last executing test programs: 12m37.655215985s ago: executing program 1 (id=48): r0 = fsopen(&(0x7f0000000540)='tracefs\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m37.573307997s ago: executing program 1 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 12m34.038047475s ago: executing program 1 (id=56): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) unlinkat(r4, &(0x7f00000000c0)='./file0\x00', 0x200) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r6, 0x7, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 12m25.607711384s ago: executing program 1 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 12m23.76207706s ago: executing program 1 (id=71): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) read$FUSE(r7, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x29bb9) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, r8, 0x3001, 0x2}}}, 0xffffff03) r9 = socket(0x28, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, 0x0, 0x0) read$FUSE(r7, &(0x7f0000006100)={0x2020}, 0x2020) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 12m20.581372429s ago: executing program 1 (id=73): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sendmsg$nl_route(r2, 0x0, 0x4054) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r4) close_range(r0, 0xffffffffffffffff, 0x0) 12m5.492967144s ago: executing program 32 (id=73): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sendmsg$nl_route(r2, 0x0, 0x4054) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r4) close_range(r0, 0xffffffffffffffff, 0x0) 36.682787738s ago: executing program 4 (id=1445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"aa67d023fef64ec300a20f6f4fd2167e83da151d88dc10393612042db6d0288b632607b09de5abf2328c87a3b7772dbef8a36556c3ac45f4f8c3851d15afab519783959c75921b3a71169830c47fba28188ef25157ee028fca6551d8f63f98bffd05e0ede274245c040937de707edc9db987e9aee3e4a90a7a8580124184e7b735c2f5a6131bd0ee12bc510d14c8ba43d046c1c194d43cf37e6a972201d192820b8819c09f54825eabc351d5b09cecbd4dbd65e6c2726639de24ed12959d2fab8a2b37e1b3ddfb276bdbde942270e5a1f618f758ab1af01cc9eebdeb547fc4f22488e6726b85be691d7ecdb08c465654e8bf4ba2a59845365a2df07caed2a4f8d52d00c510a6a51328f9830c6232fee2df6ef6b1b3b9aaff92d8564c34a33457a22352b3e91e18b958c580e8b36bb6f7cb74b6c5ac055bee5600b563658f3aa5a3bd82225554a0350cfc93863192484b5313291714ce40183682469b17e5a3fee3d8cffaf3741e03bb38879aad8e85c097d6a7e24a16c023846918995254f2e0885b9dfdca2f84d1d75a5ed48c6e8bc907e5143389b123575bbc9cd8d437ee9a8f17c8345d774e494accc3e0c3568de4bf306ec70e7ba9e35167408ed4df0f13bc3f56db0cba506eea65b9f77c92c0a8d3e4eff8711b24e4743879821e4c841537236d30e83fa91073ea4b02a58922fe46a29fb4cb6c2f41d3bfcdf436ca23b147898971bf230ba8e27b6410a3020e773f26631482920041afae824c3285bc9f2d973ceb5c5838fd179c3f8cde6cd91891936d6dfd508c66bedc918d236696582ac33d1b6702bf5f94630a23d814ca01df18a9227aa9e440a0bf8f15763e77f3b32437280e639241ba46f1966d2d6426d9f8f658d603ae5416c0663d6bd61ae8e69e8744c7f609f3b00b0dcf107f12ea83edb260aa10237d955c78738438bf224d9c8289c6a5ec956ef4ec60578e60072882682023600718af9ba4ba1f5c158bea9f1e503b32d7adec8845b00cb07cc99aa5ee39bfb6c5cbf46a78fb7c6349f56ac98a0314410936a1c5468e4ad98f555bf8e501052432277a0b0c4cd4380c2d8660633f084ecbdb0525957e902287706eac6f4be4265ceacccf8df9aed3ae99a2760816f17db96b1c8d43a4bd1727b2b825efe7054c7402ebd487930ca25ffea17806d9f2bcbaaae48b8c1dd37abb7e177565e2b4ad391a8d85e0b9f57c0ca02fe0ddb9c81fbc0c3924ccf14775215761a9d5eae1b86324191093253aa184074a2bacdf76efbd061a97a81aa921cde65c9d63334a23e560f3656e725f4a24b6a7060f07b54a45307a28e2a906cc83133676b4975807bd2318b58f0346fa8d43e0f87c5b954164c25136365248a41cad6292816967fc565c1705219704ff91042538a2b96844879c25523f056a072d51db7ffd14b5389965f23d9e1ac539731f6c242d4379536e7cf43eebcfa3611ccb5ef42771bab1311c4345b4695da03543b0c4877c063494475086c70a8c6e7b817e926f793115622ea4961062f0412d5ed62556d727af5ce8ec36d72d1d2ea0a5a1412cd24622fd8e69b280c3e7f72b0208a1e72505bf551c95f19583bb04f34bc792f4604cc8606bbbbb70fe7604154eee9e9532431ab67ac1589d719214ba169bb799a93003557ce2ab24cb81407af8a99ab9cb3609837ac4fe8846862a4c04ce50298ab09a8be6f00a3e59e87ec037376d9fc2fbea48786a0a4bfc31ab21663bd650535f43967a82b874a129628d034ce9d7495f71f0066824d4321717e915f2d7994cc98cc11df99ec6c33d2a2a7aee5e09c3b9a1cd0859df9ef5a925409ca1d44550a3806c1d1898f80b2cb8ec076a7c4563a4925f1da588f5c11ad96ad0e99ffe4732cbff89b2c882436dd664e64b099683bb3b4c03f4ea245b3c80968956bc275bfc59d6d7f3f982ab65295c27050480352011fe03b3fe3011e56f6899af77eccb4b62aa22eb23eb43566a9e96c2cfa9e6dd05347df9ff602e169eb7cd74de859b7eb71da14f48ecaa14f1125c8ea1918c66ebad3a086fc9f8463cbf926d0f7c6d796f2311ffa4b77ec393ca7ce4ac0af1a96da6c50abcfb86cf09d521e10d58817b5e0e6189fe30869eb6b26b92e7b6c7431c4ab0112bd21ec3f749eaa0b01c216d44d2e36bd697347c3bcd901c02de4f970fbd3b46dc48cc90c13d60f1a2f561ca77c5e6bde9e3e5f0376820951e2fda920743be534eeb41b048664e99ebe5ad60faef7723c620fac0abde8f088b58678bba6825dbf2ceec4b9b274065481d4bbb55a03f419205e994b09f02ad83ffa0ae6ad5cb16dec9250d82f4ba1c2d763be7522e414867678db21bb3195e37f3f200e0a9faa8b32d78b2d1eb1c293148dafc4034d8130961506f43fc8df3cab6ac4adb9f0ad7277509d8b597b49ebb74d7ae647916ed8933b1ef713fc7335535822dce8bb90394287383b7df910fd90c57ba0ad962817bbb728ae458c3bf763f9b9b31d9d0ba276fc29a59cc4d232c91e7ca99992d5c36f7545e3eeff2845a7b532bf0be96e2f41d1d5ec9409be1458c8fe922f5ad458435304a50f875ce9064f14b12ef2ff009e51590119da4f7e6728e1e2882c676c8f014a33d4bb2377035451e5000579bf7f93711a9c0d067a2d721f34dd761c3a2b50b167515169e6e0bd7ed895dfa1ee087af0ed54c41d6f3d4a2201b87ee630eeaf5def9895f3762901ace4770d4ca3e2882671cec9cb85c7f25beff695cc32bf69b4e17b73626c0b50415484328c337659ed105cc534a1a25b20621b393035ad3da3335dd9cb81ef194e9ad672d151e9a1920570bef3e202081e4d7f177dceed87edd214da160b8c0ea5dee88d261e1a9d11041b1cca14512be53b9d22918a6d184b4adb65befb4b8f8d277d3a19c252e3d911dd05d0100c7f5c34f01bd3a9973e1b129452548ec3736fc8fe8ff69410a053a1f72d9832711df4f5a74782d208f84cb427d308badadb5ab68d994f149e6b30cec27ec625492a289f1346c2e322c7673de39dcd245f16f31b1891e3e0b6e46cc54d606b894cfd64eb26f1be302c578e677f5e26006ce66aa64d9db3c4f4f9a3d4448224b1d0ff115bdbe939beb38e82d46acf52710c40be02625454e9117423676571d7f430b7059b68885bac821f94e71087ad749bad41ddcecc971cc80e05c27f0f9c92f59d8e618efaf947dac4d34d3706a27321321618ed19a2a09678a50c93e77d3a993bc2a91c79bdcc33218150dcfa59757f25c9af3c3aa508eb0aa394b615416638c675c4c8ec12ad0d61daed0e404b23682f4c44e080452630df69890ba55ff5543f140d5f16a7b25b495e992e33250c3c2ad11292a2e9f9de32ade9890a05c1d95784e459535cae99d44f1fbdfab46dea8bd92488716614b508a3fb47a1b225fd5da92265ecfa3743cb997c4caa5961d851ae93ee25f24c9175589841bedc8d295ec8f2c2a4fa42d64f3d788f7809380622e4116145a8a94224a92ee161397ff32b858b888e8e8049c2eb74b8cf68b8b1bf9fab7b0a76542772fce9bb2df6dabecdbefa4ca50d75cc25fdae687285c5a4a272057edb9edbdff136a216f28c6a658d120cbea95c521a4b6a20800643788aea9056eb98ad34161031ee26019bfbc0af87e4e86c7052369e3df16e71a7207f77614c379a3dfc5e9f775bac02325d3b867ccb5c6e4f32ae1ea18e6311b0dbf40a0e0c8a8534b24f6c5d79b5f857762821666e35243d5702197d794f37f55151567f022e6325bf8262e62c258e1ac0ed36b0c9406c2b0d42c01b385dac2075995d26a7a26c810ae7976d9099e4ecca8fdd5745db61080b44ee39807b4a79b7588415468c01c988ae070e0ff755ad42522eb1f7582428cb70a9629cccbe959886e6469e2d6c6f4574a68838e51458a5a616aac69d294a92bba5da7c47d12e63c12963fc880069f27f6ffa42209d2456c4b5fe5deea88a526a62c59161697398bb138f845113926dc64da2cfa257fa843f9085f8df47453f43baf75265c37637a9027d46a17f8948503c60bd010b149cce0de8f03720e218b121ecae524e75638f419f59e4ff1ee5ab531b4575d05c5a07c6b31a76485167e3d0bd2a640f6dc6abf1c092a8ea3d1851a5ae339e80ae2e27c71b47ee310023216d5ff47c70b182f0297b914995825bdcbc5916edad9184a4ad6a75ce4a1edc5436309bc3bee118f550eff9e8c56ad63de2c7c28a711c530eed686ea9e8a0536cfd26cbfaabb387ce3b534a78ce38edd41494ba3e7ed482e63008ac7b17a3a3010e12d4d33e86310754aa88fc9f75dc18044e1c2b145e57b28a1c269182434041acd889ba29c52a79b8d75f938751cc871381b702aad966c430af0802ef93dc30b1c26b9f0b00ac33df3bf103559b6ca24094b2706cae24f557fcc9ebaef5456e4deac92f86c0c93f400357cbd60cc209f7d3f3a0eeb8eae0915e5df3314129311583ab4bc958d734981d9eb3237c777825bee33c000b3e6623d6a90f193c63b69fa70cb535b11da5890352e22c2d6ec2a8b8fbf6aecded096cf4d80f98d8307a8e4abc38ae89858eb2b9e50af30c5e38b1bfe6841b35094a5bcf251e261c7cffbb6c06fa7fd26db98def86d1cfa832b643195c5a057c90ce8ef493a6a3cb8bbdff5cf2566ef46dd00cd7bb08fc228b3a6eaebcb9c009060e5e9a85f9f49ababa5194b966a4cbb6dbd7d0a8285b1af1474faccfdf577c27592bb02f83cc52c265e9a04e659833605d0acecc7462350882b8eaa78ff7b0b6c2ee95d92a4de857128cbcdc83aec06f5e695484da55a164a558800b5643dd957f3dade1f046287724df89355d1477640e7015bf6195af1776e3d525f3365d8877ca90fce5f852b0227f7824a6a247a430e37a782888518ca0174ca817c9d28f2b9e894a73d444ee80af470b4a7c024d2e98b6d9c71e8e838395d3c08c84f8815c31cd303d5c5ae02ef5dc23f5f1e1d0fb1afe680f4b3e7e229deefa9798adfa24d4c5ddc7e1f2c990163795cd0b886cca4a204e3928ffa84807164aafe7e3a91b3a8295f517d876c16b0a626baad8fe56fe48834b54cad8ad82141f3a82f7caa434467a80d8be77fe7e0ba77b92ef4a62ac6628fdccaa36e70aa3decd4a2b299065b739e418153616a59dcde60628b80b6d679278902a005b50a8e7f0e20682f97a8fe6071d95e3118de24a352b7e474e469d31795202af8ab6869be0267b4b94bd78289f0561dfc9394f742103e29167b3bb944281650500b721f89154d73cfc3dad66271dddbfda8ad07c3ed88311df2ee6452080964ed65492e7e9f366f2ee7cf6ba0b1847bf9907311f89d56c3d2969d08053b9d3d315edd90833f1205804d1b3fd713bbee50dc9aa942058b643833827b809f540b57259123e348ae881d9bf122fe701596a3682b34ee9297d725bd52f9d88f176112871519e8da0a4135a161366a967d1ba8409990e9f0cf0a14883cb184a391b64bb17ca55bcf833bdc967401cccb948582633fcfa4db1a80b366810b03606a35fa4b552578def1c3716a5e35187035ae451f01a1f8cbca8d25aca12b841121eed32ce4dc1a1b152c772fe7610fddc1478992b04ec241386d8566389fc9ac40df498b3d0cf6bd1caa5700d9cd5e23ad87781bd93b5a751c425a640b277cbc88273186a9636c00c6e024f7d10e69b58f7cb1e6f99e00c61576562f42c684faa3fbea37e2d3455e76de3f7ba56b688b669f6429e128fba7b95613b7f49ec85d2c86f0c5a71b26e02e7e1d20c82ab8c4ed3c154b9645cba46d", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1520, 0x1298, 0x1298, 0xffffffff, 0x0, 0x1180, 0x1488, 0x1488, 0xffffffff, 0x1488, 0x1488, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10d8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1580) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000008030000000000000000000a00000604000480050003008800000006000240890600"], 0x88}, 0x1, 0x0, 0x0, 0x48090}, 0x200080d0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@errors_remount}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") 34.291575276s ago: executing program 4 (id=1451): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0xffffffffffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000001c0)='/dev/sequencer\x00', 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYRES64=r2], 0x30}, 0x4040810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000003780), 0x0, &(0x7f00000047c0)=[{&(0x7f00000037c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 31.923146174s ago: executing program 4 (id=1452): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r3 = syz_open_pts(r2, 0x20800) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44) r4 = dup(r1) read$alg(r4, &(0x7f0000000740)=""/4096, 0x1000) socket$inet6(0xa, 0x4, 0x3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) 25.968410951s ago: executing program 4 (id=1460): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) sendmsg$unix(r2, 0x0, 0x400a004) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0x5678\n\x00', 0x7) 24.663168323s ago: executing program 4 (id=1465): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x3742, 0xffffff86, 0x401, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x6}, 0x50) iopl(0x3) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x2, 0x2, 0x10, 0x9, 0x5, 0x0, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0x1, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) 22.844451098s ago: executing program 4 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000003280)={0x10, 0x0, r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r7, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x2c}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x50}}, 0x0) 17.618001137s ago: executing program 3 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 13.693274089s ago: executing program 5 (id=1481): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}}, 0x4000080) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmsg$netlink(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'pim6reg0\x00', 'veth0\x00', {0xff}, {}, 0x8, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x1, 0x4, 0x1, 0x1], 0x2, 0x7}, {0xffffffffffffffff, [0x0, 0x1, 0x3, 0x0, 0x3], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x2}, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x5, 0x8000}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x254) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e1d, 0x100a86c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xa0000}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 12.878555155s ago: executing program 0 (id=1482): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x1234', 0x6) 12.835227116s ago: executing program 2 (id=1483): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 11.683236203s ago: executing program 0 (id=1484): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300), 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 10.54178249s ago: executing program 5 (id=1485): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0xffffffffffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000001c0)='/dev/sequencer\x00', 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYRES64=r2], 0x30}, 0x4040810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000003780), 0x0, &(0x7f00000047c0)=[{&(0x7f00000037c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 10.52915046s ago: executing program 0 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000003280)={0x10, 0x0, r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r7, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x2c}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x50}}, 0x0) 10.408453463s ago: executing program 2 (id=1487): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0x5678\n\x00', 0x7) 9.290219981s ago: executing program 3 (id=1488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4c880) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.222611172s ago: executing program 5 (id=1489): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0xffffffffffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000001c0)='/dev/sequencer\x00', 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYRES64=r2], 0x30}, 0x4040810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000003780), 0x0, &(0x7f00000047c0)=[{&(0x7f00000037c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 8.419253912s ago: executing program 2 (id=1490): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0xffffffffffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000001c0)='/dev/sequencer\x00', 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYRES64=r2], 0x30}, 0x4040810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000003780), 0x0, &(0x7f00000047c0)=[{&(0x7f00000037c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 8.417407743s ago: executing program 3 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 7.839978277s ago: executing program 5 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071103100000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01042cbd701004000000050000000600010005e1000008000900060000000800050014000800"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='dctcp', 0x5) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500400002900090027bd700000000000040000003c0411801b0b6aa62fd0d528e13d7ce86c27728cfd", @ANYRESDEC=r0], 0x450}, 0x1, 0x0, 0x0, 0x24002817}, 0x24000094) 7.486086135s ago: executing program 33 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000003280)={0x10, 0x0, r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r7, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x2c}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x50}}, 0x0) 6.729690604s ago: executing program 2 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) sched_setparam(r0, &(0x7f0000000000)=0x401) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a80)=@newae={0x15c, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in6=@loopback, 0x4d2, 0xa, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-384-generic\x00'}, 0x0, 0x180}}, @policy={0xac, 0x7, {{@in=@broadcast, @in=@empty, 0x4e24, 0x6, 0x4e22, 0x7, 0x2, 0x80, 0x80, 0x32}, {0x9, 0x9, 0x8, 0x3, 0x3c, 0x6, 0x8e, 0x2}, {0x1, 0xe3d2, 0x8, 0xfff}, 0x961, 0x0, 0x1, 0x0, 0x2, 0x2}}, @lifetime_val={0x24, 0x9, {0x1, 0x9, 0x9, 0x5a2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_clone(0x91902000, &(0x7f0000000300)="2a3ea9481b6c115f4a66e5969cd1cf956faf99ab7f966e079c83b28c2f08925572172bdac88510de2b4ad2db5fced5408af82269045d43e43ef3e51f100b797ed7f96e69ffc9e994586f1797b751443af718a6fcf7dc0965967650286a33ddcd42390405", 0x64, 0x0, &(0x7f00000003c0), 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r5, 0x0) 6.043780261s ago: executing program 5 (id=1495): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = io_uring_setup(0x4803, &(0x7f0000001240)={0x0, 0x8efc, 0x800, 0x4, 0x1d1}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001500)=""/223, 0xdf}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x104204000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x400000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) 5.183104362s ago: executing program 0 (id=1496): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300), 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 3.827711236s ago: executing program 5 (id=1497): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r7, &(0x7f0000002dc0)={0x2020}, 0x2020) 3.827444785s ago: executing program 2 (id=1498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.636929351s ago: executing program 0 (id=1499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.068004395s ago: executing program 3 (id=1500): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002500)='file0\x00', &(0x7f0000002540)={0x200000, 0x68}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./config/usb_gadget/g1\x00', 0x2, 0x2) statx(r2, &(0x7f0000002600)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x4000, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', r4, r5) write(r3, &(0x7f0000000380)='file0', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002640)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x86) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x18) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x1, 0x1000, 0xc, 0x0, 0x58, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000206d0427c200000000000109022d00010000300909040000020300020009214005fc01221500090581031000068102090502"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r6) r7 = openat(r2, &(0x7f00000025c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x400200, 0xa1) write(r7, 0x0, 0x0) 2.650680565s ago: executing program 0 (id=1501): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e30600"/16], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000003100)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000003140)=@delchain={0x24, 0x65, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xffff, 0xd}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x40008c5) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r5, r4, 0x0, 0x20000) 2.553795917s ago: executing program 2 (id=1502): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r3 = syz_open_pts(r2, 0x20800) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44) r4 = dup(r1) read$alg(r4, &(0x7f0000000740)=""/4096, 0x1000) socket$inet6(0xa, 0x4, 0x3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.202922856s ago: executing program 3 (id=1503): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0xffffffffffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000001c0)='/dev/sequencer\x00', 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYRES64=r2], 0x30}, 0x4040810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000003780), 0x0, &(0x7f00000047c0)=[{&(0x7f00000037c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 0s ago: executing program 3 (id=1504): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000002240)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x40, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, 0x1, {0x0, 0x0, 0x7}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x1, 0x405}}}, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100), 0x0) personality(0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r5, r5, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000000000000105000000080000000000000001000005000000000000000001000000000000000000a122d481344281c0bb15a77142f5c1de50b2f0400350b2d8548651b10d6af451b983e9cc134849cab4c6f15d498ee0804617d6d5975d6e49fedca8af49f989048cfc5304b1bba50752a9811f359c8e"], 0x0, 0x5a}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): p2): Directory bread(block 199920) failed [ 80.791250][ T4415] FAT-fs (loop2): Directory bread(block 199921) failed [ 80.798159][ T4415] FAT-fs (loop2): Directory bread(block 199922) failed [ 80.805031][ T4415] FAT-fs (loop2): Directory bread(block 199923) failed [ 81.083528][ T4415] FAT-fs (loop2): FAT read failed (blocknr 128) [ 81.107116][ T4414] syz.0.13 (4414) used greatest stack depth: 20688 bytes left [ 82.101933][ T4444] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 82.231926][ T4358] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.431793][ T4358] usb 3-1: Using ep0 maxpacket: 8 [ 82.439222][ T4358] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 82.465828][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.495366][ T4358] usb 3-1: config 0 descriptor?? [ 83.612931][ T4453] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 83.885230][ T4460] zram0: detected capacity change from 0 to 8 [ 84.545556][ T4453] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 84.571932][ T4358] usb 3-1: string descriptor 0 read error: -71 [ 84.578408][ T4358] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 84.652654][ T4358] usb 3-1: Found UVC 0.00 device (2833:0201) [ 84.659654][ T4358] usb 3-1: No valid video chain found. [ 84.819441][ T4358] usb 3-1: USB disconnect, device number 3 [ 85.016007][ T4474] loop2: detected capacity change from 0 to 64 [ 85.018713][ T4474] hfs: unable to parse mount options [ 87.195534][ T14] cfg80211: failed to load regulatory.db [ 87.711863][ T4265] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.728321][ T4475] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 91.163809][ T4517] file system registered [ 91.287544][ T4522] loop3: detected capacity change from 0 to 256 [ 91.342215][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.350953][ T4524] netlink: 'syz.2.33': attribute type 5 has an invalid length. [ 91.386148][ T4522] exfat: Deprecated parameter 'utf8' [ 91.424111][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.436809][ T4524] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 91.445524][ T4524] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 91.475226][ T4517] read descriptors [ 91.487632][ T4524] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 91.490107][ T4522] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 91.499299][ T4524] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 91.692586][ T4528] loop0: detected capacity change from 0 to 8192 [ 92.040933][ T4524] device geneve2 entered promiscuous mode [ 92.745807][ T4281] ffs_data_put(): freeing [ 94.528119][ T4540] syz.0.36 (4540) used greatest stack depth: 20064 bytes left [ 94.792448][ T4537] loop3: detected capacity change from 0 to 2048 [ 94.884744][ T4537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.201872][ T4547] loop4: detected capacity change from 0 to 128 [ 95.453276][ T4547] FAT-fs (loop4): Directory bread(block 414) failed [ 95.460103][ T4547] FAT-fs (loop4): Directory bread(block 415) failed [ 95.467238][ T4547] FAT-fs (loop4): Directory bread(block 416) failed [ 95.474214][ T4547] FAT-fs (loop4): Directory bread(block 417) failed [ 95.480990][ T4547] FAT-fs (loop4): Directory bread(block 418) failed [ 95.487804][ T4547] FAT-fs (loop4): Directory bread(block 419) failed [ 95.494604][ T4547] FAT-fs (loop4): Directory bread(block 420) failed [ 95.501356][ T4547] FAT-fs (loop4): Directory bread(block 421) failed [ 95.932033][ T4386] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 96.281409][ T4386] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.851348][ T4386] usb 3-1: not running at top speed; connect to a high speed hub [ 96.935544][ T4386] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 96.968388][ T4386] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 96.996601][ T4386] usb 3-1: config 5 has no interface number 0 [ 97.020239][ T4386] usb 3-1: config 5 interface 246 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 97.040164][ T4386] usb 3-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.058611][ T4386] usb 3-1: config 5 interface 246 has no altsetting 0 [ 97.068473][ T4386] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 97.099460][ T4386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.146768][ T4386] usb 3-1: Product: syz [ 97.150962][ T4386] usb 3-1: Manufacturer: syz [ 97.209034][ T4386] usb 3-1: SerialNumber: syz [ 98.422920][ T4545] block device autoloading is deprecated and will be removed. [ 98.734634][ T4582] loop1: detected capacity change from 0 to 32768 [ 100.181561][ T4589] sched: RT throttling activated [ 100.257538][ T4386] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 100.275648][ T4419] usb 3-1: Failed to submit usb control message: -71 [ 100.287790][ T4419] usb 3-1: unable to send the bmi data to the device: -71 [ 100.327685][ T4582] XFS (loop1): Mounting V5 Filesystem [ 100.438930][ T4419] usb 3-1: unable to get target info from device [ 101.214816][ T4386] usb 3-1: USB disconnect, device number 4 [ 101.351835][ T4419] usb 3-1: could not get target info (-71) [ 101.378819][ T4419] usb 3-1: could not probe fw (-71) [ 101.452506][ T4582] XFS (loop1): Ending clean mount [ 101.754668][ T4619] 9pnet_fd: p9_fd_create_tcp (4619): problem connecting socket to 127.0.0.1 [ 102.603682][ T4626] gfs2: not a GFS2 filesystem [ 102.624364][ T4626] hpfs: Bad magic ... probably not HPFS [ 103.072805][ T4274] XFS (loop1): Unmounting Filesystem [ 103.303001][ T4627] netlink: 'syz.3.54': attribute type 2 has an invalid length. [ 103.317789][ T4627] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.54'. [ 103.545418][ T4634] gadgetfs: bound to dummy_udc driver [ 103.842005][ T22] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.295047][ T4628] gadgetfs: suspended from state 2 [ 106.691150][ T4653] netlink: 'syz.3.60': attribute type 12 has an invalid length. [ 109.611180][ T4277] Bluetooth: hci3: link tx timeout [ 109.651320][ T4277] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.941335][ T26] audit: type=1800 audit(1786766234.438:2): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="zoned" dev="configfs" ino=34630 res=0 errno=0 [ 110.102322][ T26] audit: type=1800 audit(1786766234.568:3): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="size" dev="configfs" ino=35094 res=0 errno=0 [ 110.183085][ T26] audit: type=1800 audit(1786766234.568:4): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="power" dev="configfs" ino=35095 res=0 errno=0 [ 110.653571][ T4682] tmpfs: Unknown parameter 'usrquota' [ 111.615873][ T4675] loop2: detected capacity change from 0 to 32768 [ 111.994582][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 112.242748][ T4675] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.66 (4675) [ 112.664013][ T4675] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.860029][ T4675] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 113.044643][ T4675] BTRFS info (device loop2): using free space tree [ 113.428778][ T4709] ======================================================= [ 113.428778][ T4709] WARNING: The mand mount option has been deprecated and [ 113.428778][ T4709] and is ignored by this kernel. Remove the mand [ 113.428778][ T4709] option from the mount to silence this warning. [ 113.428778][ T4709] ======================================================= [ 113.467644][ T4709] 9pnet_fd: Insufficient options for proto=fd [ 115.556793][ T4675] BTRFS error (device loop2): open_ctree failed: -12 [ 115.753790][ T4445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4445) [ 115.894683][ T4731] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.093811][ T4683] block nbd4: Attempted send on invalid socket [ 116.100461][ T4683] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.112317][ T4683] block nbd4: Attempted send on invalid socket [ 116.118999][ T4683] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.129168][ T4728] Mount JFS Failure: -5 [ 126.993133][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.322499][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 129.041068][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.092695][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.112302][ T27] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 129.221796][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.433754][ T27] usb 2-1: config 0 descriptor?? [ 130.515828][ T4811] usb 2-1: USB disconnect, device number 2 [ 130.710534][ T26] audit: type=1800 audit(1786766255.208:5): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.98" name="zoned" dev="configfs" ino=35931 res=0 errno=0 [ 130.767422][ T26] audit: type=1800 audit(1786766255.238:6): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.98" name="size" dev="configfs" ino=35932 res=0 errno=0 [ 130.878603][ T26] audit: type=1800 audit(1786766255.238:7): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.98" name="power" dev="configfs" ino=35933 res=0 errno=0 [ 131.064692][ T4816] loop2: detected capacity change from 0 to 2048 [ 131.122830][ T4816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.080629][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.099505][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.107241][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.133697][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.154020][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.161996][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.604396][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610727][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.817733][ T4671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.928302][ T4814] loop3: detected capacity change from 0 to 32768 [ 133.016023][ T4814] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.031925][ T4814] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.041018][ T4814] BTRFS info (device loop3): using free space tree [ 133.494622][ T4671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.201850][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 134.951502][ T4814] BTRFS error (device loop3): open_ctree failed: -12 [ 135.178105][ T4445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4445) [ 135.201510][ T4671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.266806][ T4671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.281921][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 137.445543][ T4823] chnl_net:caif_netlink_parms(): no params data found [ 137.628876][ T4883] zram: Cannot change disksize for initialized device [ 138.362242][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 140.322230][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.339574][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.381420][ T4823] device bridge_slave_0 entered promiscuous mode [ 140.443548][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 140.496311][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.509180][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.570403][ T4823] device bridge_slave_1 entered promiscuous mode [ 140.858741][ T4823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.274276][ T4823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.852436][ T4671] IPVS: stopping backup sync thread 4444 ... [ 141.866886][ T4823] team0: Port device team_slave_0 added [ 141.894935][ T4823] team0: Port device team_slave_1 added [ 142.114895][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.132092][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.214571][ T4823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.300824][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.317549][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.353957][ T4823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.157857][ T4946] loop4: detected capacity change from 0 to 2048 [ 145.667436][ T4946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.863261][ T4823] device hsr_slave_0 entered promiscuous mode [ 145.992129][ T4823] device hsr_slave_1 entered promiscuous mode [ 146.018710][ T4823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.637500][ T4823] Cannot create hsr debugfs directory [ 147.161995][ T4671] device hsr_slave_0 left promiscuous mode [ 147.285874][ T4671] device hsr_slave_1 left promiscuous mode [ 147.343575][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.351063][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.461217][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.507689][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.671046][ T4671] device bridge_slave_1 left promiscuous mode [ 147.748447][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.890444][ T4671] device bridge_slave_0 left promiscuous mode [ 147.961360][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.365525][ T4671] device veth1_macvtap left promiscuous mode [ 148.432161][ T4671] device veth0_macvtap left promiscuous mode [ 148.439099][ T4671] device veth1_vlan left promiscuous mode [ 148.488042][ T4671] device veth0_vlan left promiscuous mode [ 148.797628][ T4985] loop4: detected capacity change from 0 to 128 [ 150.085688][ T4985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.174816][ T4985] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.620740][ T4983] fscrypt: Error allocating hmac(sha512): -2 [ 150.933647][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 154.470891][ T4671] team0 (unregistering): Port device team_slave_1 removed [ 154.508022][ T4671] team0 (unregistering): Port device team_slave_0 removed [ 154.552902][ T4671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.612563][ T4671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.917792][ T4671] bond0 (unregistering): Released all slaves [ 155.589278][ T26] audit: type=1800 audit(1786766280.088:8): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.134" name="zoned" dev="configfs" ino=35551 res=0 errno=0 [ 155.700609][ T5028] syz.2.133 (5028) used greatest stack depth: 18128 bytes left [ 155.770850][ T5030] loop0: detected capacity change from 0 to 2048 [ 156.220961][ T26] audit: type=1800 audit(1786766280.158:9): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.134" name="size" dev="configfs" ino=35554 res=0 errno=0 [ 156.250564][ T26] audit: type=1800 audit(1786766280.168:10): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.134" name="power" dev="configfs" ino=35555 res=0 errno=0 [ 156.301081][ T5035] siw: device registration error -23 [ 156.390985][ T5030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.605711][ T5034] bridge0: port 3(syz_tun) entered blocking state [ 156.612331][ T5034] bridge0: port 3(syz_tun) entered disabled state [ 156.620469][ T5034] device syz_tun entered promiscuous mode [ 156.627380][ T5034] bridge0: port 3(syz_tun) entered blocking state [ 156.633978][ T5034] bridge0: port 3(syz_tun) entered forwarding state [ 156.860685][ T5034] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 158.008376][ T4823] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.018596][ T4823] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.068612][ T4823] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.080070][ T4823] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.257283][ T4823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.270183][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.287740][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.328629][ T4823] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.370497][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.389735][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.408638][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.415803][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.472948][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.522830][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.532669][ T26] audit: type=1800 audit(1786766282.998:11): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.148" name="zoned" dev="configfs" ino=35693 res=0 errno=0 [ 158.566972][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.579306][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.586433][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.598783][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.617147][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.626359][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.636765][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.725652][ T4277] Bluetooth: hci3: failed to read key size for handle 200 [ 159.314513][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.323387][ T26] audit: type=1800 audit(1786766282.998:12): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.148" name="size" dev="configfs" ino=35694 res=0 errno=0 [ 159.349632][ T26] audit: type=1800 audit(1786766282.998:13): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.148" name="power" dev="configfs" ino=35695 res=0 errno=0 [ 159.354021][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.413413][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.473539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.492934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.502645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.522580][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.577815][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.852439][ T5061] loop0: detected capacity change from 0 to 32768 [ 160.398199][ T5061] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.513650][ T5061] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 160.566226][ T5061] BTRFS info (device loop0): using free space tree [ 161.658489][ T5102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'. [ 161.667732][ T5102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.144'. [ 162.148488][ T4823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.158270][ T5061] BTRFS error (device loop0): open_ctree failed: -12 [ 162.169931][ T4445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4445) [ 162.183501][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.190889][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.536012][ T5167] Bluetooth: MGMT ver 1.22 [ 166.391879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.410913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.508372][ T5173] tmpfs: Unknown parameter 'quota' [ 167.345053][ T4823] device veth0_vlan entered promiscuous mode [ 167.403273][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.455378][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.490547][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.512819][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.549581][ T4823] device veth1_vlan entered promiscuous mode [ 168.475288][ T4823] device veth0_macvtap entered promiscuous mode [ 168.484456][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.532564][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.545426][ T4823] device veth1_macvtap entered promiscuous mode [ 168.553789][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.562957][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.580116][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.590952][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.611861][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.625487][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.646835][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.672033][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.712026][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.751746][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.764419][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.771698][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.810102][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.862094][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.892089][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.908996][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.920078][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.930177][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.941483][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.952317][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.962962][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.976469][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.987442][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.005602][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.018402][ T4823] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.028977][ T4823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.038306][ T4823] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.047436][ T4823] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.147385][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.158286][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.169350][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.195258][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.203239][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.210741][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.667405][ T5211] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.214020][ T5237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.157'. [ 175.222988][ T5237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.157'. [ 177.827678][ T5271] syz.2.169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 177.841500][ T5271] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 179.244037][ T4277] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 179.252777][ T4277] Bluetooth: hci2: Injecting HCI hardware error event [ 179.261261][ T4290] Bluetooth: hci2: hardware error 0x00 [ 181.676412][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.683803][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.932282][ T5299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.889495][ T4290] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 183.457553][ T5323] UBIFS error (pid: 5323): cannot open "ubifs", error -22 [ 184.483102][ T5327] loop5: detected capacity change from 0 to 256 [ 184.588049][ T5329] tmpfs: Unknown parameter 'usrquota' [ 184.828212][ T5319] siw: device registration error -23 [ 184.889317][ T5327] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.051825][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 186.918532][ T4301] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 189.632407][ T5354] 9pnet_fd: Insufficient options for proto=fd [ 191.002783][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 194.045935][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.052757][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.649278][ T5404] loop4: detected capacity change from 0 to 512 [ 198.246008][ T5404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.351893][ T5404] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.239981][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 200.848298][ T5426] loop5: detected capacity change from 0 to 128 [ 200.873776][ T5426] EXT4-fs: Ignoring removed orlov option [ 201.005662][ T5426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.045652][ T5433] 9pnet_fd: Insufficient options for proto=fd [ 202.024252][ T5426] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.145766][ T4823] EXT4-fs (loop5): unmounting filesystem. [ 206.918985][ T5475] tmpfs: Unknown parameter 'usrquota' [ 208.432426][ T5491] loop2: detected capacity change from 0 to 128 [ 208.508687][ T5491] EXT4-fs: Ignoring removed orlov option [ 209.167788][ T5491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.399450][ T5505] futex_wake_op: syz.5.219 tries to shift op by 144; fix this program [ 210.085310][ T5491] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.469393][ T5505] team0: Device wg0 is of different type [ 211.499099][ T5505] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 211.571561][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 218.903438][ T5587] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 220.820644][ T5603] loop4: detected capacity change from 0 to 512 [ 220.992754][ T5603] EXT4-fs: inline encryption not supported [ 221.982513][ T5603] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 222.021088][ T5603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.084813][ T5603] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 223.163944][ T5603] EXT4-fs (loop4): 1 truncate cleaned up [ 223.169637][ T5603] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 224.758398][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 225.122991][ T5641] loop4: detected capacity change from 0 to 512 [ 225.169572][ T5641] EXT4-fs (loop4): 1 truncate cleaned up [ 225.255477][ T5641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.293658][ T26] audit: type=1800 audit(1786766349.798:14): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.254" name="zoned" dev="configfs" ino=38390 res=0 errno=0 [ 225.391433][ T26] audit: type=1800 audit(1786766349.888:15): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.254" name="size" dev="configfs" ino=38395 res=0 errno=0 [ 225.540925][ T26] audit: type=1800 audit(1786766349.918:16): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.254" name="power" dev="configfs" ino=38396 res=0 errno=0 [ 225.587033][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.611510][ T5653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.656900][ T5653] xt_hashlimit: size too large, truncated to 1048576 [ 225.663861][ T5653] xt_hashlimit: max too large, truncated to 1048576 [ 226.935571][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 229.774352][ T5684] mmap: syz.4.269 (5684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.387204][ T5688] 9pnet_fd: Insufficient options for proto=fd [ 233.131755][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 235.403039][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 236.227266][ T5734] loop5: detected capacity change from 0 to 128 [ 236.513625][ T5740] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4823] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5740] [ 236.544202][ T5740] netlink: 388 bytes leftover after parsing attributes in process `syz.5.274'. [ 236.555868][ T4290] Bluetooth: Wrong link type (-22) [ 237.450336][ T5755] 9pnet_fd: Insufficient options for proto=fd [ 243.132624][ T5818] loop0: detected capacity change from 0 to 512 [ 243.156715][ T5818] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.432135][ T5818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.926195][ T5818] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.200161][ T26] audit: type=1800 audit(1786766368.698:17): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.294" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 245.795968][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 245.882187][ T5866] ipt_REJECT: TCP_RESET invalid for non-tcp [ 249.102886][ T5907] device hsr0 entered promiscuous mode [ 249.109320][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 250.921969][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 251.167938][ T26] audit: type=1326 audit(1786766375.668:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.2.314" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15499e0d9 code=0x0 [ 252.188081][ T5957] using random self ethernet address [ 252.193748][ T5957] using random host ethernet address [ 252.213243][ T26] audit: type=1800 audit(1786766376.718:19): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.320" name="UDC" dev="configfs" ino=39006 res=0 errno=0 [ 252.259993][ T5957] usb0: HOST MAC c6:96:4c:5c:ed:7a [ 252.265448][ T5957] usb0: MAC de:76:d7:2c:f7:72 [ 252.512480][ T5969] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 252.541926][ T4811] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 252.784326][ T4811] usb 1-1: Dual-Role OTG device on HNP port [ 252.794788][ T4811] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 252.827248][ T4811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.900990][ T4811] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, c6:96:4c:5c:ed:7a [ 255.491232][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.497715][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.773258][ T6000] 9pnet_fd: Insufficient options for proto=fd [ 255.838447][ T6002] ip6t_srh: unknown srh match flags FF3F [ 257.908287][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 258.593596][ T6034] loop5: detected capacity change from 0 to 128 [ 258.618297][ T6031] loop0: detected capacity change from 0 to 1024 [ 258.750250][ T26] audit: type=1326 audit(1786766383.238:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 258.781159][ T26] audit: type=1326 audit(1786766383.238:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 258.802241][ T6034] FAT-fs (loop5): Directory bread(block 414) failed [ 259.470953][ T26] audit: type=1326 audit(1786766383.238:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 259.503302][ T6034] FAT-fs (loop5): Directory bread(block 415) failed [ 259.510118][ T6034] FAT-fs (loop5): Directory bread(block 416) failed [ 259.517592][ T6034] FAT-fs (loop5): Directory bread(block 417) failed [ 259.529653][ T6034] FAT-fs (loop5): Directory bread(block 418) failed [ 259.543962][ T6034] FAT-fs (loop5): Directory bread(block 419) failed [ 259.559322][ T26] audit: type=1326 audit(1786766383.238:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 259.564301][ T6034] FAT-fs (loop5): Directory bread(block 420) failed [ 259.731893][ T6034] FAT-fs (loop5): Directory bread(block 421) failed [ 259.761761][ T26] audit: type=1326 audit(1786766383.238:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 259.831799][ T26] audit: type=1326 audit(1786766383.238:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 259.879154][ T26] audit: type=1326 audit(1786766383.238:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 259.907477][ T26] audit: type=1326 audit(1786766383.238:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 259.932644][ T26] audit: type=1326 audit(1786766383.238:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 259.957098][ T26] audit: type=1326 audit(1786766383.238:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c659e0d9 code=0x7ffc0000 [ 260.076679][ T6031] loop0: detected capacity change from 0 to 512 [ 260.202738][ T6051] FAT-fs (loop5): Directory bread(block 414) failed [ 260.209726][ T6051] FAT-fs (loop5): Directory bread(block 415) failed [ 260.550238][ T6031] EXT4-fs (loop0): 1 orphan inode deleted [ 260.564413][ T5283] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:20: Failed to release dquot type 1 [ 260.603930][ T6031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 260.675078][ T6031] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.716905][ T6061] loop4: detected capacity change from 0 to 1024 [ 263.872517][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 264.339699][ T6131] hfsplus: b-tree write err: -5, ino 25 [ 264.352553][ T6131] hfsplus: b-tree write err: -5, ino 4 [ 264.382168][ T6131] hfsplus: b-tree write err: -5, ino 2 [ 264.454754][ T6142] loop5: detected capacity change from 0 to 64 [ 265.596810][ T6156] loop2: detected capacity change from 0 to 128 [ 266.733993][ T6156] loop2: detected capacity change from 0 to 512 [ 267.390015][ T6156] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.416549][ T6156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 267.469252][ T6156] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.349: Invalid block bitmap block 0 in block_group 0 [ 267.620528][ T6156] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 267.640226][ T6156] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.349: attempt to clear invalid blocks 983261 len 1 [ 267.782621][ T6156] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.349: Invalid inode table block 0 in block_group 0 [ 267.802196][ T6156] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 267.968118][ T6156] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 268.312754][ T6156] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.349: Invalid inode table block 0 in block_group 0 [ 268.383296][ T6156] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 268.484052][ T6156] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.349: mark_inode_dirty error [ 268.595878][ T6156] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 268.768940][ T6156] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.349: Invalid inode table block 0 in block_group 0 [ 268.901034][ T6156] EXT4-fs (loop2): 1 truncate cleaned up [ 268.907158][ T6156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 269.612697][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 269.921606][ T6197] loop4: detected capacity change from 0 to 40427 [ 270.013396][ T6197] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 270.021550][ T6197] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 270.037449][ T6197] F2FS-fs (loop4): invalid crc value [ 270.080664][ T6204] loop5: detected capacity change from 0 to 128 [ 270.098204][ T6197] F2FS-fs (loop4): Found nat_bits in checkpoint [ 270.904289][ T6204] FAT-fs (loop5): invalid media value (0x07) [ 270.910355][ T6204] FAT-fs (loop5): Can't find a valid FAT filesystem [ 270.934749][ T6197] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 270.941990][ T6197] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.520912][ T6212] 9pnet_fd: Insufficient options for proto=fd [ 271.817392][ T6218] loop5: detected capacity change from 0 to 2048 [ 271.829177][ T6218] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 273.581809][ T6227] loop2: detected capacity change from 0 to 32768 [ 273.796934][ T6227] XFS (loop2): Mounting V5 Filesystem [ 273.827382][ T6236] usb usb1: usbfs: process 6236 (syz.0.369) did not claim interface 2 before use [ 273.899934][ T6227] XFS (loop2): Ending clean mount [ 275.654089][ T6258] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4284] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6258] [ 275.673444][ T6258] netlink: 388 bytes leftover after parsing attributes in process `syz.4.363'. [ 275.873228][ T4277] Bluetooth: Wrong link type (-22) [ 275.927608][ T4281] XFS (loop2): Unmounting Filesystem [ 278.614218][ T6289] futex_wake_op: syz.5.376 tries to shift op by 144; fix this program [ 278.658542][ T6289] loop5: detected capacity change from 0 to 256 [ 280.096512][ T6289] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 280.150923][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 280.150936][ T26] audit: type=1800 audit(1786766660.654:103): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.376" name="file1" dev="loop5" ino=1048603 res=0 errno=0 [ 284.360471][ T6335] Console: switching to colour VGA+ 80x25 [ 285.562546][ T6351] loop0: detected capacity change from 0 to 164 [ 289.856928][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 289.919269][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 289.965737][ T6391] overlayfs: missing 'lowerdir' [ 290.827042][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 290.876443][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 290.914935][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 291.816500][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 292.053227][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 292.189577][ T6410] fuse: Unknown parameter '0x0000000000000009' [ 296.121986][ T4277] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 296.147314][ T4277] Bluetooth: hci4: Injecting HCI hardware error event [ 296.160810][ T4290] Bluetooth: hci4: hardware error 0x00 [ 298.448946][ T4290] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 298.605811][ T6465] loop5: detected capacity change from 0 to 16 [ 299.031115][ T6465] erofs: (device loop5): mounted with root inode @ nid 36. [ 299.135976][ T6465] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 299.261039][ T6465] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 299.442993][ T6465] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 299.682377][ T6482] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 299.872483][ T6492] block nbd2: NBD_DISCONNECT [ 300.133069][ T6482] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 301.413749][ T6482] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 301.463690][ T6465] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 301.474030][ T6465] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 301.484004][ T6465] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 301.492888][ T6493] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 301.503502][ T6493] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 301.513475][ T6493] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 309.589800][ T6590] loop0: detected capacity change from 0 to 256 [ 309.601175][ T6590] exfat: Deprecated parameter 'utf8' [ 309.773498][ T6590] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 311.900776][ T6594] vivid-000: kernel_thread() failed [ 312.548256][ T6603] loop4: detected capacity change from 0 to 2048 [ 312.562218][ T6603] UDF-fs: bad mount option "uid=forgeu" or missing value [ 312.732316][ T5219] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.533222][ T6631] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 316.925939][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.932604][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.484096][ T6685] loop4: detected capacity change from 0 to 1024 [ 322.597073][ T26] audit: type=1326 audit(1786766703.104:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 322.641824][ T26] audit: type=1326 audit(1786766703.104:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 322.677585][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.474'. [ 323.571041][ T26] audit: type=1326 audit(1786766703.104:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 323.697637][ T26] audit: type=1326 audit(1786766703.104:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 324.425982][ T26] audit: type=1326 audit(1786766703.104:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 324.450649][ T26] audit: type=1326 audit(1786766703.104:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 324.481805][ T26] audit: type=1326 audit(1786766703.104:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 324.505890][ T26] audit: type=1326 audit(1786766703.104:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 324.530125][ T26] audit: type=1326 audit(1786766703.104:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 324.554698][ T26] audit: type=1326 audit(1786766703.124:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5d79e0d9 code=0x7ffc0000 [ 324.583419][ T6685] loop4: detected capacity change from 0 to 512 [ 324.910011][ T6726] loop5: detected capacity change from 0 to 64 [ 325.046561][ T6726] MINIX-fs: mounting file system with errors, running fsck is recommended [ 325.625606][ T6685] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 327.537482][ T6744] loop2: detected capacity change from 0 to 64 [ 328.762481][ T6751] loop4: detected capacity change from 0 to 512 [ 329.316857][ T6751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 329.448781][ T6751] EXT4-fs (loop4): 1 truncate cleaned up [ 329.661823][ T6751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 331.163115][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 331.483040][ T6770] futex_wake_op: syz.4.488 tries to shift op by 144; fix this program [ 331.549813][ T6770] loop4: detected capacity change from 0 to 256 [ 331.568704][ T6770] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 331.589268][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 331.589279][ T26] audit: type=1800 audit(1786766968.092:179): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.488" name="file1" dev="loop4" ino=1048609 res=0 errno=0 [ 332.492872][ T6771] tmpfs: Unknown parameter 'quota' [ 333.514277][ T6790] loop0: detected capacity change from 0 to 40427 [ 333.724428][ T6790] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 333.732291][ T6790] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 333.746455][ T6790] F2FS-fs (loop0): invalid crc value [ 334.150788][ T6790] F2FS-fs (loop0): Found nat_bits in checkpoint [ 334.265384][ T6790] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 334.272514][ T6790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 334.580595][ T6806] syz.0.492: attempt to access beyond end of device [ 334.580595][ T6806] loop0: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 341.235855][ T6848] loop0: detected capacity change from 0 to 256 [ 341.866494][ T6849] jffs2: notice: (6849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 342.168986][ T6849] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 346.342417][ T6885] jffs2: notice: (6885) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 347.284969][ T6902] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 347.797444][ T6905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 347.805225][ T6905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.428312][ T6905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.071200][ T26] audit: type=1800 audit(1786766988.572:180): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="zoned" dev="configfs" ino=42060 res=0 errno=0 [ 352.141143][ T26] audit: type=1800 audit(1786766988.572:181): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="size" dev="configfs" ino=42061 res=0 errno=0 [ 353.262088][ T26] audit: type=1800 audit(1786766988.572:182): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.527" name="power" dev="configfs" ino=42062 res=0 errno=0 [ 361.558092][ T6985] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.771854][ T6985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.792526][ T6985] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.816921][ T6985] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 361.979518][ T6985] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 362.076301][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.306649][ T26] audit: type=1800 audit(1786766999.812:183): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.547" name="zoned" dev="configfs" ino=42151 res=0 errno=0 [ 363.428537][ T26] audit: type=1800 audit(1786766999.862:184): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.547" name="size" dev="configfs" ino=42152 res=0 errno=0 [ 363.530746][ T26] audit: type=1800 audit(1786766999.862:185): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.547" name="power" dev="configfs" ino=42153 res=0 errno=0 [ 363.812101][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout [ 363.812225][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.975761][ T7016] loop4: detected capacity change from 0 to 32768 [ 366.256798][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 366.288486][ T7016] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.337948][ T7016] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 366.386876][ T7016] BTRFS info (device loop4): using free space tree [ 367.674721][ T7016] BTRFS error (device loop4): open_ctree failed: -12 [ 368.032217][ T7075] overlayfs: failed to clone upperpath [ 368.831046][ T7079] loop0: detected capacity change from 0 to 4096 [ 369.447588][ T7079] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 369.757159][ T6658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (6658) [ 373.082065][ T26] audit: type=1326 audit(1786767009.552:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7119 comm="syz.3.569" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1ee79e0d9 code=0x0 [ 374.616142][ T7147] loop5: detected capacity change from 0 to 512 [ 376.515686][ T7147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 376.892562][ T7147] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 376.988138][ T7147] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.111806][ T26] audit: type=1800 audit(1786767013.612:187): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.572" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 378.126380][ T4823] EXT4-fs (loop5): unmounting filesystem. [ 378.275836][ T7170] loop2: detected capacity change from 0 to 512 [ 378.373363][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.379696][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.486110][ T7174] capability: warning: `syz.3.576' uses 32-bit capabilities (legacy support in use) [ 379.330609][ T6658] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 384.141919][ T7198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.149580][ T7198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.962589][ T7198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.650935][ T4277] Bluetooth: hci3: Malformed LE Event: 0x0d [ 392.067741][ T7245] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 392.140162][ T26] audit: type=1800 audit(1786767028.642:188): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.594" name="start_block" dev="configfs" ino=42423 res=0 errno=0 [ 395.307671][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.315264][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.334720][ T7269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.796036][ T7277] loop5: detected capacity change from 0 to 164 [ 399.669806][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 399.685197][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 399.702697][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 399.751031][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 399.764007][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 399.775896][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 399.788060][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 399.874247][ T7289] overlayfs: missing 'lowerdir' [ 401.752692][ T7310] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 402.788702][ T7318] MTD: Couldn't look up './dev/mtdblock0': -2 [ 404.632627][ T7324] loop0: detected capacity change from 0 to 1764 [ 404.683271][ T6658] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.187038][ T7374] loop4: detected capacity change from 0 to 512 [ 409.332031][ T6658] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.481988][ T4277] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 409.485622][ T4290] Bluetooth: hci5: command 0x1003 tx timeout [ 411.356881][ T7396] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 413.767758][ T7418] loop2: detected capacity change from 0 to 1764 [ 414.484947][ T6658] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 416.178764][ T7441] tipc: Enabling of bearer rejected, failed to enable media [ 416.244149][ T7441] rt1719: probe of 0-0049 failed with error -5 [ 416.256093][ T7441] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 416.278666][ T7442] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 416.369091][ T7442] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 417.059637][ T7432] syz.5.630 (7432): drop_caches: 0 [ 417.159932][ T7446] loop4: detected capacity change from 0 to 512 [ 417.188546][ T7446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 417.359737][ T7446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 417.372267][ T7446] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.541248][ T26] audit: type=1800 audit(1786767055.042:189): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.621" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 422.506535][ T7488] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 423.378250][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 424.614931][ T7515] loop0: detected capacity change from 0 to 512 [ 424.653199][ T7515] EXT4-fs: inline encryption not supported [ 424.675141][ T7515] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 424.793404][ T7515] EXT4-fs (loop0): 1 truncate cleaned up [ 424.799131][ T7515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 426.094707][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 426.424058][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 426.433127][ T7380] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 426.861538][ T7540] loop2: detected capacity change from 0 to 512 [ 427.002353][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 427.328931][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 427.346740][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 427.360965][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 427.373806][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 427.385243][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 427.397723][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 427.526476][ T7545] Attempt to restore checkpoint with obsolete wellknown handles [ 427.559547][ T7543] overlayfs: missing 'lowerdir' [ 427.848152][ T7540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 428.130246][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 430.293016][ T26] audit: type=1800 audit(1786767066.802:190): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.668" name="zoned" dev="configfs" ino=43239 res=0 errno=0 [ 430.535544][ T26] audit: type=1800 audit(1786767066.832:191): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.668" name="size" dev="configfs" ino=43241 res=0 errno=0 [ 430.963361][ T26] audit: type=1800 audit(1786767066.832:192): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.668" name="power" dev="configfs" ino=43242 res=0 errno=0 [ 433.108993][ T7584] loop0: detected capacity change from 0 to 32768 [ 433.306132][ T7584] BTRFS error (device loop0): open_ctree failed: -4 [ 433.662053][ T130] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 433.910951][ T7634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.489663][ T6658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (6658) [ 434.515923][ T130] usb 6-1: config 0 has no interfaces? [ 434.522335][ T130] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 434.579918][ T130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.611430][ T130] usb 6-1: config 0 descriptor?? [ 435.991355][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.092054][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.375360][ T7660] loop2: detected capacity change from 0 to 40427 [ 436.395201][ T7660] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 436.468619][ T7660] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 436.476609][ T7660] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 436.596513][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.702453][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.770584][ T7675] xt_connbytes: Forcing CT accounting to be enabled [ 436.778164][ T7675] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 437.264499][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.274530][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.287652][ T4322] usb 6-1: USB disconnect, device number 2 [ 439.481866][ T4288] Bluetooth: hci1: command 0x0405 tx timeout [ 439.804246][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.810748][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.876449][ T7709] loop2: detected capacity change from 0 to 4096 [ 442.311910][ T7709] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 446.486672][ T7755] futex_wake_op: syz.4.718 tries to shift op by 144; fix this program [ 446.628754][ T7755] loop4: detected capacity change from 0 to 256 [ 447.565632][ T7755] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 447.585790][ T7760] loop2: detected capacity change from 0 to 64 [ 447.641611][ T7745] syz.5.716 uses obsolete (PF_INET,SOCK_PACKET) [ 447.655878][ T26] audit: type=1800 audit(1786767084.162:193): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.718" name="file1" dev="loop4" ino=1048613 res=0 errno=0 [ 448.588742][ T7763] syz.2.720: attempt to access beyond end of device [ 448.588742][ T7763] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 448.602670][ T7763] Buffer I/O error on dev loop2, logical block 512, async page read [ 448.610789][ T7763] syz.2.720: attempt to access beyond end of device [ 448.610789][ T7763] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 448.624098][ T7763] Buffer I/O error on dev loop2, logical block 56576, async page read [ 449.147971][ T7770] loop0: detected capacity change from 0 to 256 [ 449.645375][ T7781] process 'syz.0.733' launched './file0' with NULL argv: empty string added [ 449.787538][ T6124] Bluetooth: Error in BCSP hdr checksum [ 451.401857][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 454.559874][ T7816] loop0: detected capacity change from 0 to 40427 [ 454.573360][ T7816] F2FS-fs (loop0): invalid crc_offset: 4177530876 [ 454.611835][ T7816] F2FS-fs (loop0): Wrong journal entry on segno 65538 [ 454.618666][ T7816] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 454.929457][ T7825] xt_connbytes: Forcing CT accounting to be enabled [ 455.770514][ T7837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.952185][ T7840] loop5: detected capacity change from 0 to 2048 [ 456.422228][ T7849] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.298793][ T7869] xt_TPROXY: Can be used only with -p tcp or -p udp [ 458.342862][ T7869] device syzkaller1 entered promiscuous mode [ 458.981044][ T7849] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 459.022631][ T7849] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 459.058888][ T7849] Remounting filesystem read-only [ 459.145881][ T4823] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 462.278080][ T7922] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 462.307231][ T7922] CIFS: Attempting to mount \\127.0.0.1\share [ 462.317032][ T7922] CIFS: VFS: No username specified [ 465.962969][ T7959] futex_wake_op: syz.0.784 tries to shift op by 144; fix this program [ 465.992191][ T7959] loop0: detected capacity change from 0 to 256 [ 466.019619][ T7959] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 466.657164][ T7961] loop2: detected capacity change from 0 to 256 [ 467.130215][ T7961] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 467.979878][ T26] audit: type=1800 audit(1786767104.482:194): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.783" name="file1" dev="loop2" ino=1048614 res=0 errno=0 [ 468.185745][ T7980] loop5: detected capacity change from 0 to 4096 [ 468.345843][ T7983] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.522943][ T7989] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.532128][ T7989] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.540834][ T7989] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.549595][ T7989] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.569865][ T7989] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.578867][ T7989] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.587911][ T7989] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.596872][ T7989] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.125048][ T8028] loop2: detected capacity change from 0 to 256 [ 475.659334][ T8033] loop5: detected capacity change from 0 to 40427 [ 475.684583][ T8033] F2FS-fs (loop5): invalid crc_offset: 4177530876 [ 475.706215][ T8028] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 475.782777][ T8033] F2FS-fs (loop5): Wrong journal entry on segno 65538 [ 475.789890][ T8033] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 475.827429][ T26] audit: type=1800 audit(1786767112.332:195): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.805" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 476.046894][ T8041] xt_connbytes: Forcing CT accounting to be enabled [ 478.492093][ T26] audit: type=1800 audit(1786767114.992:196): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.818" name="zoned" dev="configfs" ino=43998 res=0 errno=0 [ 478.676456][ T8069] loop2: detected capacity change from 0 to 8 [ 479.307655][ T8069] SQUASHFS error: lzo decompression failed, data probably corrupt [ 479.316077][ T8069] SQUASHFS error: Failed to read block 0x91: -5 [ 479.322466][ T8069] SQUASHFS error: Unable to read metadata cache entry [8f] [ 479.329681][ T8069] SQUASHFS error: Unable to read inode 0x11f [ 479.457501][ T26] audit: type=1800 audit(1786767114.992:197): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.818" name="size" dev="configfs" ino=43999 res=0 errno=0 [ 479.520840][ T26] audit: type=1800 audit(1786767115.112:198): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.818" name="power" dev="configfs" ino=44005 res=0 errno=0 [ 480.414192][ T8084] loop2: detected capacity change from 0 to 256 [ 480.459450][ T8084] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 481.128774][ T8090] loop4: detected capacity change from 0 to 4096 [ 481.495067][ T8090] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 481.571920][ T26] audit: type=1800 audit(1786767118.062:199): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 482.116679][ T8096] xt_connbytes: Forcing CT accounting to be enabled [ 487.315612][ T8131] random: crng reseeded on system resumption [ 488.135251][ T8140] futex_wake_op: syz.0.835 tries to shift op by 144; fix this program [ 488.149757][ T8140] loop0: detected capacity change from 0 to 256 [ 488.161955][ T8140] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 488.266202][ T26] audit: type=1800 audit(1786767124.692:200): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.835" name="file1" dev="loop0" ino=1048618 res=0 errno=0 [ 489.350586][ T8151] loop5: detected capacity change from 0 to 4096 [ 489.438480][ T8153] bridge0: port 3(erspan0) entered blocking state [ 489.445280][ T8153] bridge0: port 3(erspan0) entered disabled state [ 489.464734][ T8153] device erspan0 entered promiscuous mode [ 489.474324][ T8153] bridge0: port 3(erspan0) entered blocking state [ 489.480819][ T8153] bridge0: port 3(erspan0) entered forwarding state [ 490.205589][ T26] audit: type=1800 audit(1786767126.712:201): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.839" name="zoned" dev="configfs" ino=45152 res=0 errno=0 [ 490.355907][ T26] audit: type=1800 audit(1786767126.732:202): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.839" name="size" dev="configfs" ino=45153 res=0 errno=0 [ 490.521789][ T8151] ntfs3: loop5: failed to replay log file. Can't mount rw! [ 491.866123][ T8171] loop2: detected capacity change from 0 to 512 [ 491.895249][ T8171] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 494.215427][ T4301] kworker/u4:6: attempt to access beyond end of device [ 494.215427][ T4301] loop0: rw=1048577, sector=352, nr_sectors = 7376 limit=256 [ 495.165823][ T8195] Bluetooth: MGMT ver 1.22 [ 496.225403][ T6117] kworker/u4:27: attempt to access beyond end of device [ 496.225403][ T6117] loop0: rw=1, sector=7720, nr_sectors = 696 limit=256 [ 496.372754][ T8202] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.381547][ T8202] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.390370][ T8202] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.399316][ T8202] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.427850][ T8202] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.437057][ T8202] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.446067][ T8202] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.455018][ T8202] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.619428][ T26] audit: type=1800 audit(1786767133.122:203): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.855" name="c_chmask" dev="configfs" ino=44698 res=0 errno=0 [ 496.796865][ T26] audit: type=1800 audit(1786767133.302:204): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.855" name="UDC" dev="configfs" ino=44701 res=0 errno=0 [ 498.644969][ T8224] loop5: detected capacity change from 0 to 128 [ 498.670580][ T8224] EXT4-fs (loop5): Test dummy encryption mode enabled [ 498.695635][ T8224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 498.732733][ T8224] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 498.851121][ T8230] loop4: detected capacity change from 0 to 40427 [ 498.876254][ T8230] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 500.399709][ T8230] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 500.406548][ T8230] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 500.950280][ T8243] xt_connbytes: Forcing CT accounting to be enabled [ 501.451790][ T4288] Bluetooth: hci1: command 0x0405 tx timeout [ 501.458400][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464748][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.069550][ T4823] EXT4-fs (loop5): unmounting filesystem. [ 502.228349][ T8261] futex_wake_op: syz.3.862 tries to shift op by 144; fix this program [ 504.759159][ T8278] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.767902][ T8278] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.776611][ T8278] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.785291][ T8278] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.802916][ T8278] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.812638][ T8278] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.821742][ T8278] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.830587][ T8278] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.928884][ T8300] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 508.797961][ T8313] loop4: detected capacity change from 0 to 4096 [ 508.922320][ T8313] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 508.965564][ T8313] ntfs3: loop4: Failed to load $BadClus. [ 511.535983][ T8336] loop5: detected capacity change from 0 to 8 [ 511.556216][ T8336] SQUASHFS error: lzo decompression failed, data probably corrupt [ 511.564248][ T8336] SQUASHFS error: Failed to read block 0x91: -5 [ 511.570544][ T8336] SQUASHFS error: Unable to read metadata cache entry [8f] [ 511.577921][ T8336] SQUASHFS error: Unable to read inode 0x7 [ 513.132657][ T7679] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 513.337880][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 514.643139][ T8359] futex_wake_op: syz.2.892 tries to shift op by 144; fix this program [ 514.708846][ T8359] loop2: detected capacity change from 0 to 256 [ 514.857476][ T8359] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 514.880212][ T26] audit: type=1800 audit(1786767151.382:205): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.892" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 518.810336][ T8384] autofs4:pid:8384:autofs_fill_super: called with bogus options [ 524.613564][ T26] audit: type=1800 audit(1786767161.122:206): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.907" name="zoned" dev="configfs" ino=45539 res=0 errno=0 [ 524.648658][ T26] audit: type=1800 audit(1786767161.122:207): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.907" name="power" dev="configfs" ino=45540 res=0 errno=0 [ 527.055273][ T8430] futex_wake_op: syz.0.912 tries to shift op by 144; fix this program [ 527.066604][ T8431] loop0: detected capacity change from 0 to 256 [ 528.053887][ T8431] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 533.459343][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 539.562791][ T8490] random: crng reseeded on system resumption [ 550.243316][ T8536] input: syz0 as /devices/virtual/input/input7 [ 551.528270][ T26] audit: type=1800 audit(1786767188.002:208): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.948" name="zoned" dev="configfs" ino=45779 res=0 errno=0 [ 552.151940][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 552.201854][ T26] audit: type=1800 audit(1786767188.002:209): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.948" name="power" dev="configfs" ino=45780 res=0 errno=0 [ 556.703770][ T8600] futex_wake_op: syz.2.956 tries to shift op by 144; fix this program [ 556.744205][ T8600] loop2: detected capacity change from 0 to 256 [ 556.756195][ T8602] futex_wake_op: syz.4.955 tries to shift op by 144; fix this program [ 556.791180][ T8602] loop4: detected capacity change from 0 to 256 [ 557.214128][ T8600] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 557.265561][ T8602] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 557.375343][ T26] audit: type=1800 audit(1786767193.772:210): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.956" name="file1" dev="loop2" ino=1048635 res=0 errno=0 [ 557.556365][ T26] audit: type=1800 audit(1786767193.972:211): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.955" name="file1" dev="loop4" ino=1048636 res=0 errno=0 [ 557.929960][ T8615] input: syz1 as /devices/virtual/input/input8 [ 558.772183][ T8624] loop4: detected capacity change from 0 to 1024 [ 560.350896][ T4852] usb 1-1: USB disconnect, device number 3 [ 560.482088][ T4852] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 562.886805][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.893378][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.314411][ T8678] futex_wake_op: syz.0.974 tries to shift op by 144; fix this program [ 563.346457][ T8678] loop0: detected capacity change from 0 to 256 [ 563.401291][ T8678] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 563.459544][ T26] audit: type=1800 audit(1786767199.962:212): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.974" name="file1" dev="loop0" ino=1048637 res=0 errno=0 [ 565.860195][ T6108] kworker/u4:23: attempt to access beyond end of device [ 565.860195][ T6108] loop0: rw=1, sector=2904, nr_sectors = 5512 limit=256 [ 565.975641][ T4852] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 566.710196][ T4852] usb 1-1: Dual-Role OTG device on HNP port [ 566.733243][ T4852] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 566.798164][ T4852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.044375][ T4852] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, c6:96:4c:5c:ed:7a [ 574.031663][ T8748] tmpfs: Unknown parameter 'usrquota' [ 580.367382][ T8806] loop2: detected capacity change from 0 to 2048 [ 580.486237][ T8806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 580.495341][ T8806] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.263276][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 584.854276][ T8838] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 584.861312][ T8838] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 584.869250][ T8838] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 584.875850][ T8838] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 584.883892][ T8838] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 584.892048][ T8838] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 584.899859][ T8838] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 584.906428][ T8838] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 584.914347][ T8838] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 584.921145][ T8838] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 584.928251][ T8838] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 584.934898][ T8838] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 584.941753][ T8838] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 584.948758][ T8838] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 584.956159][ T8838] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 584.962940][ T8838] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 584.970074][ T8838] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 584.976893][ T8838] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 584.983471][ T8838] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 584.990098][ T8838] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 584.996938][ T8838] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 585.003501][ T8838] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 585.010286][ T8838] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 585.016880][ T8838] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 585.023509][ T8838] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 585.030052][ T8838] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 586.062310][ T8841] device dummy0 entered promiscuous mode [ 594.304681][ T8924] loop0: detected capacity change from 0 to 128 [ 594.958661][ T8930] loop2: detected capacity change from 0 to 1764 [ 595.613643][ T8620] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 597.261181][ T8951] futex_wake_op: syz.2.1042 tries to shift op by 144; fix this program [ 598.204068][ T8951] loop2: detected capacity change from 0 to 256 [ 598.264575][ T8951] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 598.491611][ T26] audit: type=1800 audit(1786767234.962:213): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1042" name="file1" dev="loop2" ino=1048638 res=0 errno=0 [ 599.885357][ T8973] loop2: detected capacity change from 0 to 2048 [ 599.910136][ T8973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.932199][ T8968] Process accounting resumed [ 600.427422][ T8977] futex_wake_op: syz.5.1051 tries to shift op by 144; fix this program [ 600.441332][ T8977] loop5: detected capacity change from 0 to 256 [ 600.563368][ T8977] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 600.638253][ T26] audit: type=1800 audit(1786767237.082:214): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1051" name="file1" dev="loop5" ino=1048639 res=0 errno=0 [ 601.105491][ T8982] CIFS: Attempting to mount \\127.0.0.1\share [ 601.111640][ T8982] CIFS: VFS: No username specified [ 601.713888][ T8996] loop5: detected capacity change from 0 to 1764 [ 602.670372][ T8620] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 602.686673][ T26] audit: type=1800 audit(1786767239.192:215): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1049" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1370 res=0 errno=0 [ 605.149721][ T9038] futex_wake_op: syz.5.1063 tries to shift op by 144; fix this program [ 605.164754][ T9038] loop5: detected capacity change from 0 to 256 [ 605.188483][ T9038] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 605.280386][ T26] audit: type=1800 audit(1786767241.742:216): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1063" name="file1" dev="loop5" ino=1048640 res=0 errno=0 [ 605.311304][ T9039] device dummy0 entered promiscuous mode [ 605.622611][ T9030] loop4: detected capacity change from 0 to 2048 [ 607.173692][ T9030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 607.217645][ T9030] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.503409][ T9053] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1068'. [ 607.541738][ T9053] loop0: detected capacity change from 0 to 512 [ 607.727982][ T9053] ext4: Unknown parameter 'nouser_xattr' [ 608.073411][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 608.268523][ T26] audit: type=1800 audit(1786767244.772:217): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1070" name="zoned" dev="configfs" ino=46778 res=0 errno=0 [ 608.412678][ T26] audit: type=1800 audit(1786767244.792:218): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1070" name="size" dev="configfs" ino=46779 res=0 errno=0 [ 609.260959][ T26] audit: type=1800 audit(1786767244.792:219): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1070" name="power" dev="configfs" ino=46780 res=0 errno=0 [ 609.949307][ T9062] loop0: detected capacity change from 0 to 32768 [ 610.045144][ T9062] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 610.149393][ T9062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 610.284747][ T9093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.575806][ T9062] BTRFS info (device loop0): using free space tree [ 610.740931][ T4343] kworker/u4:7: attempt to access beyond end of device [ 610.740931][ T4343] loop5: rw=1, sector=352, nr_sectors = 2656 limit=256 [ 610.834575][ T4343] kworker/u4:7: attempt to access beyond end of device [ 610.834575][ T4343] loop5: rw=1, sector=3008, nr_sectors = 2048 limit=256 [ 610.855613][ T4343] kworker/u4:7: attempt to access beyond end of device [ 610.855613][ T4343] loop5: rw=1, sector=5056, nr_sectors = 2048 limit=256 [ 610.876638][ T4343] kworker/u4:7: attempt to access beyond end of device [ 610.876638][ T4343] loop5: rw=1, sector=7104, nr_sectors = 1312 limit=256 [ 612.547063][ T9062] BTRFS error (device loop0): open_ctree failed: -12 [ 612.547444][ T8620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (8620) [ 614.380561][ T26] audit: type=1800 audit(1786767250.882:220): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1093" name="zoned" dev="configfs" ino=47551 res=0 errno=0 [ 614.845701][ T26] audit: type=1800 audit(1786767251.092:221): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1093" name="size" dev="configfs" ino=47552 res=0 errno=0 [ 615.129868][ T26] audit: type=1800 audit(1786767251.112:222): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1093" name="power" dev="configfs" ino=47553 res=0 errno=0 [ 616.133633][ T9159] futex_wake_op: syz.2.1088 tries to shift op by 144; fix this program [ 616.163013][ T9159] loop2: detected capacity change from 0 to 256 [ 616.336741][ T9159] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 616.684074][ T26] audit: type=1800 audit(1786767252.892:223): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1088" name="file1" dev="loop2" ino=1048641 res=0 errno=0 [ 616.947089][ T46] kworker/u4:3: attempt to access beyond end of device [ 616.947089][ T46] loop2: rw=1, sector=3032, nr_sectors = 5384 limit=256 [ 617.166630][ T9167] futex_wake_op: syz.4.1089 tries to shift op by 144; fix this program [ 617.203002][ T9167] loop4: detected capacity change from 0 to 256 [ 618.221213][ T9167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 618.249147][ T26] audit: type=1800 audit(1786767254.752:224): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1089" name="file1" dev="loop4" ino=1048642 res=0 errno=0 [ 620.881440][ T9198] futex_wake_op: syz.5.1097 tries to shift op by 144; fix this program [ 620.946927][ T9198] loop5: detected capacity change from 0 to 256 [ 620.958382][ T9198] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 621.061515][ T26] audit: type=1800 audit(1786767257.482:225): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1097" name="file1" dev="loop5" ino=1048643 res=0 errno=0 [ 621.519638][ T4419] kworker/u4:13: attempt to access beyond end of device [ 621.519638][ T4419] loop5: rw=1, sector=1184, nr_sectors = 4024 limit=256 [ 621.715657][ T9209] gadgetfs: bound to dummy_udc driver [ 621.733237][ T9209] binder: 9207:9209 unknown command 1074553619 [ 621.739494][ T9209] binder: 9207:9209 ioctl c0306201 200000000040 returned -22 [ 623.343336][ T4419] kworker/u4:13: attempt to access beyond end of device [ 623.343336][ T4419] loop5: rw=1, sector=5208, nr_sectors = 3208 limit=256 [ 624.185473][ T9223] futex_wake_op: syz.2.1102 tries to shift op by 144; fix this program [ 624.221560][ T9223] loop2: detected capacity change from 0 to 256 [ 624.236279][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.603513][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.621581][ T9223] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 624.711921][ T26] audit: type=1800 audit(1786767261.152:226): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1102" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 627.381954][ T4852] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 627.651770][ T4852] usb 6-1: Using ep0 maxpacket: 8 [ 627.712947][ T4852] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 627.912696][ T4852] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.189069][ T4852] usb 6-1: config 0 has no interface number 0 [ 628.289491][ T4852] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 628.359940][ T4852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.390710][ T26] audit: type=1800 audit(1786767264.892:227): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1111" name="zoned" dev="configfs" ino=46955 res=0 errno=0 [ 628.431651][ T4852] usb 6-1: Product: syz [ 628.436036][ T4852] usb 6-1: Manufacturer: syz [ 628.440645][ T4852] usb 6-1: SerialNumber: syz [ 628.475808][ T26] audit: type=1800 audit(1786767264.892:228): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1111" name="size" dev="configfs" ino=46956 res=0 errno=0 [ 628.507101][ T4852] usb 6-1: config 0 descriptor?? [ 628.553232][ T4852] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 628.570928][ T9264] futex_wake_op: syz.4.1105 tries to shift op by 144; fix this program [ 628.613607][ T26] audit: type=1800 audit(1786767264.892:229): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1111" name="power" dev="configfs" ino=46957 res=0 errno=0 [ 628.634183][ T4852] usb 6-1: No valid video chain found. [ 629.058128][ T4852] usb 6-1: USB disconnect, device number 3 [ 629.365138][ T9254] loop2: detected capacity change from 0 to 32768 [ 629.411494][ T9254] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 629.441063][ T9254] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 629.465864][ T9254] BTRFS info (device loop2): using free space tree [ 629.781290][ T9254] BTRFS info (device loop2): enabling ssd optimizations [ 632.777698][ T4281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 632.897385][ T9336] futex_wake_op: syz.5.1123 tries to shift op by 144; fix this program [ 632.933186][ T9336] loop5: detected capacity change from 0 to 256 [ 634.271867][ T9336] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 634.311468][ T26] audit: type=1800 audit(1786767270.812:230): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1123" name="file1" dev="loop5" ino=1048645 res=0 errno=0 [ 636.198103][ T9361] loop5: detected capacity change from 0 to 64 [ 637.110346][ T9364] syz.5.1126: attempt to access beyond end of device [ 637.110346][ T9364] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 637.123639][ T9364] Buffer I/O error on dev loop5, logical block 512, async page read [ 637.131854][ T9364] syz.5.1126: attempt to access beyond end of device [ 637.131854][ T9364] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 637.145240][ T9364] Buffer I/O error on dev loop5, logical block 56576, async page read [ 638.420086][ T9378] loop5: detected capacity change from 0 to 128 [ 639.857266][ T9387] futex_wake_op: syz.2.1130 tries to shift op by 144; fix this program [ 639.871878][ T9387] loop2: detected capacity change from 0 to 256 [ 640.238945][ T9387] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 640.346843][ T26] audit: type=1800 audit(1786767276.852:231): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1130" name="file1" dev="loop2" ino=1048646 res=0 errno=0 [ 640.500282][ T26] audit: type=1800 audit(1786767277.002:232): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1132" name="zoned" dev="configfs" ino=47806 res=0 errno=0 [ 640.642205][ T26] audit: type=1800 audit(1786767277.002:233): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1132" name="size" dev="configfs" ino=47807 res=0 errno=0 [ 640.825162][ T26] audit: type=1800 audit(1786767277.002:234): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1132" name="power" dev="configfs" ino=47808 res=0 errno=0 [ 642.035899][ T9406] loop5: detected capacity change from 0 to 8 [ 642.184230][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 643.896538][ T9437] autofs4:pid:9437:autofs_fill_super: called with bogus options [ 645.164769][ T9447] futex_wake_op: syz.0.1144 tries to shift op by 144; fix this program [ 645.176297][ T9448] loop0: detected capacity change from 0 to 256 [ 645.934517][ T9448] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 645.964107][ T26] audit: type=1800 audit(1786767282.472:235): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1144" name="file1" dev="loop0" ino=1048660 res=0 errno=0 [ 646.582527][ T9458] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 646.812187][ T9458] gadgetfs: bound to dummy_udc driver [ 646.837259][ T9458] binder: 9457:9458 unknown command 1074553619 [ 646.843737][ T9458] binder: 9457:9458 ioctl c0306201 200000000040 returned -22 [ 647.101871][ T4318] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 648.579563][ C0] gadgetfs: connected [ 648.584412][ T4318] gadgetfs: disconnected [ 648.677585][ T9457] gadgetfs: suspended from state 2 [ 648.827365][ T26] audit: type=1800 audit(1786767285.332:236): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1151" name="zoned" dev="configfs" ino=47922 res=0 errno=0 [ 648.912046][ T26] audit: type=1800 audit(1786767285.332:237): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1151" name="size" dev="configfs" ino=47923 res=0 errno=0 [ 649.641427][ T4318] usb 2-1: device not accepting address 4, error -71 [ 649.911062][ T26] audit: type=1800 audit(1786767285.332:238): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1151" name="power" dev="configfs" ino=47924 res=0 errno=0 [ 649.941740][ T26] audit: type=1800 audit(1786767286.442:239): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1153" name="c_chmask" dev="configfs" ino=48220 res=0 errno=0 [ 650.112386][ T26] audit: type=1800 audit(1786767286.442:240): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1153" name="UDC" dev="configfs" ino=48221 res=0 errno=0 [ 651.357808][ T9480] loop0: detected capacity change from 0 to 32768 [ 651.426047][ T9480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1151 (9480) [ 651.631992][ T9514] loop2: detected capacity change from 0 to 256 [ 652.574479][ T9513] futex_wake_op: syz.2.1159 tries to shift op by 144; fix this program [ 652.607806][ T9480] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.619871][ T9514] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 652.643048][ T26] audit: type=1800 audit(1786767289.152:241): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1159" name="file1" dev="loop2" ino=1048661 res=0 errno=0 [ 652.740221][ T9480] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 652.913201][ T9480] BTRFS info (device loop0): using free space tree [ 653.623515][ T9480] BTRFS error (device loop0): open_ctree failed: -12 [ 653.746645][ T8620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (8620) [ 654.193052][ T7065] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 654.951881][ T7065] usb 3-1: Using ep0 maxpacket: 8 [ 654.958567][ T7065] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 654.973882][ T7065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.985151][ T7065] usb 3-1: config 0 has no interface number 0 [ 654.993694][ T7065] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 655.002990][ T7065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.010993][ T7065] usb 3-1: Product: syz [ 655.016177][ T7065] usb 3-1: Manufacturer: syz [ 655.020779][ T7065] usb 3-1: SerialNumber: syz [ 655.055395][ T7065] usb 3-1: config 0 descriptor?? [ 655.098735][ T7065] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 655.132013][ T7065] usb 3-1: No valid video chain found. [ 658.077854][ T9554] usb 3-1: USB disconnect, device number 5 [ 666.964868][ T9662] loop4: detected capacity change from 0 to 1764 [ 667.727686][ T8620] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.815616][ T9714] loop5: detected capacity change from 0 to 1024 [ 673.012545][ T9714] EXT4-fs: Ignoring removed bh option [ 673.302005][ T9714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 673.344694][ T9714] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.384120][ T9726] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1191: bg 0: block 112: padding at end of block bitmap is not set [ 674.405562][ T9726] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 50 with error 28 [ 674.418426][ T9726] EXT4-fs (loop5): This should not happen!! Data will be lost [ 674.418426][ T9726] [ 674.428713][ T9726] EXT4-fs (loop5): Total free blocks count 0 [ 674.435087][ T9726] EXT4-fs (loop5): Free/Dirty block details [ 674.442047][ T9726] EXT4-fs (loop5): free_blocks=0 [ 674.447217][ T9726] EXT4-fs (loop5): dirty_blocks=64 [ 674.452519][ T9726] EXT4-fs (loop5): Block reservation details [ 674.458668][ T9726] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 676.674774][ T4823] EXT4-fs (loop5): unmounting filesystem. [ 684.973776][ T9796] futex_wake_op: syz.2.1218 tries to shift op by 144; fix this program [ 685.002564][ T9796] loop2: detected capacity change from 0 to 256 [ 685.037131][ T9796] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 685.072694][ T26] audit: type=1800 audit(1786767321.572:242): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1218" name="file1" dev="loop2" ino=1048664 res=0 errno=0 [ 685.622529][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.629674][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.818198][ T4607] kworker/u4:16: attempt to access beyond end of device [ 685.818198][ T4607] loop2: rw=1, sector=1424, nr_sectors = 6648 limit=256 [ 685.937647][ T4607] kworker/u4:16: attempt to access beyond end of device [ 685.937647][ T4607] loop2: rw=1, sector=8072, nr_sectors = 344 limit=256 [ 687.364299][ T9812] autofs4:pid:9812:autofs_fill_super: called with bogus options [ 688.144791][ T9815] loop4: detected capacity change from 0 to 1024 [ 688.161333][ T9815] EXT4-fs: Ignoring removed bh option [ 688.308982][ T9815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 688.388328][ T9815] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.435988][ T9820] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 688.727058][ T9822] input: syz1 as /devices/virtual/input/input9 [ 689.239584][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 689.250621][ T9819] loop5: detected capacity change from 0 to 32768 [ 689.388547][ T9819] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.445649][ T9819] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 689.502209][ T9819] BTRFS info (device loop5): using free space tree [ 689.855262][ T9858] device syz_tun entered promiscuous mode [ 690.045417][ T9861] loop0: detected capacity change from 0 to 1024 [ 690.552006][ T9861] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 690.561576][ T9861] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (40000) [ 691.334312][ T9872] futex_wake_op: syz.2.1231 tries to shift op by 144; fix this program [ 691.366175][ T9872] loop2: detected capacity change from 0 to 256 [ 691.593865][ T9872] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 691.778020][ T26] audit: type=1800 audit(1786767328.282:243): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1231" name="file1" dev="loop2" ino=1048665 res=0 errno=0 [ 693.731479][ T9884] futex_wake_op: syz.0.1233 tries to shift op by 144; fix this program [ 693.961338][ T9819] BTRFS error (device loop5): open_ctree failed: -22 [ 694.484043][ T9906] overlayfs: failed to clone upperpath [ 694.496572][ T9904] autofs4:pid:9904:autofs_fill_super: called with bogus options [ 694.693668][ T9908] loop8: detected capacity change from 0 to 7 [ 694.748435][ T9908] Dev loop8: unable to read RDB block 7 [ 694.755893][ T9908] loop8: unable to read partition table [ 694.762284][ T9908] loop8: partition table beyond EOD, truncated [ 694.768481][ T9908] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 698.908751][ T8620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (8620) [ 705.020653][ C0] hrtimer: interrupt took 41769 ns [ 705.311425][ T9985] IPVS: stopping master sync thread 5969 ... [ 707.639208][ T9997] futex_wake_op: syz.0.1258 tries to shift op by 144; fix this program [ 707.650856][ T9997] loop0: detected capacity change from 0 to 256 [ 708.017602][ T9997] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 708.048125][ T26] audit: type=1800 audit(1786767344.552:244): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1258" name="file1" dev="loop0" ino=1048666 res=0 errno=0 [ 708.990962][T10015] futex_wake_op: syz.5.1260 tries to shift op by 144; fix this program [ 710.341610][T10036] futex_wake_op: syz.2.1266 tries to shift op by 144; fix this program [ 710.370157][T10036] loop2: detected capacity change from 0 to 256 [ 711.179694][T10036] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 711.206685][ T26] audit: type=1800 audit(1786767347.712:245): pid=10036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1266" name="file1" dev="loop2" ino=1048667 res=0 errno=0 [ 711.740548][T10039] loop4: detected capacity change from 0 to 2048 [ 711.793069][ T6106] kworker/u4:22: attempt to access beyond end of device [ 711.793069][ T6106] loop2: rw=1, sector=2256, nr_sectors = 5688 limit=256 [ 711.795230][T10039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 711.865785][ T6106] kworker/u4:22: attempt to access beyond end of device [ 711.865785][ T6106] loop2: rw=1, sector=7944, nr_sectors = 472 limit=256 [ 711.917727][T10039] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.655343][T10060] futex_wake_op: syz.5.1273 tries to shift op by 144; fix this program [ 713.720251][T10060] loop5: detected capacity change from 0 to 256 [ 714.647411][T10060] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 714.741546][ T26] audit: type=1800 audit(1786767351.172:246): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1273" name="file1" dev="loop5" ino=1048668 res=0 errno=0 [ 714.874565][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 715.484853][T10070] futex_wake_op: syz.0.1277 tries to shift op by 144; fix this program [ 715.517029][T10070] loop0: detected capacity change from 0 to 256 [ 715.620997][T10070] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 715.944274][ T26] audit: type=1800 audit(1786767352.162:247): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1277" name="file1" dev="loop0" ino=1048669 res=0 errno=0 [ 716.548474][ T6143] kworker/u4:35: attempt to access beyond end of device [ 716.548474][ T6143] loop0: rw=1, sector=2048, nr_sectors = 6368 limit=256 [ 717.431113][T10081] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 717.455821][T10081] cramfs: wrong magic [ 722.828117][T10120] loop4: detected capacity change from 0 to 128 [ 722.904198][T10120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 722.913131][T10120] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 723.140106][T10118] fscrypt: Error allocating hmac(sha512): -2 [ 723.252490][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 727.123675][ T26] audit: type=1800 audit(1786767363.632:248): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1293" name="zoned" dev="configfs" ino=49002 res=0 errno=0 [ 727.528407][ T26] audit: type=1800 audit(1786767363.732:249): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1293" name="size" dev="configfs" ino=49771 res=0 errno=0 [ 729.801580][ T26] audit: type=1800 audit(1786767363.772:250): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1293" name="power" dev="configfs" ino=49772 res=0 errno=0 [ 732.978862][T10204] loop2: detected capacity change from 0 to 512 [ 733.015767][T10204] EXT4-fs (loop2): orphan cleanup on readonly fs [ 733.025112][T10204] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 733.055478][T10199] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 733.064780][T10199] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 733.076154][T10199] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 733.085607][T10199] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 733.384697][ T7380] Bluetooth: hci1: command 0x0405 tx timeout [ 733.675796][T10204] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 733.783373][T10204] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1307: attempt to clear invalid blocks 2 len 1 [ 733.866468][T10204] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1307: invalid indirect mapped block 1819239214 (level 0) [ 733.953147][T10204] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1307: invalid indirect mapped block 1819239214 (level 1) [ 734.130739][T10204] EXT4-fs (loop2): 1 truncate cleaned up [ 734.141938][T10204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 736.068163][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 736.460193][T10235] input: syz1 as /devices/virtual/input/input10 [ 736.666584][T10237] futex_wake_op: syz.3.1311 tries to shift op by 144; fix this program [ 736.830477][T10227] overlayfs: missing 'lowerdir' [ 739.310317][T10257] random: crng reseeded on system resumption [ 747.339861][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.346671][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.544424][T10321] dlm: no local IP address has been set [ 749.550742][T10321] dlm: cannot start dlm midcomms -107 [ 749.613188][ T26] audit: type=1800 audit(1786767386.122:251): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1330" name="zoned" dev="configfs" ino=50055 res=0 errno=0 [ 749.781654][ T26] audit: type=1800 audit(1786767386.162:252): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1330" name="size" dev="configfs" ino=50056 res=0 errno=0 [ 751.001822][ T26] audit: type=1800 audit(1786767386.162:253): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1330" name="power" dev="configfs" ino=50057 res=0 errno=0 [ 751.116921][T10331] Option 'TXƮ' to dns_resolver key: bad/missing value [ 751.228778][T10334] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1333'. [ 755.713222][T10377] futex_wake_op: syz.4.1340 tries to shift op by 144; fix this program [ 755.742370][T10377] loop4: detected capacity change from 0 to 256 [ 755.795661][T10377] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 755.849989][ T26] audit: type=1800 audit(1786767392.352:254): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1340" name="file1" dev="loop4" ino=1048683 res=0 errno=0 [ 756.420377][ T4419] kworker/u4:13: attempt to access beyond end of device [ 756.420377][ T4419] loop4: rw=1, sector=2072, nr_sectors = 3016 limit=256 [ 757.771948][ T4419] kworker/u4:13: attempt to access beyond end of device [ 757.771948][ T4419] loop4: rw=1, sector=5088, nr_sectors = 2048 limit=256 [ 758.899370][ T4419] kworker/u4:13: attempt to access beyond end of device [ 758.899370][ T4419] loop4: rw=1, sector=7136, nr_sectors = 1280 limit=256 [ 759.187192][T10400] futex_wake_op: syz.0.1345 tries to shift op by 144; fix this program [ 759.201941][T10400] loop0: detected capacity change from 0 to 256 [ 760.202021][T10400] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 760.492088][ T26] audit: type=1800 audit(1786767396.722:255): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1345" name="file1" dev="loop0" ino=1048684 res=0 errno=0 [ 760.737623][T10413] futex_wake_op: syz.4.1344 tries to shift op by 144; fix this program [ 760.762751][T10413] loop4: detected capacity change from 0 to 256 [ 761.540063][T10413] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 761.568962][ T26] audit: type=1800 audit(1786767398.072:256): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1344" name="file1" dev="loop4" ino=1048685 res=0 errno=0 [ 761.696549][ T4499] kworker/u4:15: attempt to access beyond end of device [ 761.696549][ T4499] loop0: rw=1, sector=5112, nr_sectors = 3304 limit=256 [ 763.220222][T10433] fuse: Bad value for 'fd' [ 763.819340][T10434] loop4: detected capacity change from 0 to 512 [ 764.052619][T10434] EXT4-fs (loop4): Test dummy encryption mode enabled [ 764.189039][T10434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 764.508458][T10434] EXT4-fs (loop4): 1 truncate cleaned up [ 764.645606][T10434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 765.930627][T10460] capability: warning: `syz.4.1351' uses deprecated v2 capabilities in a way that may be insecure [ 766.019264][T10459] loop0: detected capacity change from 0 to 512 [ 766.071529][T10459] FAT-fs (loop0): Directory bread(block 199916) failed [ 766.078639][T10459] FAT-fs (loop0): Directory bread(block 199917) failed [ 766.086239][T10459] FAT-fs (loop0): Directory bread(block 199918) failed [ 766.093462][T10459] FAT-fs (loop0): Directory bread(block 199919) failed [ 766.100444][T10459] FAT-fs (loop0): Directory bread(block 199920) failed [ 766.107450][T10459] FAT-fs (loop0): Directory bread(block 199921) failed [ 766.114569][T10459] FAT-fs (loop0): Directory bread(block 199922) failed [ 766.121609][T10459] FAT-fs (loop0): Directory bread(block 199923) failed [ 766.296878][T10459] FAT-fs (loop0): FAT read failed (blocknr 128) [ 766.556399][T10476] overlayfs: failed to clone upperpath [ 767.547444][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 774.125092][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1369'. [ 775.462544][T10534] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 775.563652][T10533] loop0: detected capacity change from 0 to 131072 [ 775.572269][T10533] F2FS-fs (loop0): invalid crc value [ 775.780991][T10533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 775.820909][T10533] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 775.850501][T10533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 776.954965][T10548] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 778.558976][T10564] loop2: detected capacity change from 0 to 2048 [ 778.602388][T10564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.050464][T10579] futex_wake_op: syz.0.1377 tries to shift op by 144; fix this program [ 780.084578][T10579] loop0: detected capacity change from 0 to 256 [ 781.133561][T10579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 781.184733][ T26] audit: type=1800 audit(1786767417.682:257): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1377" name="file1" dev="loop0" ino=1048686 res=0 errno=0 [ 781.606568][ T76] kworker/u4:4: attempt to access beyond end of device [ 781.606568][ T76] loop0: rw=1, sector=5640, nr_sectors = 2776 limit=256 [ 784.846591][T10607] loop0: detected capacity change from 0 to 256 [ 786.191358][T10607] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 786.225118][T10606] futex_wake_op: syz.0.1385 tries to shift op by 144; fix this program [ 786.312046][ T26] audit: type=1800 audit(1786767422.712:258): pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1385" name="file1" dev="loop0" ino=1048687 res=0 errno=0 [ 786.469565][T10608] input: syz0 as /devices/virtual/input/input11 [ 786.899959][ T46] kworker/u4:3: attempt to access beyond end of device [ 786.899959][ T46] loop0: rw=1, sector=8104, nr_sectors = 312 limit=256 [ 787.166095][T10614] libceph: resolve ' [ 787.166095][T10614] -&fYǝa2i [ 787.166095][T10614] .?&*&' (ret=-3): failed [ 788.630197][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 788.681296][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1393'. [ 788.723576][T10630] openvswitch: netlink: Flow key attr not present in new flow. [ 788.846891][T10621] netlink: 'syz.5.1393': attribute type 1 has an invalid length. [ 793.382883][T10671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1404'. [ 798.028315][T10712] loop5: detected capacity change from 0 to 7 [ 798.813049][T10712] Dev loop5: unable to read RDB block 7 [ 798.818714][T10712] loop5: AHDI p1 p2 p3 [ 798.823029][T10712] loop5: partition table partially beyond EOD, truncated [ 798.830702][T10712] loop5: p1 start 1601398130 is beyond EOD, truncated [ 798.837544][T10712] loop5: p2 start 1702059890 is beyond EOD, truncated [ 805.675957][T10759] input: syz1 as /devices/virtual/input/input12 [ 805.831540][T10752] overlayfs: failed to resolve './bus': -2 [ 808.443832][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.472149][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.321817][T10786] loop2: detected capacity change from 0 to 128 [ 810.703430][T10786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 810.713251][T10786] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 810.946347][T10784] fscrypt: Error allocating hmac(sha512): -2 [ 811.049152][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 811.064248][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.073832][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.316953][T10845] loop2: detected capacity change from 0 to 256 [ 819.328733][T10845] exfat: Deprecated parameter 'namecase' [ 819.797419][T10845] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 820.932767][T10857] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1445'. [ 820.967460][T10857] loop4: detected capacity change from 0 to 512 [ 821.397637][T10857] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 821.492213][T10857] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 821.511205][T10857] EXT4-fs (loop4): Remounting filesystem read-only [ 821.519941][T10857] EXT4-fs (loop4): 1 truncate cleaned up [ 821.525714][T10857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 821.755580][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 822.268667][T10864] loop5: detected capacity change from 0 to 131072 [ 822.338644][T10864] F2FS-fs (loop5): invalid crc value [ 822.344432][ T4322] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 822.504620][T10864] F2FS-fs (loop5): Found nat_bits in checkpoint [ 822.541836][ T4322] usb 3-1: Using ep0 maxpacket: 32 [ 822.547835][T10864] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 822.549131][ T4322] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 822.568140][T10864] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 823.952332][T10877] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 824.051954][ T4322] usb 3-1: config 0 has no interface number 0 [ 824.071047][ T4322] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 824.118667][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.128727][ T4322] usb 3-1: Product: syz [ 824.141805][ T4322] usb 3-1: Manufacturer: syz [ 824.156130][ T4322] usb 3-1: SerialNumber: syz [ 824.180970][ T4322] usb 3-1: config 0 descriptor?? [ 824.199189][ T4322] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 824.949337][ T4322] usb 3-1: qt2_attach - failed to power on unit: -71 [ 824.961002][ T4322] quatech2: probe of 3-1:0.51 failed with error -71 [ 825.615332][ T4322] usb 3-1: USB disconnect, device number 6 [ 835.777962][T10944] futex_wake_op: syz.3.1470 tries to shift op by 144; fix this program [ 835.839957][T10943] loop5: detected capacity change from 0 to 512 [ 836.132815][T10943] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 837.600992][T10943] EXT4-fs: error -4 creating inode table initialization thread [ 838.342325][T10943] EXT4-fs (loop5): mount failed [ 843.308521][T10992] syz.5.1481 sent an empty control message without MSG_MORE. [ 849.422144][T11031] netlink: 'syz.5.1492': attribute type 5 has an invalid length. [ 849.430284][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1492'. [ 849.456681][T11031] debugfs: Directory ' j!(=|l'r00000000000000000003' with parent 'ieee80211' already present! [ 850.097651][T11036] futex_wake_op: syz.2.1494 tries to shift op by 144; fix this program [ 850.164657][T11036] loop2: detected capacity change from 0 to 256 [ 850.217006][T11036] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 850.353138][ T26] audit: type=1800 audit(1786767486.752:259): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1494" name="file1" dev="loop2" ino=1048688 res=0 errno=0 [ 852.274714][ T76] kworker/u4:4: attempt to access beyond end of device [ 852.274714][ T76] loop2: rw=1, sector=1472, nr_sectors = 5616 limit=256 [ 852.350988][ T76] kworker/u4:4: attempt to access beyond end of device [ 852.350988][ T76] loop2: rw=1, sector=7088, nr_sectors = 1328 limit=256 [ 852.759005][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 852.769485][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 852.778367][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 852.789052][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 852.797086][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 852.806923][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 852.887442][ T4419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.027305][ T4419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.094430][ T4419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.188749][ T4419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.370553][T11050] chnl_net:caif_netlink_parms(): no params data found [ 854.921851][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 855.899065][T11078] jffs2: notice: (11078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 856.100936][T11062] overlayfs: failed to resolve './bus': -2 [ 856.324390][T11057] ------------[ cut here ]------------ [ 856.329889][T11057] memcpy: detected field-spanning write (size 128) of single field "&entry->caller" at kernel/trace/trace.c:3091 (size 64) [ 856.342862][T11057] WARNING: CPU: 1 PID: 11057 at kernel/trace/trace.c:3091 __ftrace_trace_stack+0x3ce/0x530 [ 856.353008][T11057] Modules linked in: [ 856.356900][T11057] CPU: 1 PID: 11057 Comm: syz.5.1497 Not tainted syzkaller #0 [ 856.364384][T11057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.374578][T11057] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 856.380572][T11057] Code: fe ff ff e8 d4 4f fc ff c6 05 2a c1 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7a 90 8a 4c 89 ee 48 c7 c2 00 92 90 8a e8 02 da c7 ff <0f> 0b e9 25 fe ff ff e8 a6 4f fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 856.400428][T11057] RSP: 0018:ffffc90003b478b8 EFLAGS: 00010246 [ 856.406533][T11057] RAX: 52b54a6a23b2cf00 RBX: ffff8880177b8028 RCX: ffff88802e9a0000 [ 856.414555][T11057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 856.422601][T11057] RBP: ffff8880177b8018 R08: ffffc90003b47547 R09: 1ffff92000768ea8 [ 856.430589][T11057] R10: dffffc0000000000 R11: fffff52000768ea9 R12: ffff8880b8f2b5e0 [ 856.438624][T11057] R13: 0000000000000080 R14: ffff8880177b8010 R15: 0000000000002b31 [ 856.446644][T11057] FS: 0000555569b8b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 856.455642][T11057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.462258][T11057] CR2: 0000001b31e07ff8 CR3: 00000000731e8000 CR4: 00000000003526e0 [ 856.470251][T11057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 856.478267][T11057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 856.486279][T11057] Call Trace: [ 856.489569][T11057] [ 856.492546][T11057] stacktrace_trigger+0xf0/0x140 [ 856.497611][T11057] ? stacktrace_trigger_print+0xe0/0xe0 [ 856.503210][T11057] ? trace_event_buffer_commit+0x236/0x780 [ 856.509038][T11057] event_triggers_post_call+0xfd/0x180 [ 856.514555][T11057] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 856.521870][T11057] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 856.528569][T11057] ? __timer_delete_sync+0x239/0x2e0 [ 856.533962][T11057] ? timer_delete_sync+0x20/0x20 [ 856.538918][T11057] stimer_cleanup+0x3a7/0x430 [ 856.543714][T11057] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 856.548581][T11057] kvm_arch_vcpu_destroy+0xba/0x270 [ 856.553906][T11057] kvm_destroy_vcpus+0xdd/0x250 [ 856.558849][T11057] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 856.564793][T11057] ? kvm_arch_destroy_vm+0x312/0x410 [ 856.570093][T11057] ? __kmem_cache_free+0xb6/0x200 [ 856.575186][T11057] kvm_arch_destroy_vm+0x31a/0x410 [ 856.580312][T11057] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 856.585896][T11057] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 856.591366][T11057] ? synchronize_srcu+0x18f/0x1b0 [ 856.596536][T11057] ? mmu_notifier_unregister+0x302/0x390 [ 856.602280][T11057] ? mmu_notifier_unregister+0xad/0x390 [ 856.607870][T11057] kvm_put_kvm+0xdbb/0x1a10 [ 856.612440][T11057] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 856.617740][T11057] kvm_vm_release+0x42/0x50 [ 856.622287][T11057] __fput+0x20a/0x8b0 [ 856.626360][T11057] task_work_run+0x1d0/0x260 [ 856.631040][T11057] ? task_work_cancel+0x220/0x220 [ 856.636110][T11057] ? __close_range+0x20c/0x770 [ 856.640917][T11057] ? exit_to_user_mode_loop+0x3b/0x110 [ 856.646491][T11057] exit_to_user_mode_loop+0xe6/0x110 [ 856.651823][T11057] exit_to_user_mode_prepare+0xee/0x180 [ 856.657392][T11057] syscall_exit_to_user_mode+0x16/0x40 [ 856.662925][T11057] do_syscall_64+0x58/0xa0 [ 856.667382][T11057] ? clear_bhb_loop+0x60/0xb0 [ 856.672193][T11057] ? clear_bhb_loop+0x60/0xb0 [ 856.676887][T11057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.682825][T11057] RIP: 0033:0x7fb28f39e0d9 [ 856.687266][T11057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.706940][T11057] RSP: 002b:00007ffc935d5eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 856.715398][T11057] RAX: 0000000000000000 RBX: 00007fb28f627da0 RCX: 00007fb28f39e0d9 [ 856.723425][T11057] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 856.731419][T11057] RBP: 00007fb28f627da0 R08: 0000000000000006 R09: 0000000000000000 [ 856.739440][T11057] R10: 00007fb28f627cb0 R11: 0000000000000246 R12: 00000000000d10a5 [ 856.747456][T11057] R13: 00007fb28f62618c R14: 00000000000d1073 R15: 00007fb28f626180 [ 856.755489][T11057] [ 856.758528][T11057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 856.765805][T11057] CPU: 1 PID: 11057 Comm: syz.5.1497 Not tainted syzkaller #0 [ 856.773258][T11057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.783313][T11057] Call Trace: [ 856.786583][T11057] [ 856.789500][T11057] dump_stack_lvl+0x188/0x24e [ 856.794166][T11057] ? memcpy+0x3c/0x60 [ 856.798235][T11057] ? show_regs_print_info+0x12/0x12 [ 856.803442][T11057] ? load_image+0x410/0x410 [ 856.807965][T11057] panic+0x2d3/0x710 [ 856.811855][T11057] ? bpf_jit_dump+0xd0/0xd0 [ 856.816351][T11057] __warn+0x2f8/0x4f0 [ 856.820313][T11057] ? __ftrace_trace_stack+0x3ce/0x530 [ 856.825672][T11057] ? __ftrace_trace_stack+0x3ce/0x530 [ 856.831024][T11057] report_bug+0x2ba/0x4f0 [ 856.835356][T11057] ? __ftrace_trace_stack+0x3ce/0x530 [ 856.840710][T11057] handle_bug+0x3a/0x70 [ 856.844851][T11057] exc_invalid_op+0x16/0x40 [ 856.849337][T11057] asm_exc_invalid_op+0x16/0x20 [ 856.854198][T11057] RIP: 0010:__ftrace_trace_stack+0x3ce/0x530 [ 856.860174][T11057] Code: fe ff ff e8 d4 4f fc ff c6 05 2a c1 86 0c 01 b9 40 00 00 00 48 c7 c7 60 7a 90 8a 4c 89 ee 48 c7 c2 00 92 90 8a e8 02 da c7 ff <0f> 0b e9 25 fe ff ff e8 a6 4f fc ff 48 8b 3c 24 4c 89 f6 e8 5a 88 [ 856.879771][T11057] RSP: 0018:ffffc90003b478b8 EFLAGS: 00010246 [ 856.885844][T11057] RAX: 52b54a6a23b2cf00 RBX: ffff8880177b8028 RCX: ffff88802e9a0000 [ 856.893800][T11057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 856.901755][T11057] RBP: ffff8880177b8018 R08: ffffc90003b47547 R09: 1ffff92000768ea8 [ 856.909708][T11057] R10: dffffc0000000000 R11: fffff52000768ea9 R12: ffff8880b8f2b5e0 [ 856.917666][T11057] R13: 0000000000000080 R14: ffff8880177b8010 R15: 0000000000002b31 [ 856.925632][T11057] ? __ftrace_trace_stack+0x3ce/0x530 [ 856.930992][T11057] stacktrace_trigger+0xf0/0x140 [ 856.935918][T11057] ? stacktrace_trigger_print+0xe0/0xe0 [ 856.941476][T11057] ? trace_event_buffer_commit+0x236/0x780 [ 856.947267][T11057] event_triggers_post_call+0xfd/0x180 [ 856.952726][T11057] trace_event_raw_event_kvm_hv_stimer_cleanup+0x14b/0x220 [ 856.959907][T11057] ? perf_trace_kvm_hv_stimer_expiration+0x3b0/0x3b0 [ 856.966564][T11057] ? __timer_delete_sync+0x239/0x2e0 [ 856.971843][T11057] ? timer_delete_sync+0x20/0x20 [ 856.976761][T11057] stimer_cleanup+0x3a7/0x430 [ 856.981427][T11057] kvm_hv_vcpu_uninit+0x4f/0xa0 [ 856.986260][T11057] kvm_arch_vcpu_destroy+0xba/0x270 [ 856.991446][T11057] kvm_destroy_vcpus+0xdd/0x250 [ 856.996290][T11057] ? kvm_mmu_memory_cache_alloc+0x100/0x100 [ 857.002167][T11057] ? kvm_arch_destroy_vm+0x312/0x410 [ 857.007431][T11057] ? __kmem_cache_free+0xb6/0x200 [ 857.012443][T11057] kvm_arch_destroy_vm+0x31a/0x410 [ 857.017533][T11057] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 857.023059][T11057] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 857.028508][T11057] ? synchronize_srcu+0x18f/0x1b0 [ 857.033514][T11057] ? mmu_notifier_unregister+0x302/0x390 [ 857.039140][T11057] ? mmu_notifier_unregister+0xad/0x390 [ 857.044668][T11057] kvm_put_kvm+0xdbb/0x1a10 [ 857.049156][T11057] ? kvm_vm_compat_ioctl+0x3a0/0x3a0 [ 857.054417][T11057] kvm_vm_release+0x42/0x50 [ 857.058896][T11057] __fput+0x20a/0x8b0 [ 857.062861][T11057] task_work_run+0x1d0/0x260 [ 857.067433][T11057] ? task_work_cancel+0x220/0x220 [ 857.072436][T11057] ? __close_range+0x20c/0x770 [ 857.077185][T11057] ? exit_to_user_mode_loop+0x3b/0x110 [ 857.082625][T11057] exit_to_user_mode_loop+0xe6/0x110 [ 857.087889][T11057] exit_to_user_mode_prepare+0xee/0x180 [ 857.093415][T11057] syscall_exit_to_user_mode+0x16/0x40 [ 857.098851][T11057] do_syscall_64+0x58/0xa0 [ 857.103247][T11057] ? clear_bhb_loop+0x60/0xb0 [ 857.107906][T11057] ? clear_bhb_loop+0x60/0xb0 [ 857.112565][T11057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.118437][T11057] RIP: 0033:0x7fb28f39e0d9 [ 857.122832][T11057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.142416][T11057] RSP: 002b:00007ffc935d5eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 857.150804][T11057] RAX: 0000000000000000 RBX: 00007fb28f627da0 RCX: 00007fb28f39e0d9 [ 857.158754][T11057] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 857.166701][T11057] RBP: 00007fb28f627da0 R08: 0000000000000006 R09: 0000000000000000 [ 857.174651][T11057] R10: 00007fb28f627cb0 R11: 0000000000000246 R12: 00000000000d10a5 [ 857.182602][T11057] R13: 00007fb28f62618c R14: 00000000000d1073 R15: 00007fb28f626180 [ 857.190561][T11057] [ 857.193826][T11057] Kernel Offset: disabled [ 857.198140][T11057] Rebooting in 86400 seconds..