last executing test programs: 9m40.162426223s ago: executing program 3 (id=630): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = dup(r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000b00)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20084890}, 0x4000800) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x4010) 9m40.162274143s ago: executing program 3 (id=631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 9m39.886109989s ago: executing program 3 (id=635): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16, 0x0, 0x17, 0x7ffc0001}]}) 9m37.732506639s ago: executing program 3 (id=651): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x1c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 9m36.728629193s ago: executing program 3 (id=664): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff7, 0x12, r1, 0x0) fallocate(r1, 0x0, 0x9, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 9m36.320320152s ago: executing program 3 (id=670): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0xc854) 9m35.95531486s ago: executing program 32 (id=670): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0xc854) 6m42.142534652s ago: executing program 1 (id=1631): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) socket$unix(0x1, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xca60, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r3, 0x23719000) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) gettid() 6m41.723595612s ago: executing program 1 (id=1638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m41.508035797s ago: executing program 1 (id=1639): socket$inet6_udp(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0xe) 6m40.333056554s ago: executing program 1 (id=1643): r0 = syz_clone(0x1000111, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou']) umount2(&(0x7f0000000140)='./file0\x00', 0x2) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x4e23, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x81, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x7, 0x1, 0x0, 0x2, 0x1, 0x2], 0x1, 0x4}, {0x2, [0x1, 0x4, 0x5, 0x2, 0x0, 0x1], 0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r4, &(0x7f0000002040)='ns/ipc\x00') tkill(r4, 0x21) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xe25, 0x7}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) setpgid(r4, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') setuid(0xee01) renameat2(r5, &(0x7f00000006c0)='./mnt\x00', r5, &(0x7f0000000040)='./mnt\x00', 0x0) exit(0x20000000000051a) 6m39.063708694s ago: executing program 1 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fanotify_init(0x4, 0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x4) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 6m35.34047096s ago: executing program 1 (id=1666): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 6m34.660699976s ago: executing program 33 (id=1666): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 6m13.871744938s ago: executing program 0 (id=1764): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 6m13.520503436s ago: executing program 0 (id=1766): mq_open(&(0x7f0000000400)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6\xff\x03\x00\x00\x00\x00\x00\x00vs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b1\xe0<\x80\xed\xd0o:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6x\x10h\xd8\xdb\x83\xfbj\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\x9f\xf4%N\x84\'\xba\xf5\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\xca\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0fl\xa0j\xa2\x93\xc7\x87@\xa5h\xae\xba\x1djx\x9b\x97\xe9!M8\xd4}1\xb7\x9d\xe8\x8b\x7f\xe5t\xe5\xdf\xe3\xfdw\x80p\xb7\x94\x11\xea\x88K\xc0;9\xde\x83\xae\x19&\xc1f\x0e\x13]\xb9P<)\xb3\x19\xa7T\x1fa5\xcf\xa6\xb0\xbc\xcc\x1c]\x9a\xd2\xd0T\xee\xb0\x120xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 5m31.99223375s ago: executing program 4 (id=1936): mlockall(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) mlock(&(0x7f000034e000/0x800000)=nil, 0x800000) 5m31.396179803s ago: executing program 35 (id=1936): mlockall(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) mlock(&(0x7f000034e000/0x800000)=nil, 0x800000) 4m59.051779034s ago: executing program 7 (id=2009): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000001840)={0x1, 0x8, 0xffffff5e, 0x6, 0x4, 0x2, 0x40, 0x5, 0x0, 0x4, 0xffffffff, 0x2, 0x0, 0x0, 0x0}) 4m58.76043455s ago: executing program 7 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) 4m58.116464565s ago: executing program 7 (id=2015): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea9, 0xa) 4m57.838933632s ago: executing program 7 (id=2017): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) 4m57.419189672s ago: executing program 7 (id=2019): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) 4m57.090683079s ago: executing program 7 (id=2022): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fb, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) pipe(0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'vlan1\x00', @multicast}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 4m41.97665201s ago: executing program 36 (id=2022): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fb, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) pipe(0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'vlan1\x00', @multicast}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.532570879s ago: executing program 6 (id=3376): socket(0x10, 0x3, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe41186dcfb17d46f2102844f4483800c80bc872ab404db454008f91dfc7f9353ffe6be87e5e372ca9c700fc7c0b017434bc0bb7f46f445625af3e5d901356522c3b4b13c9e82e8419ad354932c70a3f943b439289ea313d7ff05f1262e0182d3fd407b40c9149784488f62267070eb77aa3d3c25717ff368f79c4d53026fea6fc14d34ac221045ee77a1f08e83b4bda8f8ea872f7deb116e6fa0b2f2232bcf80924749f2fe55c2bfcb3e9260661b741df803ad8027180db721af7a611711726638", 0xce}], 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0, 0x50}}, 0x0) r3 = fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r5, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xc000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.368065906s ago: executing program 6 (id=3379): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x0, 0x1) ptrace$cont(0x18, r2, 0x0, 0x0) setpgid(r2, r2) ptrace$setregs(0x4212, r2, 0x58, &(0x7f0000000080)="01") 5.087337413s ago: executing program 6 (id=3381): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000050c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="a38ba845ec4efadcef0748bc81c2b1e5871864cbd669dbeae919b80ed2cbe548fec9b69473db427a2f2e8e6e7c4c766444a00864121f6ee2ba4a23229ec0168a47176bb0a5bcb0f2755306372832f73ef0cd68b6f1579a637633db2d4efb1c66b1f17c0e06e6a5d58c7420a3e59452d125e53b7bc53aa594a451c4ff81840c1b3c7cc73f3bd32194441d8dc67f33f6b0dcc808c2ae12db6ee560d8aa8aa335f779b48d8be8821abb2d294aae2f69ed194ef5bcd2eca82b6b1f9cb1f0db166bd913c098a0aeac00ce81c0a0e7bb3281cec84a8560b0ac4c6e75913bcc9ff5a0b2ad32aac77d35137c79f0675a34e94bbe1540b700bfa1010eedb2946e56f2c583e1b9d27c1168224dd58300ad5acae1f3fac5602d234a87a16f56ed6c289f2856d06095cadc3543d5240516ae90b73f49c30aa044a8b1c11e698ca4ca0807ac9f3c67b196ed8ac06923cf1ae96ceceb342bc2e83ab4b939c8a1b596f0ec03513a13bd37311d4401007f6dee043bc64db5231bb54ec21567f3479f62f43716a462225d3759eec053112bddc3889a70c5a766bf2877fdf8f948d031d98fbad1ca25b2c86c0ba90fd2114ab9e79674a81dbc162b43145c68fea3d0cfe31b33644d99e05c89b78257be2508f80473a8166fb984a22d96c26fc6f4524726bb90395ffbfafaf61cca0c0e20adbb9812e8ad7383cbaa7304ea83b5f6b671734349ec6c84f172a2a6ee94269c7bbecce23389e5c808c8acad84b4e54de5cd4b480b4dd6f01ca4da2a6cf752f3a7bfba7e349d3ad6c4f3133df7d42748f428b0fa39bb675c8b70a600217d9968d21c4610e16c8dd34beb3c09cf8fbfd308d589af9528cfea7217b39ee9d95278890d9bf92eea19387bc1d0200e4b7ed9af292a04909721d60dde41ae7be9022ac249795da20e5c4eff6248b0fb0cbed270ce34aeea6e9bd76902c2b110bbf31a7e5e634372494525e63691910fcfad933949fa023d8b17f073c8b08635727f1bd74ff227ec6277ccf885f8b532ac364ce1696ae4030b11e00ea6ef87e93cc303bca52fa57af380866523b61ea4ec3759355c86053fe2200020a2ad1581fb38cf35493adae068881d74cc890e800155be3d2a6bccb0b44986b0c4fb2e7b4dfe6bad957a98b681de12bcbb9a7add192afdbb25f5cefbad8ea131f9dd5ffb0d15de48b3c9b109276dfccbe1626b8403366be5e384685db7e1621f11b61dfcca541f002b1f1050057fbc569ab6dbf4b93ae8436643dfce53f030e70b780f6ad2561e1d58daec22f924c6a015e695111e0db4c1afd339c6c5f9c33eaa229190dd76386c4e34e526cea70c25886d768b2432c7550613eb24782a4c9ca26444f2b6332a21fcde4732586a318e9b14e0682a79e4aadf54e857cfb675c60f463917403a5592f6bd5c996b5ec4df61632cd33cea6fc978b9ac9b05300e65b502b7c4ac681ddacbd3dabb177b6d92c484a80fb2031c5306faaf6258c287b7a1f800e8618c07000000c705a38255009931c003fc704141fe5b297547f58778a188b8643c7724a5690dfda8c39d02a5a9aac5b11f01e5596089a30e6f7170f727139d75ab5f6f6e885100aa9fb22ab1c6b8f24280ea2acbbe3bd2e11839ed4c732a5d27f59c6130c523d346ade2a8fde4777c092ab423fb4970e3911a4a46ce5213a78a56b03647150712aa86e0d007bfb5a55499286274751ec3a5fad77c95d41e96457635eb1e9d44dbb1c42de56e67dea58574f0bd0164cff66c5a3d91cbab4e510f7c151e4cb459de8cad159ba184d27ffcee99875f64b264f79d51c879221151937e54143990b621ce085139e405f89e97f69ada15926a781a17aea20828fed4fb488bd3c659d47fdd79ca85b3bbe490523c8c56cae291ce6169dd6b402f9e59dfaa4d01292531955b3078c29cd26b810ee176", 0x557}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002400)="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", 0x529}], 0x1}}], 0x3, 0x2000c044) writev(r1, &(0x7f00000023c0)=[{&(0x7f00000013c0)="1ee91e92dfae81cf429f630681d319b0b95d412ae896df07d59f65e6de8df164f2451947cb973fabb665aa6913989efcb371bbeb0dda4143bb4e1f489f1b777e20a71fdffad3760038c22a53582306c27096c08d8c2620e4a434c7ea1a2633e3d7622d29024549946c632f0f944fc0c8d8a26522ffcc4fafa8dca39f9f4110a73c6c9c2378a2416b59791df721090b7d12526f72cf560354542983d5af1450", 0x9f}], 0x1) 4.909722937s ago: executing program 6 (id=3382): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x2d, 0x107, 0x70bd25, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4014) 4.690250692s ago: executing program 6 (id=3385): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0xff30, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'ip_vti0\x00', 0x6}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) openat$cgroup(r5, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x10000}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003200)=[{0x0, 0x0, 0x1}], 0x0) 4.33779876s ago: executing program 8 (id=3388): syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x170}, &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110)) r0 = socket(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffff523d, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000101e0440304000010203010902600003010300050904000000010100000a240100000a0002010209040100000102000009040101010102000009050109080006fc0a072501000e0600090402000001020000090402010101020000090eed1bfd058209400001bf08072501"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect(0x4, 0x24, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "9de5e040f776336d", "e237a2a40d2fc7eecd02918c06239899", "11bef193", "1ece78b21096772f"}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRESOCT, @ANYRES16=0x0, @ANYRESHEX=r2, @ANYBLOB="b0cdedce80decf636e158b90b118e610a6553db1e3ff7a06823e47dcd7c744b02df21bdf900d176c7fde2d3617df852f9cd97ed2a2c9563dd38693a14ccbefa2a0a81a2422dfae3b753a07a8166cd8f940a9175aadcbddf59b366ef43bac7280f0ac605cab6e4255dab9363af03a5aa32272f73b8523fea9cf596dfdfd626febba7e116ebf33dc1fca450f286e586edb9e5a21d53decc64a1af8f1d33f21b1df1f3e4f8933e9ba9163f1849190fbb1f55ca51a76901fa1e3f4f37734b61c48a0337c35062e93e7f14d57f1de37046472712e4cdd4c23284aaa5f95067777e00e89b76f0e6d97053e"], 0x38}, 0x1, 0x0, 0x0, 0x24000101}, 0x24048004) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x9, 0x0, 0x0, 0x1}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) close(r5) close_range(r3, 0xffffffffffffffff, 0x0) 3.346224053s ago: executing program 5 (id=3390): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000050c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="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", 0x557}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002400)="472c4a88e38271134616fb25b7687b29c80e235e02c9aff23f4a728b652208f66f23feeec79598dcdaa24794e53b9a6184cd6ffcd7d82080cd8dbbc01627508d04be89ef4f253987edc86790c075a448e28610cd2ed2533a267df298d6e49d898ccd3dd2cc1e5ac02b70cf37da35ca30ec9298077e0d1d7b263279dbbfec7beb0ee24b05cca3a3d2b391590ed345d4261b322bcda17acfeb236ab699c14d1439b22e6e8724146dde24858bf06414cf282bedddaf64a022952cd1b549106da2533bbc90a884039a3bf00d9fdeebd6820f20788070cf9117d7e27591f2ad3801fd49a7ee1fa097a51ff3877ed5d2279ec3886d7abe3ea930c1e5bf742c8c7dd1da66da6d774e6e386aab0c043400780182798558d790ad246828c9a4b22c19a0e2572d6e4952a547ca7494d5f5622189cc779aeebe4a80495cf7eed4150ff74eeb0cc22290a6b46441cef93d8b274e4118197c9273aed3993cfad9052581e7db5a9534a5e1fdab790bce04caa86d410fc2ca6df3d0c2321c6dd0e771c03e563a7491167fe91a123911be0b692bc07cfa9a514ca630a746f21763b7d7b4e5c9db9f9f63b65cde506b63d6a05395d1f3d3e70f122a5fc6e868e20cea91be328f856b10165f3d98cfc274b3d6f13304a17e4868e914cade95b7e69cdcb4c3e9ae2416d656ad23acc9c590086244a2fde59d67ae19ead80219b209abc1bd5096c009d7e87a8d0d7a88e7123df5b9f15bdcd186cd3440bdf012211f8d9a5a37efb1c406373ef8b1ff9a33d3b4d419614849c45cd302f81e8b3b3e9599649587406ce4dabce62621a94b251b98a441e64e4c29247c3bcfdc391462b53497a72a93d3f98944630576f620e6e052f6ffbd8efd11a368b993a8abac9eb956419030cb76387ee5c95bba655a0ff70f187b56fcd8b8bf42001357c13b93069e79cc80521009fe58db3bf655e0cde0dfcb48982a8a12bd26b030e52e328a92e0c838297a6e7d5fb54ce4f67d21a89352db216cf4fdc071fda81dde4bb54ae8a62db2b0207f8d8d2bb3eee06e82686b78f5eb8808bdd43f4802234e9d7cb4e9fbbffc06f0121f4f951da00eec70f7d68f37b2226465e835c5c62af1ae9c1d13e4f23eca5efd2f0c435edcc4c08a4d122d2c79450e72c1e57eb8aec8421672154846c6c79949460e04c12298b6315b321d183a67aedf306c4836a564cad90d0bdb0cd1cd641f2690fee9b31d4b717e0ec138cca7a29456720e9c3b96241a880eaaf6a82bd72fe068d0d703e54df377124e2c36f2515442b018d488a63aaeb706e5e42d8b4e4bc4c4816490b90c267c6200dc05f3ce9428227bea4fe9c9ef1cc8bae5f1ca8005e5a7f2cc912e91a83e5996ab71a66b893047cda81ca6299a8e797ac39c60c22e7151887d9138f084c709f41058732c1a19ded9d2e395276199cb224faad151e35d74a3ff5e029f08df8a894e54cdf9c3f92e62bf7c66f6545204c020f6e5b2e9d0f94b2404c2c07111d1ead526426bdd4698f65729bb597871e9eee1ef62f43289983b2cdb5b9108a77a788de8c4ac37b1f427ee9925b2683a07f4da68d028b8b619e7d5441fedb2ec4a0095fe2caa36a5f4c43ea7a3306c900ca91b70bb59679a8db0074e3b3157ee3de3c457f1749c8bb36bc9f68f218c881177e3b3775f352efe963ef631f160ca4faa27cb7bd7776f40005041cace6fdbb0faa70698c6c71d6d868161450ab0d06fbeb9a27fc891a94d6185743ddb3061959a27db3c1ca30816102862820138919e92f61a98387bedb4529bd55373848b6583c090ab84361971ba14c83976f44279976be8d45b63a18424d3e58d352a9bc053c278ce3c7722af7b46b6fa879fe8a4e0", 0x529}], 0x1}}], 0x3, 0x2000c044) writev(r1, &(0x7f00000023c0)=[{&(0x7f00000013c0)="1ee91e92dfae81cf429f630681d319b0b95d412ae896df07d59f65e6de8df164f2451947cb973fabb665aa6913989efcb371bbeb0dda4143bb4e1f489f1b777e20a71fdffad3760038c22a53582306c27096c08d8c2620e4a434c7ea1a2633e3d7622d29024549946c632f0f944fc0c8d8a26522ffcc4fafa8dca39f9f4110a73c6c9c2378a2416b59791df721090b7d12526f72cf560354542983d5af1450", 0x9f}], 0x1) 2.460243704s ago: executing program 5 (id=3391): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xd, 0x2, 0x7, 0x0, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x7}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r4) recvmmsg(r4, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000}) 1.110336535s ago: executing program 5 (id=3393): sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) gettid() socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 888.11801ms ago: executing program 5 (id=3395): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 849.133581ms ago: executing program 2 (id=3396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 792.807173ms ago: executing program 5 (id=3397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 697.913155ms ago: executing program 2 (id=3398): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) 694.677984ms ago: executing program 8 (id=3399): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000050c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="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", 0x557}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="4bad653d1d2b64ad85d44e1fa459b0ff58cda32a5e99a7dc788acbdf3fe3f09179efda8cdb8074dc4bcad19e08ceaf752697c80e26", 0x35}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002400)="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", 0x529}], 0x1}}], 0x3, 0x2000c044) writev(r1, &(0x7f00000023c0)=[{&(0x7f00000013c0)="1ee91e92dfae81cf429f630681d319b0b95d412ae896df07d59f65e6de8df164f2451947cb973fabb665aa6913989efcb371bbeb0dda4143bb4e1f489f1b777e20a71fdffad3760038c22a53582306c27096c08d8c2620e4a434c7ea1a2633e3d7622d29024549946c632f0f944fc0c8d8a26522ffcc4fafa8dca39f9f4110a73c6c9c2378a2416b59791df721090b7d12526f72cf560354542983d5af1450", 0x9f}], 0x1) 557.482238ms ago: executing program 2 (id=3400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000600010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f0000050007008800"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f00000005c0)=""/255, 0xff}], 0x3}, 0x20) 555.820668ms ago: executing program 8 (id=3401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbdf250a008000090000031e80020014000200fc0200"], 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 439.59526ms ago: executing program 2 (id=3402): syz_clone(0xb2a6a644fc911e2f, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4020114}, 0x20040800) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 319.682863ms ago: executing program 8 (id=3403): syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000600010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f0000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 296.492364ms ago: executing program 6 (id=3404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) 296.264873ms ago: executing program 2 (id=3405): fsopen(0x0, 0x0) symlink(0x0, 0x0) syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, 0x0, 0x5e) 206.224766ms ago: executing program 8 (id=3406): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 120.205108ms ago: executing program 2 (id=3407): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0xff) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x8004}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r0}) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) ioctl(0xffffffffffffffff, 0x3b8f, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 119.974388ms ago: executing program 5 (id=3408): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) 0s ago: executing program 8 (id=3409): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) init_module(&(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x2, 0x8, 0x3, 0x3, 0x6, 0x68, 0x1e8, 0x40, 0x274, 0x6, 0x3, 0x38, 0x3, 0xc, 0xce, 0x1}, [{0x3, 0x6, 0x2, 0x7, 0x2, 0x5, 0x4, 0x1}, {0x70000000, 0x4, 0x8092, 0x0, 0x7, 0x4, 0x100, 0x5}, {0x6474e551, 0x10, 0x5, 0x7, 0xb, 0x9, 0x101, 0xd21}], "8debeca4", ['\x00', '\x00']}, 0x2ec, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x8e09, 0x0, 0x2, 0xeb}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe84, 0x2, 0x3, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x1, 0x10000, 0x39f}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f77, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8610, 0x1, 0x0, 0x2f0}}], 0x4, &(0x7f0000002840)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="46647b94d41b689c3c5c07a10b26ce8dab070c146694f852099ce588f794ada1006a07b38db6f31a24277bce3cd9cb00b6711fc5be1806fda7517515dad0435ca7649c6e8b7d3112e1919529c01d5be27140ed8ec48faf4ceebd6d50f9185be56caf85020775674510adfe796011a5adeaeeffc206cec6795244f4337381c8bf9645ae6a83f51c8f6601fd533d0c1e80daafaaeb3499ddaa30b76c5a4be2b3e73a8380c97f1a71fce53936a09baffdd897234578bcd027b200db8ae0e39e241a631df5a307d86a77d7119c38e94f7788f4466439f0b188ab54eadca9b84fc3bfad1f3839c53cb3754e3eca6d81b862ec32048fde6a7b9481e4d543151df9601831681596b1a0682c97d891cf3dae588d2fd4123e36a02b7767c539b9c19777b3f87d949540fa52692f7237fda5de634a109cc4a694a3b0085cb3f4302f1e73e0a4141bdc7c47954940682fe7953298439c2380ffd45de220d7d7b580708914269414dddf08fa63077119e5e9e11ab7b0707c902052a0e865e5fd000d3675e74db2dfef6431ed6d43092e6595b2168e87c9b814c58f875c481ca8571791701f4a103d0282931f7ae2db3afa95c7bc0b73b33c5846ba158bb691c93be32d8473209388a59407cf643c604bc2357aeea9905a85b58da5a720bde14ce68c8db27fc1eee7c37f0dfefd624ea94b0956c03892a4b89eac207d766745b91bd09600d69a04ca8c0cf8e03d3bacc8147421dd227801f414e5ea3d6cf3e20dcbea92f3ebf967ca379dba281c4b2581ea5c392829851ad0c0652807e249645ffc07c86c173b30c77709d5079f54c992b9488e4bcc27bbaf05b073bd4656f5d163ed2eb141dfa718b7551a3dfa1e7cde79c1a63e16c02da0284474014d6ca356a1dd7d8fbbb71a77301ed746bb0c8d60cb3ce602759ebfd2a5ad7d38eb14947f444066f57335ec66269f43c1993ed9b2d21734ed52918bfdccc612436b68a0498af3ae23a17823393f60bc225a9b6390429cf4d2325d0e924aab63ce48b681547e35b743ae3fd509ef3883c23787bedfa02398ab33597199d2f719eaa82d19ba0397eb09a7721624821dc7917a5ca17b59b77f94d96ebd494349dd1f933e1636a9f71346f78696f6971bbe55b443057e45b53a0a7ce03fcb04284e43d47035012aa2acfde7d6a4520985a2db7c30872fcd7dbf2a584a3fc0a6e1856a89842a0da8d741ef63fe90d146b750dbeadd2e86a1a09b863e70b4ba56eef546b462e4b6983a581df20e3dc235683ec76a7ddfdb5447bbe0dacc53de1dc4c2884e17c08290fa5b5ae21ab2daae21f512812c7cc366d973fe3910596c65fbfd26e171168f3243a04914e6a569ddd4c1754add8185326c0d65d312f5b35a9200a4883f99649d7911dc20e53dfef77c99d01152e5e7ea304c45cb77f8e9ce7fc0df0a532f16f63294b8f64396731c661693cd8467134fcb53f77d5baf6f6b3c3252480b25dd5e863cf2b46cf763de4a18415cf389d96b24e6bcd6510c4b843dc3df139690eb0ad268b9cc6ac8024b12264ca5221a810a8163e5908c8f42fe29031843c2e9a300637e96c55c15cccd9ec2c3a6354d3e82c9b4646864f2a4b631f5bccfcceafa7134948780a63beb5711171191d9e3cf13d26381a20cdffd285e702010cfdcdbe21cb3d31b0b93cbe8f3cc61dc18a979cb1e4628829ecab88b22df3c6976fedfb0948ab4dde12811c18038f8455e508f50d981b7094286cead51d50ee2ee342362affbc91dee8a25d232d8bbb116a064a1847c877bdfb7e2ab75b485e5a6d129275026c07bb7dd1f8912415a1de405022d2b1fe649824062392ea982fb6dcdf207fdeef56fa095eecf285f8deeac9b687953596e50c3ff420e421961f8dd48070e236794fcab5bfb840700fa66d175310fa37e9b133d049bfa64fcce79bedd1d19f68b0a58a6b01160c5bb7d74e53e435b80f7570582a65815aabe5501bd6bf6369510abeafe5b89c07586aa00d44a30b0ab3e1067c0724013a654eb82c7db0e72c0cf4a58465fe883ca3aed5098fea959a1460c1e5bcb39ac6e5e55e5072551500c0ea926136f1070dbfdc91998fd9f804c1ac924929b7fffb7c6ed5a2915e8caa8f674c64705bc37eb193f8bc2c9886a1e90d69571cda7e994ba26d27198305ffddf5fa12eba6604a18735b1626938029b4e60d0d424421a863823cb33733845ce7534ccefeb1d37fba4f45f7df2005e1563c2086454ef80d0cde7cd871139e28a3079538dc1f7bea8132ab4ddc532385b68330bf495297b44e70b4e96e76c63a35b75deaab0200110f7ca52e1d22de96ded086607161c4e931803899ac29cc99772acc4fce685a32eeb1a488a96d71a1c51e6fdf649dfc78354994090bf550318650a7b2fc2bd523af2f90d9c49e590d5a55fd6e7895e1287e27daf393cfe0dd7370b69332798d76e31048a3246a71b0470760d19b826416597cc9604926ed314d39b6f607df39116c958c73df928bb2d2a9981a5452d1ba70b290e689daca41ef2ace1293cb69bb6f5963f7ceb634fa52561fd6be74588e3ddf1acaf411acc8d4f2c41f9e5e6c2537e7d811bc3c311c7867e7653bd996f0c0986e393a055af5ade80b0928a2621588c7ffd6decb2be5f11ac580b6f6d6c722df8d08507ed825f1ce4eae8141e3cbc9f05ef539815988389a5f81f0dea4eaa93f33720d3da2ad7625ca8fbf6e545ad2007b024023bf02305c370c33ef4c7bc8fe3f89192a5fa82b04e9258f2cde7c77ebb6bb6c1cff882b379477fcabd224f086bb8ebba62dc1ce0fd0687f9e924ce055663ee7c987e042f3c8e108c3d4395c332c1f6297c3d2baf5b7468a3789bc81098a1e035431a12253b5be2a09199e5024c20a24c6be88a7882e0e08dc8f755955cc20d12f74deb2a1007ad62e824f90bdb9e65cd3b705d4f4c756c7c572186adf789a94fc267e75774bedd79e59e8940d8a797048d6c083b4cc67b10f584884b9548ad1c0a74403174f17e3a74badb7f5ef1969e4caf9dbeb3da1371730ef4a8de5a3abd0a88d1bfecb80f2b2ea475df6a39638bdee40db75694e43d44e5f29ff3702a2031ef8e996ac1fceb77b61295ed8fc15ee5c6219c595032bafd9ddae643c1bdc3ca0063b5bb4327826d12ced2cc515323257254f89223f8a0ccce1a195b4c8b18a3cfc92446051da4477c3dd18ef1258b462ff1b1f33974952f6b2eb00cbc57ce44998f12ad51be486afcf06250286036385c801da06a1d9ff2cb8bdf0fe86988dd418eea4f696a3ea04fdad34595ff0c1fcf85f794442f463a5756fe960ee40de940e0d45c652d92bdbdb95243fb1c1722d73a82c7d43cd00afc67e10816a1bfbfbb96a1bdf10ba82c9c90b25afee659c12867ec129e2d34d52aaf72bfdbdcf9edf2d5ffbb1ec159fa57ece5548e9c558a97d7fd01e69ef5ed8223f36185fd269da56a8c2daa527dac50ef7982861180d08cce0e4afd4c220cd04291935a7b731c44d8cdf564c09f2770cad3b7c9c8aa462a1c47a0a45745be29b1d4c120ea69bba8fcf9f0b131e2ef77610d507c2065437b3226cd42fb03e9f59d4481b2f3617b6935b421b777695debfa12a99d4ffcc9c74adda405438b2f317babcd07ea2f2fba0ff9652035dbc242d4f798fba3cc64f9218bf1d76353636e5431363312978b24fec286a4d06d8ad01b88bf8d38614a15f03b48c509a62e85cd51f32430603235fc75dda974cd69f0feb301aa630da8493318829d7fd3a08132ec756710dda6ad5377f4c0001659cf368b1024a8186a4b412174289a197a8004e36ffede5ebc71ef4bbcde5f849377c3fc9af8898a93a5e1b652a8ba4702359c85c22fa31cf410bd4200c937c0dde84fa18329f9c823ba028ba708d633ae1b18a92ef287d23218e90900afcf85ea33081c0d24acc84dc95f528ed5ee75c8e116547e7b9c5254d1149de8ca2d72b9fc8a8ad34311d9289d058f055472750738d23ed3676119fd2c7c0520cb88b19efe0448fc202a10a283b2a11d5dc001a9dc5b30442313479c2d1d68900e7baad0a040e3225cbe58c67cd6f2fbfb3affd8b8802745175b7cfad9279d8d060e73a21ee71e7a545a69bcb2529de0fb496799f5d00e9c6b33404e36348282ecdc1f237a557781747330ad2ca5e8bc23073b6dafcdcc99f53192584a1f9e87a2ba58d633d348df8c160135f7f3b620f8ae6a80fb58cb133cb7484629469fa85d51e7e492e8f683a98964455bfdd0e12dfe0ceb8c5a0f7c5f23e6baf8b9beaa6961d08a9a006d38ca47116a0a16eaef9fa5bd070e2669a20a4b496eb8568cfde1529bc5b85b98db90fb6dde22e05f9a34ed3942fb8e1de54fb62d1d006afbf3c5f399e5d10b89079b11a8441a741daa771146da50d2c568e689e6b89e7da3534e40af780aeaacac648956c2cf54ebaa8c11659f6de4c29616bd3ac2fc31f8aa736598ebd3ca29c59414244344b7cca3d1923da51ecab52565848a23ccabb7bd15d60ba96ded69094038973a70c2255ae53f408e78ac8bab930bfe54abee2b8d8d90910b88388c5ad1567ba7488668649048e9dea484c76c0fec4836326dd05f95c6185b7eae5a76774960927942c93c2731f168167e5d5d94862f1199d3f191e24457db21186b3324778d32fb1a2ee64582dc518f7e6f6b162904825956d2c84f233934cb0ac1612b95deee506fa935b82854d0613d1ec87eadef7d9b65e028d1f4ca22929c1147de17d9e7208c1103c9f9a2b4fe7b397c8e6e44c02d2475cd79fdfc7ae36ce0ea15afd7b017f10c7841c308918e5f692748b6dd27d76d3cb5d8feca612af7b805a7efe5d7c78b374c1ce86cd0bd119e9027ae1151c04ad7972b82313caa66c6d64f75260dd66ec9157e177fe8059d318d1c87d5c558d95333d59010e0cf5bcee869ecd27b2a9ee927c78d694a8cb07da4b54e5155cfe5146e7204eb07c6c2ff1bc779a8fa88cf4ecba8fc600e2c8c4ac6a9b89897c7fcc5b51947556cbe8e00d1d1c4345cb6819014981db207a8eeb26064b7cfd8529aa1d0a19d590f24d85dfb81175ffb760f76cb77baa3348d961efe1974db0835ef1707869f0ce7b858c1c751e2f24b7a6c460e26dee0577ca118706ac5d2d2a1de367b659a843db56bb304c39fd84fd61713147236050aa14d0eeb365e1d8f06a4eeedcadc89c0ed273af922b5950007370770a21241c6ef47dd07bcd40de641c37ffd40b6cd3edb471839a2cff22cc6ddf44fa9725d820f6fcead5f352dc58b79c117552e908ad2b14a9616724aa5194384df453b2f7dc591f1e5a6a3aecead22485c8d60783d15b67512b8da91960c9b89e601b0aa09d27be764a0519c74a6408d64a2b4a6cefb95968aff40f2095aed56abf559d6cd194a3994dcd019df4ae20e1da52a283b40354883b7e05e185fbafe32198a7cfd94eb446de8ca4e9269476f0b928f1522e3e80c95477a07554bfe2c3e397808236515b6554e81f48b1f6bfd28527eb9016fe7d43de8f8f7ceecd0c57cfd42eb13bb25d7ca2ec72231a5a8e06337ac6bd01563af3a81154d6effb0d9a6161fadebfe0bf0b8a712333166e760d9656c34d362018ebb1f95bc2d7253c749f6e26bcbb915c3a7a7e78f1f503baa6e4da5ed40eeef5ae35c37e545b698f103db5ec01fe93cd9924df499221256f85cde0f9c5a757d9699d48c7a765ae46e6444fa30364eb3469cc0ca2b52e1e433b46932ed546f985137d9c75f73e26f550b7b229cab6c2d23b212d4054ae2ad212c3b053aa529e732a280ae4c437d3409d6aa0f"}}, &(0x7f00000028c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, r1, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): ting the MTU to 1560 would solve the problem. [ 476.105173][ T5090] Bluetooth: hci4: command tx timeout [ 476.226803][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.806538][T12308] hsr_slave_0: entered promiscuous mode [ 477.923354][T12308] hsr_slave_1: entered promiscuous mode [ 477.935968][T12378] loop6: detected capacity change from 0 to 256 [ 477.966546][T12308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.990181][T12378] exfat: Deprecated parameter 'namecase' [ 477.999437][T12308] Cannot create hsr debugfs directory [ 478.041943][T12378] exfat: Deprecated parameter 'namecase' [ 478.143506][T12378] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 478.184016][ T5090] Bluetooth: hci4: command tx timeout [ 478.414583][ T7276] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.645840][ T7276] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.105653][ T7276] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.953869][ T55] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 480.207950][ T55] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 480.218516][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 480.229888][ T55] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.239096][ T55] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 480.247682][ T55] usb 7-1: Product: syz [ 480.252014][ T55] usb 7-1: Manufacturer: syz [ 480.256834][ T55] usb 7-1: SerialNumber: syz [ 480.261663][ T5090] Bluetooth: hci4: command tx timeout [ 480.273467][ T55] usb 7-1: config 0 descriptor?? [ 480.279924][T12400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 480.303806][ T55] usb 7-1: selecting invalid altsetting 0 [ 480.691495][T12400] usb 7-1: BOGUS urb xfer, pipe 0 != type 3 [ 482.406367][ T7276] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.451789][T12394] syzkaller1: entered promiscuous mode [ 482.457370][T12394] syzkaller1: entered allmulticast mode [ 482.490233][ T27] usb 7-1: USB disconnect, device number 2 [ 483.434472][T12308] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 483.456726][T12308] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 483.542324][T12308] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 483.640209][T12426] IPVS: sh: FWM 3 0x00000003 - no destination available [ 483.711556][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 484.193006][T12308] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 484.642024][T12429] loop6: detected capacity change from 0 to 256 [ 484.678356][T12429] exfat: Deprecated parameter 'namecase' [ 484.708509][T12429] exfat: Deprecated parameter 'namecase' [ 484.770214][T12429] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 485.521198][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.789091][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.914430][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.921757][ T7281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.015547][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.022863][ T7271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.078066][ T7276] hsr_slave_0: left promiscuous mode [ 486.106362][ T7276] hsr_slave_1: left promiscuous mode [ 486.124533][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.149487][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.241191][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.271203][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.302431][ T7276] bridge_slave_1: left allmulticast mode [ 486.308199][ T7276] bridge_slave_1: left promiscuous mode [ 486.321691][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.422291][ T7276] veth1_macvtap: left promiscuous mode [ 486.427949][ T7276] veth0_macvtap: left promiscuous mode [ 486.451761][ T7276] veth1_vlan: left promiscuous mode [ 486.461700][ T7276] veth0_vlan: left promiscuous mode [ 488.305214][ T7276] team0 (unregistering): Port device team_slave_1 removed [ 488.383152][ T7276] team0 (unregistering): Port device team_slave_0 removed [ 488.464683][ T7276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.572467][ T7276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.073601][ T7276] bond0 (unregistering): Released all slaves [ 492.593188][ T7276] IPVS: stop unused estimator thread 0... [ 493.132781][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.692182][ T5822] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 493.904876][ T5822] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.941445][ T5822] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 493.978655][ T5822] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 494.003028][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.082693][ T5822] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 494.113804][T12308] veth0_vlan: entered promiscuous mode [ 494.165024][T12308] veth1_vlan: entered promiscuous mode [ 494.276712][T12308] veth0_macvtap: entered promiscuous mode [ 494.312870][T12308] veth1_macvtap: entered promiscuous mode [ 494.377630][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.389782][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.402768][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.413326][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.423319][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.433893][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.445705][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.480348][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.493008][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.503153][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.513835][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.529078][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.543020][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.554894][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.594969][T12308] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.621665][T12308] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.630451][T12308] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.661887][T12308] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.907293][ T7280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.944152][ T7280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.020089][ T7276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.038908][ T7276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.507117][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2127'. [ 495.941265][T12148] usb 7-1: USB disconnect, device number 3 [ 496.007355][T12148] idmouse 7-1:1.0: disconnected [ 496.758438][T12623] geneve2: entered promiscuous mode [ 496.978555][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2138'. [ 497.531572][ T5822] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 497.732531][ T5822] usb 7-1: too many configurations: 83, using maximum allowed: 8 [ 497.764643][ T5822] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 497.791618][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.817143][ T5822] usb 7-1: Product: syz [ 497.908547][ T5822] usb 7-1: Manufacturer: syz [ 497.919008][ T5822] usb 7-1: SerialNumber: syz [ 498.194440][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 498.258831][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 498.302368][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 498.337466][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 498.364571][ T5822] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 498.405094][ T5822] lan78xx: probe of 7-1:1.0 failed with error -71 [ 498.487662][ T5822] usb 7-1: USB disconnect, device number 4 [ 499.146469][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.183967][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.219001][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.246411][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.273238][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.292364][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.299845][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.341464][ T55] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 499.374912][ T55] hid-generic 0000:0000:0001.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 499.444929][T12665] loop8: detected capacity change from 0 to 4096 [ 499.514233][T12665] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 499.554953][T12665] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 499.587045][T12665] ntfs3: loop8: try to read out of volume at offset 0x1ff000 [ 499.625049][T12665] ntfs3: loop8: Failed to load $MFT. [ 499.662490][T12675] validate_nla: 7 callbacks suppressed [ 499.662520][T12675] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 499.692126][T12675] netlink: 'syz.2.2148': attribute type 2 has an invalid length. [ 500.432417][T12693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2150'. [ 500.610589][T12692] loop6: detected capacity change from 0 to 256 [ 500.944062][T12692] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 502.120997][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.131935][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.162727][T12703] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2154'. [ 502.552950][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 502.768749][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.810290][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 502.861297][ T5822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 502.875818][ T5822] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 502.875853][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.966701][ T5822] ttusb_dec_send_command: command bulk message failed: error -8 [ 502.967141][ T5822] ttusb-dec: probe of 3-1:1.0 failed with error -8 [ 503.176668][ T788] usb 3-1: USB disconnect, device number 2 [ 503.717092][T12726] geneve3: entered promiscuous mode [ 504.130765][T12743] loop6: detected capacity change from 0 to 8 [ 504.141661][T12148] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 504.200625][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fb99400: rx timeout, send abort [ 504.346150][T12148] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 504.370133][T12148] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 504.414318][T12148] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 504.428527][T12148] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 504.440276][T12148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.490219][T12731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 504.701634][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fb9b400: rx timeout, send abort [ 504.710905][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fb99400: abort rx timeout. Force session deactivation [ 505.133959][T12148] usb 6-1: USB disconnect, device number 2 [ 505.210122][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fb9b400: abort rx timeout. Force session deactivation [ 505.378452][T12759] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2167'. [ 505.427253][T12759] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2167'. [ 505.462265][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2167'. [ 505.817489][T12771] Invalid argument reading file caps for ./file0 [ 506.073154][T12779] loop5: detected capacity change from 0 to 8 [ 506.308162][T12785] veth1_to_bond: entered promiscuous mode [ 506.419914][T12785] veth1_to_bond: entered allmulticast mode [ 506.942256][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 507.653866][T12785] bond0: (slave bond_slave_1): Releasing backup interface [ 507.685205][T12799] netlink: 'syz.8.2177': attribute type 29 has an invalid length. [ 507.709478][T12799] netlink: 'syz.8.2177': attribute type 29 has an invalid length. [ 507.748050][T12799] netlink: 'syz.8.2177': attribute type 29 has an invalid length. [ 508.252166][T11933] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 508.255303][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.298366][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.361506][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.373922][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.391586][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.417189][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.440425][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.464512][T11933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 508.466078][ T5785] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 508.484926][T12814] loop5: detected capacity change from 0 to 4096 [ 508.486777][T11933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.532378][ T5785] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 508.546223][T11933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.561063][T12814] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 508.587079][T11933] usb 3-1: New USB device found, idVendor=1235, idProduct=820c, bcdDevice= 0.40 [ 508.622308][T11933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.627254][T12814] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 508.673791][T11933] usb 3-1: Product: syz [ 508.678047][T11933] usb 3-1: Manufacturer: syz [ 508.678150][T12814] ntfs3: loop5: try to read out of volume at offset 0x1ff000 [ 508.706759][T11933] usb 3-1: SerialNumber: syz [ 508.729725][T12814] ntfs3: loop5: Failed to load $MFT. [ 508.823204][T12819] fido_id[12819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 509.182395][T12828] loop5: detected capacity change from 0 to 8 [ 510.027992][T11933] usb 3-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820c); report any issues to g@b4.vu [ 510.081608][T11933] usb 3-1: Error initialising Clarett+ Mixer Driver: -22 [ 510.265264][T11933] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 510.340005][T11933] usb 3-1: USB disconnect, device number 3 [ 510.458652][T11808] udevd[11808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.560349][T12843] netlink: 'syz.2.2188': attribute type 29 has an invalid length. [ 510.605332][T12843] netlink: 'syz.2.2188': attribute type 29 has an invalid length. [ 510.671995][T12843] netlink: 'syz.2.2188': attribute type 29 has an invalid length. [ 511.219387][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.260194][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.292973][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.329909][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.342919][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.376117][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.401224][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.431533][ T5822] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 511.463096][ T5822] hid-generic 0000:0000:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 511.490850][T12862] loop8: detected capacity change from 0 to 4096 [ 511.548824][T12862] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 511.589725][T12862] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 511.619734][T12862] ntfs3: loop8: try to read out of volume at offset 0x1ff000 [ 511.661491][T12862] ntfs3: loop8: Failed to load $MFT. [ 511.815041][T12869] fido_id[12869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 512.066704][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2198'. [ 512.131566][T12883] hsr_slave_0: left promiscuous mode [ 512.180941][T12883] hsr_slave_1: left promiscuous mode [ 512.219518][T12886] netlink: 'syz.5.2199': attribute type 29 has an invalid length. [ 512.375427][T12886] netlink: 'syz.5.2199': attribute type 29 has an invalid length. [ 512.399766][T12887] netlink: 'syz.5.2199': attribute type 29 has an invalid length. [ 512.789917][T12901] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 512.828548][T12901] Cannot find add_set index 0 as target [ 513.082093][ T5785] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 513.281517][ T5785] usb 7-1: Using ep0 maxpacket: 32 [ 513.298724][ T5785] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.325361][ T5785] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 513.371528][ T5785] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.393389][ T5785] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 513.393425][ T5785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.393447][ T5785] usb 7-1: Product: syz [ 513.393464][ T5785] usb 7-1: Manufacturer: syz [ 513.393480][ T5785] usb 7-1: SerialNumber: syz [ 513.396886][ T5785] usb 7-1: config 0 descriptor?? [ 513.810361][ T5785] gs_usb 7-1:0.0: Configuring for 2 interfaces [ 513.859318][ T788] hid-generic 0005:046D:C082.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 514.058461][T12933] fido_id[12933]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 514.218167][ T5785] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 514.325890][ T5785] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 514.393753][ T5785] gs_usb: probe of 7-1:0.0 failed with error -71 [ 514.421714][T12890] Bluetooth: hci0: command 0x0406 tx timeout [ 514.457404][ T5785] usb 7-1: USB disconnect, device number 5 [ 515.861147][T12989] netlink: 'syz.8.2227': attribute type 29 has an invalid length. [ 515.879312][T12989] netlink: 'syz.8.2227': attribute type 29 has an invalid length. [ 515.890941][T12989] netlink: 'syz.8.2227': attribute type 29 has an invalid length. [ 516.076570][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 516.229603][T12998] macvlan2: entered allmulticast mode [ 516.249666][T12998] dummy0: entered promiscuous mode [ 516.269070][T12998] dummy0: entered allmulticast mode [ 516.313501][T12998] team0: Port device macvlan2 added [ 516.558141][T13005] loop8: detected capacity change from 0 to 512 [ 516.582285][T13005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.611116][T13005] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 516.649370][T13005] EXT4-fs (loop8): 1 truncate cleaned up [ 516.669235][T13005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.838325][T12308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.891739][T13015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2230'. [ 517.241886][T13026] bridge1: entered promiscuous mode [ 517.249708][T13026] bridge1: entered allmulticast mode [ 517.268061][T13026] team0: Port device bridge1 added [ 517.287371][T13026] bridge0: port 3(team0) entered blocking state [ 517.295018][T13026] bridge0: port 3(team0) entered disabled state [ 517.313068][T13026] team0: entered allmulticast mode [ 517.327577][T13026] team_slave_0: entered allmulticast mode [ 517.342535][T13026] team_slave_1: entered allmulticast mode [ 517.382646][T13026] team0: entered promiscuous mode [ 517.416962][T13026] team_slave_0: entered promiscuous mode [ 517.435610][T13026] team_slave_1: entered promiscuous mode [ 517.470125][T13026] bridge0: port 3(team0) entered blocking state [ 517.477076][T13026] bridge0: port 3(team0) entered forwarding state [ 519.365509][T13051] netlink: 'syz.5.2236': attribute type 29 has an invalid length. [ 519.417518][T13051] netlink: 'syz.5.2236': attribute type 29 has an invalid length. [ 519.467150][T13051] netlink: 'syz.5.2236': attribute type 29 has an invalid length. [ 520.964675][T13078] loop8: detected capacity change from 0 to 4096 [ 521.048479][T13078] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 521.138337][T13078] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 521.189501][T13078] ntfs3: loop8: try to read out of volume at offset 0x1ff000 [ 521.219931][T13088] netlink: 'syz.6.2249': attribute type 29 has an invalid length. [ 521.228995][T13078] ntfs3: loop8: Failed to load $MFT. [ 521.235132][T13088] netlink: 'syz.6.2249': attribute type 29 has an invalid length. [ 521.247572][T13088] netlink: 'syz.6.2249': attribute type 29 has an invalid length. [ 521.261935][T13088] netlink: 'syz.6.2249': attribute type 29 has an invalid length. [ 521.332451][T13092] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 521.692756][T13101] netem: change failed [ 521.713506][T13101] syzkaller0: entered promiscuous mode [ 521.729342][T13101] syzkaller0: entered allmulticast mode [ 521.760440][T13101] tipc: Started in network mode [ 523.189576][ T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 523.242520][T13101] tipc: Node identity ca3108220938, cluster identity 4711 [ 523.291806][T13101] tipc: Enabled bearer , priority 0 [ 523.354919][T13107] tipc: Resetting bearer [ 523.391615][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 523.411780][ T55] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 523.444167][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.475904][ T55] usb 3-1: config 0 has no interface number 0 [ 523.483008][T13099] tipc: Resetting bearer [ 523.494870][ T55] usb 3-1: config 0 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.523999][ T55] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 523.544641][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.573648][ T55] usb 3-1: config 0 descriptor?? [ 523.596684][T13099] tipc: Disabling bearer [ 523.606960][ T55] usbhid 3-1:0.3: couldn't find an input interrupt endpoint [ 525.345969][T13140] netlink: 'syz.5.2259': attribute type 29 has an invalid length. [ 525.359248][T13140] netlink: 'syz.5.2259': attribute type 29 has an invalid length. [ 525.380587][T13140] netlink: 'syz.5.2259': attribute type 29 has an invalid length. [ 525.425173][T13140] netlink: 'syz.5.2259': attribute type 29 has an invalid length. [ 525.603927][T12148] usb 3-1: USB disconnect, device number 4 [ 527.391279][T13150] loop5: detected capacity change from 0 to 4096 [ 527.429007][T13150] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 527.490114][T13150] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 527.511089][T13150] ntfs3: loop5: try to read out of volume at offset 0x1ff000 [ 527.547980][T13150] ntfs3: loop5: Failed to load $MFT. [ 528.274098][T13176] netlink: 'syz.8.2269': attribute type 29 has an invalid length. [ 528.310492][T13176] netlink: 'syz.8.2269': attribute type 29 has an invalid length. [ 528.341891][T13176] netlink: 'syz.8.2269': attribute type 29 has an invalid length. [ 528.373575][T13176] netlink: 'syz.8.2269': attribute type 29 has an invalid length. [ 528.871591][ T5842] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 529.064059][ T5842] usb 9-1: unable to get BOS descriptor or descriptor too short [ 529.084825][ T5842] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.117004][ T5842] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.145658][ T5842] usb 9-1: New USB device found, idVendor=1235, idProduct=820c, bcdDevice= 0.40 [ 529.160283][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.191541][ T5842] usb 9-1: Product: syz [ 529.205681][ T5842] usb 9-1: Manufacturer: syz [ 529.227164][ T5842] usb 9-1: SerialNumber: syz [ 529.402669][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.430640][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.470752][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.500996][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.522559][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.561845][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.569376][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.597210][ T5161] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 529.660225][ T5161] hid-generic 0000:0000:0001.0006: hidraw0: HID v0.10 Device [syz0] on syz1 [ 529.682496][T13217] netlink: 'syz.2.2279': attribute type 29 has an invalid length. [ 529.708305][T13209] loop5: detected capacity change from 0 to 4096 [ 529.741664][T13217] netlink: 'syz.2.2279': attribute type 29 has an invalid length. [ 529.758802][T13221] netlink: 'syz.2.2279': attribute type 29 has an invalid length. [ 529.787912][T13209] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 529.841611][T13209] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 529.854894][T13217] netlink: 'syz.2.2279': attribute type 29 has an invalid length. [ 529.861481][T13209] ntfs3: loop5: try to read out of volume at offset 0x1ff000 [ 529.891550][T13209] ntfs3: loop5: Failed to load $MFT. [ 530.006093][ T5842] usb 9-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820c); report any issues to g@b4.vu [ 530.023987][ T5842] usb 9-1: Error initialising Clarett+ Mixer Driver: -22 [ 530.105462][ T5842] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 530.130254][ T5842] usb 9-1: USB disconnect, device number 2 [ 530.183812][T11808] udevd[11808]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.961462][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2290'. [ 530.966056][T13249] netlink: 'syz.6.2288': attribute type 29 has an invalid length. [ 530.998922][T13251] hsr_slave_0: left promiscuous mode [ 531.036356][T13251] hsr_slave_1: left promiscuous mode [ 531.103628][T13257] netlink: 'syz.8.2291': attribute type 3 has an invalid length. [ 531.255316][T13259] loop8: detected capacity change from 0 to 512 [ 531.285684][T13259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.325912][T13259] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 531.348109][T13259] EXT4-fs (loop8): 1 truncate cleaned up [ 531.363979][T13259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.452439][T12308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.614383][ T5860] IPVS: starting estimator thread 0... [ 531.630559][T13275] IPVS: sh: FWM 3 0x00000003 - no destination available [ 531.701530][T13276] IPVS: using max 17 ests per chain, 40800 per kthread [ 532.999632][T13304] loop5: detected capacity change from 0 to 512 [ 533.019281][T13304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.055458][T13304] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 533.120331][T13304] EXT4-fs (loop5): 1 truncate cleaned up [ 533.128869][T13304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.287819][T10642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.376010][ T28] audit: type=1326 audit(1789017108.574:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 533.441440][ T28] audit: type=1326 audit(1789017108.614:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 533.537416][ T28] audit: type=1326 audit(1789017108.614:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 533.631800][ T28] audit: type=1326 audit(1789017108.614:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 533.697517][T13317] IPVS: sh: FWM 3 0x00000003 - no destination available [ 533.747534][ T28] audit: type=1326 audit(1789017108.614:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 533.782436][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.791821][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.809390][ T28] audit: type=1326 audit(1789017108.614:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 533.881148][ T28] audit: type=1326 audit(1789017108.614:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 533.919837][ T28] audit: type=1326 audit(1789017108.614:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 534.011423][ T28] audit: type=1326 audit(1789017108.614:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 534.627410][T13300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.707057][T13300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.287882][T13343] IPVS: sh: FWM 3 0x00000003 - no destination available [ 535.713910][T13351] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2322'. [ 535.963663][T13300] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.976477][T13300] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.990273][T13300] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.001046][T13300] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.045138][T11933] wlan1 speed is unknown, defaulting to 1000 [ 536.349595][T11933] IPVS: starting estimator thread 0... [ 536.366795][T13369] IPVS: sh: FWM 3 0x00000003 - no destination available [ 536.468977][T13370] IPVS: using max 16 ests per chain, 38400 per kthread [ 536.596298][T13380] syz.6.2330 uses obsolete (PF_INET,SOCK_PACKET) [ 536.991733][ T5090] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 537.550413][T13410] IPVS: sh: FWM 3 0x00000003 - no destination available [ 537.771081][T13423] validate_nla: 3 callbacks suppressed [ 537.771101][T13423] netlink: 'syz.2.2343': attribute type 29 has an invalid length. [ 537.811791][T13423] netlink: 'syz.2.2343': attribute type 29 has an invalid length. [ 537.843050][T13423] netlink: 'syz.2.2343': attribute type 29 has an invalid length. [ 537.875568][T13423] netlink: 'syz.2.2343': attribute type 29 has an invalid length. [ 539.223753][T12890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.312149][T12890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.329381][T12890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.331248][ T55] nvmet: connect request for invalid subsystem testsubsys! [ 539.349662][T12890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.365918][T12890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 539.375455][T12890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.414220][T13431] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 539.493135][T13458] wlan1 speed is unknown, defaulting to 1000 [ 539.626230][T13466] IPVS: sh: FWM 3 0x00000003 - no destination available [ 539.975507][T13473] netlink: 'syz.8.2353': attribute type 29 has an invalid length. [ 540.036920][T13473] netlink: 'syz.8.2353': attribute type 29 has an invalid length. [ 540.075219][T13458] chnl_net:caif_netlink_parms(): no params data found [ 540.099811][T13473] netlink: 'syz.8.2353': attribute type 29 has an invalid length. [ 540.134673][T13479] netlink: 'syz.8.2353': attribute type 29 has an invalid length. [ 540.463226][T13458] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.471937][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.479407][T13458] bridge_slave_0: entered allmulticast mode [ 540.497470][T13458] bridge_slave_0: entered promiscuous mode [ 540.527593][T13458] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.546830][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.561044][T13458] bridge_slave_1: entered allmulticast mode [ 540.586134][T13458] bridge_slave_1: entered promiscuous mode [ 540.679965][T13458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.696539][T13458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.829177][T13458] team0: Port device team_slave_0 added [ 540.866243][T13458] team0: Port device team_slave_1 added [ 540.980867][T13497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.058572][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2357'. [ 541.091615][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2357'. [ 541.114462][T13503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.137175][T13503] bond1: (slave bond0): making interface the new active one [ 541.154586][T13503] bond1: (slave bond0): Enslaving as an active interface with an up link [ 541.200944][T13458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.208302][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.236210][T13458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.266347][T13458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.273875][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.281427][ T788] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 541.308966][T13458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.443310][T13458] hsr_slave_0: entered promiscuous mode [ 541.460199][T13458] hsr_slave_1: entered promiscuous mode [ 541.467926][ T5090] Bluetooth: hci2: command tx timeout [ 541.560602][ T788] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 541.599872][ T788] usb 7-1: config 0 has no interface number 0 [ 541.609804][ T788] usb 7-1: config 0 interface 41 has no altsetting 0 [ 541.646054][ T788] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 541.662251][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.671140][ T788] usb 7-1: Product: syz [ 541.675825][ T788] usb 7-1: Manufacturer: syz [ 541.680168][T13521] netlink: 'syz.8.2362': attribute type 29 has an invalid length. [ 541.680489][ T788] usb 7-1: SerialNumber: syz [ 541.700988][ T788] usb 7-1: config 0 descriptor?? [ 541.747434][T13521] netlink: 'syz.8.2362': attribute type 29 has an invalid length. [ 542.045275][T13458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.335518][ T788] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 542.366050][ T788] CoreChips: probe of 7-1:0.41 failed with error -71 [ 542.366261][T13458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.403991][ T788] usb 7-1: USB disconnect, device number 6 [ 542.603859][T13458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.761785][T13458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.040616][T13458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.056085][T13458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.080031][T13458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.113951][T13458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.366829][T13557] loop6: detected capacity change from 0 to 256 [ 543.389004][T13458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.439789][T13557] exfat: Bad value for 'uid' [ 543.465962][T13458] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.528763][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.536089][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.544357][ T5090] Bluetooth: hci2: command tx timeout [ 543.615473][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.622737][ T7281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.928302][T13574] validate_nla: 2 callbacks suppressed [ 543.928322][T13574] netlink: 'syz.5.2370': attribute type 29 has an invalid length. [ 543.962088][T13574] netlink: 'syz.5.2370': attribute type 29 has an invalid length. [ 543.989297][T13574] netlink: 'syz.5.2370': attribute type 29 has an invalid length. [ 544.013070][T13574] netlink: 'syz.5.2370': attribute type 29 has an invalid length. [ 544.270682][T13458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.559656][T13458] veth0_vlan: entered promiscuous mode [ 544.621775][T13458] veth1_vlan: entered promiscuous mode [ 544.728737][T13458] veth0_macvtap: entered promiscuous mode [ 544.778089][T13458] veth1_macvtap: entered promiscuous mode [ 544.900349][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.932609][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.006531][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.029257][T13605] loop6: detected capacity change from 0 to 4096 [ 545.076571][T13609] netlink: 'syz.5.2378': attribute type 29 has an invalid length. [ 545.081450][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.088350][T13605] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 545.111450][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.148890][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.160128][T13605] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 545.175253][T13458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.208177][T13609] netlink: 'syz.5.2378': attribute type 29 has an invalid length. [ 545.212914][T13605] ntfs3: loop6: try to read out of volume at offset 0x1ff000 [ 545.242370][T13605] ntfs3: loop6: Failed to load $MFT. [ 545.243565][T13616] loop8: detected capacity change from 0 to 256 [ 545.267131][T13612] netlink: 'syz.5.2378': attribute type 29 has an invalid length. [ 545.291272][T13616] exfat: Bad value for 'uid' [ 545.310237][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.345638][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.375926][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.409098][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.435898][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.466197][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.492513][T13458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.511399][T13615] netlink: 'syz.5.2378': attribute type 29 has an invalid length. [ 545.526168][T13458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.558428][T13458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.589657][T13458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.598751][T13458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.621868][ T5090] Bluetooth: hci2: command tx timeout [ 545.856979][ T7274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.889020][ T7274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.961759][T11933] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 545.993539][ T7274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.017640][ T7274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.189967][T11933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.227182][T11933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.252184][T11933] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 546.287545][T11933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.338132][T11933] usb 7-1: config 0 descriptor?? [ 546.398430][T13634] wlan1 speed is unknown, defaulting to 1000 [ 546.746970][T13648] wlan1 speed is unknown, defaulting to 1000 [ 547.380292][T13673] netlink: 'syz.8.2388': attribute type 29 has an invalid length. [ 547.413595][T13673] netlink: 'syz.8.2388': attribute type 29 has an invalid length. [ 547.703025][ T5090] Bluetooth: hci2: command tx timeout [ 547.733268][T13682] loop8: detected capacity change from 0 to 256 [ 547.764232][T13682] exfat: Bad value for 'uid' [ 547.852514][T13683] syz.2.2391 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 547.885948][T13683] CPU: 1 PID: 13683 Comm: syz.2.2391 Not tainted syzkaller #0 [ 547.893510][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.903612][T13683] Call Trace: [ 547.906999][T13683] [ 547.910046][T13683] dump_stack_lvl+0x18c/0x250 [ 547.914986][T13683] ? show_regs_print_info+0x20/0x20 [ 547.920289][T13683] ? load_image+0x420/0x420 [ 547.924834][T13683] ? ___ratelimit+0x478/0x610 [ 547.929824][T13683] ? radix_tree_cpu_dead+0x160/0x160 [ 547.935142][T13683] dump_header+0xd8/0x820 [ 547.939494][T13683] oom_kill_process+0x390/0x580 [ 547.944767][T13683] out_of_memory+0xe0e/0x1200 [ 547.949558][T13683] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 547.955248][T13683] ? mutex_lock_nested+0x20/0x20 [ 547.960269][T13683] ? unregister_oom_notifier+0x20/0x20 [ 547.965761][T13683] mem_cgroup_out_of_memory+0x2c2/0x390 [ 547.971326][T13683] ? try_charge_memcg+0xc91/0x17c0 [ 547.976480][T13683] ? drain_local_stock+0x630/0x630 [ 547.981623][T13683] ? do_raw_spin_unlock+0x121/0x230 [ 547.986873][T13683] try_charge_memcg+0xca1/0x17c0 [ 547.991874][T13683] ? folio_flags+0x120/0x120 [ 547.996491][T13683] ? percpu_ref_tryget+0x15/0x180 [ 548.001590][T13683] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 548.007331][T13683] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 548.013356][T13683] ? percpu_ref_tryget+0x15/0x180 [ 548.018421][T13683] ? percpu_ref_tryget+0x15/0x180 [ 548.023477][T13683] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 548.029217][T13683] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 548.034983][T13683] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 548.040919][T13683] obj_cgroup_charge+0x36e/0x630 [ 548.045894][T13683] ? get_obj_cgroup_from_current+0xd4/0x280 [ 548.051828][T13683] ? obj_cgroup_charge+0xed/0x630 [ 548.056884][T13683] ? mod_objcg_mlstate+0x320/0x320 [ 548.062018][T13683] ? percpu_ref_tryget+0x15/0x180 [ 548.067091][T13683] ? get_obj_cgroup_from_current+0xd4/0x280 [ 548.073009][T13683] slab_pre_alloc_hook+0x2e2/0x300 [ 548.078150][T13683] ? kvmalloc_node+0x70/0x180 [ 548.082847][T13683] ? kvmalloc_node+0x70/0x180 [ 548.087544][T13683] __kmem_cache_alloc_node+0x53/0x250 [ 548.092981][T13683] ? kvmalloc_node+0x70/0x180 [ 548.097791][T13683] __kmalloc_node+0xa6/0x240 [ 548.102432][T13683] kvmalloc_node+0x70/0x180 [ 548.106973][T13683] alloc_fdtable+0x106/0x2c0 [ 548.111811][T13683] dup_fd+0x747/0xa20 [ 548.115811][T13683] ? _raw_spin_unlock+0x28/0x40 [ 548.120714][T13683] ? copy_fs_struct+0x1c3/0x270 [ 548.125583][T13683] ksys_unshare+0x45c/0x8f0 [ 548.130396][T13683] ? sighand_ctor+0x50/0x50 [ 548.134914][T13683] ? lock_chain_count+0x20/0x20 [ 548.139784][T13683] ? syscall_enter_from_user_mode+0x25/0x80 [ 548.145703][T13683] __x64_sys_unshare+0x38/0x40 [ 548.150517][T13683] do_syscall_64+0x55/0xb0 [ 548.154981][T13683] ? clear_bhb_loop+0x40/0x90 [ 548.159778][T13683] ? clear_bhb_loop+0x40/0x90 [ 548.164581][T13683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.170526][T13683] RIP: 0033:0x7fd60a39e159 [ 548.175007][T13683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.194679][T13683] RSP: 002b:00007fd60b32f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 548.203218][T13683] RAX: ffffffffffffffda RBX: 00007fd60a625fa0 RCX: 00007fd60a39e159 [ 548.211208][T13683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020400 [ 548.219281][T13683] RBP: 00007fd60a43503b R08: 0000000000000000 R09: 0000000000000000 [ 548.227270][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.235260][T13683] R13: 00007fd60a626038 R14: 00007fd60a625fa0 R15: 00007ffda3f15f58 [ 548.243267][T13683] [ 548.272070][T13683] memory: usage 4kB, limit 8kB, failcnt 20 [ 548.278226][T13683] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 548.285997][T13683] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 548.293409][T13683] Memory cgroup stats for /syz2/test: [ 548.293775][T13683] cache 0 [ 548.311909][T13683] rss 0 [ 548.314981][T13683] rss_huge 0 [ 548.318647][T13683] shmem 0 [ 548.326112][T13683] mapped_file 0 [ 548.334767][T13683] dirty 0 [ 548.339960][T13683] writeback 0 [ 548.353766][T13683] workingset_refault_anon 0 [ 548.371273][T13683] workingset_refault_file 0 [ 548.381266][T13683] swap 0 [ 548.386625][T13683] pgpgin 0 [ 548.389866][T13683] pgpgout 0 [ 548.397392][T13683] pgfault 2 [ 548.400634][T13683] pgmajfault 0 [ 548.407038][T13683] inactive_anon 0 [ 548.410834][T13683] active_anon 0 [ 548.428455][T13683] inactive_file 0 [ 548.436400][T13683] active_file 0 [ 548.448105][T13683] unevictable 0 [ 548.461658][T13683] hierarchical_memory_limit 8192 [ 548.466805][T13683] hierarchical_memsw_limit 9223372036854771712 [ 548.481519][T13683] total_cache 0 [ 548.491583][T13683] total_rss 0 [ 548.495017][T13683] total_rss_huge 0 [ 548.509124][T13683] total_shmem 0 [ 548.513592][T13683] total_mapped_file 0 [ 548.523253][T13683] total_dirty 0 [ 548.543283][T13683] total_writeback 0 [ 548.547176][T13683] total_workingset_refault_anon 0 [ 548.602045][T13683] total_workingset_refault_file 0 [ 548.617511][T13683] total_swap 0 [ 548.620976][T13683] total_pgpgin 0 [ 548.644397][T13683] total_pgpgout 0 [ 548.660455][T13683] total_pgfault 2 [ 548.677525][T13683] total_pgmajfault 0 [ 548.700525][T13683] total_inactive_anon 0 [ 548.725688][T13683] total_active_anon 0 [ 548.744853][T13683] total_inactive_file 0 [ 548.767107][T11933] usbhid 7-1:0.0: can't add hid device: -71 [ 548.792303][T11933] usbhid: probe of 7-1:0.0 failed with error -71 [ 548.799519][T13683] total_active_file 0 [ 548.806532][T13683] total_unevictable 0 [ 548.829404][T11933] usb 7-1: USB disconnect, device number 7 [ 548.841494][T13683] anon_cost 0 [ 548.844860][T13683] file_cost 0 [ 548.848173][T13683] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.2391,pid=13680,uid=0 [ 548.910538][T13683] Memory cgroup out of memory: Killed process 13683 (syz.2.2391) total-vm:105824kB, anon-rss:1368kB, file-rss:24192kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 549.364885][T13712] validate_nla: 2 callbacks suppressed [ 549.364904][T13712] netlink: 'syz.8.2398': attribute type 29 has an invalid length. [ 549.401040][T13712] netlink: 'syz.8.2398': attribute type 29 has an invalid length. [ 549.427232][T13712] netlink: 'syz.8.2398': attribute type 29 has an invalid length. [ 549.436665][T13712] netlink: 'syz.8.2398': attribute type 29 has an invalid length. [ 549.542813][ T5785] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 549.743063][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 549.767270][ T5785] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 549.783084][ T5785] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 549.811827][ T5785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 549.831121][ T5785] usb 3-1: config 1 has no interface number 0 [ 549.846827][ T5785] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.894621][ T5785] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 549.932706][ T5785] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 549.951576][ T5785] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 549.961185][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.985154][ T5785] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 550.187734][ T5785] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 550.597596][ T5785] usb 3-1: USB disconnect, device number 5 [ 550.639364][ T5785] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 551.061251][T13758] netlink: 'syz.5.2408': attribute type 29 has an invalid length. [ 551.082025][T13758] netlink: 'syz.5.2408': attribute type 29 has an invalid length. [ 551.101121][T13758] netlink: 'syz.5.2408': attribute type 29 has an invalid length. [ 551.123230][T13758] netlink: 'syz.5.2408': attribute type 29 has an invalid length. [ 552.100508][T13793] netlink: 'syz.5.2417': attribute type 29 has an invalid length. [ 552.112952][T13793] netlink: 'syz.5.2417': attribute type 29 has an invalid length. [ 552.296633][T13801] wlan1 speed is unknown, defaulting to 1000 [ 554.428559][T13870] syz_tun: entered allmulticast mode [ 554.535580][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 554.587024][T13869] syz_tun: left allmulticast mode [ 554.599618][T13874] validate_nla: 6 callbacks suppressed [ 554.599638][T13874] netlink: 'syz.8.2439': attribute type 29 has an invalid length. [ 554.641457][T13874] netlink: 'syz.8.2439': attribute type 29 has an invalid length. [ 554.670285][T13874] netlink: 'syz.8.2439': attribute type 29 has an invalid length. [ 554.690343][T13874] netlink: 'syz.8.2439': attribute type 29 has an invalid length. [ 554.851045][T13884] loop5: detected capacity change from 0 to 256 [ 554.870091][T13884] exfat: Deprecated parameter 'namecase' [ 554.905936][T13884] exfat: Deprecated parameter 'namecase' [ 554.999531][T13884] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 555.658148][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 555.696206][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'. [ 556.082568][T13917] netlink: 'syz.5.2452': attribute type 29 has an invalid length. [ 556.108501][T13917] netlink: 'syz.5.2452': attribute type 29 has an invalid length. [ 556.129439][T13917] netlink: 'syz.5.2452': attribute type 29 has an invalid length. [ 556.156842][T13917] netlink: 'syz.5.2452': attribute type 29 has an invalid length. [ 556.775484][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2461'. [ 556.800264][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2461'. [ 557.741153][T13958] netlink: 'syz.8.2465': attribute type 29 has an invalid length. [ 557.774050][T13958] netlink: 'syz.8.2465': attribute type 29 has an invalid length. [ 558.893430][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.907280][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.921240][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.936935][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.949332][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.957792][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.965692][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.973683][T12148] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 558.985115][T12148] hid-generic 0000:0000:0001.0007: hidraw0: HID v0.10 Device [syz0] on syz1 [ 559.066062][T13988] loop6: detected capacity change from 0 to 4096 [ 559.093530][T13988] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 559.164025][T13988] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 559.222046][T13988] ntfs3: loop6: try to read out of volume at offset 0x1ff000 [ 559.229616][T13988] ntfs3: loop6: Failed to load $MFT. [ 559.678032][T14008] validate_nla: 6 callbacks suppressed [ 559.678052][T14008] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 559.730290][T14008] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 559.766145][T14011] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 559.804519][T14013] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 561.311483][T12647] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 561.630438][T12647] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 561.640397][T12647] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.670665][T12647] usb 7-1: Product: syz [ 561.680840][T12647] usb 7-1: Manufacturer: syz [ 561.685958][T12647] usb 7-1: SerialNumber: syz [ 561.970676][ T5860] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 562.137014][T14049] netlink: 'syz.2.2493': attribute type 29 has an invalid length. [ 562.158348][T14049] netlink: 'syz.2.2493': attribute type 29 has an invalid length. [ 562.181117][T14049] netlink: 'syz.2.2493': attribute type 29 has an invalid length. [ 562.198323][T14049] netlink: 'syz.2.2493': attribute type 29 has an invalid length. [ 562.372227][T12647] usb 7-1: USB disconnect, device number 8 [ 563.091173][ T5860] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 563.102038][ T5860] ath9k_htc: Failed to initialize the device [ 563.122080][T12647] usb 7-1: ath9k_htc: USB layer deinitialized [ 563.407169][T14066] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2497'. [ 563.489567][T14066] xt_l2tp: invalid flags combination: 4 [ 563.525588][T12647] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 563.548168][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.556653][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.769843][T12647] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 563.804910][T12647] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 563.826673][T12647] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 563.882609][T12647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.909209][T14078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.955815][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2502'. [ 563.999223][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 564.056541][ T5842] usb 7-1: USB disconnect, device number 9 [ 564.175059][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.196212][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.204871][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.216008][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.258885][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.294631][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.321408][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.389958][T12148] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 564.429867][T14082] loop6: detected capacity change from 0 to 4096 [ 564.453086][T12148] hid-generic 0000:0000:0001.0008: hidraw0: HID v0.10 Device [syz0] on syz1 [ 564.467460][T14082] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 564.553482][T14082] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 564.598157][T14082] ntfs3: loop6: try to read out of volume at offset 0x1ff000 [ 564.693547][T14082] ntfs3: loop6: Failed to load $MFT. [ 571.838611][T14216] loop8: detected capacity change from 0 to 4096 [ 571.879035][T14216] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 571.890549][T14216] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 571.899436][T14216] ntfs3: loop8: try to read out of volume at offset 0x1ff000 [ 571.921626][T14216] ntfs3: loop8: Failed to load $MFT. [ 574.784227][T14257] bond1: option mode: unable to set because the bond device has slaves [ 575.091466][ T5860] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 575.153050][T14265] overlayfs: failed to clone upperpath [ 575.316459][ T5860] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 575.336406][ T5860] usb 7-1: config 0 has no interface number 0 [ 575.360695][ T5860] usb 7-1: config 0 interface 41 has no altsetting 0 [ 575.384072][ T5860] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 575.401547][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.410878][ T5860] usb 7-1: Product: syz [ 575.415567][ T5860] usb 7-1: Manufacturer: syz [ 575.420526][ T5860] usb 7-1: SerialNumber: syz [ 575.430473][ T5860] usb 7-1: config 0 descriptor?? [ 575.855268][ T5860] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 575.876053][ T5860] CoreChips: probe of 7-1:0.41 failed with error -71 [ 575.904262][ T5860] usb 7-1: USB disconnect, device number 10 [ 579.331618][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 579.376924][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 582.073596][T14370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2048 (16384 ns) > initial count (304 ns). Using initial count to start timer. [ 583.327544][T14400] loop8: detected capacity change from 0 to 164 [ 583.374410][T14400] Unable to read rock-ridge attributes [ 584.011656][ T28] audit: type=1800 audit(1789017159.174:236): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2638" name="addr_trsvcid" dev="configfs" ino=45643 res=0 errno=0 [ 584.525437][T14423] loop8: detected capacity change from 0 to 512 [ 584.583824][T14423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.615417][T14423] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.462534][T14462] bond1: option mode: unable to set because the bond device has slaves [ 586.781464][ T5785] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 586.987900][ T5785] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 587.001655][ T5785] usb 7-1: config 0 has no interface number 0 [ 587.008456][ T5785] usb 7-1: config 0 interface 41 has no altsetting 0 [ 587.035217][ T5785] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 587.052799][ T5785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.061038][ T5785] usb 7-1: Product: syz [ 587.077255][ T5785] usb 7-1: Manufacturer: syz [ 587.086544][ T5785] usb 7-1: SerialNumber: syz [ 587.105888][ T5785] usb 7-1: config 0 descriptor?? [ 587.888001][T12308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.082596][ T5785] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 588.102090][ T5785] CoreChips: probe of 7-1:0.41 failed with error -71 [ 588.123314][ T5785] usb 7-1: USB disconnect, device number 11 [ 590.300653][T14510] loop8: detected capacity change from 0 to 128 [ 590.344189][T14510] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 590.386945][T14510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.047328][T14517] bond1: option mode: unable to set because the bond device is up [ 593.626779][T14556] loop6: detected capacity change from 0 to 128 [ 593.842266][T14560] ubi0: attaching mtd0 [ 593.866079][T14560] ubi0: scanning is finished [ 593.870886][T14560] ubi0: empty MTD device detected [ 594.070846][T14561] syz.6.2688: attempt to access beyond end of device [ 594.070846][T14561] loop6: rw=2049, sector=145, nr_sectors = 32 limit=128 [ 594.398453][T14560] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 594.717291][T14571] tipc: Failed to remove unknown binding: 66,0,0/0:3307360005/3307360007 [ 594.732377][ T3518] kworker/u4:14: attempt to access beyond end of device [ 594.732377][ T3518] loop6: rw=1, sector=177, nr_sectors = 576 limit=128 [ 594.771601][T14571] tipc: Failed to remove unknown binding: 66,0,0/0:3307360005/3307360006 [ 594.802248][T14573] bond1: option mode: unable to set because the bond device is up [ 595.019898][T14579] loop6: detected capacity change from 0 to 512 [ 595.111540][T14579] EXT4-fs: test_dummy_encryption requires encrypt feature [ 596.347674][ T5090] Bluetooth: hci4: command 0x0406 tx timeout [ 597.210037][T14604] loop8: detected capacity change from 0 to 2048 [ 597.275290][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2706'. [ 597.303364][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2706'. [ 597.367062][T14604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.404448][ T7272] bond1: (slave bond0): link status definitely down, disabling slave [ 597.434708][T14604] EXT4-fs (loop8): shut down requested (1) [ 597.473370][ T7272] bond1: now running without any active interface! [ 597.625408][T12308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.660264][T14622] loop6: detected capacity change from 0 to 8 [ 597.729624][T14618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.032032][T14639] loop8: detected capacity change from 0 to 1024 [ 600.698154][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2719'. [ 600.707317][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2719'. [ 601.143125][T14654] FAULT_INJECTION: forcing a failure. [ 601.143125][T14654] name failslab, interval 1, probability 0, space 0, times 0 [ 601.156576][T14654] CPU: 0 PID: 14654 Comm: syz.6.2722 Not tainted syzkaller #0 [ 601.164091][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.174196][T14654] Call Trace: [ 601.177509][T14654] [ 601.180465][T14654] dump_stack_lvl+0x18c/0x250 [ 601.185266][T14654] ? show_regs_print_info+0x20/0x20 [ 601.190504][T14654] ? load_image+0x420/0x420 [ 601.195057][T14654] should_fail_ex+0x394/0x4c0 [ 601.199797][T14654] should_failslab+0x9/0x20 [ 601.204326][T14654] slab_pre_alloc_hook+0x59/0x300 [ 601.209390][T14654] kmem_cache_alloc+0x5a/0x2c0 [ 601.214177][T14654] ? sctp_get_port_local+0x69f/0x15d0 [ 601.219628][T14654] sctp_get_port_local+0x69f/0x15d0 [ 601.224885][T14654] ? sctp_do_bind+0x8f0/0x8f0 [ 601.229580][T14654] ? sctp_bind_addr_match+0x30/0x2a0 [ 601.234890][T14654] sctp_do_bind+0x4c0/0x8f0 [ 601.239422][T14654] sctp_connect_new_asoc+0x26a/0x6a0 [ 601.244742][T14654] ? __sctp_connect+0xd80/0xd80 [ 601.249619][T14654] ? sctp_get_af_specific+0x29/0x70 [ 601.254945][T14654] ? sctp_inet6_send_verify+0x80/0x300 [ 601.260568][T14654] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 601.266400][T14654] __sctp_connect+0x5b7/0xd80 [ 601.271120][T14654] ? sctp_send_asconf+0x170/0x170 [ 601.276283][T14654] ? __local_bh_enable_ip+0x13a/0x1c0 [ 601.281693][T14654] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 601.287292][T14654] ? security_sctp_bind_connect+0x89/0xb0 [ 601.293059][T14654] sctp_setsockopt_connectx+0x104/0x1a0 [ 601.298667][T14654] sctp_setsockopt+0x6d8/0x11e0 [ 601.303543][T14654] ? sock_common_recvmsg+0x190/0x190 [ 601.308891][T14654] do_sock_setsockopt+0x175/0x1a0 [ 601.313980][T14654] ? __fdget+0x180/0x210 [ 601.318249][T14654] __x64_sys_setsockopt+0x182/0x200 [ 601.323465][T14654] do_syscall_64+0x55/0xb0 [ 601.327914][T14654] ? clear_bhb_loop+0x40/0x90 [ 601.332612][T14654] ? clear_bhb_loop+0x40/0x90 [ 601.337308][T14654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.343218][T14654] RIP: 0033:0x7f152f59e159 [ 601.347648][T14654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.367622][T14654] RSP: 002b:00007f1530400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 601.376066][T14654] RAX: ffffffffffffffda RBX: 00007f152f825fa0 RCX: 00007f152f59e159 [ 601.384145][T14654] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 601.392130][T14654] RBP: 00007f152f63503b R08: 000000000000001c R09: 0000000000000000 [ 601.400113][T14654] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 601.408096][T14654] R13: 00007f152f826038 R14: 00007f152f825fa0 R15: 00007ffd99434718 [ 601.416095][T14654] [ 602.469400][T14667] CIFS mount error: No usable UNC path provided in device string! [ 602.469400][T14667] [ 602.479948][T14667] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 603.310396][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2730'. [ 603.347055][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2730'. [ 603.369325][T14673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.404960][T14673] bond1: (slave bond0): making interface the new active one [ 603.430089][T14673] bond1: (slave bond0): Enslaving as an active interface with an up link [ 603.435915][T14679] loop6: detected capacity change from 0 to 2048 [ 603.633681][T14677] tipc: New replicast peer: 127.0.0.1 [ 603.712940][T14679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.786798][T14677] tipc: Enabled bearer , priority 10 [ 604.760406][T11173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.825092][T12647] tipc: Node number set to 3272149026 [ 604.840109][T14690] loop8: detected capacity change from 0 to 512 [ 607.959312][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 607.988640][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2744'. [ 608.004316][T14711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.065929][T14711] bond1: (slave bond0): making interface the new active one [ 608.098037][T14711] bond1: (slave bond0): Enslaving as an active interface with an up link [ 611.674348][T14751] loop6: detected capacity change from 0 to 4096 [ 611.788346][T14751] ntfs: volume version 3.1. [ 613.791468][ T5842] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 614.514905][ T5842] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.537613][ T5842] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 614.548705][T12890] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 614.581572][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 614.596905][ T5842] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.606565][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 614.614965][ T5842] usb 7-1: SerialNumber: syz [ 614.808989][T14792] loop8: detected capacity change from 0 to 4096 [ 614.816757][T14792] EXT4-fs: inline encryption not supported [ 614.835617][ T5842] usb 7-1: USB disconnect, device number 12 [ 614.862829][T14792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 614.891212][T14792] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 614.907801][T14792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.914986][T12308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.412937][T14819] loop8: detected capacity change from 0 to 4096 [ 617.431244][T14819] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 617.456670][T14821] loop6: detected capacity change from 0 to 128 [ 617.675420][T14821] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 618.019513][T14821] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.160310][T14819] ntfs3: loop8: Failed to initialize $Extend/$Reparse. [ 618.470245][T14821] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz.6.2780: Invalid block bitmap block 164 in block_group 0 [ 618.562364][T14821] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz.6.2780: Invalid block bitmap block 164 in block_group 0 [ 618.609321][T14821] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz.6.2780: Invalid block bitmap block 164 in block_group 0 [ 618.741602][T14825] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 164 in block_group 0 [ 618.858861][T11173] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 619.045729][T14839] loop6: detected capacity change from 0 to 164 [ 620.952563][T14858] kAFS: No cell specified [ 621.405716][T14872] loop6: detected capacity change from 0 to 256 [ 621.428436][T14872] exfat: Deprecated parameter 'namecase' [ 621.457428][T14872] exfat: Deprecated parameter 'namecase' [ 621.524397][T14872] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 622.477434][T14891] kAFS: No cell specified [ 622.688164][ T5785] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 622.896911][ T5785] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 622.949818][ T5785] usb 7-1: config 0 has no interface number 0 [ 622.976398][ T5785] usb 7-1: config 0 interface 41 has no altsetting 0 [ 623.074900][ T5785] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 623.126060][ T5785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.174757][ T5785] usb 7-1: Product: syz [ 623.199996][ T5785] usb 7-1: Manufacturer: syz [ 623.230868][ T5785] usb 7-1: SerialNumber: syz [ 623.264279][ T5785] usb 7-1: config 0 descriptor?? [ 623.878321][ T5785] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 624.106494][ T5785] CoreChips: probe of 7-1:0.41 failed with error -71 [ 624.342583][ T5785] usb 7-1: USB disconnect, device number 13 [ 624.623194][T14920] kAFS: No cell specified [ 624.845538][T14925] loop8: detected capacity change from 0 to 16 [ 624.873561][T14925] erofs: (device loop8): mounted with root inode @ nid 36. [ 625.020096][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.027403][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.518346][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2824'. [ 627.421067][T14951] kAFS: No cell specified [ 627.853503][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2831'. [ 627.887819][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2831'. [ 628.309400][T14974] kAFS: No cell specified [ 628.457511][T14956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 628.470412][T14956] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 628.526689][T14956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 628.550569][T14956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 628.558509][T14956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.572294][T14956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 628.575779][T14970] fuse: Bad value for 'fd' [ 628.588736][T14956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.598258][T14956] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 628.636667][T14956] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 629.187014][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 629.216744][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 629.305471][T14495] bond1: (slave bond0): link status definitely down, disabling slave [ 629.343977][T14495] bond1: now running without any active interface! [ 629.519366][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.539612][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.559924][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.567459][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.581372][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.589012][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.599075][T14996] kAFS: No cell specified [ 629.611496][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.667494][ T27] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 629.722031][ T27] hid-generic 0000:0000:0001.0009: hidraw0: HID v0.10 Device [syz0] on syz1 [ 629.738900][T14991] loop8: detected capacity change from 0 to 4096 [ 629.779056][T14991] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 629.791582][T12890] Bluetooth: hci1: command 0x0406 tx timeout [ 629.807819][T14991] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 629.860069][T14991] ntfs3: loop8: try to read out of volume at offset 0x1ff000 [ 629.892857][T14991] ntfs3: loop8: Failed to load $MFT. [ 629.968579][T14998] fido_id[14998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 630.586731][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 630.594723][T12890] Bluetooth: hci4: command 0x0406 tx timeout [ 630.661761][T12890] Bluetooth: hci2: command 0x0c1a tx timeout [ 630.815663][T15017] kAFS: No cell specified [ 630.845866][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2856'. [ 630.859936][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2856'. [ 631.346088][T15021] loop8: detected capacity change from 0 to 4096 [ 631.861678][T12890] Bluetooth: hci1: command 0x0406 tx timeout [ 631.870107][T15021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.354631][T12308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.648195][T15044] kAFS: No cell specified [ 632.663700][T12890] Bluetooth: hci4: command 0x0406 tx timeout [ 632.669836][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 632.741437][T12890] Bluetooth: hci2: command 0x0c1a tx timeout [ 632.920234][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2867'. [ 632.955690][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2867'. [ 633.086114][T14495] bond1: (slave bond0): link status definitely down, disabling slave [ 633.136919][T14495] bond1: now running without any active interface! [ 634.666712][T15067] kAFS: No cell specified [ 634.796341][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'. [ 634.811364][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 634.824139][T12890] Bluetooth: hci2: command 0x0c1a tx timeout [ 635.030573][T15082] loop8: detected capacity change from 0 to 8 [ 635.040427][T15073] loop6: detected capacity change from 0 to 1024 [ 635.063686][T15073] EXT4-fs: Ignoring removed mblk_io_submit option [ 635.142080][T15073] EXT4-fs: Ignoring removed oldalloc option [ 635.317677][T15073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 635.331202][T15073] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.540377][T11173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 636.956520][T15103] afs: Unknown parameter 'dy' [ 637.001070][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2890'. [ 637.049735][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2890'. [ 639.935810][T15131] afs: Unknown parameter 'dy' [ 640.144145][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.171915][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.195324][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.205458][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.221391][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.239109][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.261414][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.268895][ T55] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0 [ 640.319189][ T55] hid-generic 0000:0000:0001.000A: hidraw0: HID v0.10 Device [syz0] on syz1 [ 640.349426][T15137] loop8: detected capacity change from 0 to 4096 [ 640.412243][T15137] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 640.477620][T15137] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 640.531487][T15137] ntfs3: loop8: try to read out of volume at offset 0x1ff000 [ 640.539047][T15137] ntfs3: loop8: Failed to load $MFT. [ 640.608221][T15140] fido_id[15140]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 642.363678][T15159] afs: Unknown parameter 'dy' [ 642.522975][T15162] loop6: detected capacity change from 0 to 512 [ 642.568180][T15162] EXT4-fs (loop6): orphan cleanup on readonly fs [ 642.603249][T15162] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2911: bad orphan inode 17 [ 642.672891][T15162] ext4_test_bit(bit=16, block=4) = 1 [ 642.678283][T15162] is_bad_inode(inode)=0 [ 642.692019][T15162] NEXT_ORPHAN(inode)=0 [ 642.696161][T15162] max_ino=32 [ 642.699393][T15162] i_nlink=1 [ 642.749151][T15162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 642.855600][T15162] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 13: comm syz.6.2911: path /244/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 643.833150][T11173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.106626][T15218] loop6: detected capacity change from 0 to 2048 [ 646.148675][T15220] loop8: detected capacity change from 0 to 1024 [ 646.210532][T15218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.277606][T14372] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 646.366391][T15216] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 646.443669][T15216] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 646.490594][T15216] EXT4-fs (loop6): This should not happen!! Data will be lost [ 646.490594][T15216] [ 646.540415][T15216] EXT4-fs (loop6): Total free blocks count 0 [ 646.561443][T15216] EXT4-fs (loop6): Free/Dirty block details [ 646.567571][T15216] EXT4-fs (loop6): free_blocks=4096 [ 646.582337][T15216] EXT4-fs (loop6): dirty_blocks=32 [ 646.597922][T15216] EXT4-fs (loop6): Block reservation details [ 646.608074][T15216] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 647.077973][T11173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.281454][T12647] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 647.474489][T12647] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.495895][T12647] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.516829][T12647] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 647.541474][T12647] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.593547][T12647] usb 9-1: config 0 descriptor?? [ 647.661521][ T5860] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 647.892238][ T5860] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.060394][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 648.206392][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 648.308709][T12647] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 648.373170][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 648.393386][T12647] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 648.429144][T12647] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 648.436645][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 648.457088][T12647] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 648.467278][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 648.502553][T12647] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 648.520177][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 648.533948][T12647] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 648.546601][T12647] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 648.554511][ T5860] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 648.599577][ T5860] usb 7-1: config 1 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 648.626165][T12647] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 648.650209][ T5860] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 648.686333][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.699200][ T5860] usb 7-1: Product: syz [ 648.718451][ T5860] usb 7-1: Manufacturer: syz [ 648.728209][ T5860] usb 7-1: SerialNumber: syz [ 648.741166][T12647] cp2112 0003:10C4:EA90.000B: error requesting version [ 648.772149][T15258] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.803196][T15258] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.823426][T15258] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.823467][T12647] cp2112: probe of 0003:10C4:EA90.000B failed with error -71 [ 648.856509][T15258] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.885260][T15258] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.897839][T12647] usb 9-1: USB disconnect, device number 3 [ 648.927711][T15258] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.953828][T15258] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.989903][ T5860] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 649.033335][ T5860] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 649.088550][ T5860] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 649.111567][ T5860] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 649.132234][ T5860] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 649.158294][ T5860] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 649.184915][ T5860] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 649.217968][ T5860] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 649.230115][ T5860] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 649.241943][ T5860] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 649.270688][ T5860] usb 7-1: USB disconnect, device number 14 [ 649.297730][ T5860] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 649.352753][ T5860] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 649.383236][ T5860] keyspan 7-1:1.0: device disconnected [ 649.384585][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'. [ 649.408760][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 649.522316][T12647] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 649.832826][T12647] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 649.840501][T12647] usb 9-1: can't read configurations, error -71 [ 650.023364][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2975'. [ 650.032702][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2975'. [ 650.132098][T15318] loop6: detected capacity change from 0 to 512 [ 650.160550][T15318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.180011][T15318] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.402606][T11173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.587202][T15327] loop8: detected capacity change from 0 to 64 [ 652.897534][T15343] loop6: detected capacity change from 0 to 128 [ 652.943392][T15346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 653.353637][T15355] overlayfs: failed to resolve './file0': -2 [ 653.449093][ T28] audit: type=1326 audit(1789017228.594:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 653.732849][ T28] audit: type=1326 audit(1789017228.594:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 654.141513][ T28] audit: type=1326 audit(1789017228.594:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 654.181237][ T28] audit: type=1326 audit(1789017228.594:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 654.215150][ T28] audit: type=1326 audit(1789017228.604:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 654.273051][ T28] audit: type=1326 audit(1789017228.604:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 654.312409][ T28] audit: type=1326 audit(1789017228.604:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 654.377860][ T28] audit: type=1326 audit(1789017228.604:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 654.492581][ T28] audit: type=1326 audit(1789017228.604:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 654.531207][ T28] audit: type=1326 audit(1789017228.604:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.6.2987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f152f55e98e code=0x7ffc0000 [ 658.331459][ T5860] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 658.561397][ T5860] usb 7-1: Using ep0 maxpacket: 32 [ 658.613085][ T5860] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 658.623595][ T5860] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 658.656821][ T5860] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 658.679265][ T5860] usb 7-1: config 1 has no interface number 0 [ 658.701482][ T5860] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 658.723116][ T5860] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 658.756563][ T5860] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 658.775990][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.812850][ T5860] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 659.015771][ T5860] snd_usb_pod 7-1:1.1: invalid control EP [ 659.061671][ T5860] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 659.068961][ T5860] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 659.093321][ T5860] snd_usb_pod: probe of 7-1:1.1 failed with error -22 [ 659.873786][ T5860] usb 7-1: USB disconnect, device number 15 [ 660.865843][T15435] wlan1 speed is unknown, defaulting to 1000 [ 661.952437][T15447] overlayfs: overlapping lowerdir path [ 663.925909][T15456] loop8: detected capacity change from 0 to 1024 [ 664.480335][T15329] Set syz1 is full, maxelem 65536 reached [ 664.953269][T15474] syzkaller0: entered promiscuous mode [ 664.959637][T15474] syzkaller0: entered allmulticast mode [ 665.035712][T15476] tipc: Started in network mode [ 665.074348][T15476] tipc: Node identity 5ea5ef39f16a, cluster identity 4711 [ 665.114265][T15476] tipc: Enabled bearer , priority 0 [ 665.443006][T15485] __vm_enough_memory: pid: 15485, comm: syz.5.3033, not enough memory for the allocation [ 666.255015][T15487] loop6: detected capacity change from 0 to 2048 [ 666.814149][ T27] tipc: Node number set to 2949639993 [ 668.303473][T15489] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.919922][T15494] loop8: detected capacity change from 0 to 32768 [ 671.032312][T15494] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 671.173242][T15494] XFS (loop8): Ending clean mount [ 671.487719][T12308] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 673.587936][T15557] loop8: detected capacity change from 0 to 512 [ 673.692817][T15557] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3062: Unimplemented hash flags: 0x0001 [ 673.746511][T15557] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3062: Corrupt directory, running e2fsck is recommended [ 673.794097][T15557] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 673.819653][T15557] EXT4-fs error (device loop8): ext4_iget_extra_inode:4740: inode #15: comm syz.8.3062: corrupted in-inode xattr: invalid ea_ino [ 673.863522][T15557] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.3062: couldn't read orphan inode 15 (err -117) [ 673.894475][T15557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.939009][T15557] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3062: Unimplemented hash flags: 0x0001 [ 673.990402][T15557] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3062: Corrupt directory, running e2fsck is recommended [ 674.027317][T15557] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3062: Unimplemented hash flags: 0x0001 [ 674.040153][T15557] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3062: Corrupt directory, running e2fsck is recommended [ 674.061156][T15557] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3062: Unimplemented hash flags: 0x0001 [ 674.075570][T15557] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3062: Corrupt directory, running e2fsck is recommended [ 674.132197][T15565] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3062: Unimplemented hash flags: 0x0001 [ 674.156473][T15565] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3062: Corrupt directory, running e2fsck is recommended [ 674.232196][T15557] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3062: Unimplemented hash flags: 0x0001 [ 674.252221][T15557] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3062: Corrupt directory, running e2fsck is recommended [ 675.409836][T12308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.701389][ T5860] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 675.933098][ T5860] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 675.951344][ T5860] usb 7-1: config 0 has no interface number 0 [ 675.961786][ T5860] usb 7-1: config 0 interface 41 has no altsetting 0 [ 675.993350][ T5860] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 676.011678][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.030774][ T5860] usb 7-1: Product: syz [ 676.036303][ T5860] usb 7-1: Manufacturer: syz [ 676.051164][ T5860] usb 7-1: SerialNumber: syz [ 676.069539][ T5860] usb 7-1: config 0 descriptor?? [ 676.491619][ T5860] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 676.521574][ T5860] CoreChips: probe of 7-1:0.41 failed with error -71 [ 676.550758][ T5860] usb 7-1: USB disconnect, device number 16 [ 677.724204][T15595] warning: `syz.5.3076' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 679.608643][T15617] loop8: detected capacity change from 0 to 32768 [ 679.719431][T15617] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 680.195138][T12308] ocfs2: Unmounting device (7,8) on (node local) [ 680.610219][T15632] syz_tun: entered allmulticast mode [ 680.631065][T15634] loop6: detected capacity change from 0 to 512 [ 680.721426][ T55] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 680.753498][T15634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.800966][T15634] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.938734][T15634] EXT4-fs error (device loop6): ext4_get_first_dir_block:3584: inode #12: comm syz.6.3091: Directory hole found for htree leaf block 0 [ 680.967795][ T55] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 680.983901][ T55] usb 9-1: config 0 has no interface number 0 [ 680.992802][ T55] usb 9-1: config 0 interface 41 has no altsetting 0 [ 681.025440][ T55] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 681.038643][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.057023][ T55] usb 9-1: Product: syz [ 681.071334][T15634] EXT4-fs (loop6): Remounting filesystem read-only [ 681.087431][ T55] usb 9-1: Manufacturer: syz [ 681.096342][ T55] usb 9-1: SerialNumber: syz [ 681.145484][ T55] usb 9-1: config 0 descriptor?? [ 681.152714][T11173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.186687][ T7273] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 681.226017][ T7273] __quota_error: 63 callbacks suppressed [ 681.226032][ T7273] Quota error (device loop6): write_blk: dquota write failed [ 681.244105][ T7273] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 681.255180][ T7273] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 681.266422][ T7273] Quota error (device loop6): write_blk: dquota write failed [ 681.274915][ T7273] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 681.656203][ T55] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 681.674376][ T55] CoreChips: probe of 9-1:0.41 failed with error -71 [ 681.827169][ T55] usb 9-1: USB disconnect, device number 6 [ 683.331508][ T55] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 683.531581][ T55] usb 9-1: Using ep0 maxpacket: 8 [ 683.538667][ T55] usb 9-1: config index 0 descriptor too short (expected 65332, got 52) [ 683.550905][ T55] usb 9-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 683.617747][ T55] usb 9-1: config 255 has an invalid descriptor of length 208, skipping remainder of the config [ 683.653788][ T55] usb 9-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 683.685032][ T55] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 683.713957][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.741884][ T55] usb 9-1: Product: syz [ 683.747452][ T55] usb 9-1: Manufacturer: syz [ 683.754602][ T55] usb 9-1: SerialNumber: syz [ 684.122270][ T55] usb 9-1: USB disconnect, device number 7 [ 684.345016][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 684.361487][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'. [ 684.583782][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 686.140844][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'. [ 686.151806][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'. [ 686.430647][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.437293][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.761537][ T5860] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 686.922426][ T5860] usb 9-1: device descriptor read/64, error -71 [ 686.933787][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'. [ 686.947833][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 687.221441][ T5860] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 687.381466][ T5860] usb 9-1: device descriptor read/64, error -71 [ 687.501649][ T5860] usb usb9-port1: attempt power cycle [ 687.942368][ T5860] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 688.011791][ T5860] usb 9-1: device descriptor read/8, error -71 [ 688.099695][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3142'. [ 688.110705][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3142'. [ 688.291796][ T5860] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 688.323688][ T5860] usb 9-1: device descriptor read/8, error -71 [ 688.455129][ T5860] usb usb9-port1: unable to enumerate USB device [ 689.552669][T15785] syz.6.3149 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 689.812692][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3153'. [ 689.844816][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3153'. [ 691.631966][T12647] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 691.821376][T12647] usb 9-1: device descriptor read/64, error -71 [ 691.958598][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'. [ 692.011014][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3166'. [ 692.131601][T12647] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 692.311990][T12647] usb 9-1: device descriptor read/64, error -71 [ 692.462213][T12647] usb usb9-port1: attempt power cycle [ 692.941788][T12647] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 692.996923][T12647] usb 9-1: device descriptor read/8, error -71 [ 693.265980][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 693.279570][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'. [ 693.288877][T12647] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 693.340620][T12647] usb 9-1: device descriptor read/8, error -71 [ 693.462037][T12647] usb usb9-port1: unable to enumerate USB device [ 694.996019][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3190'. [ 695.030003][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3190'. [ 695.177315][ T28] audit: type=1326 audit(1789017270.324:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 695.530863][ T28] audit: type=1326 audit(1789017270.324:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 695.834952][ T28] audit: type=1326 audit(1789017270.324:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 695.859472][ T28] audit: type=1326 audit(1789017270.324:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 695.911428][ T28] audit: type=1326 audit(1789017270.334:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 695.981348][ T28] audit: type=1326 audit(1789017270.334:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 696.050263][ T28] audit: type=1326 audit(1789017270.334:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 696.091520][ T28] audit: type=1326 audit(1789017270.334:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 696.131358][ T28] audit: type=1326 audit(1789017270.334:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 696.179409][ T28] audit: type=1326 audit(1789017270.334:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.6.3188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152f59e159 code=0x7ffc0000 [ 696.665612][T15904] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3200'. [ 696.810214][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3201'. [ 696.835493][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3201'. [ 697.131961][T12148] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 698.223514][T12148] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 698.232193][T12148] usb 7-1: config 0 has no interface number 0 [ 698.239594][T12148] usb 7-1: config 0 interface 41 has no altsetting 0 [ 698.250045][T12148] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 698.262359][T12148] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.270501][T12148] usb 7-1: Product: syz [ 698.286484][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3211'. [ 698.295773][T12148] usb 7-1: Manufacturer: syz [ 698.301177][T12148] usb 7-1: SerialNumber: syz [ 698.307138][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'. [ 698.321230][T12148] usb 7-1: config 0 descriptor?? [ 698.337578][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3212'. [ 699.772523][T12148] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 699.795709][T12148] CoreChips: probe of 7-1:0.41 failed with error -71 [ 699.822013][T12148] usb 7-1: USB disconnect, device number 17 [ 701.433560][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3223'. [ 701.471092][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3223'. [ 701.541671][T15964] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3226'. [ 704.259793][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3236'. [ 704.295602][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3236'. [ 704.731896][T15996] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3238'. [ 704.998242][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3224'. [ 705.051471][ T27] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 705.392565][ T27] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 706.152274][ T27] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 706.163156][ T27] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 706.173449][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.187278][T15996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 706.199900][ T27] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 707.396541][ T27] usb 7-1: USB disconnect, device number 18 [ 707.666519][T15996] binder: 15995:15996 ioctl 4018620d 0 returned -22 [ 708.484124][T16035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3248'. [ 708.834286][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3253'. [ 710.738053][ T27] IPVS: starting estimator thread 0... [ 710.851457][T16053] IPVS: using max 32 ests per chain, 76800 per kthread [ 710.928952][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3256'. [ 710.961529][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3256'. [ 710.979374][T16057] bond1: (slave bond0): Releasing active interface [ 713.478291][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3268'. [ 713.487726][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3268'. [ 713.717692][T16096] wlan1 speed is unknown, defaulting to 1000 [ 715.462050][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3277'. [ 715.471155][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3277'. [ 715.499870][T16113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.513156][T16113] bond1: (slave bond0): making interface the new active one [ 715.523515][T16113] bond1: (slave bond0): Enslaving as an active interface with an up link [ 717.320984][T16130] netlink: 'syz.2.3284': attribute type 15 has an invalid length. [ 717.442025][T16134] fuse: Bad value for 'fd' [ 717.589644][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3287'. [ 717.617613][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3287'. [ 719.521549][ T28] kauditd_printk_skb: 246 callbacks suppressed [ 719.521592][ T28] audit: type=1326 audit(1789017294.654:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.574430][ T28] audit: type=1326 audit(1789017294.654:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.619675][ T28] audit: type=1326 audit(1789017294.664:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.654340][ T28] audit: type=1326 audit(1789017294.664:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5b595e98e code=0x7ffc0000 [ 719.704513][ T28] audit: type=1326 audit(1789017294.664:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.750270][ T28] audit: type=1326 audit(1789017294.674:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.788570][ T28] audit: type=1326 audit(1789017294.674:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.820765][ T28] audit: type=1326 audit(1789017294.674:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.861466][ T28] audit: type=1326 audit(1789017294.664:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b599e159 code=0x7ffc0000 [ 719.893128][ T28] audit: type=1326 audit(1789017294.674:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.5.3292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5b595e98e code=0x7ffc0000 [ 722.105964][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3296'. [ 722.141500][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3296'. [ 722.208115][ T3518] bond1: (slave bond0): link status definitely down, disabling slave [ 722.247752][ T3518] bond1: now running without any active interface! [ 722.259458][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3298'. [ 724.824709][ T28] kauditd_printk_skb: 215 callbacks suppressed [ 724.824726][ T28] audit: type=1800 audit(1789017300.024:791): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3293" name="file0" dev="overlay" ino=1731 res=0 errno=0 [ 725.192808][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3308'. [ 725.202251][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3308'. [ 727.554597][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 727.585596][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 727.634733][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x42b4 instead [ 727.670198][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xcdff instead [ 727.719332][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 727.771376][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 727.821650][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 727.871414][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 727.907464][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 727.938346][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 727.999012][T16237] jffs2: Further such events for this erase block will not be printed [ 728.043677][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 728.127150][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 728.215079][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x42b4 instead [ 728.251654][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xcdff instead [ 728.273939][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 728.300249][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 728.349932][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 728.401121][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 728.451378][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 728.503088][T16237] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 728.539713][T16237] jffs2: Further such events for this erase block will not be printed [ 728.562189][T16237] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 728.601328][T16237] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 728.628746][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3318'. [ 732.923037][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3336'. [ 734.600386][ T28] audit: type=1326 audit(1789017309.794:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 734.651524][ T28] audit: type=1326 audit(1789017309.794:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 734.712679][ T28] audit: type=1326 audit(1789017309.804:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 734.767867][ T28] audit: type=1326 audit(1789017309.804:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 734.823217][ T28] audit: type=1326 audit(1789017309.804:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d3cb5e98e code=0x7ffc0000 [ 734.878636][ T28] audit: type=1326 audit(1789017309.804:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 734.934330][ T28] audit: type=1326 audit(1789017309.804:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 734.959510][ T28] audit: type=1326 audit(1789017309.804:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 735.011319][ T28] audit: type=1326 audit(1789017309.804:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 735.057178][ T28] audit: type=1326 audit(1789017309.804:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.8.3344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3cb9e159 code=0x7ffc0000 [ 737.001500][ T5785] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 737.371457][ T5785] usb 7-1: Using ep0 maxpacket: 8 [ 737.379299][ T5785] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 737.393559][ T5785] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 737.402962][ T5785] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 737.412668][ T5785] usb 7-1: Product: syz [ 737.416989][ T5785] usb 7-1: Manufacturer: syz [ 737.422571][ T5785] usb 7-1: SerialNumber: syz [ 737.527667][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 737.538225][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 737.548944][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x42b4 instead [ 737.559375][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xcdff instead [ 737.570980][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 737.581479][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 737.591885][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 737.602782][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 737.613496][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 737.626898][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 737.637589][T16340] jffs2: Further such events for this erase block will not be printed [ 737.646254][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 737.656663][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 737.667866][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x42b4 instead [ 737.678300][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xcdff instead [ 737.688716][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 737.699102][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 737.709627][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 737.720111][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 737.730654][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 737.741201][T16340] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 737.751764][T16340] jffs2: Further such events for this erase block will not be printed [ 737.760348][T16340] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 737.770520][T16340] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 738.565251][ T5785] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 738.599298][ T5785] usb 7-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 738.622192][ T5785] usb 7-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 738.641040][ T5785] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 738.682780][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 738.700053][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3355'. [ 738.702597][T16344] netlink: 'syz.8.3352': attribute type 32 has an invalid length. [ 738.719577][T16342] bond1: (slave bond0): Releasing active interface [ 738.768441][ T5785] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 738.806622][ T5785] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 738.837068][ T5785] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 739.044599][T12647] usb 7-1: USB disconnect, device number 19 [ 739.070150][T12647] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 739.111041][T12647] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 739.142480][T12647] visor 7-1:1.0: device disconnected [ 740.863191][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3365'. [ 740.887615][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3365'. [ 740.912264][T16371] bond1: (slave bond0): Releasing active interface [ 741.033745][T16376] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3368'. [ 744.004549][T16398] wlan1 speed is unknown, defaulting to 1000 [ 745.818902][T16410] misc userio: Invalid payload size [ 747.869584][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.876222][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.653086][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3401'. [ 750.821466][T16479] netlink: 'syz.8.3403': attribute type 1 has an invalid length. [ 751.079884][T16486] nvmet: adding nsid 1 to subsystem testsubsys [ 751.108386][T16486] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 751.120806][T16486] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 751.129356][T16486] CPU: 0 PID: 16486 Comm: syz.6.3404 Not tainted syzkaller #0 [ 751.136944][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.147386][T16486] RIP: 0010:strlen+0x29/0x70 [ 751.152132][T16486] Code: da f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 751.172414][T16486] RSP: 0018:ffffc900042879c0 EFLAGS: 00010246 [ 751.178607][T16486] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 751.186640][T16486] RDX: ffffc9000d9ec000 RSI: 0000000000000ca6 RDI: 0000000000000000 [ 751.195083][T16486] RBP: ffffc90004287af8 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 751.203068][T16486] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 1ffff92000850f48 [ 751.211288][T16486] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 751.219362][T16486] FS: 00007f15304006c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 751.228390][T16486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.234999][T16486] CR2: 000000110c4171c1 CR3: 000000006167e000 CR4: 00000000003506f0 [ 751.243072][T16486] Call Trace: [ 751.246359][T16486] [ 751.249326][T16486] getname_kernel+0x28/0x2f0 [ 751.253944][T16486] filp_open+0x88/0x1e0 [ 751.258381][T16486] ? file_open_name+0x1c0/0x1c0 [ 751.263364][T16486] ? nvmet_ns_enable+0x4d/0x8c0 [ 751.268287][T16486] ? __might_sleep+0xe0/0xe0 [ 751.272897][T16486] ? mutex_lock_nested+0x20/0x20 [ 751.277851][T16486] ? __lock_acquire+0x7d80/0x7d80 [ 751.282898][T16486] nvmet_file_ns_enable+0x74/0x330 [ 751.288230][T16486] nvmet_ns_enable+0xf4/0x8c0 [ 751.293241][T16486] nvmet_ns_enable_store+0xd8/0x170 [ 751.298469][T16486] ? nvmet_ns_enable_show+0x60/0x60 [ 751.303702][T16486] ? down_read+0x1ac/0x2e0 [ 751.308252][T16486] configfs_write_iter+0x312/0x400 [ 751.313417][T16486] ? nvmet_ns_enable_show+0x60/0x60 [ 751.318747][T16486] vfs_write+0x474/0x9a0 [ 751.323045][T16486] ? file_end_write+0x250/0x250 [ 751.327942][T16486] ? __fget_files+0x3fc/0x460 [ 751.332666][T16486] ? __fdget_pos+0x2a3/0x330 [ 751.337276][T16486] ? ksys_write+0x74/0x260 [ 751.341715][T16486] ksys_write+0x151/0x260 [ 751.346059][T16486] ? __ia32_sys_read+0x90/0x90 [ 751.351513][T16486] ? lockdep_hardirqs_on+0x98/0x150 [ 751.356761][T16486] do_syscall_64+0x55/0xb0 [ 751.361203][T16486] ? clear_bhb_loop+0x40/0x90 [ 751.365924][T16486] ? clear_bhb_loop+0x40/0x90 [ 751.370633][T16486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.376562][T16486] RIP: 0033:0x7f152f59e159 [ 751.380991][T16486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.400620][T16486] RSP: 002b:00007f1530400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 751.409139][T16486] RAX: ffffffffffffffda RBX: 00007f152f825fa0 RCX: 00007f152f59e159 [ 751.417123][T16486] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000005 [ 751.425238][T16486] RBP: 00007f152f63503b R08: 0000000000000000 R09: 0000000000000000 [ 751.433239][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.441223][T16486] R13: 00007f152f826038 R14: 00007f152f825fa0 R15: 00007ffd99434718 [ 751.449257][T16486] [ 751.452342][T16486] Modules linked in: [ 751.465740][T16486] ---[ end trace 0000000000000000 ]--- [ 751.476352][T16486] RIP: 0010:strlen+0x29/0x70 [ 751.547154][T16486] Code: da f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 751.607641][T16486] RSP: 0018:ffffc900042879c0 EFLAGS: 00010246 [ 751.626261][T16486] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 751.634818][T16486] RDX: ffffc9000d9ec000 RSI: 0000000000000ca6 RDI: 0000000000000000 [ 751.645258][T16486] RBP: ffffc90004287af8 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 751.654411][T16486] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 1ffff92000850f48 [ 751.665571][T16486] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 751.674048][T16486] FS: 00007f15304006c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 751.709066][T16486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.716309][T16486] CR2: 00007f15303bed58 CR3: 000000006167e000 CR4: 00000000003506f0 [ 751.724850][T16486] Kernel panic - not syncing: Fatal exception [ 751.731220][T16486] Kernel Offset: disabled [ 751.735838][T16486] Rebooting in 86400 seconds..