last executing test programs: 4m25.441936557s ago: executing program 2 (id=240): r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xffff, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0xd, 0x8000000000000000, 0x8, 0x2}}], 0x58}, 0x0) 4m24.889410513s ago: executing program 2 (id=241): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4m24.641807952s ago: executing program 2 (id=242): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000180)={{'\x00', 0x3}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="1bd44a", 0x3, 0x0, 0x0}) 4m24.159982124s ago: executing program 2 (id=245): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6c733d63703836302c6465636f6d706f73652c747970653de7d1b73f2c666f7263652c6e6f626172726965722c6e6f6465636f6d706f73652c009b6040155c7209e54a134e5e27fc0b97987830ddc20ac1835cc4bf44129f88db"], 0x23, 0x6e6, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 4m23.432784632s ago: executing program 2 (id=250): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 4m22.531583088s ago: executing program 2 (id=257): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) 4m21.504623073s ago: executing program 32 (id=257): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) 2m46.399578664s ago: executing program 1 (id=516): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") 2m40.844204154s ago: executing program 1 (id=525): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) 2m39.738069194s ago: executing program 1 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m38.279424649s ago: executing program 1 (id=529): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9de}}, './file0\x00'}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$TCPDIAG_GETSOCK(r6, 0x0, 0x20040041) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r8 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r8}) 2m35.780299126s ago: executing program 1 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m34.025265951s ago: executing program 1 (id=541): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2m18.070091318s ago: executing program 33 (id=541): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1m16.595290102s ago: executing program 3 (id=695): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9de}}, './file0\x00'}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$TCPDIAG_GETSOCK(r6, 0x0, 0x20040041) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r8 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r8}) 1m13.494149299s ago: executing program 3 (id=700): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/nfsfs\x00') sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m12.45407143s ago: executing program 3 (id=703): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1m8.358134013s ago: executing program 3 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m8.108416358s ago: executing program 3 (id=711): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) 1m7.472702657s ago: executing program 3 (id=713): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x5e1, 0x4) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x5e20, 0x3c51, @mcast1, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x1}, 0x44) 1m6.680496186s ago: executing program 34 (id=713): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x5e1, 0x4) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x5e20, 0x3c51, @mcast1, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x1}, 0x44) 8.641293278s ago: executing program 7 (id=886): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0xfff2, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 7.404074209s ago: executing program 7 (id=893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffe0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xfffff0ec}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000040) 6.083795225s ago: executing program 7 (id=898): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000500)=ANY=[], 0x1, 0xc4d, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) truncate(&(0x7f0000000100)='./file1\x00', 0xd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 5.963603098s ago: executing program 0 (id=899): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYRES16=0x0], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x15e) fchown(r4, r1, r3) 5.460949996s ago: executing program 6 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) 5.227542535s ago: executing program 6 (id=905): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x338}) ptrace$poke(0x15, r0, 0x0, 0x200008) 5.008775096s ago: executing program 4 (id=906): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9de}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$TCPDIAG_GETSOCK(r6, 0x0, 0x20040041) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r7 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r7}) 4.269614324s ago: executing program 7 (id=908): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)}, {0x0, 0x1, 0x0, &(0x7f0000002380), 0x0}, {0x0, 0x1, 0x0, &(0x7f0000003dc0), 0x0}], 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0xffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffd5f, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140006001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000300)={0x1d, r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.925049142s ago: executing program 5 (id=909): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nfs,dots,nfs=stale_rw,uid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x126) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x3705, 0x16, 0x0, 0x0) 3.654268024s ago: executing program 4 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f00000000c0)={'syzkaller0\x00', @random="001300"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.442712327s ago: executing program 6 (id=911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) 3.408605475s ago: executing program 5 (id=912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x3d, 0x83, 0x6, 0x5, 0x3, 0x4, 0x6, 0x4, 0xe6, 0x7, 0x4, 0xa2, 0x45, 0xb, 0x81, 0x40}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.397307783s ago: executing program 0 (id=913): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000001780)=ANY=[], 0x958) shutdown(r0, 0x0) shutdown(r0, 0x1) 2.994107956s ago: executing program 4 (id=914): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0xb, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x4fc4, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x48004) 2.992402305s ago: executing program 5 (id=915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x5}, {0xfe, 0x5, 0x7, '\x00', 0x85}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0x1}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0xe8, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4d, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x41, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x92, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.459843253s ago: executing program 5 (id=916): openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x8024}, {r1, 0x440}], 0x2, 0xfff) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0xd0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 2.051995487s ago: executing program 0 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000100001042dbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000002000128008000100736974001400028008000100365797"], 0x40}}, 0x0) 2.051699807s ago: executing program 4 (id=918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.874822706s ago: executing program 0 (id=919): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0) 1.74472381s ago: executing program 0 (id=920): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9de}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$TCPDIAG_GETSOCK(r6, 0x0, 0x20040041) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r7 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r7}) 1.644289533s ago: executing program 4 (id=921): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040)=0xb0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff0200"], 0x340a) 1.574009607s ago: executing program 7 (id=922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x14, &(0x7f0000000680)=[@cr4={0x1, 0x140245}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.080032534s ago: executing program 5 (id=923): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 480.304447ms ago: executing program 6 (id=924): socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 294.310558ms ago: executing program 6 (id=925): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001082, 0x0) 189.842094ms ago: executing program 6 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 139.827008ms ago: executing program 0 (id=927): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 95.609997ms ago: executing program 7 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x21, 0x2, 0x0, 0x1, [@TCF_EM_U32={0xfffffffffffffe88, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x6}, {0x6, 0xfffffffd, 0xf65, 0x7}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x4}, "11"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 21.619517ms ago: executing program 5 (id=929): kexec_load(0x610, 0x0, 0x0, 0x320000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 0s ago: executing program 4 (id=930): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x0, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_fuse_handle_req(r0, &(0x7f000000e0c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x0, {0x3, 0x3, 0xb, 0x0, 0x5, 0xe, {0x0, 0xa, 0x0, 0x20000000000000, 0x0, 0x8180, 0x6, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 02]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 131.044518][ T6381] XFS (loop0): Quotacheck: Done. [ 131.203828][ T5832] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.616808][ T6423] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 131.627614][ T5916] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.799339][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.844001][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 131.878047][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.920922][ T5916] usb 2-1: string descriptor 0 read error: -22 [ 131.945364][ T5916] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 132.161852][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.276305][ T5916] usb 2-1: config 0 descriptor?? [ 132.288467][ T5916] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 132.297452][ T5916] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 132.591198][ T6419] loop1: detected capacity change from 0 to 64 [ 132.610990][ T6419] hfs: Unknown parameter 'context' [ 132.751042][ T5916] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 132.779976][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 132.780334][ T5916] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 132.810031][ T5916] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 132.817075][ T5916] em28xx 2-1:0.0: No AC97 audio processor [ 132.903036][ T6446] misc userio: Can't change port type on an already running userio instance [ 132.907564][ T5916] usb 2-1: USB disconnect, device number 4 [ 132.964551][ T5916] em28xx 2-1:0.0: Disconnecting em28xx [ 133.028307][ T5916] em28xx 2-1:0.0: Freeing device [ 133.331227][ T6458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.160'. [ 134.819755][ T6478] loop1: detected capacity change from 0 to 4096 [ 134.849713][ T6478] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 134.949523][ T6478] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 135.088818][ T30] audit: type=1800 audit(1764231953.905:6): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.168" name="file2" dev="loop1" ino=31 res=0 errno=0 [ 135.350817][ T6490] loop0: detected capacity change from 0 to 22 [ 135.369082][ T6470] loop3: detected capacity change from 0 to 32768 [ 135.420053][ T6490] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 135.430146][ T6494] loop1: detected capacity change from 0 to 256 [ 135.452024][ T6471] loop2: detected capacity change from 0 to 32768 [ 135.466434][ T6490] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.498260][ T6494] exfat: Deprecated parameter 'namecase' [ 135.539251][ T6471] jfs: Unknown parameter '00000000000000000000' [ 135.591616][ T6494] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011fc0, chksum : 0xea22d69b, utbl_chksum : 0xe619d30d) [ 138.194025][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.216508][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.382974][ T6536] usb usb8: usbfs: process 6536 (syz.3.188) did not claim interface 0 before use [ 139.057663][ T6546] warning: `syz.4.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.679483][ T6550] loop3: detected capacity change from 0 to 128 [ 139.914621][ T6554] program syz.1.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.096470][ T6532] loop2: detected capacity change from 0 to 32768 [ 140.104726][ T6560] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.184074][ T6532] ea_get: invalid extended attribute [ 140.679321][ T6568] program syz.3.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.951352][ T6581] loop3: detected capacity change from 0 to 1024 [ 140.979479][ T6581] hfsplus: invalid length 32517 has been corrected to 255 [ 141.022638][ T6581] hfsplus: invalid length 32517 has been corrected to 255 [ 141.235888][ T6590] loop1: detected capacity change from 0 to 512 [ 141.309949][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.335073][ T6590] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.384741][ T6590] EXT4-fs error (device loop1): ext4_get_first_dir_block:3538: inode #12: comm syz.1.212: directory missing '.' [ 141.402529][ T6590] EXT4-fs (loop1): Remounting filesystem read-only [ 141.458790][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.936952][ T6628] usb usb8: usbfs: process 6628 (syz.2.222) did not claim interface 0 before use [ 143.431019][ T6632] loop0: detected capacity change from 0 to 16 [ 143.456305][ T6632] erofs (device loop0): mounted with root inode @ nid 36. [ 143.544194][ T30] audit: type=1800 audit(1764231962.335:7): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.226" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 143.567255][ T6632] syz.0.226: attempt to access beyond end of device [ 143.567255][ T6632] loop0: rw=34816, sector=34359738360, nr_sectors = 8 limit=16 [ 143.631585][ T6637] loop4: detected capacity change from 0 to 128 [ 143.665119][ T6637] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.725775][ T6636] loop1: detected capacity change from 0 to 2048 [ 143.737601][ T6637] hpfs: filesystem error: improperly stopped [ 143.743766][ T6637] hpfs: You really don't want any checks? You are crazy... [ 143.798467][ T6637] hpfs: hpfs_map_sector(): read error [ 143.819411][ T6637] hpfs: code page support is disabled [ 143.825021][ T6637] hpfs: hpfs_map_4sectors(): unaligned read [ 143.869048][ T6643] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.886293][ T6637] hpfs: hpfs_map_4sectors(): unaligned read [ 143.917391][ T6637] hpfs: filesystem error: unable to find root dir [ 143.924489][ T6646] program syz.2.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.948826][ T6648] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.184048][ T6650] NILFS (loop1): error -2 truncating bmap (ino=16) [ 144.323165][ T6654] loop2: detected capacity change from 0 to 2048 [ 144.380029][ T6654] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 144.448891][ T30] audit: type=1800 audit(1764231963.285:8): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.233" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 144.544644][ T6648] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 144.603704][ T6648] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 144.627633][ T6011] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.659008][ T6648] Remounting filesystem read-only [ 144.842404][ T5828] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 144.911830][ T6011] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.944168][ T6011] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 144.990188][ T6011] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.041041][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.073039][ T6011] usb 4-1: Product: syz [ 145.080057][ T6011] usb 4-1: Manufacturer: syz [ 145.086950][ T6011] usb 4-1: SerialNumber: syz [ 145.346692][ T6657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.677055][ T6657] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 146.686529][ T6657] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.693150][ T6657] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 146.699775][ T6657] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 146.706316][ T6657] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 146.712917][ T6657] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 146.720141][ T6657] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 146.726655][ T6657] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 146.733429][ T6657] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.739926][ T6657] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 146.747017][ T6657] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 146.754036][ T6657] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 146.761361][ T6657] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 146.767850][ T6657] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 146.774331][ T6657] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 146.780808][ T6657] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 146.787316][ T6657] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 146.793798][ T6657] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 146.800382][ T6657] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 146.806836][ T6657] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 146.924216][ T6011] cdc_ncm 4-1:1.0: bind() failure [ 146.948033][ T6011] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 146.992085][ T6011] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 147.008230][ T6683] atomic_op ffff888032690998 conn xmit_atomic 0000000000000000 [ 147.023930][ T6011] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 147.089297][ T6011] usb 4-1: USB disconnect, device number 4 [ 147.423874][ T6672] loop1: detected capacity change from 0 to 32768 [ 147.546936][ T6672] JBD2: Ignoring recovery information on journal [ 147.633701][ T6672] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.866720][ T6701] netlink: 'syz.3.244': attribute type 2 has an invalid length. [ 147.909361][ T6697] loop0: detected capacity change from 0 to 1024 [ 148.078013][ T6705] loop2: detected capacity change from 0 to 1024 [ 148.157018][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 148.288548][ T6711] loop3: detected capacity change from 0 to 1024 [ 148.310378][ T6713] loop4: detected capacity change from 0 to 256 [ 148.359096][ T5841] hfsplus: bad catalog entry type [ 148.589975][ T3543] hfsplus: b-tree write err: -5, ino 4 [ 148.796411][ T6720] loop3: detected capacity change from 0 to 136 [ 148.921383][ T6720] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 148.940661][ T6723] loop0: detected capacity change from 0 to 2048 [ 149.045326][ T6723] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 149.230814][ T6723] UDF-fs: Scanning with blocksize 512 failed [ 149.336279][ T6723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.423468][ T3471] hfsplus: b-tree write err: -5, ino 4 [ 149.528975][ T6735] loop1: detected capacity change from 0 to 128 [ 149.625065][ T6735] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.654905][ T6735] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.906872][ T6743] loop0: detected capacity change from 0 to 256 [ 149.971424][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.993169][ T5828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.094174][ T6743] FAT-fs (loop0): Directory bread(block 64) failed [ 150.228663][ T6743] FAT-fs (loop0): Directory bread(block 65) failed [ 150.235344][ T6743] FAT-fs (loop0): Directory bread(block 66) failed [ 150.270812][ T6743] FAT-fs (loop0): Directory bread(block 67) failed [ 150.423293][ T6743] FAT-fs (loop0): Directory bread(block 68) failed [ 150.455841][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.486737][ T6743] FAT-fs (loop0): Directory bread(block 69) failed [ 150.507774][ T6743] FAT-fs (loop0): Directory bread(block 70) failed [ 150.514359][ T6743] FAT-fs (loop0): Directory bread(block 71) failed [ 150.546013][ T6743] FAT-fs (loop0): Directory bread(block 72) failed [ 150.582165][ T6743] FAT-fs (loop0): Directory bread(block 73) failed [ 150.681735][ T6754] loop3: detected capacity change from 0 to 512 [ 150.747204][ T6754] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 150.937643][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.938734][ T6754] EXT4-fs (loop3): invalid journal inode [ 151.043020][ T6754] EXT4-fs (loop3): can't get journal size [ 151.416275][ T6754] EXT4-fs (loop3): 1 truncate cleaned up [ 151.456027][ T6754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.551021][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.584202][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.595164][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.607759][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.616078][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.638591][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.873877][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.109257][ T6774] omfs: sysblock number (f784317bf884317b) is out of range [ 152.262951][ T6778] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.675973][ T6778] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 152.932416][ T6778] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 152.947445][ T6778] System zones: 0-2, 18-18, 34-35 [ 152.972429][ T6778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.012710][ T6782] set_capacity_and_notify: 2 callbacks suppressed [ 153.012729][ T6782] loop3: detected capacity change from 0 to 2048 [ 153.068899][ T60] bridge_slave_1: left allmulticast mode [ 153.074782][ T60] bridge_slave_1: left promiscuous mode [ 153.108190][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.134128][ T6778] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 153.151173][ T6782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.168822][ T60] bridge_slave_0: left allmulticast mode [ 153.174531][ T60] bridge_slave_0: left promiscuous mode [ 153.182062][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.265249][ T6778] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 153.286190][ T6778] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 153.415864][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.430252][ T6099] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 153.508558][ T6099] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 153.568385][ T6099] EXT4-fs (loop3): This should not happen!! Data will be lost [ 153.568385][ T6099] [ 153.618834][ T6099] EXT4-fs (loop3): Total free blocks count 0 [ 153.631364][ T6099] EXT4-fs (loop3): Free/Dirty block details [ 153.673381][ T6099] EXT4-fs (loop3): free_blocks=2415919504 [ 153.693664][ T6099] EXT4-fs (loop3): dirty_blocks=48 [ 153.710655][ T5147] Bluetooth: hci3: command tx timeout [ 153.713925][ T6099] EXT4-fs (loop3): Block reservation details [ 153.737386][ T6806] syz.0.270 uses obsolete (PF_INET,SOCK_PACKET) [ 153.767686][ T6099] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 153.811311][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.310835][ T6790] loop4: detected capacity change from 0 to 40427 [ 154.330396][ T6790] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 154.345789][ T6790] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 154.372686][ T6790] F2FS-fs (loop4): invalid crc value [ 154.494869][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.524828][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.545325][ T6807] loop1: detected capacity change from 0 to 40427 [ 154.554148][ T60] bond0 (unregistering): Released all slaves [ 154.563232][ T6807] F2FS-fs (loop1): build fault injection rate: 174 [ 154.570226][ T6807] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 154.599862][ T6807] F2FS-fs (loop1): invalid crc value [ 154.644726][ T6790] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 154.673966][ T6790] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 154.682370][ T6813] syzkaller1: entered promiscuous mode [ 154.718745][ T6813] syzkaller1: entered allmulticast mode [ 154.726953][ T6790] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.838254][ T6807] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 154.850591][ T6807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.888352][ T30] audit: type=1800 audit(1764231973.725:9): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.272" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 154.894582][ T6807] syz.1.272: attempt to access beyond end of device [ 154.894582][ T6807] loop1: rw=34817, sector=45096, nr_sectors = 8 limit=40427 [ 155.034314][ T5828] syz-executor: attempt to access beyond end of device [ 155.034314][ T5828] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 155.053738][ T50] kworker/u8:3: attempt to access beyond end of device [ 155.053738][ T50] loop4: rw=1, sector=45096, nr_sectors = 72 limit=40427 [ 155.148750][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 155.148781][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.148803][ T5828] Call Trace: [ 155.148811][ T5828] [ 155.148831][ T5828] dump_stack_lvl+0x189/0x250 [ 155.148871][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.148910][ T5828] ? f2fs_handle_critical_error+0x322/0x540 [ 155.148945][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 155.148972][ T5828] f2fs_write_end_io+0x94b/0xc10 [ 155.149019][ T5828] __submit_merged_bio+0x256/0x660 [ 155.149050][ T5828] __submit_merged_write_cond+0x269/0x530 [ 155.149082][ T5828] f2fs_write_data_pages+0x2756/0x3290 [ 155.149148][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.149174][ T5828] ? is_bpf_text_address+0x26/0x2b0 [ 155.149211][ T5828] ? arch_stack_walk+0xfc/0x150 [ 155.149274][ T5828] ? lockdep_unlock+0x89/0x120 [ 155.149297][ T5828] ? __lock_acquire+0x146f/0x2cf0 [ 155.149348][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 155.149378][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 155.149397][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.149423][ T5828] do_writepages+0x32e/0x550 [ 155.149452][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 155.149489][ T5828] filemap_fdatawrite+0x199/0x240 [ 155.149509][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 155.149570][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 155.149596][ T5828] f2fs_sync_dirty_inodes+0x30f/0x810 [ 155.149635][ T5828] f2fs_write_checkpoint+0x93e/0x2440 [ 155.149688][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 155.149764][ T5828] kill_f2fs_super+0x2d2/0x6c0 [ 155.149795][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 155.149844][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 155.149874][ T5828] deactivate_locked_super+0xbc/0x130 [ 155.149896][ T5828] cleanup_mnt+0x425/0x4c0 [ 155.149917][ T5828] ? lockdep_hardirqs_on+0x98/0x140 [ 155.149947][ T5828] task_work_run+0x1d4/0x260 [ 155.149969][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 155.149993][ T5828] ? exit_to_user_mode_loop+0x55/0x4f0 [ 155.150020][ T5828] exit_to_user_mode_loop+0xff/0x4f0 [ 155.150042][ T5828] ? rcu_is_watching+0x15/0xb0 [ 155.150062][ T5828] do_syscall_64+0x2e3/0xf80 [ 155.150086][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.150104][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 155.150125][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.150141][ T5828] RIP: 0033:0x7f8dc8f90a77 [ 155.150172][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 155.150188][ T5828] RSP: 002b:00007fffffb0b6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 155.150205][ T5828] RAX: 0000000000000000 RBX: 00007f8dc9013d7d RCX: 00007f8dc8f90a77 [ 155.150217][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffffb0b790 [ 155.150228][ T5828] RBP: 00007fffffb0b790 R08: 0000000000000000 R09: 0000000000000000 [ 155.150238][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffffb0c820 [ 155.150250][ T5828] R13: 00007f8dc9013d7d R14: 0000000000025d19 R15: 00007fffffb0c860 [ 155.150280][ T5828] [ 155.492753][ T5828] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 155.936519][ T5147] Bluetooth: hci3: command tx timeout [ 156.252019][ T6831] kvm: kvm [6830]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff [ 156.371607][ T6764] chnl_net:caif_netlink_parms(): no params data found [ 156.608310][ T60] hsr_slave_0: left promiscuous mode [ 156.628938][ T60] hsr_slave_1: left promiscuous mode [ 156.649642][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.675895][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.691104][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.707606][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.768400][ T60] veth1_macvtap: left promiscuous mode [ 156.774398][ T60] veth0_macvtap: left promiscuous mode [ 156.781899][ T60] veth1_vlan: left promiscuous mode [ 156.788539][ T60] veth0_vlan: left promiscuous mode [ 157.217774][ T6834] loop0: detected capacity change from 0 to 40427 [ 157.228924][ T6834] F2FS-fs (loop0): invalid crc value [ 157.444217][ T6834] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 157.475083][ T6834] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 157.650659][ T6853] loop3: detected capacity change from 0 to 512 [ 157.725537][ T6853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.797641][ T6853] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.860245][ T5832] syz-executor: attempt to access beyond end of device [ 157.860245][ T5832] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.893587][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.907261][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 157.907290][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.907302][ T5832] Call Trace: [ 157.907310][ T5832] [ 157.907327][ T5832] dump_stack_lvl+0x189/0x250 [ 157.907369][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.907401][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 157.907430][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 157.907458][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.907499][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 157.907533][ T5832] f2fs_write_end_io+0x94b/0xc10 [ 157.907585][ T5832] __submit_merged_bio+0x256/0x660 [ 157.907619][ T5832] __submit_merged_write_cond+0x269/0x530 [ 157.907652][ T5832] f2fs_write_data_pages+0x2756/0x3290 [ 157.907680][ T5832] ? __lock_acquire+0x6b6/0x2cf0 [ 157.907747][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 157.907840][ T5832] ? __lock_acquire+0x6b6/0x2cf0 [ 157.907886][ T5832] ? __lock_acquire+0x6b6/0x2cf0 [ 157.907926][ T5832] ? do_raw_spin_lock+0x121/0x290 [ 157.907962][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 157.907986][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 157.908016][ T5832] do_writepages+0x32e/0x550 [ 157.908051][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 157.908080][ T5832] filemap_fdatawrite+0x199/0x240 [ 157.908103][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 157.908183][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 157.908212][ T5832] f2fs_sync_dirty_inodes+0x30f/0x810 [ 157.908262][ T5832] f2fs_write_checkpoint+0x93e/0x2440 [ 157.908336][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 157.908436][ T5832] kill_f2fs_super+0x2d2/0x6c0 [ 157.908473][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 157.908526][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 157.908560][ T5832] deactivate_locked_super+0xbc/0x130 [ 157.908588][ T5832] cleanup_mnt+0x425/0x4c0 [ 157.908613][ T5832] ? lockdep_hardirqs_on+0x98/0x140 [ 157.908646][ T5832] task_work_run+0x1d4/0x260 [ 157.908673][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 157.908702][ T5832] ? exit_to_user_mode_loop+0x55/0x4f0 [ 157.908736][ T5832] exit_to_user_mode_loop+0xff/0x4f0 [ 157.908763][ T5832] ? rcu_is_watching+0x15/0xb0 [ 157.908789][ T5832] do_syscall_64+0x2e3/0xf80 [ 157.908820][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.908840][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 157.908867][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.908887][ T5832] RIP: 0033:0x7f581cf90a77 [ 157.908906][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 157.908922][ T5832] RSP: 002b:00007fff319dc648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 157.908944][ T5832] RAX: 0000000000000000 RBX: 00007f581d013d7d RCX: 00007f581cf90a77 [ 157.908959][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff319dc700 [ 157.908971][ T5832] RBP: 00007fff319dc700 R08: 0000000000000000 R09: 0000000000000000 [ 157.908983][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff319dd790 [ 157.908997][ T5832] R13: 00007f581d013d7d R14: 00000000000267c2 R15: 00007fff319dd7d0 [ 157.909035][ T5832] [ 157.909044][ T5832] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 157.957768][ T5147] Bluetooth: hci3: command tx timeout [ 158.724697][ T6839] loop1: detected capacity change from 0 to 32768 [ 159.230630][ T6839] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.365139][ T6839] XFS (loop1): Ending clean mount [ 159.447687][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.764090][ T6874] loop8: detected capacity change from 0 to 8 [ 159.800997][ T6874] Dev loop8: unable to read RDB block 8 [ 159.807790][ T6874] loop8: unable to read partition table [ 159.813786][ T6874] loop8: partition table beyond EOD, truncated [ 159.814662][ T6873] loop1: detected capacity change from 0 to 2048 [ 159.822459][ T6874] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 159.919930][ T6873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.977052][ T30] audit: type=1804 audit(1764231978.805:10): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.284" name="/newroot/51/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 160.083264][ T30] audit: type=1804 audit(1764231978.845:11): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.284" name="/newroot/51/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 160.170367][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.182575][ T60] team0 (unregistering): Port device team_slave_1 removed [ 160.270344][ T5147] Bluetooth: hci3: command tx timeout [ 160.294210][ T60] team0 (unregistering): Port device team_slave_0 removed [ 160.445040][ T6876] loop0: detected capacity change from 0 to 32768 [ 160.468708][ T6876] (syz.0.281,6876,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.492569][ T6876] (syz.0.281,6876,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.572420][ T6876] JBD2: Ignoring recovery information on journal [ 160.678391][ T6876] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.850710][ T6876] ocfs2: Unmounting device (7,0) on (node local) [ 161.030798][ T6884] loop1: detected capacity change from 0 to 40427 [ 161.050586][ T6884] F2FS-fs (loop1): invalid crc value [ 161.304063][ T6884] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 161.383494][ T6884] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 161.592975][ T6902] loop3: detected capacity change from 0 to 4096 [ 161.639944][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.649492][ T5828] syz-executor: attempt to access beyond end of device [ 161.649492][ T5828] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.662613][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.709569][ T6764] bridge_slave_0: entered allmulticast mode [ 161.720328][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 161.720365][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.720379][ T5828] Call Trace: [ 161.720388][ T5828] [ 161.720397][ T5828] dump_stack_lvl+0x189/0x250 [ 161.720440][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.720475][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 161.720505][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 161.720534][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 161.720578][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 161.720615][ T5828] f2fs_write_end_io+0x94b/0xc10 [ 161.720670][ T5828] __submit_merged_bio+0x256/0x660 [ 161.720705][ T5828] __submit_merged_write_cond+0x269/0x530 [ 161.720742][ T5828] f2fs_write_data_pages+0x2756/0x3290 [ 161.720770][ T5828] ? __lock_acquire+0x6b6/0x2cf0 [ 161.720848][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 161.720897][ T5828] ? kernel_text_address+0xa5/0xe0 [ 161.720973][ T5828] ? __lock_acquire+0x6b6/0x2cf0 [ 161.721024][ T5828] ? __lock_acquire+0x6b6/0x2cf0 [ 161.721066][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 161.721105][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 161.721129][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 161.721161][ T5828] do_writepages+0x32e/0x550 [ 161.721199][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 161.721229][ T5828] filemap_fdatawrite+0x199/0x240 [ 161.721253][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 161.721340][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 161.721376][ T5828] f2fs_sync_dirty_inodes+0x30f/0x810 [ 161.721429][ T5828] f2fs_write_checkpoint+0x93e/0x2440 [ 161.721502][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 161.721608][ T5828] kill_f2fs_super+0x2d2/0x6c0 [ 161.721648][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 161.721704][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 161.721740][ T5828] deactivate_locked_super+0xbc/0x130 [ 161.721768][ T5828] cleanup_mnt+0x425/0x4c0 [ 161.721793][ T5828] ? lockdep_hardirqs_on+0x98/0x140 [ 161.721828][ T5828] task_work_run+0x1d4/0x260 [ 161.721856][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 161.721887][ T5828] ? exit_to_user_mode_loop+0x55/0x4f0 [ 161.721923][ T5828] exit_to_user_mode_loop+0xff/0x4f0 [ 161.721952][ T5828] ? rcu_is_watching+0x15/0xb0 [ 161.721980][ T5828] do_syscall_64+0x2e3/0xf80 [ 161.722012][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.722034][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 161.722063][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.722084][ T5828] RIP: 0033:0x7f8dc8f90a77 [ 161.722104][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 161.722122][ T5828] RSP: 002b:00007fffffb0b6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 161.722145][ T5828] RAX: 0000000000000000 RBX: 00007f8dc9013d7d RCX: 00007f8dc8f90a77 [ 161.722160][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffffb0b790 [ 161.722174][ T5828] RBP: 00007fffffb0b790 R08: 0000000000000000 R09: 0000000000000000 [ 161.722187][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffffb0c820 [ 161.722201][ T5828] R13: 00007f8dc9013d7d R14: 00000000000276f9 R15: 00007fffffb0c860 [ 161.722242][ T5828] [ 161.738727][ T6764] bridge_slave_0: entered promiscuous mode [ 161.757561][ T5828] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 161.791537][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.791761][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.084369][ T6764] bridge_slave_1: entered allmulticast mode [ 162.097943][ T6764] bridge_slave_1: entered promiscuous mode [ 162.637272][ T5961] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.683447][ T6764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.733005][ T6764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.801745][ T6922] loop4: detected capacity change from 0 to 1024 [ 162.830590][ T6922] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.849584][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 162.861772][ T5961] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 162.877590][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.885980][ T6922] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 162.895143][ T5961] usb 4-1: Product: syz [ 162.912731][ T5961] usb 4-1: Manufacturer: syz [ 162.927743][ T5961] usb 4-1: SerialNumber: syz [ 162.945928][ T6922] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.950435][ T6764] team0: Port device team_slave_0 added [ 162.964278][ T6764] team0: Port device team_slave_1 added [ 162.972886][ T5961] usb 4-1: config 0 descriptor?? [ 162.978549][ T6922] EXT4-fs error (device loop4): ext4_free_blocks:6711: comm syz.4.294: Freeing blocks not in datazone - block = 0, count = 4096 [ 163.015664][ T6922] EXT4-fs (loop4): 1 orphan inode deleted [ 163.030115][ T6922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.054986][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.074644][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.130252][ T6764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.162259][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.174121][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.180077][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.235747][ T6764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.476146][ T6764] hsr_slave_0: entered promiscuous mode [ 163.496697][ T6764] hsr_slave_1: entered promiscuous mode [ 163.514623][ T6764] debugfs: 'hsr0' already exists in 'hsr' [ 163.527248][ T6764] Cannot create hsr debugfs directory [ 163.595249][ T5961] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 163.623775][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.634005][ T5961] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 163.642344][ T5961] usb 4-1: media controller created [ 163.658697][ T6914] dtv5100: wlen = 0, aborting. [ 163.664267][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.866343][ T6929] loop1: detected capacity change from 0 to 32768 [ 163.921553][ T6929] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.023930][ T6929] XFS (loop1): Ending clean mount [ 164.068740][ T5961] zl10353_read_register: readreg error (reg=127, ret==0) [ 164.081513][ T6929] XFS (loop1): Quotacheck needed: Please wait. [ 164.091275][ T5961] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 164.100892][ T5961] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 164.122092][ T5961] usb 4-1: USB disconnect, device number 5 [ 164.180469][ T5961] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 164.308138][ T6929] XFS (loop1): Quotacheck: Done. [ 165.137333][ T6957] loop0: detected capacity change from 0 to 128 [ 165.347224][ T6764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.500460][ T6764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.555400][ T5828] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.586415][ T6764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.602012][ T6764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.086952][ T6764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.289991][ T6764] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.323579][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.330973][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.401451][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.408734][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.749777][ T6968] loop0: detected capacity change from 0 to 131072 [ 166.832762][ T6968] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 166.962905][ T6968] XFS (loop0): Starting recovery (logdev: internal) [ 166.999294][ T6968] XFS (loop0): Ending recovery (logdev: internal) [ 167.018086][ T6968] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 169.248558][ T6764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.613410][ T6764] veth0_vlan: entered promiscuous mode [ 171.429591][ T6764] veth1_vlan: entered promiscuous mode [ 171.671747][ T6764] veth0_macvtap: entered promiscuous mode [ 171.700894][ T6764] veth1_macvtap: entered promiscuous mode [ 171.766000][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.792171][ T7029] loop0: detected capacity change from 0 to 32768 [ 171.814085][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.830506][ T7029] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.312 (7029) [ 171.854656][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.897354][ T7029] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.899594][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.928219][ T7029] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 171.937479][ T978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.953470][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.991709][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.270503][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 172.271512][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 172.287246][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 172.303812][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.315084][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.327159][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.331849][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 172.340313][ T978] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.360112][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.388696][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 172.389077][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 172.391524][ T978] usb 5-1: config 0 descriptor?? [ 172.444223][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 172.444706][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 172.514219][ T7029] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 172.544133][ T7029] BTRFS error (device loop0): open_ctree failed: -12 [ 172.745852][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.772941][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.796204][ T7061] loop3: detected capacity change from 0 to 32768 [ 172.844969][ T7061] (syz.3.319,7061,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.900288][ T978] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 172.943125][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.952046][ T7061] (syz.3.319,7061,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.981691][ T978] microsoft 0003:045E:07DA.0003: no inputs found [ 173.003082][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.017908][ T978] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 173.257465][ T978] usb 5-1: USB disconnect, device number 3 [ 173.294302][ T7061] JBD2: Ignoring recovery information on journal [ 173.459763][ T7061] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 173.523289][ T7088] fido_id[7088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 174.359102][ T5829] ocfs2: Unmounting device (7,3) on (node local) [ 174.407732][ T5961] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.416944][ T7110] loop1: detected capacity change from 0 to 64 [ 174.597643][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 174.641883][ T5961] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 174.724659][ T5961] usb 5-1: config 0 has no interface number 0 [ 174.777274][ T5961] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 174.826971][ T5961] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8A has invalid maxpacket 50598, setting to 1024 [ 174.854511][ T5961] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 174.886113][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.916995][ T5961] usb 5-1: Product: syz [ 174.931256][ T5961] usb 5-1: Manufacturer: syz [ 174.953451][ T5961] usb 5-1: SerialNumber: syz [ 174.979395][ T5961] usb 5-1: config 0 descriptor?? [ 175.011555][ T7105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.023369][ T5961] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 175.348813][ T7126] loop3: detected capacity change from 0 to 2048 [ 175.432190][ T7129] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.788755][ T7129] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 175.825385][ T7129] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 175.861378][ T7129] Remounting filesystem read-only [ 175.880338][ T5961] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 175.887442][ T5829] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 175.930141][ T7116] loop5: detected capacity change from 0 to 32768 [ 175.960703][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 175.968106][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 175.975211][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 175.982382][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 175.989506][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 175.996583][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.003695][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.010865][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.018036][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.025115][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.032310][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.039473][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.047682][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.052663][ T7116] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.329 (7116) [ 176.054811][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.074720][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.081820][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.088909][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.096008][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.103157][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.111915][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.121437][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.133197][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.140304][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.151037][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.159015][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.166129][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.173260][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.180396][ T5961] usb 5-1: USB disconnect, device number 4 [ 176.187484][ C0] gspca_pac7302 5-1:0.172: URB error -71, resubmitting [ 176.194379][ C0] gspca_main: Resubmit URB failed with error -19 [ 176.228985][ T7116] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.307340][ T7116] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 176.447352][ T978] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.482807][ T7120] loop1: detected capacity change from 0 to 32768 [ 176.540576][ T7131] loop0: detected capacity change from 0 to 32768 [ 176.548954][ T7116] BTRFS info (device loop5): enabling ssd optimizations [ 176.600110][ T7120] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.623591][ T7116] BTRFS info (device loop5): turning on async discard [ 176.638265][ T7131] (syz.0.332,7131,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.649508][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 176.662587][ T7116] BTRFS info (device loop5): enabling free space tree [ 176.693325][ T7131] (syz.0.332,7131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.740789][ T978] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 176.787597][ T978] usb 4-1: config 0 has no interface number 0 [ 176.793919][ T978] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 176.805782][ T978] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 176.822154][ T978] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 176.847080][ T978] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 176.874256][ T7120] XFS (loop1): Ending clean mount [ 176.891473][ T7131] JBD2: Ignoring recovery information on journal [ 176.938349][ T978] usb 4-1: Product: syz [ 176.942574][ T978] usb 4-1: SerialNumber: syz [ 176.999859][ T978] usb 4-1: config 0 descriptor?? [ 177.043892][ T12] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 177.067843][ T978] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 177.109389][ T978] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 177.140821][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 177.188756][ T7131] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 177.204683][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.307751][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 177.327590][ T6764] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.579733][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.590615][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.605739][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.615248][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.622725][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.630546][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.638036][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.645384][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.652884][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.661285][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.672272][ T6011] usb 4-1: USB disconnect, device number 6 [ 177.672334][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 177.709443][ T6011] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 177.798523][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 177.955310][ T7177] loop4: detected capacity change from 0 to 256 [ 178.063678][ T7177] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 178.130194][ T7177] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 178.205241][ T7177] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 178.276945][ T30] audit: type=1800 audit(1764231997.095:12): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.338" name="file1" dev="loop4" ino=1048659 res=0 errno=0 [ 178.343514][ T7181] loop1: detected capacity change from 0 to 512 [ 178.410365][ T7181] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.476104][ T7181] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.340: bg 0: block 4: invalid block bitmap [ 178.515707][ T7181] EXT4-fs (loop1): Remounting filesystem read-only [ 178.523156][ T7181] EXT4-fs (loop1): 1 truncate cleaned up [ 178.532912][ T7181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.958063][ T978] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.301760][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 179.379738][ T978] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 179.546587][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.567185][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.588952][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.617652][ T978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.631949][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.666309][ T978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.677515][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.897290][ T5961] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.908568][ T978] usb 4-1: usb_control_msg returned -32 [ 179.914419][ T978] usbtmc 4-1:16.0: can't read capabilities [ 180.077276][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 180.082672][ T978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.106546][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.246950][ T7206] loop4: detected capacity change from 0 to 32768 [ 180.278509][ T5961] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 180.303157][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.326736][ T7206] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.340094][ T5961] usb 6-1: config 0 descriptor?? [ 180.409911][ T7206] XFS (loop4): Ending clean mount [ 180.410202][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 180.424797][ T978] usb 2-1: config 0 has no interfaces? [ 180.433711][ T978] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 180.443140][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.467619][ T978] usb 2-1: Product: syz [ 180.473355][ T978] usb 2-1: Manufacturer: syz [ 180.478745][ T978] usb 2-1: SerialNumber: syz [ 180.501826][ T978] r8152-cfgselector 2-1: Unknown version 0x0000 [ 180.533407][ T978] r8152-cfgselector 2-1: config 0 descriptor?? [ 180.597760][ T5843] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.801383][ T5961] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 181.514245][ T5961] usb 6-1: USB disconnect, device number 2 [ 181.662413][ T24] usb 4-1: USB disconnect, device number 7 [ 182.321147][ T5961] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 182.807420][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 182.814686][ T978] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 182.837272][ T5961] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 182.846325][ T5961] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 182.865644][ T5961] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.912286][ T5961] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.947163][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.079282][ T7248] loop5: detected capacity change from 0 to 512 [ 183.087242][ T7231] loop3: detected capacity change from 0 to 32768 [ 183.098374][ T7248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.118403][ T7248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.180745][ T7248] EXT4-fs (loop5): 1 truncate cleaned up [ 183.199207][ T7248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.218478][ T978] usb 5-1: USB disconnect, device number 5 [ 183.231323][ T7231] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.283014][ T7231] XFS (loop3): Ending clean mount [ 183.284763][ T7230] loop0: detected capacity change from 0 to 32768 [ 183.304271][ T7231] XFS (loop3): User initiated shutdown received. [ 183.314498][ T7231] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 183.342417][ T7231] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 183.344821][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.400507][ T5829] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.403445][ T7230] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 183.466839][ T7230] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 183.584087][ T7230] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 183.600855][ T5961] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 183.613919][ T5961] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 183.774939][ T5961] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 161ms [ 183.830340][ T5961] gfs2: fsid=syz:syz.0: jid=0: Done [ 183.862277][ T7230] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 184.147256][ T5961] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.267690][ T7272] loop1: detected capacity change from 0 to 4096 [ 184.327277][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 184.345016][ T5961] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 184.358416][ T5961] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 184.370068][ T7278] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.401953][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.402570][ T30] audit: type=1800 audit(1764232003.235:13): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 184.455003][ T5961] usb 6-1: Product: syz [ 184.465562][ T5961] usb 6-1: Manufacturer: syz [ 184.482513][ T5961] usb 6-1: SerialNumber: syz [ 184.500869][ T5961] usb 6-1: config 0 descriptor?? [ 184.521590][ T5961] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 184.531922][ T5961] usb 6-1: setting power ON [ 184.544431][ T5961] dvb-usb: bulk message failed: -22 (2/0) [ 184.576117][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.639457][ T6107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 185.175840][ T7265] dvb-usb: bulk message failed: -22 (3/0) [ 185.276115][ T7265] dvb-usb: bulk message failed: -22 (5/0) [ 185.302476][ T5961] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 185.311334][ T5961] usb 6-1: media controller created [ 185.329644][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.409817][ T5961] usb 6-1: selecting invalid altsetting 6 [ 185.437408][ T5961] usb 6-1: digital interface selection failed (-22) [ 185.468074][ T6107] usb 5-1: Using ep0 maxpacket: 8 [ 185.557726][ T6107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.587320][ T5961] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 185.878186][ T5961] usb 6-1: setting power OFF [ 185.883737][ T6107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.986576][ T5961] dvb-usb: bulk message failed: -22 (2/0) [ 186.053481][ T6107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 186.077419][ T5961] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 186.086779][ T5961] (NULL device *): no alternate interface [ 186.095614][ T6107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 186.167983][ T6107] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.205504][ T6107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.297000][ T6107] hub 5-1:1.0: bad descriptor, ignoring hub [ 186.306212][ T5961] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 186.354598][ T6107] hub 5-1:1.0: probe with driver hub failed with error -5 [ 186.408102][ T6107] cdc_wdm 5-1:1.0: skipping garbage [ 186.417516][ T5961] usb 6-1: USB disconnect, device number 3 [ 186.436175][ T6107] cdc_wdm 5-1:1.0: skipping garbage [ 186.461709][ T6107] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 186.477426][ T6107] cdc_wdm 5-1:1.0: Unknown control protocol [ 186.646210][ T7300] loop0: detected capacity change from 0 to 512 [ 186.647382][ T5944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 186.665157][ T7300] EXT4-fs: Ignoring removed nobh option [ 186.735932][ T7300] EXT4-fs (loop0): Test dummy encryption mode enabled [ 186.764382][ T7300] EXT4-fs error (device loop0): __ext4_iget:5426: inode #11: block 1: comm syz.0.364: invalid block [ 186.777300][ T6107] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 186.795702][ T7300] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.364: couldn't read orphan inode 11 (err -117) [ 186.815423][ T7300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.829734][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.833054][ T5818] usb 5-1: USB disconnect, device number 6 [ 186.845814][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 186.877237][ T5944] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 186.896522][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.908154][ T5944] usb 2-1: config 0 descriptor?? [ 186.947210][ T6107] usb 4-1: Using ep0 maxpacket: 32 [ 186.959243][ T6107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.003712][ T6107] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 187.029773][ T6107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.052662][ T6107] usb 4-1: Product: syz [ 187.056893][ T6107] usb 4-1: Manufacturer: syz [ 187.070107][ T6107] usb 4-1: SerialNumber: syz [ 187.071092][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.089865][ T6107] usb 4-1: config 0 descriptor?? [ 187.246286][ T7315] loop5: detected capacity change from 0 to 512 [ 187.311155][ T7315] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 187.434367][ T5944] hid_parser_main: 59 callbacks suppressed [ 187.434393][ T5944] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 187.461189][ T5944] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 187.470343][ T5944] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 187.633645][ T6107] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 187.700266][ T7315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 187.716424][ T5944] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 187.724993][ T5944] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 187.734128][ T7315] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.374: corrupted in-inode xattr: e_value size too large [ 187.752426][ T7315] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.374: couldn't read orphan inode 15 (err -117) [ 187.764944][ T5944] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 187.835020][ T7315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.864827][ T7326] input: syz1 as /devices/virtual/input/input9 [ 188.144736][ T5944] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 188.161660][ T5944] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 188.186803][ T5944] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 188.193157][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.280456][ T6107] usb 4-1: USB disconnect, device number 8 [ 188.286999][ T5944] usb 2-1: USB disconnect, device number 6 [ 188.661179][ T5944] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.878291][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 188.910036][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.976036][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.005727][ T7346] loop1: detected capacity change from 0 to 1024 [ 189.036181][ T5944] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.090684][ T5944] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 189.105378][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.431412][ T5944] usb 5-1: config 0 descriptor?? [ 190.288892][ T5944] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x7 [ 190.357035][ T5944] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 190.446112][ T5944] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 190.647295][ T5944] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 190.654735][ T5944] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 191.144439][ T5944] hid-rmi 0003:06CB:81A7.0006: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 191.191887][ T5944] usb 5-1: USB disconnect, device number 7 [ 191.481557][ T7373] loop4: detected capacity change from 0 to 64 [ 191.536927][ T7370] fido_id[7370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 193.905093][ T7404] loop3: detected capacity change from 0 to 4096 [ 194.026869][ T7404] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 194.590184][ T7395] loop4: detected capacity change from 0 to 32768 [ 195.455489][ T7395] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.501158][ T7395] XFS (loop4): Ending clean mount [ 195.598287][ T7395] XFS (loop4): Quotacheck needed: Please wait. [ 195.993269][ T7395] XFS (loop4): Quotacheck: Done. [ 197.157625][ T7440] loop0: detected capacity change from 0 to 1024 [ 197.336544][ T7440] hfsplus: xattr searching failed [ 197.385135][ T5843] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.118614][ T7457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 198.410537][ T7457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 199.195709][ T7468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 199.225370][ T7457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 199.568987][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.575528][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.490723][ T7482] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.405'. [ 201.479374][ T7486] loop0: detected capacity change from 0 to 32768 [ 201.535116][ T7486] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.629580][ T7486] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x12f/0x1f0, xfs_agi block 0x2 [ 201.640424][ T7486] XFS (loop0): Unmount and run xfs_repair [ 201.647264][ T7486] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 201.654678][ T7486] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00 XAGI............ [ 201.664525][ T7486] 00000010: 00 00 00 40 00 00 00 01 00 00 00 01 00 00 00 37 ...@...........7 [ 201.673466][ T7486] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 201.682364][ T7486] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.691248][ T7486] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.700232][ T7486] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.709151][ T7486] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.718072][ T7486] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 201.727199][ T7486] XFS (loop0): metadata I/O error in "xfs_read_agi+0x262/0x590" at daddr 0x2 len 1 error 74 [ 201.737441][ T7486] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 201.748046][ T7486] XFS (loop0): Failed to read root inode 0x1140, error 117 [ 201.755931][ T7486] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 214.943529][ T5995] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 215.323117][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.492991][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.641372][ T5995] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.737026][ T5995] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 215.769094][ T5995] usb 1-1: Manufacturer: syz [ 215.806655][ T5995] usb 1-1: config 0 descriptor?? [ 215.818175][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'. [ 217.037269][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 217.043351][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 217.051363][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 217.057806][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 217.579779][ T5995] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 217.613573][ T5995] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 217.642566][ T5995] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 217.672230][ T5995] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 217.697403][ T5995] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 217.781756][ T5995] usb 1-1: USB disconnect, device number 3 [ 220.017207][ T6011] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 220.207314][ T6011] usb 6-1: Using ep0 maxpacket: 32 [ 220.224601][ T6011] usb 6-1: config 0 has no interfaces? [ 220.241768][ T6011] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 220.267520][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 220.286353][ T6011] usb 6-1: Product: syz [ 220.433700][ T6011] usb 6-1: Manufacturer: syz [ 220.438614][ T6011] usb 6-1: SerialNumber: syz [ 220.450919][ T6011] usb 6-1: config 0 descriptor?? [ 221.168402][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.232861][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.337978][ T7658] loop4: detected capacity change from 0 to 512 [ 221.351525][ T5894] usb 6-1: USB disconnect, device number 4 [ 221.477474][ T7658] EXT4-fs (loop4): 1 truncate cleaned up [ 221.492655][ T7658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.279844][ T7658] EXT4-fs (loop4): shut down requested (1) [ 223.200964][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.343582][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.461'. [ 230.817481][ T5944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.080570][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 231.125228][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.294281][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.474294][ T5944] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 231.572265][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.779653][ T5944] usb 2-1: config 0 descriptor?? [ 232.402312][ T5944] hid_parser_main: 1 callbacks suppressed [ 232.402367][ T5944] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x6 [ 232.637013][ T5944] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 232.740741][ T5944] usb 2-1: USB disconnect, device number 7 [ 232.839159][ T7762] loop5: detected capacity change from 0 to 1024 [ 232.906722][ T7762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.951333][ T7760] fido_id[7760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 233.018159][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.444614][ T7785] syzkaller1: entered promiscuous mode [ 236.714343][ T7785] syzkaller1: entered allmulticast mode [ 237.744552][ T7795] loop0: detected capacity change from 0 to 128 [ 245.411902][ T7839] loop0: detected capacity change from 0 to 256 [ 245.495151][ T7839] FAT-fs (loop0): Directory bread(block 64) failed [ 245.523678][ T7839] FAT-fs (loop0): Directory bread(block 65) failed [ 245.565831][ T7839] FAT-fs (loop0): Directory bread(block 66) failed [ 245.591853][ T7839] FAT-fs (loop0): Directory bread(block 67) failed [ 245.607413][ T7839] FAT-fs (loop0): Directory bread(block 68) failed [ 245.614009][ T7839] FAT-fs (loop0): Directory bread(block 69) failed [ 245.649800][ T7839] FAT-fs (loop0): Directory bread(block 70) failed [ 245.667616][ T7839] FAT-fs (loop0): Directory bread(block 71) failed [ 245.676496][ T7839] FAT-fs (loop0): Directory bread(block 72) failed [ 245.722004][ T7845] loop4: detected capacity change from 0 to 4096 [ 245.731266][ T7839] FAT-fs (loop0): Directory bread(block 73) failed [ 245.962022][ T7845] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 249.795394][ T978] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 250.428778][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 251.042030][ T978] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.920633][ T978] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.930749][ T978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.938162][ T978] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 251.954199][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.976660][ T978] usb 5-1: config 0 descriptor?? [ 252.035023][ T7880] loop3: detected capacity change from 0 to 4096 [ 252.586830][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 252.660636][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 252.753888][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 252.850808][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 252.941132][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 252.984478][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 253.007413][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 253.026028][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 253.610753][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 253.681145][ T978] apple 0003:05AC:0247.0009: unknown main item tag 0x0 [ 253.836382][ T978] apple 0003:05AC:0247.0009: unexpected long global item [ 253.957592][ T978] apple 0003:05AC:0247.0009: parse failed [ 253.963503][ T978] apple 0003:05AC:0247.0009: probe with driver apple failed with error -22 [ 254.037503][ T978] usb 5-1: USB disconnect, device number 8 [ 261.007883][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.014280][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.394613][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.431176][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.439625][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 278.474690][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.484766][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.496270][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.718918][ T8029] loop8: detected capacity change from 0 to 8 [ 278.741885][ T8029] Dev loop8: unable to read RDB block 8 [ 278.776878][ T8029] loop8: unable to read partition table [ 278.820868][ T8029] loop8: partition table beyond EOD, truncated [ 278.868562][ T8034] loop0: detected capacity change from 0 to 1024 [ 278.897283][ T8029] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 280.588778][ T5840] Bluetooth: hci5: command tx timeout [ 281.855776][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.567'. [ 282.007405][ T8026] chnl_net:caif_netlink_parms(): no params data found [ 282.166336][ T6002] hfsplus: b-tree write err: -5, ino 4 [ 282.667233][ T5840] Bluetooth: hci5: command tx timeout [ 283.552476][ T8053] loop4: detected capacity change from 0 to 32768 [ 283.586246][ T8053] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 283.595193][ T8053] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 283.625645][ T8053] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 283.678420][ T6343] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 283.685533][ T6343] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 284.047871][ T6343] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 362ms [ 284.055723][ T6343] gfs2: fsid=syz:syz.0: jid=0: Done [ 284.106130][ T8053] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 284.222853][ T8052] loop3: detected capacity change from 0 to 32768 [ 284.245266][ T8052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.570 (8052) [ 284.302094][ T8052] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.331840][ T8052] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 284.454019][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.478485][ T8052] BTRFS info (device loop3): setting nodatasum [ 284.496582][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.515691][ T8052] BTRFS info (device loop3): setting nodatacow [ 284.523847][ T8026] bridge_slave_0: entered allmulticast mode [ 284.552162][ T8052] BTRFS info (device loop3): turning on async discard [ 284.574170][ T8026] bridge_slave_0: entered promiscuous mode [ 284.581143][ T8052] BTRFS info (device loop3): enabling free space tree [ 284.623101][ T8052] BTRFS info (device loop3): max_inline set to 0 [ 284.751290][ T5840] Bluetooth: hci5: command tx timeout [ 285.191362][ T3471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.624645][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.698362][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.705769][ T8026] bridge_slave_1: entered allmulticast mode [ 285.747407][ T8026] bridge_slave_1: entered promiscuous mode [ 285.750991][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.935901][ T8065] loop5: detected capacity change from 0 to 32768 [ 285.955375][ T3471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.090017][ T8065] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 286.711620][ T8065] XFS (loop5): Ending clean mount [ 286.745216][ T3471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.791888][ T8065] XFS (loop5): Quotacheck needed: Please wait. [ 286.838111][ T5840] Bluetooth: hci5: command tx timeout [ 286.911013][ T8065] XFS (loop5): Quotacheck: Done. [ 287.941870][ T6764] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.150560][ T3471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.772948][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.790627][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.339917][ T8026] team0: Port device team_slave_0 added [ 290.072567][ T8026] team0: Port device team_slave_1 added [ 291.318061][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.325111][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.559914][ T8026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.577547][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.584760][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.598204][ T7759] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 292.325131][ T8026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.520654][ T7759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.539140][ T7759] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 292.568553][ T7759] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.604083][ T7759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.624558][ T7759] usb 5-1: Product: syz [ 292.642857][ T7759] usb 5-1: Manufacturer: syz [ 292.658413][ T7759] usb 5-1: SerialNumber: syz [ 292.746457][ T3471] bridge_slave_1: left allmulticast mode [ 292.766395][ T3471] bridge_slave_1: left promiscuous mode [ 292.793347][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.846930][ T3471] bridge_slave_0: left allmulticast mode [ 292.874709][ T3471] bridge_slave_0: left promiscuous mode [ 292.905103][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.957301][ T8141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 293.206703][ T8161] overlayfs: failed to resolve './bus': -2 [ 294.488073][ T7759] cdc_ncm 5-1:1.0: bind() failure [ 294.545600][ T7759] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 294.568423][ T7759] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 294.619193][ T7759] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 294.661337][ T7759] usb 5-1: USB disconnect, device number 9 [ 296.112388][ T8185] loop5: detected capacity change from 0 to 1024 [ 296.250953][ T8185] hfsplus: xattr searching failed [ 296.268422][ T8185] process 'syz.5.596' launched './file0' with NULL argv: empty string added [ 296.289453][ T8185] hfsplus: xattr searching failed [ 296.295593][ T8185] hfsplus: xattr searching failed [ 296.345790][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 297.224715][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.237011][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.251770][ T3471] bond0 (unregistering): Released all slaves [ 297.440055][ T8026] hsr_slave_0: entered promiscuous mode [ 297.499281][ T8026] hsr_slave_1: entered promiscuous mode [ 297.595542][ T8026] debugfs: 'hsr0' already exists in 'hsr' [ 297.630261][ T8026] Cannot create hsr debugfs directory [ 297.863936][ T8188] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 297.911903][ T8189] ip6gre1: entered promiscuous mode [ 298.157996][ T8206] overlayfs: failed to resolve './bus': -2 [ 298.854128][ T8214] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 298.862566][ T8214] netlink: 'syz.0.606': attribute type 2 has an invalid length. [ 301.435293][ T3471] hsr_slave_0: left promiscuous mode [ 301.442146][ T3471] hsr_slave_1: left promiscuous mode [ 301.460028][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.467814][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.504049][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.511690][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.604845][ T3471] veth1_macvtap: left promiscuous mode [ 301.627632][ T3471] veth0_macvtap: left promiscuous mode [ 301.647390][ T3471] veth1_vlan: left promiscuous mode [ 301.674289][ T3471] veth0_vlan: left promiscuous mode [ 301.783122][ T8241] loop3: detected capacity change from 0 to 512 [ 301.981127][ T8241] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.611: inode has both inline data and extents flags [ 302.037011][ T8241] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.611: couldn't read orphan inode 15 (err -117) [ 302.129506][ T8241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.893842][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.290329][ T8277] loop3: detected capacity change from 0 to 128 [ 306.065308][ T8284] overlay: ./file0 is not a directory [ 306.190549][ T3471] team0 (unregistering): Port device team_slave_1 removed [ 306.255065][ T3471] team0 (unregistering): Port device team_slave_0 removed [ 307.426186][ T30] audit: type=1326 audit(1764232126.255:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 307.548627][ T30] audit: type=1326 audit(1764232126.265:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 307.608726][ T30] audit: type=1326 audit(1764232126.265:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 307.658171][ T30] audit: type=1326 audit(1764232126.265:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 307.682153][ T30] audit: type=1326 audit(1764232126.275:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 307.975623][ T30] audit: type=1326 audit(1764232126.275:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 308.307038][ T30] audit: type=1326 audit(1764232126.285:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 308.373104][ T30] audit: type=1326 audit(1764232126.285:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 308.511550][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 308.550699][ T30] audit: type=1326 audit(1764232126.285:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 308.627291][ T30] audit: type=1326 audit(1764232126.285:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f778f749 code=0x7ffc0000 [ 308.713068][ T8026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.824945][ T8026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.118278][ T8295] loop3: detected capacity change from 0 to 32768 [ 309.193550][ T8295] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.228446][ T8026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.359974][ T8295] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 309.424081][ T8026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.451662][ T8295] XFS (loop3): Starting recovery (logdev: internal) [ 309.572113][ T8295] XFS (loop3): Ending recovery (logdev: internal) [ 310.644517][ T5829] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.439208][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.579023][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.273598][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.280872][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.351777][ T8368] loop0: detected capacity change from 0 to 128 [ 312.378361][ T8368] FAT-fs (loop0): Directory bread(block 414) failed [ 312.407127][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.414358][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.442608][ T8368] FAT-fs (loop0): Directory bread(block 415) failed [ 312.467212][ T8368] FAT-fs (loop0): Directory bread(block 416) failed [ 312.497180][ T8368] FAT-fs (loop0): Directory bread(block 417) failed [ 312.557196][ T8368] FAT-fs (loop0): Directory bread(block 418) failed [ 312.574269][ T8368] FAT-fs (loop0): Directory bread(block 419) failed [ 312.611913][ T8368] FAT-fs (loop0): Directory bread(block 420) failed [ 312.633592][ T8368] FAT-fs (loop0): Directory bread(block 421) failed [ 312.711545][ T8368] FAT-fs (loop0): FAT read failed (blocknr 128) [ 312.805055][ T8353] loop5: detected capacity change from 0 to 32768 [ 312.914836][ T8353] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 313.367746][ T8353] XFS (loop5): Ending clean mount [ 313.615789][ T8353] XFS (loop5): Quotacheck needed: Please wait. [ 314.007387][ T8353] XFS (loop5): Quotacheck: Done. [ 314.170373][ T6764] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 314.329420][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.804977][ T8420] loop3: detected capacity change from 0 to 65536 [ 315.153064][ T8420] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 316.167950][ T8420] XFS (loop3): Ending clean mount [ 316.998378][ T5829] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 317.305788][ T8026] veth0_vlan: entered promiscuous mode [ 317.430315][ T8026] veth1_vlan: entered promiscuous mode [ 317.600288][ T8026] veth0_macvtap: entered promiscuous mode [ 317.642784][ T8026] veth1_macvtap: entered promiscuous mode [ 317.764990][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.808815][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.908837][ T6099] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.928420][ T6099] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.971428][ T6099] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.000536][ T6099] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.315747][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.371916][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.478831][ T4525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.511662][ T4525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.172076][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 322.286377][ T8493] loop6: detected capacity change from 0 to 512 [ 322.414716][ T8493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.467860][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.475236][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.482760][ T8493] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.555299][ T8499] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 323.176669][ T8499] EXT4-fs (loop6): Remounting filesystem read-only [ 323.427532][ T8509] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.637014][ T8512] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 324.329388][ T8026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.367037][ T3063] __quota_error: 2 callbacks suppressed [ 324.409153][ T3063] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 324.424523][ T3063] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 327.217346][ T5995] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 327.928038][ T7759] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 328.178471][ T7759] usb 4-1: Using ep0 maxpacket: 16 [ 328.188714][ T7759] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 328.199503][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.212228][ T7759] usb 4-1: config 1 has no interface number 0 [ 328.219809][ T7759] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 328.230591][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.252010][ T7759] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 328.262324][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.282108][ T7759] usb 4-1: config 1 interface 105 has no altsetting 0 [ 328.291115][ T5995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.300864][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.314741][ T7759] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 328.325476][ T7759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.419878][ T7759] usb 4-1: Product: syz [ 328.477106][ T5995] usb 7-1: config 0 descriptor?? [ 328.485377][ T7759] usb 4-1: Manufacturer: syz [ 328.585161][ T7759] usb 4-1: SerialNumber: syz [ 329.110930][ T8543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.350517][ T8543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.913777][ T5995] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 330.727160][ T7759] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 330.743253][ T7759] usb 4-1: USB disconnect, device number 9 [ 331.220857][ T8586] loop3: detected capacity change from 0 to 128 [ 331.222497][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 331.299354][ T8586] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.434172][ T8586] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 331.600617][ T8586] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 18: comm syz.3.685: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 331.670796][ T8586] EXT4-fs error (device loop3) in do_split:2027: Corrupt filesystem [ 331.711606][ T8595] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 18: comm syz.3.685: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 331.783616][ T8595] EXT4-fs error (device loop3) in do_split:2027: Corrupt filesystem [ 332.059258][ T7759] usb 7-1: USB disconnect, device number 2 [ 332.059262][ T5829] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.125217][ T8571] loop0: detected capacity change from 0 to 32768 [ 332.767227][ T8571] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 334.134866][ T8571] XFS (loop0): Ending clean mount [ 335.268769][ T5832] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 335.448252][ T8624] netlink: 'syz.6.694': attribute type 1 has an invalid length. [ 339.543095][ T8653] tipc: Started in network mode [ 339.548496][ T8653] tipc: Node identity 2, cluster identity 4711 [ 339.554694][ T8653] tipc: Node number set to 2 [ 339.900076][ T6055] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 340.111905][ T6055] usb 4-1: Using ep0 maxpacket: 8 [ 340.640086][ T6055] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 342.961798][ T6055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.623706][ T6055] usb 4-1: Product: syz [ 343.628225][ T6055] usb 4-1: Manufacturer: syz [ 343.632852][ T6055] usb 4-1: SerialNumber: syz [ 343.640737][ T6055] usb 4-1: config 0 descriptor?? [ 343.650089][ T6055] usb 4-1: can't set config #0, error -71 [ 343.658171][ T6055] usb 4-1: USB disconnect, device number 10 [ 343.960272][ T8688] loop4: detected capacity change from 0 to 2048 [ 344.059278][ T8688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.311352][ T8698] loop6: detected capacity change from 0 to 256 [ 344.340545][ T8699] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 344.374249][ T8699] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 344.411918][ T8699] EXT4-fs (loop4): This should not happen!! Data will be lost [ 344.411918][ T8699] [ 344.428324][ T8698] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 344.475823][ T8699] EXT4-fs (loop4): Total free blocks count 0 [ 344.484341][ T8699] EXT4-fs (loop4): Free/Dirty block details [ 344.522375][ T8699] EXT4-fs (loop4): free_blocks=2415919504 [ 344.536227][ T8698] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 344.557225][ T8699] EXT4-fs (loop4): dirty_blocks=32 [ 344.580220][ T8699] EXT4-fs (loop4): Block reservation details [ 344.593457][ T8699] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 344.822967][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.028378][ T1152] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1088 with error 28 [ 345.159471][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.390738][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.664038][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.692394][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.706557][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.718373][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.728891][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.741163][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.830322][ T8726] netlink: 'syz.0.720': attribute type 9 has an invalid length. [ 346.863183][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 346.942156][ T8726] netlink: 'syz.0.720': attribute type 9 has an invalid length. [ 346.942233][ T3471] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.950836][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 347.008052][ T3471] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.061568][ T3471] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.162896][ T3471] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.453400][ T50] bridge_slave_1: left allmulticast mode [ 347.491121][ T50] bridge_slave_1: left promiscuous mode [ 347.499289][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.641028][ T5840] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 347.773203][ T8735] loop5: detected capacity change from 0 to 32768 [ 347.896815][ T50] bridge_slave_0: left allmulticast mode [ 347.908647][ T50] bridge_slave_0: left promiscuous mode [ 347.933278][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.967621][ T8735] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.275204][ T8735] XFS (loop5): Ending clean mount [ 348.387628][ T8735] XFS (loop5): Quotacheck needed: Please wait. [ 348.634767][ T8735] XFS (loop5): Quotacheck: Done. [ 348.834068][ T5834] Bluetooth: hci1: command tx timeout [ 348.875886][ T6764] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 349.603164][ T8777] loop0: detected capacity change from 0 to 256 [ 349.614538][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.646993][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.664046][ T8777] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 349.675591][ T50] bond0 (unregistering): Released all slaves [ 349.705866][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 350.463468][ T8793] loop4: detected capacity change from 0 to 16 [ 350.498654][ T8793] erofs (device loop4): mounted with root inode @ nid 36. [ 350.907269][ T5834] Bluetooth: hci1: command tx timeout [ 351.573908][ T8804] loop6: detected capacity change from 0 to 512 [ 351.618957][ T8804] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 351.683035][ T8804] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.736: inode has both inline data and extents flags [ 351.736647][ T8804] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.736: couldn't read orphan inode 15 (err -117) [ 351.756140][ T50] hsr_slave_0: left promiscuous mode [ 351.780244][ T50] hsr_slave_1: left promiscuous mode [ 351.820738][ T8804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.853909][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 351.855096][ T8817] input: syz1 as /devices/virtual/input/input10 [ 352.070588][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.091489][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.105929][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.128778][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.240011][ T5909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.281847][ T8026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.287208][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.324418][ T50] veth1_macvtap: left promiscuous mode [ 352.331290][ T50] veth0_macvtap: left promiscuous mode [ 352.338210][ T50] veth1_vlan: left promiscuous mode [ 352.344131][ T5909] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.354066][ T50] veth0_vlan: left promiscuous mode [ 352.359370][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.390179][ T5909] usb 1-1: SerialNumber: syz [ 352.626684][ T5909] usb 1-1: 0:2 : does not exist [ 352.748499][ T5909] usb 1-1: USB disconnect, device number 4 [ 352.826161][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.987384][ T5834] Bluetooth: hci1: command tx timeout [ 353.457901][ T8840] netlink: 'syz.6.743': attribute type 1 has an invalid length. [ 355.020045][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 355.068267][ T5834] Bluetooth: hci1: command tx timeout [ 355.110942][ T50] team0 (unregistering): Port device team_slave_1 removed [ 355.167733][ T50] team0 (unregistering): Port device team_slave_0 removed [ 355.835750][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 356.260999][ T5909] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 356.350062][ T6011] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 356.437175][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 356.444237][ T5909] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.456221][ T5909] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.466173][ T5909] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 356.480425][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.488199][ T5909] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 356.506183][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.516534][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.527776][ T6011] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.558043][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.574406][ T5909] usb 5-1: config 0 descriptor?? [ 356.833715][ T6011] usb 6-1: config 0 descriptor?? [ 357.327664][ T6011] usbhid 6-1:0.0: can't add hid device: -71 [ 357.334602][ T6011] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 357.347117][ T6011] usb 6-1: USB disconnect, device number 5 [ 357.434006][ T5909] hid (null): unknown global tag 0x83 [ 357.442593][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.461603][ T5909] hid (null): unknown global tag 0xc [ 357.471822][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.502062][ T5909] hid (null): global environment stack underflow [ 357.511578][ T8727] bridge_slave_0: entered allmulticast mode [ 357.527266][ T5909] hid (null): unknown global tag 0xc [ 357.567348][ T8727] bridge_slave_0: entered promiscuous mode [ 357.611227][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.651425][ T6011] usb 5-1: USB disconnect, device number 10 [ 357.668455][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.696650][ T8727] bridge_slave_1: entered allmulticast mode [ 357.720785][ T8727] bridge_slave_1: entered promiscuous mode [ 357.777254][ T106] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 357.895332][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.979650][ T106] usb 6-1: Using ep0 maxpacket: 32 [ 357.980009][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.987017][ T106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.994246][ T106] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 358.057812][ T106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.090897][ T106] usb 6-1: config 0 descriptor?? [ 358.122075][ T106] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 358.172027][ T106] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 358.287591][ T8727] team0: Port device team_slave_0 added [ 358.296702][ T8727] team0: Port device team_slave_1 added [ 358.432739][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.448734][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.534047][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.613531][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.633664][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.640205][ T5909] usb 6-1: USB disconnect, device number 6 [ 358.674838][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.704694][ T5909] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 358.912653][ T8727] hsr_slave_0: entered promiscuous mode [ 358.932126][ T8727] hsr_slave_1: entered promiscuous mode [ 358.950449][ T8727] debugfs: 'hsr0' already exists in 'hsr' [ 358.964423][ T8727] Cannot create hsr debugfs directory [ 359.618105][ T8922] loop5: detected capacity change from 0 to 8192 [ 359.926687][ T8727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 359.996804][ T8727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 360.061384][ T8727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 360.207651][ T5909] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 360.514664][ T5909] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.605673][ T5909] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.716538][ T5909] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.819148][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.882790][ T5909] usb 7-1: SerialNumber: syz [ 361.568211][ T8727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 361.609502][ T5909] usb 7-1: 0:2 : does not exist [ 361.741938][ T5909] usb 7-1: USB disconnect, device number 3 [ 361.841034][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.856472][ T8943] loop5: detected capacity change from 0 to 128 [ 361.940534][ T8943] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.971884][ T8943] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.982729][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.033801][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.058909][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.066179][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.089129][ T8943] EXT4-fs (loop5): shut down requested (1) [ 362.126521][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.133827][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.528622][ T6764] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.171672][ T8969] loop6: detected capacity change from 0 to 2048 [ 363.293132][ T8969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.328930][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.601121][ T8977] loop0: detected capacity change from 0 to 1024 [ 363.711591][ T8977] hfsplus: request for non-existent node 1280 in B*Tree [ 363.761712][ T8977] hfsplus: request for non-existent node 1280 in B*Tree [ 363.777759][ T6011] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 363.909539][ T8977] syz.0.775: attempt to access beyond end of device [ 363.909539][ T8977] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 363.967227][ T6011] usb 6-1: Using ep0 maxpacket: 16 [ 363.984436][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.016460][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.067257][ T6011] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.118353][ T6011] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 364.139948][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.191301][ T6011] usb 6-1: config 0 descriptor?? [ 364.490512][ T30] audit: type=1800 audit(1764232183.325:26): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.773" name="bus" dev="loop6" ino=1436 res=0 errno=0 [ 364.613055][ T8727] veth0_vlan: entered promiscuous mode [ 364.654249][ T8727] veth1_vlan: entered promiscuous mode [ 364.743169][ T6011] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000C/input/input11 [ 364.811685][ T8727] veth0_macvtap: entered promiscuous mode [ 364.838142][ T6011] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 364.856755][ T8727] veth1_macvtap: entered promiscuous mode [ 364.900628][ T6011] usb 6-1: USB disconnect, device number 7 [ 364.980843][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.023901][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.083221][ T7162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.096121][ T7162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.116008][ T9002] fido_id[9002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 365.136324][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.187222][ T8678] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 365.198956][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.380502][ T8678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.412141][ T8678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.442761][ T8678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.469399][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.486939][ T8678] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.506023][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.515679][ T8678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.549036][ T8678] usb 5-1: config 0 descriptor?? [ 365.612771][ T7162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.634091][ T7162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.645595][ T8994] loop0: detected capacity change from 0 to 32768 [ 365.743891][ T8994] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 365.814638][ T8994] XFS (loop0): Ending clean mount [ 365.893020][ T30] audit: type=1800 audit(1764232184.725:27): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.777" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 366.021610][ T8678] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 366.152800][ T5832] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 366.487460][ T6343] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 367.002835][ T6343] usb 6-1: Using ep0 maxpacket: 8 [ 367.450866][ T7834] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 367.944497][ T6343] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 367.952975][ T6343] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 367.963479][ T6343] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.976761][ T6343] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 367.985939][ T6343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.228841][ T6343] usb 6-1: USB disconnect, device number 8 [ 368.361536][ T5947] usb 5-1: USB disconnect, device number 11 [ 371.729931][ T9072] loop7: detected capacity change from 0 to 4096 [ 371.755817][ T9072] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 371.892796][ T9072] ntfs3(loop7): ino=1a, mi_enum_attr [ 371.917223][ T9072] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 371.950478][ T9072] ntfs3(loop7): ino=1a, mi_enum_attr [ 371.955849][ T9072] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 372.016701][ T9072] ntfs3(loop7): ino=18, The size of extended attributes must not exceed 64KiB [ 372.057834][ T9072] ntfs3(loop7): ino=18, The size of extended attributes must not exceed 64KiB [ 372.236901][ T9072] ntfs3(loop7): ino=18, The size of extended attributes must not exceed 64KiB [ 372.580372][ T9086] ntfs3(loop7): ino=18, The size of extended attributes must not exceed 64KiB [ 373.388294][ T9088] ntfs3(loop7): ino=18, The size of extended attributes must not exceed 64KiB [ 374.331319][ T9103] tmpfs: Too small a size for current use [ 374.577734][ T9109] loop7: detected capacity change from 0 to 2048 [ 374.678905][ T9109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.711381][ T9109] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.750877][ T8727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.315355][ T9133] loop0: detected capacity change from 0 to 32768 [ 378.444446][ T9133] [ 378.444446][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.444446][ T9133] [ 378.507829][ T9133] [ 378.507829][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.507829][ T9133] [ 378.520174][ T9133] [ 378.520174][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.520174][ T9133] [ 378.530879][ T9133] [ 378.530879][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.530879][ T9133] [ 378.543785][ T114] [ 378.543785][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.543785][ T114] [ 378.575784][ T9133] [ 378.575784][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.575784][ T9133] [ 378.586947][ T9133] [ 378.586947][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.586947][ T9133] [ 378.598538][ T9133] [ 378.598538][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.598538][ T9133] [ 378.609990][ T9133] [ 378.609990][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.609990][ T9133] [ 378.785718][ T114] [ 378.785718][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.785718][ T114] [ 379.057275][ T9133] [ 379.057275][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.057275][ T9133] [ 379.068230][ T9133] [ 379.068230][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.068230][ T9133] [ 379.078939][ T9133] [ 379.078939][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.078939][ T9133] [ 379.089605][ T9133] [ 379.089605][ T9133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.089605][ T9133] [ 379.252004][ T114] [ 379.252004][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.252004][ T114] [ 379.342855][ T5832] [ 379.342855][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.342855][ T5832] [ 379.388836][ T5832] [ 379.388836][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.388836][ T5832] [ 383.873938][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.880470][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.516674][ T9216] loop7: detected capacity change from 0 to 512 [ 386.570396][ T9216] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 386.599388][ T9216] EXT4-fs (loop7): invalid journal inode [ 386.661616][ T9216] EXT4-fs (loop7): can't get journal size [ 386.712631][ T9216] EXT4-fs (loop7): 1 truncate cleaned up [ 386.736523][ T9216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.953029][ T8727] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.082074][ T9224] loop0: detected capacity change from 0 to 32768 [ 388.125560][ T9224] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist [ 388.125560][ T9224] [ 388.147768][ T9224] ERROR: (device loop0): remounting filesystem as read-only [ 388.155130][ T9224] ialloc: diAlloc returned -5! [ 388.888415][ T9268] loop4: detected capacity change from 0 to 512 [ 388.945226][ T9268] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 388.983414][ T9268] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #17: comm syz.4.840: corrupted in-inode xattr: invalid size in ea xattr [ 389.018960][ T9268] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.840: couldn't read orphan inode 17 (err -117) [ 389.102043][ T9268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.705310][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.774924][ T9294] loop5: detected capacity change from 0 to 4096 [ 390.817680][ T9294] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 392.185163][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.851'. [ 392.679840][ T9329] loop6: detected capacity change from 0 to 512 [ 392.696730][ T9329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.728324][ T9329] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 393.039334][ T9329] EXT4-fs (loop6): 1 truncate cleaned up [ 393.312411][ T9329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.213379][ T8026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.626522][ T9348] input: syz0 as /devices/virtual/input/input13 [ 395.727437][ T9355] netlink: 'syz.7.859': attribute type 4 has an invalid length. [ 401.192098][ T9408] loop5: detected capacity change from 0 to 131072 [ 401.299684][ T9408] F2FS-fs (loop5): Test dummy encryption mode enabled [ 401.307257][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 401.312171][ T9408] F2FS-fs (loop5): invalid crc value [ 401.505010][ T9408] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 401.554625][ T9408] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 401.574937][ T9408] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 403.332987][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.342190][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.981634][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.077551][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.491580][ T6099] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.538582][ T6099] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.617746][ T6099] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.654726][ T3436] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.891368][ T9472] loop0: detected capacity change from 0 to 16 [ 405.906486][ T9472] erofs (device loop0): mounted with root inode @ nid 36. [ 406.127467][ T9478] loop7: detected capacity change from 0 to 2048 [ 406.185451][ T9478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.252784][ T30] audit: type=1804 audit(1764232225.075:28): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.898" name="/newroot/26/file0/file1" dev="loop7" ino=1367 res=1 errno=0 [ 406.353470][ T9484] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 406.397834][ T9484] block device autoloading is deprecated and will be removed. [ 407.052563][ T9478] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 1708032 lbcount: 1712128 extent 674+1072640 [ 407.171562][ T9481] loop0: detected capacity change from 0 to 40427 [ 407.536279][ T9481] F2FS-fs (loop0): invalid crc value [ 408.390383][ T9514] loop5: detected capacity change from 0 to 128 [ 408.404594][ T9481] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 408.450751][ T9481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 408.500050][ T30] audit: type=1800 audit(1764232227.325:29): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file2" dev="loop5" ino=1048677 res=0 errno=0 [ 409.731335][ T9538] misc userio: No port type given on /dev/userio [ 409.738198][ T9538] misc userio: The device must be registered before sending interrupts [ 409.746772][ T9538] misc userio: Invalid payload size [ 410.100643][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 412.043564][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.7.928'. [ 412.120270][ T9570] ================================================================== [ 412.128485][ T9570] BUG: KASAN: slab-use-after-free in locks_remove_posix+0x10f/0x630 [ 412.136629][ T9570] Read of size 8 at addr ffff88807bed7d60 by task syz.0.927/9570 [ 412.144388][ T9570] [ 412.146734][ T9570] CPU: 1 UID: 0 PID: 9570 Comm: syz.0.927 Not tainted syzkaller #0 PREEMPT(full) [ 412.146754][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.146771][ T9570] Call Trace: [ 412.146778][ T9570] [ 412.146786][ T9570] dump_stack_lvl+0x189/0x250 [ 412.146813][ T9570] ? __kasan_check_byte+0x12/0x40 [ 412.146838][ T9570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.146861][ T9570] ? lock_release+0x4b/0x3b0 [ 412.146885][ T9570] ? __virt_addr_valid+0x4a5/0x5c0 [ 412.146917][ T9570] print_report+0xca/0x240 [ 412.146942][ T9570] ? locks_remove_posix+0x10f/0x630 [ 412.146965][ T9570] kasan_report+0x118/0x150 [ 412.146993][ T9570] ? locks_remove_posix+0x10f/0x630 [ 412.147026][ T9570] locks_remove_posix+0x10f/0x630 [ 412.147059][ T9570] ? __pfx_locks_remove_posix+0x10/0x10 [ 412.147103][ T9570] ? do_raw_spin_unlock+0x122/0x240 [ 412.147124][ T9570] ? dnotify_flush+0x1db/0x5e0 [ 412.147151][ T9570] ? mqueue_flush_file+0x21c/0x270 [ 412.147181][ T9570] ? filp_flush+0xae/0x190 [ 412.147202][ T9570] filp_flush+0x113/0x190 [ 412.147227][ T9570] filp_close+0x1d/0x40 [ 412.147248][ T9570] __se_sys_close_range+0x359/0x650 [ 412.147272][ T9570] ? __pfx___se_sys_close_range+0x10/0x10 [ 412.147294][ T9570] ? do_syscall_64+0xbe/0xf80 [ 412.147320][ T9570] do_syscall_64+0xfa/0xf80 [ 412.147344][ T9570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.147361][ T9570] ? clear_bhb_loop+0x60/0xb0 [ 412.147380][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.147396][ T9570] RIP: 0033:0x7f581cf8f749 [ 412.147413][ T9570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.147429][ T9570] RSP: 002b:00007fff319dd518 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 412.147448][ T9570] RAX: ffffffffffffffda RBX: 0000000000064952 RCX: 00007f581cf8f749 [ 412.147461][ T9570] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 412.147472][ T9570] RBP: 00007f581d1e7da0 R08: 0000000000000001 R09: 00000008319dd80f [ 412.147483][ T9570] R10: 0000001b2fb20000 R11: 0000000000000246 R12: 00007f581d1e609c [ 412.147495][ T9570] R13: 00007f581d1e6090 R14: ffffffffffffffff R15: 00007fff319dd630 [ 412.147516][ T9570] [ 412.147522][ T9570] [ 412.371015][ T9570] Allocated by task 9573: [ 412.375349][ T9570] kasan_save_track+0x3e/0x80 [ 412.380084][ T9570] __kasan_slab_alloc+0x6c/0x80 [ 412.384963][ T9570] kmem_cache_alloc_noprof+0x37d/0x710 [ 412.390440][ T9570] locks_get_lock_context+0x134/0x3b0 [ 412.395824][ T9570] generic_setlease+0x528/0x1280 [ 412.400775][ T9570] do_fcntl_add_lease+0x34d/0x460 [ 412.405812][ T9570] fcntl_setlease+0x123/0x180 [ 412.410503][ T9570] do_fcntl+0x867/0x1a50 [ 412.414753][ T9570] __se_sys_fcntl+0xc8/0x150 [ 412.419386][ T9570] do_syscall_64+0xfa/0xf80 [ 412.423920][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.429835][ T9570] [ 412.432199][ T9570] Freed by task 9577: [ 412.436182][ T9570] kasan_save_track+0x3e/0x80 [ 412.440881][ T9570] kasan_save_free_info+0x46/0x50 [ 412.445919][ T9570] __kasan_slab_free+0x5c/0x80 [ 412.450720][ T9570] kmem_cache_free+0x197/0x620 [ 412.455499][ T9570] __destroy_inode+0x2ea/0x670 [ 412.460295][ T9570] evict+0x87d/0xae0 [ 412.464202][ T9570] __dentry_kill+0x209/0x660 [ 412.468799][ T9570] finish_dput+0xc9/0x480 [ 412.473134][ T9570] __fput+0x68e/0xa70 [ 412.477127][ T9570] task_work_run+0x1d4/0x260 [ 412.481731][ T9570] exit_to_user_mode_loop+0xff/0x4f0 [ 412.487090][ T9570] do_syscall_64+0x2e3/0xf80 [ 412.491714][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.497618][ T9570] [ 412.499946][ T9570] The buggy address belongs to the object at ffff88807bed7d10 [ 412.499946][ T9570] which belongs to the cache file_lock_ctx of size 112 [ 412.514174][ T9570] The buggy address is located 80 bytes inside of [ 412.514174][ T9570] freed 112-byte region [ffff88807bed7d10, ffff88807bed7d80) [ 412.528017][ T9570] [ 412.530368][ T9570] The buggy address belongs to the physical page: [ 412.536887][ T9570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bed7 [ 412.545665][ T9570] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 412.552802][ T9570] page_type: f5(slab) [ 412.556789][ T9570] raw: 00fff00000000000 ffff888140edc140 dead000000000122 0000000000000000 [ 412.565383][ T9570] raw: 0000000000000000 0000000080170017 00000000f5000000 0000000000000000 [ 412.573977][ T9570] page dumped because: kasan: bad access detected [ 412.580400][ T9570] page_owner tracks the page as allocated [ 412.586140][ T9570] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5206, tgid 5206 (udevd), ts 53698839394, free_ts 53697512773 [ 412.604825][ T9570] post_alloc_hook+0x234/0x290 [ 412.609623][ T9570] get_page_from_freelist+0x2365/0x2440 [ 412.615189][ T9570] __alloc_frozen_pages_noprof+0x181/0x370 [ 412.621012][ T9570] alloc_pages_mpol+0x232/0x4a0 [ 412.625876][ T9570] allocate_slab+0x86/0x3b0 [ 412.630478][ T9570] ___slab_alloc+0xf2b/0x1960 [ 412.635175][ T9570] __slab_alloc+0x65/0x100 [ 412.639605][ T9570] kmem_cache_alloc_noprof+0x40f/0x710 [ 412.645072][ T9570] locks_get_lock_context+0x134/0x3b0 [ 412.650457][ T9570] flock_lock_inode+0xf2/0x1410 [ 412.655322][ T9570] locks_lock_inode_wait+0x107/0x410 [ 412.660623][ T9570] __se_sys_flock+0x467/0x5b0 [ 412.665488][ T9570] do_syscall_64+0xfa/0xf80 [ 412.670002][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.675899][ T9570] page last free pid 5202 tgid 5202 stack trace: [ 412.682226][ T9570] __free_frozen_pages+0xbc8/0xd30 [ 412.687357][ T9570] __slab_free+0x21b/0x2a0 [ 412.691788][ T9570] qlist_free_all+0x97/0x100 [ 412.696387][ T9570] kasan_quarantine_reduce+0x148/0x160 [ 412.701858][ T9570] __kasan_slab_alloc+0x22/0x80 [ 412.706722][ T9570] kmem_cache_alloc_noprof+0x37d/0x710 [ 412.712188][ T9570] __se_sys_inotify_add_watch+0x6d4/0xf10 [ 412.717927][ T9570] do_syscall_64+0xfa/0xf80 [ 412.722484][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.728393][ T9570] [ 412.730733][ T9570] Memory state around the buggy address: [ 412.736386][ T9570] ffff88807bed7c00: 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 [ 412.744463][ T9570] ffff88807bed7c80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 412.752536][ T9570] >ffff88807bed7d00: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 412.760773][ T9570] ^ [ 412.767979][ T9570] ffff88807bed7d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 412.776064][ T9570] ffff88807bed7e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 412.784134][ T9570] ================================================================== [ 412.809281][ T9570] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 412.816543][ T9570] CPU: 0 UID: 0 PID: 9570 Comm: syz.0.927 Not tainted syzkaller #0 PREEMPT(full) [ 412.825788][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.835884][ T9570] Call Trace: [ 412.839275][ T9570] [ 412.842232][ T9570] dump_stack_lvl+0x99/0x250 [ 412.846883][ T9570] ? __asan_memcpy+0x40/0x70 [ 412.851517][ T9570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.856855][ T9570] ? __pfx__printk+0x10/0x10 [ 412.861488][ T9570] vpanic+0x237/0x6d0 [ 412.865496][ T9570] ? __pfx_vpanic+0x10/0x10 [ 412.870011][ T9570] ? preempt_schedule+0xae/0xc0 [ 412.874898][ T9570] ? __pfx_preempt_schedule+0x10/0x10 [ 412.880286][ T9570] panic+0xb9/0xc0 [ 412.884015][ T9570] ? __pfx_panic+0x10/0x10 [ 412.888440][ T9570] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 412.894446][ T9570] ? locks_remove_posix+0x10f/0x630 [ 412.899762][ T9570] check_panic_on_warn+0x89/0xb0 [ 412.904756][ T9570] ? locks_remove_posix+0x10f/0x630 [ 412.909999][ T9570] end_report+0x6f/0x140 [ 412.914280][ T9570] kasan_report+0x129/0x150 [ 412.918896][ T9570] ? locks_remove_posix+0x10f/0x630 [ 412.924206][ T9570] locks_remove_posix+0x10f/0x630 [ 412.929288][ T9570] ? __pfx_locks_remove_posix+0x10/0x10 [ 412.934982][ T9570] ? do_raw_spin_unlock+0x122/0x240 [ 412.940215][ T9570] ? dnotify_flush+0x1db/0x5e0 [ 412.945027][ T9570] ? mqueue_flush_file+0x21c/0x270 [ 412.950185][ T9570] ? filp_flush+0xae/0x190 [ 412.954639][ T9570] filp_flush+0x113/0x190 [ 412.959009][ T9570] filp_close+0x1d/0x40 [ 412.963198][ T9570] __se_sys_close_range+0x359/0x650 [ 412.968437][ T9570] ? __pfx___se_sys_close_range+0x10/0x10 [ 412.974194][ T9570] ? do_syscall_64+0xbe/0xf80 [ 412.978918][ T9570] do_syscall_64+0xfa/0xf80 [ 412.983459][ T9570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.989556][ T9570] ? clear_bhb_loop+0x60/0xb0 [ 412.994268][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.000191][ T9570] RIP: 0033:0x7f581cf8f749 [ 413.004632][ T9570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.024267][ T9570] RSP: 002b:00007fff319dd518 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 413.032700][ T9570] RAX: ffffffffffffffda RBX: 0000000000064952 RCX: 00007f581cf8f749 [ 413.040767][ T9570] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 413.048850][ T9570] RBP: 00007f581d1e7da0 R08: 0000000000000001 R09: 00000008319dd80f [ 413.056833][ T9570] R10: 0000001b2fb20000 R11: 0000000000000246 R12: 00007f581d1e609c [ 413.064813][ T9570] R13: 00007f581d1e6090 R14: ffffffffffffffff R15: 00007fff319dd630 [ 413.072805][ T9570] [ 413.076285][ T9570] Kernel Offset: disabled [ 413.080648][ T9570] Rebooting in 86400 seconds..