number 9 [ 259.911070][ T9215] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.1322: corrupted in-inode xattr [ 259.924025][ T9215] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1322: couldn't read orphan inode 15 (err -117) [ 259.937821][ T9215] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,lazytime,oldalloc,lazytime,bh,,errors=continue. Quota mode: none. [ 259.987005][ T9204] loop2: detected capacity change from 0 to 40427 [ 260.000748][ T4271] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.020581][ T4271] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.041158][ T4271] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.060507][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.087615][ T9204] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 260.100748][ T9204] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 260.118606][ T9204] F2FS-fs (loop2): invalid crc value [ 260.130727][ T4363] usb 8-1: Using ep0 maxpacket: 8 [ 260.144933][ T9204] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.250601][ T4363] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.279036][ T4363] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.314025][ T4363] usb 8-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 260.343626][ T4363] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.375851][ T4363] usb 8-1: config 0 descriptor?? [ 260.380978][ T4271] usb 2-1: usb_control_msg returned -32 [ 260.381014][ T4271] usbtmc 2-1:16.0: can't read capabilities [ 260.463240][ T9204] F2FS-fs (loop2): Start checkpoint disabled! [ 260.525839][ T9204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 260.678324][ T9204] attempt to access beyond end of device [ 260.678324][ T9204] loop2: rw=2049, want=45104, limit=40427 [ 260.730462][ T9226] attempt to access beyond end of device [ 260.730462][ T9226] loop2: rw=10241, want=45112, limit=40427 [ 260.907034][ T4445] attempt to access beyond end of device [ 260.907034][ T4445] loop2: rw=2049, want=40984, limit=40427 [ 260.977796][ T4363] wacom 0003:056A:0059.0014: unbalanced collection at end of report description [ 261.013178][ T4363] wacom 0003:056A:0059.0014: parse failed [ 261.019040][ T4363] wacom: probe of 0003:056A:0059.0014 failed with error -22 [ 261.199386][ T4232] usb 8-1: USB disconnect, device number 10 [ 261.433070][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 261.446542][ T9237] netlink: 'syz.6.1330': attribute type 1 has an invalid length. [ 261.458060][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 261.482177][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 261.498803][ T9237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.521591][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 261.601123][ T9239] bond1: (slave geneve2): making interface the new active one [ 261.629367][ T9241] loop5: detected capacity change from 0 to 764 [ 261.638715][ T9239] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 261.651931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 261.712679][ T9241] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 261.917578][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 261.932638][ T9246] loop6: detected capacity change from 0 to 2048 [ 262.105800][ T9246] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000002000,. Quota mode: writeback. [ 262.228294][ T9246] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.336388][ T4271] usb 2-1: USB disconnect, device number 13 [ 262.343723][ T9246] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 262.750644][ T4227] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 262.870590][ T4271] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 262.966759][ T9262] loop2: detected capacity change from 0 to 32768 [ 263.000543][ T4227] usb 6-1: Using ep0 maxpacket: 8 [ 263.046757][ T9262] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 263.090664][ T9262] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 263.120577][ T4271] usb 2-1: Using ep0 maxpacket: 32 [ 263.126377][ T9262] BTRFS info (device loop2): trying to use backup root at mount time [ 263.145906][ T9262] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 263.188220][ T9262] BTRFS info (device loop2): use zstd compression, level 3 [ 263.228934][ T9262] BTRFS error (device loop2): unrecognized mount option 'fsuuid=7' [ 263.259519][ T9262] BTRFS error (device loop2): open_ctree failed: -22 [ 263.305587][ T4227] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 263.336592][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.390470][ T4227] usb 6-1: Product: syz [ 263.394873][ T4227] usb 6-1: Manufacturer: syz [ 263.428712][ T4227] usb 6-1: SerialNumber: syz [ 263.464187][ T4271] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 263.478047][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.523495][ T4271] usb 2-1: Product: syz [ 263.539828][ T4271] usb 2-1: Manufacturer: syz [ 263.555528][ T4271] usb 2-1: SerialNumber: syz [ 263.569850][ T4271] usb 2-1: config 0 descriptor?? [ 263.728211][ T4227] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.844817][ T4271] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 014 [ 263.971844][ T4227] usb 6-1: USB disconnect, device number 11 [ 263.981252][ T4227] usblp0: removed [ 264.587891][ T9291] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1348'. [ 264.646217][ T9292] netlink: 'syz.5.1348': attribute type 4 has an invalid length. [ 264.672893][ T9289] loop6: detected capacity change from 0 to 32768 [ 264.782283][ T4227] usb 2-1: USB disconnect, device number 14 [ 264.822185][ T9289] XFS (loop6): Mounting V5 Filesystem [ 264.956628][ T9289] XFS (loop6): Ending clean mount [ 264.987166][ T9289] XFS (loop6): Quotacheck needed: Please wait. [ 265.105496][ T9289] XFS (loop6): Quotacheck: Done. [ 265.319611][ T9314] tipc: Started in network mode [ 265.348916][ T5688] XFS (loop6): Unmounting Filesystem [ 265.366032][ T9314] tipc: Node identity 4, cluster identity 4711 [ 265.397728][ T9314] tipc: Node number set to 4 [ 265.455669][ T419] tipc: Subscription rejected, illegal request [ 265.667723][ T9330] loop7: detected capacity change from 0 to 256 [ 265.881855][ T9330] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 267.946968][ T9397] loop5: detected capacity change from 0 to 128 [ 268.035720][ T9397] EXT4-fs (loop5): Ignoring removed nobh option [ 268.127690][ T9397] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 268.151142][ T9397] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.479725][ T9386] loop7: detected capacity change from 0 to 40427 [ 268.519392][ T9386] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff [ 268.612860][ T9386] F2FS-fs (loop7): invalid crc value [ 268.658509][ T9386] F2FS-fs (loop7): Found nat_bits in checkpoint [ 268.896837][ T9386] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 269.087549][ T6590] attempt to access beyond end of device [ 269.087549][ T6590] loop7: rw=2049, want=45104, limit=40427 [ 269.780116][ T9442] loop6: detected capacity change from 0 to 256 [ 269.816828][ T9442] exfat: Deprecated parameter 'namecase' [ 269.893699][ T9442] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 269.921205][ T9444] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1394'. [ 270.228611][ T9457] loop1: detected capacity change from 0 to 128 [ 270.235193][ T4363] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 270.320553][ T9457] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 270.320553][ T9457] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 270.320553][ T9457] [ 270.380132][ T9457] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,max_batch_time=0x0000000000000008,max_dir_size_kb=0x0000000000000006,dioread_lock,,errors=continue. Quota mode: none. [ 270.401676][ T9457] ext4 filesystem being mounted at /285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.454772][ T9457] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 1701996919 (only 1 groups) [ 270.646310][ T9471] loop1: detected capacity change from 0 to 128 [ 270.663870][ T9471] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 270.727759][ T9471] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 270.771447][ T4363] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 270.782879][ T4363] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.793970][ T4363] usb 8-1: Product: syz [ 270.799122][ T4363] usb 8-1: Manufacturer: syz [ 270.804329][ T4363] usb 8-1: SerialNumber: syz [ 270.811500][ T4363] usb 8-1: config 0 descriptor?? [ 270.868756][ T4363] ch341 8-1:0.0: ch341-uart converter detected [ 270.980896][ T9474] loop1: detected capacity change from 0 to 1024 [ 271.066945][ T9474] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 271.092981][ T9474] EXT4-fs (loop1): orphan cleanup on readonly fs [ 271.158842][ T9474] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.1404: Invalid inode table block 0 in block_group 0 [ 271.235950][ T9474] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 271.275278][ T9474] EXT4-fs error (device loop1): ext4_quota_write:6646: inode #3: comm syz.1.1404: mark_inode_dirty error [ 271.321171][ T9483] loop5: detected capacity change from 0 to 512 [ 271.332169][ T9474] Quota error (device loop1): write_blk: dquota write failed [ 271.360246][ T9474] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 271.380705][ T9483] EXT4-fs (loop5): Ignoring removed bh option [ 271.426153][ T9474] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.1404: Failed to acquire dquot type 0 [ 271.485710][ T9474] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.1404: Invalid inode table block 0 in block_group 0 [ 271.510158][ T9483] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 271.530682][ T9474] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 271.576783][ T9474] EXT4-fs error (device loop1): ext4_ext_truncate:4456: inode #15: comm syz.1.1404: mark_inode_dirty error [ 271.636642][ T9483] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.655244][ T9474] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.1404: Invalid inode table block 0 in block_group 0 [ 271.751423][ T9474] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 271.792116][ T9474] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 271.830242][ T9474] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.1404: Invalid inode table block 0 in block_group 0 [ 271.877188][ T9474] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 271.889235][ T9474] EXT4-fs error (device loop1): ext4_truncate:4279: inode #15: comm syz.1.1404: mark_inode_dirty error [ 271.911273][ T9474] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 271.927261][ T9474] EXT4-fs (loop1): 1 truncate cleaned up [ 271.934183][ T9474] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.005039][ T9473] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.1404: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 272.181458][ T6197] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 272.190116][ T4363] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 272.399639][ T4364] usb 8-1: USB disconnect, device number 11 [ 272.420980][ T4364] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 272.431137][ T6197] usb 7-1: Using ep0 maxpacket: 32 [ 272.445936][ T4364] ch341 8-1:0.0: device disconnected [ 272.551081][ T6197] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 272.564207][ T6197] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 272.576771][ T6197] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 272.589463][ T6197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.605324][ T6197] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.615446][ T6197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 272.642249][ T6197] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 272.655824][ T6197] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.703928][ T6197] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 272.724415][ T6197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.751617][ T6197] usb 7-1: config 0 descriptor?? [ 272.792057][ T9501] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 273.042306][ T6197] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 273.178944][ T9515] loop7: detected capacity change from 0 to 4096 [ 273.296910][ T9521] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 273.340465][ C0] usblp0: nonzero read bulk status received: -71 [ 273.360804][ T4271] usb 7-1: USB disconnect, device number 10 [ 273.379276][ T9521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.389655][ T9525] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 273.846980][ T9501] usblp0: removed [ 273.923598][ T9537] tipc: New replicast peer: 0.0.0.0 [ 273.939749][ T9537] tipc: Enabled bearer , priority 10 [ 274.268636][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1435'. [ 275.000278][ T9556] loop5: detected capacity change from 0 to 32768 [ 275.033608][ T9556] XFS: ikeep mount option is deprecated. [ 275.241397][ T9556] XFS (loop5): Mounting V5 Filesystem [ 275.260664][ T4363] Bluetooth: hci1: command 0x0401 tx timeout [ 275.351797][ T9556] XFS (loop5): Ending clean mount [ 275.428554][ T4271] kernel read not supported for file /admmidi2 (pid: 4271 comm: kworker/0:7) [ 275.611954][ T4993] XFS (loop5): Unmounting Filesystem [ 276.606731][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1455'. [ 276.627259][ T9617] device hsr_slave_0 left promiscuous mode [ 276.651683][ T9617] device hsr_slave_1 left promiscuous mode [ 276.987546][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1459'. [ 277.251244][ T9630] loop7: detected capacity change from 0 to 256 [ 277.286791][ T9634] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 277.324654][ T9630] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.381724][ T9630] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 277.445920][ T9630] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 277.627548][ T26] audit: type=1804 audit(1771536079.429:145): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1460" name="/newroot/139/file0/file0/file1" dev="loop7" ino=1048669 res=1 errno=0 [ 278.213436][ T9666] loop5: detected capacity change from 0 to 128 [ 278.298706][ T9661] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 278.307360][ T4227] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 278.351814][ T9661] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 278.394587][ T9652] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 278.410550][ T9652] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 278.438181][ T26] audit: type=1326 audit(1771536080.239:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.7.1476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07c0f01629 code=0x0 [ 278.760728][ T4227] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.790135][ T4227] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 278.810364][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.819994][ T4227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 278.850891][ T4227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 279.020960][ T4227] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.049131][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.058878][ T4227] usb 3-1: Product: syz [ 279.064701][ T4227] usb 3-1: Manufacturer: syz [ 279.125135][ T4227] cdc_wdm 3-1:1.0: skipping garbage [ 279.138290][ T4227] cdc_wdm 3-1:1.0: skipping garbage [ 279.155361][ T4227] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 279.167986][ T4227] cdc_wdm 3-1:1.0: Unknown control protocol [ 279.368581][ T9693] loop6: detected capacity change from 0 to 40427 [ 279.405316][ T4227] usb 3-1: USB disconnect, device number 14 [ 279.470741][ T9693] F2FS-fs (loop6): Found nat_bits in checkpoint [ 279.521815][ T9693] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 279.612722][ T5688] attempt to access beyond end of device [ 279.612722][ T5688] loop6: rw=2049, want=45128, limit=40427 [ 279.963582][ T9708] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 280.201136][ T9715] loop2: detected capacity change from 0 to 512 [ 280.310707][ T9715] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.333291][ T9715] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.475813][ T9724] loop5: detected capacity change from 0 to 256 [ 280.579850][ T26] audit: type=1800 audit(1771536082.379:147): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1495" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=1048674 res=0 errno=0 [ 281.385958][ T9740] loop7: detected capacity change from 0 to 512 [ 281.464614][ T9740] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.554176][ T9740] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 281.618987][ T9738] loop6: detected capacity change from 0 to 8192 [ 281.709174][ T9738] REISERFS warning (device loop6): super-6502 reiserfs_getopt: unknown mount option "seclabel" [ 281.726924][ T9740] EXT4-fs (loop7): 1 truncate cleaned up [ 281.748265][ T9740] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,resuid=0x0000000000000000,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 281.800713][ T9735] loop2: detected capacity change from 0 to 131072 [ 281.894823][ T9735] F2FS-fs (loop2): invalid crc value [ 281.997386][ T9735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.038855][ T9735] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 282.088529][ T9735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 282.163272][ T9752] netlink: 'syz.5.1503': attribute type 25 has an invalid length. [ 282.197028][ T9752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1503'. [ 282.663717][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1508'. [ 282.700085][ T9766] device hsr_slave_0 left promiscuous mode [ 282.726837][ T9766] device hsr_slave_1 left promiscuous mode [ 283.122877][ T9738] loop6: detected capacity change from 0 to 40427 [ 283.227448][ T9738] F2FS-fs (loop6): invalid crc value [ 283.270551][ T6197] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 283.308313][ T9738] F2FS-fs (loop6): Found nat_bits in checkpoint [ 283.526906][ T9738] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 283.603133][ T9779] loop7: detected capacity change from 0 to 512 [ 283.640594][ T6197] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.660524][ T6197] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.692614][ T5688] attempt to access beyond end of device [ 283.692614][ T5688] loop6: rw=2049, want=45104, limit=40427 [ 283.751016][ T9779] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 283.830797][ T6197] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.846909][ T6197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.855698][ T6197] usb 6-1: Product: syz [ 283.860015][ T6197] usb 6-1: Manufacturer: syz [ 283.865222][ T6197] usb 6-1: SerialNumber: syz [ 283.872347][ T9779] EXT4-fs (loop7): 1 truncate cleaned up [ 283.878244][ T9779] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 284.097616][ T9779] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 284.158369][ T9779] EXT4-fs (loop7): Remounting filesystem read-only [ 284.188758][ T9779] EXT4-fs error (device loop7): __ext4_new_inode:1350: inode #18: comm syz.7.1512: mark_inode_dirty error [ 284.236337][ T9779] EXT4-fs (loop7): Remounting filesystem read-only [ 284.260915][ T9779] EXT4-fs error (device loop7) in __ext4_new_inode:1352: Corrupt filesystem [ 284.284508][ T9779] EXT4-fs (loop7): Remounting filesystem read-only [ 284.308276][ T9779] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 284.323680][ T9795] overlayfs: upper fs does not support file handles, falling back to index=off. [ 284.346099][ T9779] EXT4-fs (loop7): Remounting filesystem read-only [ 284.360662][ T9779] EXT4-fs error (device loop7): ext4_evict_inode:282: inode #18: comm syz.7.1512: mark_inode_dirty error [ 284.382699][ T6197] usb 6-1: 0:2 : does not exist [ 284.388967][ T9779] EXT4-fs (loop7): Remounting filesystem read-only [ 284.401035][ T9779] EXT4-fs warning (device loop7): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 284.564550][ T9801] "syz.7.1517" (9801) uses obsolete ecb(arc4) skcipher [ 284.816950][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1519'. [ 284.839347][ T6197] usb 6-1: USB disconnect, device number 12 [ 284.904502][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1519'. [ 285.020325][ T9815] loop7: detected capacity change from 0 to 1024 [ 285.086822][ T9815] EXT4-fs (loop7): Ignoring removed orlov option [ 285.142836][ T9815] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,nobarrier,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 285.480524][ T6197] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 285.489354][ T9830] loop5: detected capacity change from 0 to 256 [ 285.546827][ T9830] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.599081][ T9830] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 285.648298][ T9830] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 285.850754][ T6197] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.892304][ T6197] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.899307][ T6197] usb 3-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 285.910226][ T6197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.939387][ T6197] usb 3-1: config 0 descriptor?? [ 286.442413][ T6197] logitech 0003:046D:C215.0015: unbalanced collection at end of report description [ 286.468031][ T6197] logitech 0003:046D:C215.0015: parse failed [ 286.500531][ T6197] logitech: probe of 0003:046D:C215.0015 failed with error -22 [ 286.702446][ T4271] usb 3-1: USB disconnect, device number 15 [ 287.095645][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1545'. [ 287.160598][ T4232] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 287.431403][ T4232] usb 8-1: Using ep0 maxpacket: 8 [ 287.570729][ T4232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.595326][ T4232] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.612933][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.635989][ T4232] usb 8-1: config 0 descriptor?? [ 287.848073][ T9895] netlink: 'syz.6.1553': attribute type 1 has an invalid length. [ 287.917844][ T4232] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 287.917888][ T9895] bond2: (slave gretap1): making interface the new active one [ 287.941895][ T9895] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 288.224954][ T9902] loop6: detected capacity change from 0 to 64 [ 288.441938][ T4271] usb 8-1: USB disconnect, device number 12 [ 288.542067][ T9911] loop2: detected capacity change from 0 to 512 [ 288.692814][ T9911] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 288.741149][ T9911] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.863006][ T9911] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.1559: Invalid inode table block 1991734912 in block_group 0 [ 288.966257][ T9911] EXT4-fs (loop2): Remounting filesystem read-only [ 289.121496][ T9932] loop1: detected capacity change from 0 to 512 [ 289.205664][ T9932] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.263094][ T9940] loop5: detected capacity change from 0 to 64 [ 289.279772][ T9932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 289.402639][ T9932] EXT4-fs (loop1): 1 truncate cleaned up [ 289.421369][ T9932] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,resuid=0x0000000000000000,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 289.915448][ T4232] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 289.940776][ T4271] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 290.238536][ T4271] usb 3-1: Using ep0 maxpacket: 32 [ 290.338385][ T9962] kvm [9960]: vcpu0, guest rIP: 0x913e disabled perfctr wrmsr: 0xc1 data 0x14 [ 290.352048][ T9962] kvm [9960]: vcpu0, guest rIP: 0x913e disabled perfctr wrmsr: 0xc2 data 0x3b [ 290.375251][ T4232] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.393239][ T4232] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 290.409068][ T4271] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 290.418956][ T4271] usb 3-1: config 0 has no interface number 0 [ 290.430049][ T4232] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 290.446384][ T9962] kvm [9960]: vcpu0, guest rIP: 0x913e ignored wrmsr: 0x11e data 0xbe702155 [ 290.456061][ T4232] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 290.487897][ T9962] kvm [9960]: vcpu0, guest rIP: 0x913e disabled perfctr wrmsr: 0x186 data 0x3b [ 290.518650][ T9962] kvm [9960]: vcpu0, guest rIP: 0x913e disabled perfctr wrmsr: 0x187 data 0xb0 [ 290.537786][ T9962] kvm [9960]: vcpu0, guest rIP: 0x913e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xea, nop [ 290.610888][ T4271] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 290.621547][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.629976][ T4271] usb 3-1: Product: syz [ 290.635224][ T4232] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.644518][ T4271] usb 3-1: Manufacturer: syz [ 290.649396][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.658138][ T4271] usb 3-1: SerialNumber: syz [ 290.664090][ T4232] usb 7-1: Product: syz [ 290.675346][ T4271] usb 3-1: config 0 descriptor?? [ 290.681325][ T4232] usb 7-1: Manufacturer: syz [ 290.686498][ T4232] usb 7-1: SerialNumber: syz [ 290.730924][ T9947] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 290.739220][ T4271] smsc95xx v2.0.0 [ 290.762394][ T4232] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 290.769758][ T4232] cdc_ncm 7-1:1.0: bind() failure [ 290.779375][ T4232] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 290.786560][ T4232] cdc_ncm 7-1:1.1: bind() failure [ 291.036506][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1582'. [ 291.180734][ T4271] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 291.206202][ T4271] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 291.434092][ C1] Unknown status report in ack skb [ 291.569319][T10003] loop5: detected capacity change from 0 to 512 [ 291.617190][T10003] EXT4-fs (loop5): Ignoring removed bh option [ 291.692681][T10003] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 291.739164][T10003] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.820323][T10008] loop1: detected capacity change from 0 to 128 [ 292.033787][T10008] loop1: detected capacity change from 0 to 8 [ 292.105114][T10008] unable to read inode lookup table [ 292.150900][ T4271] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 292.173019][ T4271] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 292.237202][ T4271] usb 3-1: USB disconnect, device number 16 [ 292.637731][ T6197] usb 7-1: USB disconnect, device number 11 [ 292.695294][T10025] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1602'. [ 292.780774][ T4232] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 293.060565][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 293.083769][T10042] device syzkaller1 entered promiscuous mode [ 293.206144][ T4232] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 293.220632][ T4232] usb 2-1: config 179 has no interface number 0 [ 293.250880][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 293.293062][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 293.334946][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 293.356751][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 293.383271][ T4232] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 293.407228][ T4232] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 293.427548][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.491334][T10019] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 293.753069][ T4227] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 293.821568][ T4232] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 294.053113][ T4227] usb 6-1: Using ep0 maxpacket: 16 [ 294.135584][T10019] udc-core: couldn't find an available UDC or it's busy [ 294.157154][T10019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 294.201138][ T4227] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.220511][ T4227] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.397845][ T5362] usb 2-1: USB disconnect, device number 15 [ 294.420461][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 294.429896][ T4227] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.439193][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.449630][ T5362] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 294.465647][ T4227] usb 6-1: Product: syz [ 294.469945][ T4227] usb 6-1: Manufacturer: syz [ 294.492153][ T4227] usb 6-1: SerialNumber: syz [ 294.850772][ T4227] usb 6-1: 0:2 : does not exist [ 294.911746][ T4227] usb 6-1: USB disconnect, device number 13 [ 295.228496][ T4742] udevd[4742]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.551858][T10097] loop1: detected capacity change from 0 to 256 [ 295.638235][T10097] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.685730][T10097] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 295.710767][T10097] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 296.568800][T10117] loop5: detected capacity change from 0 to 512 [ 296.661228][T10117] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.717873][T10117] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 297.069404][T10132] loop6: detected capacity change from 0 to 256 [ 297.161641][T10132] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 297.178211][T10126] loop7: detected capacity change from 0 to 65536 [ 297.204067][T10117] EXT4-fs (loop5): 1 truncate cleaned up [ 297.212285][T10117] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,resuid=0x0000000000000000,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 297.335287][T10126] XFS (loop7): Mounting V5 Filesystem [ 297.511152][T10126] XFS (loop7): Ending clean mount [ 297.529479][T10126] XFS (loop7): Quotacheck needed: Please wait. [ 297.743629][T10126] XFS (loop7): Quotacheck: Done. [ 298.027159][ T6590] XFS (loop7): Unmounting Filesystem [ 298.243531][T10164] loop5: detected capacity change from 0 to 764 [ 298.470951][T10164] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 298.670767][ T6197] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 299.040583][ T6197] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.060242][ T6197] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.062292][ T5362] kernel read not supported for file /dsp (pid: 5362 comm: kworker/0:15) [ 299.170985][ T6197] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.180317][ T6197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.215240][ T6197] usb 7-1: SerialNumber: syz [ 299.523330][ T6197] usb 7-1: 0:2 : does not exist [ 299.571364][ T6197] usb 7-1: USB disconnect, device number 12 [ 299.707853][T10174] loop2: detected capacity change from 0 to 65536 [ 299.828910][ T4742] udevd[4742]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.868818][T10174] XFS (loop2): Mounting V5 Filesystem [ 299.971990][T10174] XFS (loop2): Ending clean mount [ 300.151453][T10195] loop6: detected capacity change from 0 to 512 [ 300.368651][T10174] syz.2.1651 (10174): drop_caches: 2 [ 300.389404][T10195] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.428562][T10195] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 300.474621][T10195] EXT4-fs (loop6): 1 truncate cleaned up [ 300.500632][T10195] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,resuid=0x0000000000000000,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 301.148793][T10192] loop1: detected capacity change from 0 to 32768 [ 301.296820][T10192] XFS (loop1): Mounting V5 Filesystem [ 301.438150][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1658'. [ 301.550096][T10192] XFS (loop1): Ending clean mount [ 301.558774][T10192] XFS (loop1): Quotacheck needed: Please wait. [ 301.708710][T10192] XFS (loop1): Quotacheck: Done. [ 301.910468][ T4194] XFS (loop2): Unmounting Filesystem [ 302.105945][ T4190] XFS (loop1): Unmounting Filesystem [ 303.567968][T10250] loop2: detected capacity change from 0 to 65536 [ 303.670915][T10250] XFS (loop2): Mounting V5 Filesystem [ 303.778994][T10250] XFS (loop2): Ending clean mount [ 303.785869][T10250] XFS (loop2): Quotacheck needed: Please wait. [ 303.898118][T10250] XFS (loop2): Quotacheck: Done. [ 304.051680][ T4194] XFS (loop2): Unmounting Filesystem [ 304.297535][T10281] loop1: detected capacity change from 0 to 1024 [ 304.548021][T10281] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 304.624002][T10284] loop6: detected capacity change from 0 to 2048 [ 304.798594][T10284] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 304.844959][T10284] UDF-fs: Scanning with blocksize 512 failed [ 304.876896][T10252] loop5: detected capacity change from 0 to 65536 [ 304.899022][T10284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.058938][T10252] XFS (loop5): Mounting V5 Filesystem [ 305.138967][T10300] overlayfs: upper fs does not support file handles, falling back to index=off. [ 305.150548][ T4369] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 305.259287][T10252] XFS (loop5): Ending clean mount [ 305.400578][ T4369] usb 2-1: Using ep0 maxpacket: 32 [ 305.525383][ T4369] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 305.549229][ T4369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.577904][T10252] syz.5.1673 (10252): drop_caches: 2 [ 305.589818][ T4369] usb 2-1: config 0 descriptor?? [ 305.632836][ T4369] gspca_main: sq930x-2.14.0 probing 041e:403c [ 305.902567][T10321] loop2: detected capacity change from 0 to 2048 [ 306.004705][T10321] loop2: p2 < > p4 [ 306.012624][T10321] loop2: p4 size 262144 extends beyond EOD, truncated [ 306.350886][ T5362] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 306.386172][ T4993] XFS (loop5): Unmounting Filesystem [ 306.433647][T10339] loop6: detected capacity change from 0 to 2048 [ 306.550987][T10339] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.630832][ T5362] usb 3-1: Using ep0 maxpacket: 32 [ 306.710573][ T4369] gspca_sq930x: ucbus_write failed -71 [ 306.716166][ T4369] sq930x: probe of 2-1:0.0 failed with error -71 [ 306.739131][ T4369] usb 2-1: USB disconnect, device number 16 [ 306.767960][T10344] loop6: detected capacity change from 0 to 512 [ 306.775025][ T5362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 306.786332][ T5362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 306.805904][ T5362] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.815317][ T5362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.832919][ T5362] usb 3-1: config 0 descriptor?? [ 306.853870][T10344] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1701: bg 0: block 288: padding at end of block bitmap is not set [ 306.871712][T10321] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 306.891723][ T5362] hub 3-1:0.0: USB hub found [ 306.897053][T10344] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 306.966193][T10344] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1701: attempt to clear invalid blocks 1024 len 1 [ 306.988106][T10344] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1701: invalid indirect mapped block 1819239214 (level 0) [ 307.005161][T10344] EXT4-fs (loop6): 1 truncate cleaned up [ 307.013272][T10344] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.077514][T10344] EXT4-fs error (device loop6): ext4_ind_map_blocks:604: inode #2: comm syz.6.1701: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 307.100724][ T5362] hub 3-1:0.0: 1 port detected [ 307.297124][T10353] loop1: detected capacity change from 0 to 512 [ 307.350793][T10355] blk_update_request: I/O error, dev loop13, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 307.375311][T10353] EXT4-fs (loop1): Ignoring removed orlov option [ 307.382351][T10353] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 307.400788][T10355] EXT4-fs (loop13): unable to read superblock [ 307.437931][T10353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 307.512602][T10353] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.1705: corrupted in-inode xattr [ 307.548837][T10353] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1705: couldn't read orphan inode 15 (err -117) [ 307.616841][T10353] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 307.898757][T10369] loop6: detected capacity change from 0 to 512 [ 308.027991][T10369] EXT4-fs (loop6): Ignoring removed bh option [ 308.067604][ T4227] usb 3-1: USB disconnect, device number 17 [ 308.073983][ T5362] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 308.163927][T10369] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 308.180730][T10369] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.555381][T10379] loop6: detected capacity change from 0 to 1024 [ 308.948266][ T4435] hfsplus: bad catalog file entry [ 308.964212][ T4435] hfsplus: b-tree write err: -5, ino 3 [ 309.127060][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.138970][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.148921][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.159682][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.169806][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.181156][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.192826][T10398] batman_adv: batadv0: Adding interface: ipvlan2 [ 309.199205][T10398] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.225120][T10398] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 309.384287][T10403] loop6: detected capacity change from 0 to 16 [ 309.534566][T10403] erofs: (device loop6): mounted with root inode @ nid 36. [ 309.555843][T10403] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.788699][T10411] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1724'. [ 309.832111][T10413] loop5: detected capacity change from 0 to 512 [ 309.851214][T10411] netlink: 'syz.6.1724': attribute type 4 has an invalid length. [ 309.971792][T10413] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 310.036654][T10413] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 310.077643][T10413] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1725: Corrupt directory, running e2fsck is recommended [ 310.097676][T10413] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 310.106730][T10413] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.1725: corrupted in-inode xattr [ 310.120521][T10413] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1725: couldn't read orphan inode 15 (err -117) [ 310.133470][T10413] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000008,jqfmt=vfsold,nolazytime,usrjquota=.journal_async_commit,grpjquota=,grpjquota=,grpid,,,errors=continue. Quota mode: writeback. [ 310.200253][T10413] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 310.243606][T10413] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 310.255200][T10413] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1725: Corrupt directory, running e2fsck is recommended [ 310.290935][T10413] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 310.360640][T10413] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 310.396726][T10413] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1725: Corrupt directory, running e2fsck is recommended [ 310.481999][T10420] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 310.545043][T10420] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 310.577087][T10420] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1725: Corrupt directory, running e2fsck is recommended [ 310.642358][T10421] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 310.803470][T10416] loop6: detected capacity change from 0 to 40427 [ 310.872231][T10416] F2FS-fs (loop6): invalid crc value [ 310.929558][T10416] F2FS-fs (loop6): Found nat_bits in checkpoint [ 311.137794][T10438] tmpfs: Unknown parameter 'fowner' [ 311.145315][T10438] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1731'. [ 311.147594][T10416] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 311.280354][T10443] loop5: detected capacity change from 0 to 128 [ 311.351768][T10443] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 311.393172][T10416] attempt to access beyond end of device [ 311.393172][T10416] loop6: rw=10241, want=45104, limit=40427 [ 311.445987][T10443] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 312.520593][ T4369] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 312.781135][ T4369] usb 3-1: Using ep0 maxpacket: 16 [ 312.901027][ T4369] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 312.920256][ T4369] usb 3-1: config 0 has no interface number 0 [ 313.120850][ T4369] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 313.140277][ T4369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.168700][ T4369] usb 3-1: Product: syz [ 313.185540][ T4369] usb 3-1: Manufacturer: syz [ 313.204103][ T4369] usb 3-1: SerialNumber: syz [ 313.246662][ T4369] usb 3-1: config 0 descriptor?? [ 313.397346][ T4369] usb 3-1: bad CDC descriptors [ 313.412624][ T4369] usb 3-1: bad CDC descriptors [ 313.476657][T10446] loop5: detected capacity change from 0 to 262144 [ 313.542824][ T4369] usb 3-1: USB disconnect, device number 18 [ 313.563755][T10446] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by syz.5.1735 (10446) [ 313.601698][T10446] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 313.611258][T10446] BTRFS info (device loop5): disabling tree log [ 313.617770][T10446] BTRFS info (device loop5): using free space tree [ 313.624399][T10446] BTRFS info (device loop5): has skinny extents [ 313.630739][T10446] BTRFS info (device loop5): flagging fs with big metadata feature [ 313.776857][T10479] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1745'. [ 313.863695][T10446] BTRFS info (device loop5): enabling ssd optimizations [ 315.418474][T10506] loop7: detected capacity change from 0 to 512 [ 315.729563][T10506] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 315.748306][T10506] ext4 filesystem being mounted at /185/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.490542][ T4366] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 316.730586][ T4366] usb 8-1: Using ep0 maxpacket: 32 [ 317.081070][ T4366] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 317.101886][ T4366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.132297][ T4366] usb 8-1: Product: syz [ 317.136557][ T4366] usb 8-1: Manufacturer: syz [ 317.150553][ T4366] usb 8-1: SerialNumber: syz [ 317.176367][ T4366] usb 8-1: config 0 descriptor?? [ 317.189313][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.195898][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.297246][T10538] loop2: detected capacity change from 0 to 128 [ 317.351128][T10538] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.366685][T10538] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.450988][ T5362] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 317.491315][ T4366] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 013 [ 317.546302][T10544] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~  [ 317.741875][ T5362] usb 2-1: Using ep0 maxpacket: 8 [ 317.860803][ T5362] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 317.870099][ T5362] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.886790][ T5362] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.898959][ T5362] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.916864][ T5362] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.930883][ T5362] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.940247][ T5362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.222550][ T5362] usb 2-1: GET_CAPABILITIES returned 0 [ 318.228161][ T5362] usbtmc 2-1:16.0: can't read capabilities [ 318.430959][ T5362] usb 8-1: USB disconnect, device number 13 [ 318.551469][ T4366] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 318.554623][ T5358] usb 2-1: USB disconnect, device number 17 [ 318.570871][T10531] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 318.583194][T10570] usb 2-1: usbtmc_ioctl_clear_out_halt returned -19 [ 318.609532][T10574] loop6: detected capacity change from 0 to 8 [ 318.781987][ T4742] [ 318.784382][ T4742] ====================================================== [ 318.791427][ T4742] WARNING: possible circular locking dependency detected [ 318.798488][ T4742] syzkaller #0 Not tainted [ 318.802937][ T4742] ------------------------------------------------------ [ 318.810113][ T4742] udevd/4742 is trying to acquire lock: [ 318.815694][ T4742] ffff88801fb2f938 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 318.825520][ T4742] [ 318.825520][ T4742] but task is already holding lock: [ 318.832982][ T4742] ffff888020bc0468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 318.842273][ T4742] [ 318.842273][ T4742] which lock already depends on the new lock. [ 318.842273][ T4742] [ 318.853080][ T4742] [ 318.853080][ T4742] the existing dependency chain (in reverse order) is: [ 318.862416][ T4742] [ 318.862416][ T4742] -> #10 (&lo->lo_mutex){+.+.}-{3:3}: [ 318.870147][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 318.875914][ T4742] mutex_lock_killable_nested+0x17/0x20 [ 318.882030][ T4742] lo_open+0x6a/0x100 [ 318.886569][ T4742] blkdev_get_whole+0x90/0x390 [ 318.891982][ T4742] blkdev_get_by_dev+0x2d0/0xa60 [ 318.897475][ T4742] blkdev_open+0x12d/0x2c0 [ 318.902576][ T4742] do_dentry_open+0x7ff/0xf80 [ 318.907810][ T4742] path_openat+0x26f5/0x2fa0 [ 318.912955][ T4742] do_filp_open+0x1e2/0x410 [ 318.918015][ T4742] do_sys_openat2+0x150/0x4b0 [ 318.923242][ T4742] __x64_sys_openat+0x135/0x160 [ 318.928657][ T4742] do_syscall_64+0x4c/0xa0 [ 318.934022][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.940481][ T4742] [ 318.940481][ T4742] -> #9 (&disk->open_mutex){+.+.}-{3:3}: [ 318.948343][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 318.954112][ T4742] mutex_lock_nested+0x17/0x20 [ 318.959702][ T4742] bd_register_pending_holders+0x33/0x310 [ 318.966356][ T4742] device_add_disk+0x5a7/0xd40 [ 318.971787][ T4742] md_alloc+0x809/0xc00 [ 318.976508][ T4742] blk_request_module+0x26e/0x290 [ 318.982368][ T4742] blkdev_get_no_open+0x38/0x1d0 [ 318.988089][ T4742] blkdev_get_by_dev+0x77/0xa60 [ 318.993508][ T4742] swsusp_check+0xa1/0x2b0 [ 318.998513][ T4742] software_resume+0xc6/0x3b0 [ 319.003754][ T4742] resume_store+0xe4/0x130 [ 319.008859][ T4742] kernfs_fop_write_iter+0x379/0x4c0 [ 319.014720][ T4742] vfs_write+0x745/0xd60 [ 319.019617][ T4742] ksys_write+0x152/0x260 [ 319.024700][ T4742] do_syscall_64+0x4c/0xa0 [ 319.029775][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.036252][ T4742] [ 319.036252][ T4742] -> #8 (disks_mutex){+.+.}-{3:3}: [ 319.043607][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 319.049373][ T4742] mutex_lock_nested+0x17/0x20 [ 319.054697][ T4742] md_alloc+0x48/0xc00 [ 319.059400][ T4742] blk_request_module+0x26e/0x290 [ 319.064984][ T4742] blkdev_get_no_open+0x38/0x1d0 [ 319.070474][ T4742] blkdev_get_by_dev+0x77/0xa60 [ 319.075872][ T4742] swsusp_check+0xa1/0x2b0 [ 319.080855][ T4742] software_resume+0xc6/0x3b0 [ 319.086090][ T4742] resume_store+0xe4/0x130 [ 319.091061][ T4742] kernfs_fop_write_iter+0x379/0x4c0 [ 319.096904][ T4742] vfs_write+0x745/0xd60 [ 319.101692][ T4742] ksys_write+0x152/0x260 [ 319.106796][ T4742] do_syscall_64+0x4c/0xa0 [ 319.111778][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.118387][ T4742] [ 319.118387][ T4742] -> #7 (major_names_lock){+.+.}-{3:3}: [ 319.126158][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 319.132039][ T4742] mutex_lock_nested+0x17/0x20 [ 319.137373][ T4742] blk_request_module+0x31/0x290 [ 319.142880][ T4742] blkdev_get_no_open+0x38/0x1d0 [ 319.148466][ T4742] blkdev_get_by_dev+0x77/0xa60 [ 319.153868][ T4742] swsusp_check+0xa1/0x2b0 [ 319.158838][ T4742] software_resume+0xc6/0x3b0 [ 319.164072][ T4742] resume_store+0xe4/0x130 [ 319.169041][ T4742] kernfs_fop_write_iter+0x379/0x4c0 [ 319.175035][ T4742] vfs_write+0x745/0xd60 [ 319.179848][ T4742] ksys_write+0x152/0x260 [ 319.184730][ T4742] do_syscall_64+0x4c/0xa0 [ 319.189769][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.196272][ T4742] [ 319.196272][ T4742] -> #6 (system_transition_mutex/1){+.+.}-{3:3}: [ 319.205141][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 319.211133][ T4742] mutex_lock_nested+0x17/0x20 [ 319.216522][ T4742] software_resume+0x7c/0x3b0 [ 319.221756][ T4742] resume_store+0xe4/0x130 [ 319.226833][ T4742] kernfs_fop_write_iter+0x379/0x4c0 [ 319.232772][ T4742] vfs_write+0x745/0xd60 [ 319.237605][ T4742] ksys_write+0x152/0x260 [ 319.242795][ T4742] do_syscall_64+0x4c/0xa0 [ 319.247854][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.254394][ T4742] [ 319.254394][ T4742] -> #5 (&of->mutex){+.+.}-{3:3}: [ 319.261792][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 319.267768][ T4742] mutex_lock_nested+0x17/0x20 [ 319.273179][ T4742] kernfs_seq_start+0x51/0x3c0 [ 319.278499][ T4742] seq_read_iter+0x3c4/0xd50 [ 319.283665][ T4742] vfs_read+0x759/0xd60 [ 319.288602][ T4742] ksys_read+0x152/0x260 [ 319.293584][ T4742] do_syscall_64+0x4c/0xa0 [ 319.298871][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.305686][ T4742] [ 319.305686][ T4742] -> #4 (&p->lock){+.+.}-{3:3}: [ 319.313035][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 319.318833][ T4742] mutex_lock_nested+0x17/0x20 [ 319.324152][ T4742] seq_read_iter+0xad/0xd50 [ 319.329230][ T4742] proc_reg_read_iter+0x1a9/0x270 [ 319.334898][ T4742] generic_file_splice_read+0x3ef/0x5f0 [ 319.341008][ T4742] splice_file_to_pipe+0x1c6/0x330 [ 319.346680][ T4742] do_sendfile+0x592/0xeb0 [ 319.351754][ T4742] __se_sys_sendfile64+0x141/0x1a0 [ 319.357421][ T4742] do_syscall_64+0x4c/0xa0 [ 319.362398][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.368852][ T4742] [ 319.368852][ T4742] -> #3 (&pipe->mutex/1){+.+.}-{3:3}: [ 319.376757][ T4742] __mutex_lock_common+0x1e3/0x2400 [ 319.382545][ T4742] mutex_lock_nested+0x17/0x20 [ 319.387870][ T4742] iter_file_splice_write+0x1b5/0xcc0 [ 319.393893][ T4742] do_splice+0xe5a/0x1640 [ 319.398917][ T4742] __se_sys_splice+0x34d/0x440 [ 319.404345][ T4742] do_syscall_64+0x4c/0xa0 [ 319.409447][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.416001][ T4742] [ 319.416001][ T4742] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 319.423562][ T4742] lo_write_bvec+0x1a0/0x780 [ 319.429157][ T4742] loop_process_work+0x1b46/0x24a0 [ 319.435049][ T4742] process_one_work+0x85f/0x1010 [ 319.440645][ T4742] worker_thread+0xaa6/0x1290 [ 319.446223][ T4742] kthread+0x436/0x520 [ 319.451383][ T4742] ret_from_fork+0x1f/0x30 [ 319.456371][ T4742] [ 319.456371][ T4742] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 319.465803][ T4742] process_one_work+0x7bb/0x1010 [ 319.471854][ T4742] worker_thread+0xaa6/0x1290 [ 319.477181][ T4742] kthread+0x436/0x520 [ 319.481980][ T4742] ret_from_fork+0x1f/0x30 [ 319.487055][ T4742] [ 319.487055][ T4742] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 319.495362][ T4742] __lock_acquire+0x2c42/0x7d10 [ 319.500783][ T4742] lock_acquire+0x19e/0x400 [ 319.505848][ T4742] flush_workqueue+0x16c/0x13d0 [ 319.511251][ T4742] drain_workqueue+0xcf/0x380 [ 319.516549][ T4742] destroy_workqueue+0x7b/0xb20 [ 319.522153][ T4742] __loop_clr_fd+0x234/0xb90 [ 319.527515][ T4742] blkdev_put+0x53f/0x7d0 [ 319.532401][ T4742] blkdev_close+0x76/0xa0 [ 319.537389][ T4742] __fput+0x234/0x930 [ 319.542018][ T4742] task_work_run+0x125/0x1a0 [ 319.547314][ T4742] exit_to_user_mode_loop+0x10f/0x130 [ 319.553433][ T4742] exit_to_user_mode_prepare+0xee/0x180 [ 319.559743][ T4742] syscall_exit_to_user_mode+0x16/0x40 [ 319.566117][ T4742] do_syscall_64+0x58/0xa0 [ 319.571357][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.577908][ T4742] [ 319.577908][ T4742] other info that might help us debug this: [ 319.577908][ T4742] [ 319.588375][ T4742] Chain exists of: [ 319.588375][ T4742] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 319.588375][ T4742] [ 319.602528][ T4742] Possible unsafe locking scenario: [ 319.602528][ T4742] [ 319.610303][ T4742] CPU0 CPU1 [ 319.615794][ T4742] ---- ---- [ 319.621197][ T4742] lock(&lo->lo_mutex); [ 319.625476][ T4742] lock(&disk->open_mutex); [ 319.632812][ T4742] lock(&lo->lo_mutex); [ 319.639612][ T4742] lock((wq_completion)loop6); [ 319.644501][ T4742] [ 319.644501][ T4742] *** DEADLOCK *** [ 319.644501][ T4742] [ 319.652938][ T4742] 2 locks held by udevd/4742: [ 319.657649][ T4742] #0: ffff8880209a2118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 319.667286][ T4742] #1: ffff888020bc0468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 319.676852][ T4742] [ 319.676852][ T4742] stack backtrace: [ 319.682783][ T4742] CPU: 1 PID: 4742 Comm: udevd Not tainted syzkaller #0 [ 319.689756][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.700030][ T4742] Call Trace: [ 319.703514][ T4742] [ 319.706659][ T4742] dump_stack_lvl+0x188/0x250 [ 319.711393][ T4742] ? load_image+0x400/0x400 [ 319.715935][ T4742] ? show_regs_print_info+0x20/0x20 [ 319.721273][ T4742] ? print_circular_bug+0x12b/0x1a0 [ 319.726535][ T4742] check_noncircular+0x296/0x330 [ 319.731515][ T4742] ? add_chain_block+0x940/0x940 [ 319.736666][ T4742] ? lockdep_lock+0xf1/0x1f0 [ 319.741563][ T4742] ? mark_lock+0x94/0x320 [ 319.745945][ T4742] __lock_acquire+0x2c42/0x7d10 [ 319.751016][ T4742] ? __lock_acquire+0x13bc/0x7d10 [ 319.756096][ T4742] ? verify_lock_unused+0x140/0x140 [ 319.761510][ T4742] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 319.767535][ T4742] ? verify_lock_unused+0x140/0x140 [ 319.772779][ T4742] ? memset+0x1e/0x40 [ 319.776892][ T4742] lock_acquire+0x19e/0x400 [ 319.781523][ T4742] ? flush_workqueue+0x150/0x13d0 [ 319.786588][ T4742] ? __mutex_trylock_common+0x155/0x260 [ 319.792461][ T4742] ? read_lock_is_recursive+0x10/0x10 [ 319.798144][ T4742] ? __init_swait_queue_head+0xa5/0x150 [ 319.803747][ T4742] flush_workqueue+0x16c/0x13d0 [ 319.808641][ T4742] ? flush_workqueue+0x150/0x13d0 [ 319.813716][ T4742] ? __lock_acquire+0x7d10/0x7d10 [ 319.818966][ T4742] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 319.824992][ T4742] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 319.830507][ T4742] ? rcu_work_rcufn+0x120/0x120 [ 319.835405][ T4742] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 319.841179][ T4742] ? finish_wait+0xc0/0x1d0 [ 319.845937][ T4742] drain_workqueue+0xcf/0x380 [ 319.850838][ T4742] destroy_workqueue+0x7b/0xb20 [ 319.855936][ T4742] __loop_clr_fd+0x234/0xb90 [ 319.860667][ T4742] ? lo_release+0x172/0x1f0 [ 319.865317][ T4742] ? lo_open+0x100/0x100 [ 319.869882][ T4742] blkdev_put+0x53f/0x7d0 [ 319.874293][ T4742] blkdev_close+0x76/0xa0 [ 319.878921][ T4742] ? blkdev_open+0x2c0/0x2c0 [ 319.883652][ T4742] __fput+0x234/0x930 [ 319.887782][ T4742] task_work_run+0x125/0x1a0 [ 319.892519][ T4742] exit_to_user_mode_loop+0x10f/0x130 [ 319.898025][ T4742] exit_to_user_mode_prepare+0xee/0x180 [ 319.903707][ T4742] syscall_exit_to_user_mode+0x16/0x40 [ 319.909213][ T4742] do_syscall_64+0x58/0xa0 [ 319.913724][ T4742] ? clear_bhb_loop+0x30/0x80 [ 319.918469][ T4742] ? clear_bhb_loop+0x30/0x80 [ 319.923192][ T4742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.929147][ T4742] RIP: 0033:0x7fba9cf31407 [ 319.933735][ T4742] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 319.954156][ T4742] RSP: 002b:00007ffc0e217b70 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 319.962715][ T4742] RAX: 0000000000000000 RBX: 00007fba9ce43880 RCX: 00007fba9cf31407 [ 319.970725][ T4742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 319.978901][ T4742] RBP: 00007fba9ce436e8 R08: 0000000000000000 R09: 0000000000000000 [ 319.987179][ T4742] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 319.995456][ T4742] R13: 0000563c24206410 R14: 0000000000000008 R15: 0000563c24201e20 [ 320.003478][ T4742] [ 320.056695][T10579] loop7: detected capacity change from 0 to 40427 [ 320.070665][ T4366] usb 3-1: Using ep0 maxpacket: 16 [ 320.120578][T10579] F2FS-fs (loop7): invalid crc value [ 320.169663][T10579] F2FS-fs (loop7): Found nat_bits in checkpoint [ 320.200558][ T4366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 320.221150][ T4366] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 320.238716][ T4366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 320.252801][ T4366] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 320.267337][T10579] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 320.298412][T10579] attempt to access beyond end of device [ 320.298412][T10579] loop7: rw=10241, want=45104, limit=40427 [ 320.440756][ T4366] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 320.450027][ T4366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.459540][ T4366] usb 3-1: Product: syz [ 320.465144][ T4366] usb 3-1: Manufacturer: syz [ 320.470307][ T4366] usb 3-1: SerialNumber: syz [ 320.484347][ T4366] usb 3-1: config 0 descriptor?? [ 320.541815][ T4366] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 320.551496][ T4366] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 320.766820][ T4366] usb 3-1: USB disconnect, device number 19 [ 320.776847][ T4366] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 320.788119][ T4366] omninet 3-1:0.0: device disconnected