last executing test programs: 1m27.329028384s ago: executing program 2 (id=1272): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x977, 0x1c080, 0x0, 0x44a}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) io_uring_enter(r0, 0x2219, 0x35a5, 0x16, 0x0, 0x0) 1m26.247396887s ago: executing program 2 (id=1277): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='012', 0x3) close(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='184', 0x3) close(r1) open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 1m25.699645731s ago: executing program 2 (id=1278): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003680)='/sys/kernel/rcu_normal', 0x2000, 0x92) syz_clone3(&(0x7f00000036c0)={0x8000000, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f00000003c0)=""/206, 0xce, &(0x7f00000004c0)=""/138, 0x0, 0x0, {r1}}, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = dup2(r2, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000580)=0xa300010) connect$inet6(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x2, 0x5, 0x80000002, 0x0, 0x0, 0x14ffffff) r4 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x37}}, {@uid_gt={'uid>', 0xee00}}]}}, 0x0, 0x0, &(0x7f0000000180)="c84e3a8582b62d396e11a4a707bc091aaa72e89dccc57c312c77670ae47584adbf7854f05efe746c5d153087ea740dcb01f1307c3edac98136175c6d7d58c0d899594ca5988aa860105abee55aa4d828ccb93927bec2a3f4865fb84888f0bd71ad90a0489a6166a8c8e9438ac36343a0dd44f2c7a14bb454f0ea4e60c19c2c7a8f0c73c1d6c7bf41b99b8512a47e7825cf21bf7023232c3c36f6fbdaa39dd48a35531bdb2fe7bddf596fd01b8d473aa66804a2c92cd2632e318dea9c98e086dca90c1e") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) fchmodat(r4, &(0x7f0000000380)='./file0\x00', 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4840) r7 = fsopen(&(0x7f0000000140)='hfs\x00', 0x1) close_range(r7, 0xffffffffffffffff, 0x0) inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1m21.45575712s ago: executing program 2 (id=1282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x800, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x800, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x100, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x2, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x5, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x46b, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x3, 0x0, 0x8, 0x8, 0x53, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0xfffffffe, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x5, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x5, 0x4, 0x9, 0x8}, {0x7, 0x2, 0x2, 0x1, 0x2400, 0x5}, 0xc71, 0xc716, 0x1426}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f00000007c0)}, 0x20004014) 1m17.40386869s ago: executing program 2 (id=1299): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400030080000900", 0x33a) 1m16.970733605s ago: executing program 2 (id=1303): r0 = getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7ffcfffc}]}) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) r6 = pidfd_getfd(r1, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r6, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000001740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a80)=ANY=[@ANYRESOCT=r7, @ANYRES8=r9, @ANYRES32=r5, @ANYRESDEC=r8, @ANYRESHEX=r1], 0x190}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(r4, 0x1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) 1m1.760110086s ago: executing program 32 (id=1303): r0 = getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7ffcfffc}]}) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x44}], 0x1, 0x20, 0x0) r6 = pidfd_getfd(r1, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r6, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000001740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a80)=ANY=[@ANYRESOCT=r7, @ANYRES8=r9, @ANYRES32=r5, @ANYRESDEC=r8, @ANYRESHEX=r1], 0x190}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(r4, 0x1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) 36.23555065s ago: executing program 3 (id=1425): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x10000000200) 35.918051584s ago: executing program 3 (id=1428): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x11, 0x148, 0x0, 0x0, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x200, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3, 0x6, 0x6, 0x8, 0x6e69}}, @common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x10, 0x8, 0x40, 0x6, 0x0, 0x3, 0x5, 0xa, 0x0, 0x20}, {0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x6, 0x6, 0x5, 0x6], 0x1}, {0xffffffffffffffff, [0x1, 0x6, 0x7, 0xe, 0x4, 0x3], 0x1, 0x6}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 35.595707695s ago: executing program 3 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)=0x0) ptrace$ARCH_GET_FS(0x1e, r7, &(0x7f0000000100), 0x1003) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}}, 0x20}}, 0x0) 33.103334295s ago: executing program 3 (id=1439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf2564010101000000000000000000000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000ac141435000000000000000000000000040000000000000002000000000000000104000000000000080000000000000000000000000000000700000000000000100000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fcffffffffffffff0200000000000000000000002cbd7000043500000a00010050000000000000001c0004000200"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 32.615531914s ago: executing program 3 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 30.722849711s ago: executing program 3 (id=1451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0) 15.274322763s ago: executing program 33 (id=1451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0) 10.125845714s ago: executing program 6 (id=1555): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa241, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x1) 8.413542178s ago: executing program 6 (id=1559): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 6.890070177s ago: executing program 6 (id=1565): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000500)="9de0c7962c", &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "6df79342a9984f6868f47218a5f4500cc3beff6184277dc0935af46ae405b0f24d04b0e93b3edcd14a688b54df418e157fd95c90c70f834ac0bea2479d3ba800bf76b39c8e5b7ad9666f38c1c2631c5727830869c660580f79dad694531ade4367d1106fc0ad8213e615f1a38ae677d7db6b2ba14d3aef04b8133710c146fc41593d398c05333d81eb48dbcbf20946ad8d8f26d30f0a1c31c3d088a11ba975b1c76b70e42312ec79128c7c24b98d98b59d165a8fb9dc005e3f937fcc6842ac6a7a1ee142bb5de997a59244e0137af359a9581add0d7daa2782386fa7ccaeae36aacac738c2571919136e508ed7b1e83e19b4a5fe9b928106f5aea4280a6326f0c45c3de2e56676f83f3248fa49ead371c16f50d1b944161c2941e9d15243a0fe5252156844f0c6a48d1949c1f1d937dd064f3a7bb0c8a3b35733d3bee6ea088ddf96676abe784fbcb2b5e04a4d927de9ed53ca625219b5a4e987bfe3e6e571bad65dab4d081fa472c825b6e7a75b86fad5cc0e1ddf15b3ae6710e79e3de2e98c131b3b936f3add6692c843b06120f06cf36abca6908a4726d63c94823dc4d0767ce7d07c99e06f7fa98f6134976552cfeb3562da5044c3e3593f354cabf5cdd7a5ca7c00546988e1874af4bede37bc5cb0ed6a28f765184c70ee5ab813363df7771682075ae265f8f34846d1008b59eb25bb50070880c608e673c3679324b8d917f4c151f353233b1bfedb66041212067146fc3fa1fa36d547608f16fd8d61c643e9851adcc8f82cbf45c2b69bbf935f7514e2a4082ea9f822bfdf1d26c15379aa46741da7cbc659c51f727b49c10b13d401122392b1910f29634de116710bebe0809573faa1811d985b9f65d736f13578d6bf307486df37ccbd909aec584ed3ff86b64a5cbbe7fd16f265c6dfcbf8696670ab02a2f2849e243510e1eb0a21b0e3a6064a010b63ad960ffe56e5591cf8fa845197ddf1efe9598024b44e76a8baa0fca52388d257aaf94ae3c03323cca842d16bca3a446e41f4be5ab504db78159ae979705c35e603954cb94dc259e3cb879de99212771428c97bea627a753d205696a07419f5f9d99463987cf52cda56ef71847b2ef3b262ce9acb43a8b17d8d255389b79d8a91dc688b41a291f0e60b1e5dc7929787f07a642eec8e644af63e293c4da4fb2248bd66734db7ce0e006c2e4f4510b029d2bc0769487cde6fb2cf6f11e4f78a09a9d041725d96cce9e3cd5a31524eb811beab5e822cf2a8773444878e3f04213b2a6c51157f8174243554223a016613ff6e3e30eab14bb1e859d700cdda697af2ae375304805e7369f30f03ad085864b6af4c3555f2e43b5714f356a6d259b68164b80e0f68cb10d4717d87af1a84383b81bfbae0e821a21cb0dfc47d64da0418aa0009386fbcd6f5476b80578f09faa35bbd3f29cef71292d05fb2581a837282f6beb82ab081c7cd452856b971f0b8dcd95218cab04471c2037f206b71d9e4b6d439adc259a97a640e2d7a907b801db5d702cbc34354d9cfe85d21a1652175fc7fe3c3ab00ed1abe361cf97a445525c22a2f3029dae1dc87e71761f0a13863d364edbae2d04c8ff17624166b5186f2c1def031d1885b242daf26b7df4b2f16b03d7ef02139c8b23bd7aa5869324733ca334d2c3033a543c79ee09b9758a932da58345ea265fb0dbdfc2dd912f16c1b0b02d89aa0e696d07e54d48f982003fae6d448a7d4bac91b2d8c8dc915d647df96b930769eaa54245fa870043dfa7640203897b21fa7c8ec9a861650708007cd89b7ce361a195bc6f8a52a1187a190155e51f2cc3d80b4512e8bcae403eff774626b4f3fdcdefef76f87e625fcddf9c21087d39cfc8ae3673e6b45508c35ac1d53f7c8f708785e84f37aa816f400d7b503b96d4f851005aebc9a6ffb0b3378998a25485fad0d7b6357df8db299ee5d4b1e9cbe93c9a6cf0db6ded788e56bcf2b16363388862679fd0c7e9c779f23ee11849e477c73741a4c0a39ce847e72e2b6062aa2adddb09d12a97a01e7a50e2d697c879ac079e801b34334cd30e0a808d30597609ea61e436abf8d6b3fbe097b75c4dc444af837b37fb34caf05e2e6d814b99133cad4c763415071141b081af7820a020a46f5201f795ab4cbaa06a40e76af5f6981646a59b1467286e42adafafa7cc00ad3b6788cc4ba07a8d81ae00547c4ab8648be22bc0c6621e170b75da679d81b795fa7a7efd368ed0e954081153544cf41b3851d2d00171e30c3b56739c5c853010167c44f53cb5ffb00a5fdfb7a11c1f8961e7c23987e1c4dc7168ea5fa8f49dd72102fd448a8803546238aa63a2571b489430d18921136fe42fabf5086004fe3f6e22fa1dd0b39f92cf22040a4e887690ac0c74de934685b6fe9a0e8df36eaee4dadcaca5c48c5737b2bfb33f094abb8c49b5bc4899b5a95bdd1180cdb37f252436ef3ae35e1e3a3d79144fc3c54b50e15d3535be02fda038f5011fd8951388154039c799f18fac97e4d504dc1b5582e3b799a63e7173a4f6202afd7e8cfe4bd0be65f7816ad744c98d597f506fc545aabba4c480b198e9741f91edbeb1c0c525b02883de998f4eaf646fe3d3c320991180afccc4e7cd9f14c90b6c1366edb82615b4e0ac8862e6ea043bd34c27c978a1c1ac28b47f8f67082a1361359cc038e3617d2ce5123490151b70e030865df89b9510e2643d08ea531231c4db7c1f80eb113267556fe56868b78a6dda37ec946eb6e40b49458b450ed2dcad5445d56d6ee1bc6750a84a36466a2623973047f4a9b5a282d213bd5770d698946528c533f826a6b697a6772e37b28a14422126b7bd869e7f1bab47e5a43fb7f5580db9b318189ed9f661afd5e820132c803b4f4e55e05a1ae22191ae16f8c7bb9c9494f18a8237b4ea61be46b2f0a0a82dc802f82632a2aca37a319b40aa2510db9e3409e52e36dccfc57c8937927d132947d4fd7272266c98d5bad0ff3113e80483f3c508739297626034783f7f09e2c7195d75de6ccb4ff503b0d12987a3db7b183876b4094a687454ea1cf8b62a77ed705524c4d58d3df347204b9b8af5e87db23df3e306141e28f30df24e5b33952918603ab94ce41268d742e1a3cf2b16ca5f77fcaadb0bd9380f353b4f6eb2945e70655edf46b3e5ef427d26a7bf4485cc9bce1f25aca2f70d6a1711c9a9810c36bc441dc829082fd7ab066b4dd3a78274571f5615d070bc5fdf4adaa4d633c233e0744a6f149d6d7d4cf756d4822ea12feeea2419229cffef6e78d950d6ac06b4e750114b304e704e901b1a23d4817e6baced272f157d860ab1b47f1454e9e8d616ef15571a63f4efcd65a57e38b255b84ccffa4dbc39b05e288252b5d435e0035a06e78ca229c108d6152aa86a7c787fb5552e3444544cbadc587a5e8306f44b405dd33258dddb2a0d4e5e2c8a93d939ae357ae4fd595bc78285dfb00b6ed9abae5b5f8492d2d905e68222bb59c7570c06c096407e2d80aadbbe3ce5df92774e83d819be4703b058c7664d6562cfe8311eb948b04c7398f823d28242289f750c2a8459b4469f172416447a340b7e5c78563d3f2f0a905d9fcd137f12c84181ca50eb8e1cf9dbc9f1eb1449bd81739818094dd32c1b7bee15c7734db0faa5c5d167e383e9cba56f039cc5e9bff96b013f7a1b4837e1e6d626c5ce42ccade8d39f9254aaadcd848931429768aecc4a41e69fd9f73df5f46a668f934dc591653280f78b15ea97d71bd1efc6a94b8d9fd284985b9179b4670432b72cc82b59029a3072bd8b60e6f0f7b6ec7799248393d2927f4a330179259d90969675f0a9adcd210e9bb7fd0b59f23172538500c3f3735daf7363c3172a35493a5ec191b54c9e60597caef31bce22945bace7c499bb1d8f770a8c2308bf781532d46f038feaad6886437e1e4d7a66e0286f7e1d38011d373a1e776fd854b81a320892d567a09764e880f67c031cf934d2aeb74e4def0bd1325d866928d303c9371663b87015c2087d681d19dff15b2082ee2afd057062519f8709209cb2b2c92aae8f93310591cd7387d3713011ce713d210c1674306d2aaee87a7b2e79e4588c2d4c3ed28e8e226ada391bcb6371a76de677cff44285217b2ba4487797b68a5ab9277fe78444b9d4b996d1b834a5a44dd140acbcc77e472d99ec90de7cfbb97b5b8bfe1e6c79f97184a15d656e155af64c14bea2ff5609e0f8e96426bba82ab3d5196946b3f6cd5486f005ece8331b6e65072c0e3dbc53c577b0e3475878feecd60b6acb9df65ded5a3cd4f0d3d985539100e99769145bae01286b67a941e976082f798c01acbb9289a30a32a15aaeac54b3fcacbeac9e357ed1749993b7c4f31f9486e0b53d8fb94c1bdd6ce93bcb3f848bd6786846e0c1b628599d78f97ef30520438c7a8c8ce5f94b4fbfb3e6c91da4e28b018d8df80aa2b6de019da19b84bc33d457f5face162d057446e87bcf7cd5eacdb27a9697603e065487b979391aab976265ca13fd04ff056fedd69b5340446920daf8c3cec52ce188c88e6b6b62909dfe85805700abc847aa2567ae3e50d40a5848505309c378c2a751cfd494fe4411b623d5804d9506d3813b429d87e15d1096f919388f28f600b46cf12afa482680503ea86e3f0150e897d44f1f556685fa8efe9e2065a8205ba60a9e74702bd981aa87648a22e755fe23b569dac43cfb08e36cff5f5c2ef65cca2477fa950d6df669393b2ef61ad471fd32cc281371dad43e41fe44b48a356f148ce4fe6eaf9e880bb125c0cd243fd465c3f45"}}}}}}}, 0x0) 6.700166226s ago: executing program 1 (id=1566): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x5f, 0xf]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) 6.415109044s ago: executing program 1 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 6.34092921s ago: executing program 4 (id=1568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00010000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014"], 0x2c}}, 0x0) 5.224829078s ago: executing program 6 (id=1569): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10002, 0x0) bind$can_raw(r0, &(0x7f00000005c0), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) 5.143190233s ago: executing program 1 (id=1570): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) 4.881758092s ago: executing program 4 (id=1572): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x92) syz_clone3(&(0x7f00000036c0)={0x8000000, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f00000003c0)=""/206, 0xce, &(0x7f00000004c0)=""/138, 0x0, 0x0, {r1}}, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = dup2(r2, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000580)=0xa300010) connect$inet6(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(0x0, 0x5, 0x80000002, 0x0, &(0x7f0000000000)=0x8001, 0x14ffffff) r4 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}]}}, 0x0, 0x0, &(0x7f0000000180)="c84e3a8582b62d396e11a4a707bc091aaa72e89dccc57c312c77670ae47584adbf7854f05efe746c5d153087ea740dcb01f1307c3edac98136175c6d7d58c0d899594ca5988aa860105abee55aa4d828ccb93927bec2a3f4865fb84888f0bd71ad90a0489a6166a8c8e9438ac36343a0dd44f2c7a14bb454f0ea4e60c19c2c7a8f0c73c1d6c7bf41b99b8512a47e7825cf21bf7023232c3c36f6fbdaa39dd48a35531bdb2fe7bddf596fd01b8d473aa66804a2c92cd2632e318dea9c98e086dca90c1e") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) fchmodat(r4, &(0x7f0000000380)='./file0\x00', 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4840) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 4.691078447s ago: executing program 1 (id=1573): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000203090000000000000000000200000008000440000000100800010000000100002c090002000000ec4101000000090002000000000802000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x200488cc) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_pressure(r8, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) 4.003255569s ago: executing program 4 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.920554387s ago: executing program 0 (id=1575): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='01234', 0x5) close(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='72', 0x2) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='184', 0x3) close(r1) open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 3.735695362s ago: executing program 5 (id=1576): syz_io_uring_setup(0x13e5, &(0x7f00000000c0)={0x0, 0x434b, 0x1000, 0x3, 0x341}, &(0x7f0000000140), &(0x7f00000001c0), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) 3.682629637s ago: executing program 6 (id=1577): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x1, 0x7ff, 0x1}, {0x4, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.526950947s ago: executing program 0 (id=1578): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400c080) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x47) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="8002000043000701fefffffffcdbdf25017c0000040045806802018064029f8004002f80", @ANYBLOB='\b\x00i\x00', @ANYRES32, @ANYRES32, @ANYBLOB="08009600", @ANYRES32=0x0, @ANYBLOB="0800a1", @ANYRESHEX=r3, @ANYBLOB="8708c8e339d794ed9adc67ed148a0b9f92c24a0879e3b7427ada6a212a30fc6fbe729f741ae4111437957ab1b351035fd5930a5acc1e001e80a55b3e436517a02ac511d4a2a934f9196ae16d27e05a8afa51e2000000000008001a00", @ANYRES32, @ANYBLOB="2200ec0085abe5dd4f565397591c5c49b8a10546ac218800c3af8a2dc1601d0b952400002552869e228a94da22cd735e3bba5fea1c3ff1a45d8bc0ee0ca29b8c2ec63199ff514fef47d8da0e25fd9ea73c082394001bc21d9307122008b2957b7c98342f502a152beff1e14e77a7b22f03a6077d5edca5369a8498fda2668720376446994b059f73e95cddbde3bbb4679414fecee67c8602f27054d5a955421b8ed287d79af8273a3e8b9e406fe06378560095cb9b27076ea1b79c739c7c4abc7aff9222096fbf172d08004900", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x280}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 3.335724437s ago: executing program 4 (id=1579): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x1d, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01000500000000000000180100001801000006000000060000000300000604000000060000000004000006000000020000000000002d9f0000000200000001000004fcffffff0e000000020000000b0000000200000004000080060000000000000000000000040000000200000005000000070000000700000001000000020000000600000002000000000800000000000000000004000000ffffff7f06000000000000020400000009000000000000010000000005001c02030000000000000a030000000e00000005000084040000000700000002000000018000000700000003000077ff00000c00000004000000080000000e00000002000000050000000100000004000000ae000000000000000000000300000000050000000100000009000000002e002e300000"], &(0x7f0000000a40)=""/161, 0x136, 0xa1, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x95, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x22, r0, 0x8, 0x0, 0x4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x401c}, 0xc000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)) sendmsg$nl_route_sched(r3, 0x0, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.321154529s ago: executing program 5 (id=1580): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$eJzs3d9rFNceAPDvbLLRGK9GELn3crkEfKhF3Jikthb6YB9LKxXadxuSNUg2rmQ3YlKh+lBf+lKkUEqF0j+g730q0n+gf4WlFaRIqAX7sGU2s7pJdvPL1azZzwdG58ycmXPOznxPzuzZZQPoWSPpP7mI/0TEl0nE4aZ9/ZHtHFnJt/zoxlS6JFGrffRHEkm2rZE/yf4fyhL/joifP484mVtfbmVxaXayVCrOZ+nR6tzV0cri0qnLc5MzxZnilfGJibNnJsbffuvNjrX19QuPv/nw3ntnvzi+/PUPD47cSeJcHMz2NbdjQ/s23HuzOTESI9lrko9zazKObafir4BktyvAjvRlcZ6PtA84HH1Z1AN732cRUdu+Jzs4Bug6yU7iH9gDGuOAxrP9lp+D94iH7648AK1vf7Ly3kjsrz8bHVhOVj0Zpc+7wx0oPy3jx9/v3kmX2M77EADP6eatiDjd39++/1vj79qWz316C3nWlqH/g5fnXjr++WkwYl38556Of6LF+GeoRezuxObxn3uwMgnVZKADBWfS8d87Lce/T4sc7stS/6qP+fLJpculYtq3HYqIE5Hfl6Y3ms85u3y/bafZPP5Ll7T8xlgwq8eD/jVzTtOT1cnnaXOzh7ci/rvJ+Ddpcf3T1+PCFss4Vrz7/3b7Nm//i1X7PuK1ltf/2YxWsvH85Gj9fhht3BXr/Xn72C/tyt/t9qfX/8DG7R9OmudrK9sv47v9T4rt9o0k2aTpNu//geTjes/U6AquT1ar82MRA8kH9fSq7ePPjm2kG/nT9p843jr+N7r/ByPiky22//bR222z1q//4d29/tPbuv4brzw+s3JQ867773/6bbvyt9b/vVFfO5Ft2Ur/17aCA6u37PiFAwAAAAAAgC6UG4g4GEmukM3pH4xcrlBY+XzH0TiQK5Ur1ZOXygtXpqP+XdnhyOcaM91DTZ+HGMuOb6THs8/HNtITEXEkIr7qG6ynC1Pl0vRuNx4AAAAAAAAAAAAAAAAAAAC6xFC0/v5/6re+3a4d8ML5yW/oXavif1+LDJ34pSegK/n7D71L/EPvEv/Qu8Q/9C7xD71L/EPv2ln8/+9QxysCvHT+/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBHXTh/Pl1qy49uTEXE/ri2uDBbvnZqupifLcwtTBWmyvNXCzPl8kypWJgqz212vlK5fHVsPBauj1aLlepoZXHp4lx54Ur14uW5yZnixWL+5TQLAAAAAAAAAAAAAAAAAAAAXimVxaXZyVKpON+dK/kOn/DXLmnXHlrp745qWJmvDEYHT7i6n/irVqvtVh8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8EAAD//3hONlo=") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4001000}, 0x8800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x11, 0xc14b, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000), &(0x7f00000000c0)=ANY=[], 0x361, 0x0) 2.22453708s ago: executing program 0 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000200)="001122", 0x3, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) 2.047433327s ago: executing program 5 (id=1582): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000100)='./file2\x00', 0x167842, 0x1fb) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x7) 1.30280187s ago: executing program 4 (id=1583): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b0, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141142, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) 1.079601478s ago: executing program 1 (id=1584): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) 1.075648701s ago: executing program 0 (id=1585): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x804010, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) 963.491861ms ago: executing program 5 (id=1586): unshare(0x2c020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) timerfd_gettime(r0, 0x0) 938.835679ms ago: executing program 6 (id=1587): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$bt_sco(r0, &(0x7f00000004c0)={0x1f, @none}, 0x14) listen(r0, 0xc) accept(r0, 0x0, 0x0) 744.60731ms ago: executing program 1 (id=1588): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10002, 0x0) bind$can_raw(r0, &(0x7f00000005c0), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) 459.257759ms ago: executing program 5 (id=1589): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='01234', 0x5) close(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='72', 0x2) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='184', 0x3) close(r1) open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 420.635032ms ago: executing program 0 (id=1590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}}, 0x0) 260.64113ms ago: executing program 4 (id=1591): r0 = io_uring_setup(0x358f, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) 177.803392ms ago: executing program 5 (id=1592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400c080) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x47) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="8002000043000701fefffffffcdbdf25017c0000040045806802018064029f8004002f80", @ANYBLOB='\b\x00i\x00', @ANYRES32, @ANYRES32, @ANYBLOB="08009600", @ANYRES32=0x0, @ANYBLOB="0800a1", @ANYRESHEX=r3, @ANYBLOB="8708c8e339d794ed9adc67ed148a0b9f92c24a0879e3b7427ada6a212a30fc6fbe729f741ae4111437957ab1b351035fd5930a5acc1e001e80a55b3e436517a02ac511d4a2a934f9196ae16d27e05a8afa51e2000000000008001a00", @ANYRES32, @ANYBLOB="2200ec0085abe5dd4f565397591c5c49b8a10546ac218800c3af8a2dc1601d0b952400002552869e228a94da22cd735e3bba5fea1c3ff1a45d8bc0ee0ca29b8c2ec63199ff514fef47d8da0e25fd9ea73c082394001bc21d9307122008b2957b7c98342f502a152beff1e14e77a7b22f03a6077d5edca5369a8498fda2668720376446994b059f73e95cddbde3bbb4679414fecee67c8602f27054d5a955421b8ed287d79af8273a3e8b9e406fe06378560095cb9b27076ea1b79c739c7c4abc7aff9222096fbf172d08004900", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x280}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 0s ago: executing program 0 (id=1593): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4001000}, 0x8800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x11, 0xc14b, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000), &(0x7f00000000c0)=ANY=[], 0x361, 0x0) kernel console output (not intermixed with test programs): 4-1: new full-speed USB device number 13 using dummy_hcd [ 302.634034][ T5721] usb 4-1: device descriptor read/64, error -71 [ 302.801730][ T8772] syzkaller0: entered promiscuous mode [ 302.827392][ T8772] syzkaller0: entered allmulticast mode [ 302.893674][ T5721] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 303.054540][ T5721] usb 4-1: device descriptor read/64, error -71 [ 303.069466][ T8784] loop5: detected capacity change from 0 to 512 [ 303.121063][ T8784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.189999][ T5721] usb usb4-port1: attempt power cycle [ 303.469949][ T8798] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 303.487827][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.565783][ T5721] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 303.606372][ T5721] usb 4-1: device descriptor read/8, error -71 [ 303.622611][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.900'. [ 303.783045][ T8806] loop4: detected capacity change from 0 to 512 [ 303.806225][ T8806] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 303.873666][ T5721] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 303.935559][ T5721] usb 4-1: device descriptor read/8, error -71 [ 304.065304][ T5721] usb usb4-port1: unable to enumerate USB device [ 304.114726][ T1149] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 304.348090][ T8819] kAFS: unable to lookup cell 'ÿ' [ 304.396929][ T8819] kAFS: unable to lookup cell '(,c¾Ì' [ 304.494990][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.905'. [ 304.776098][ T8821] syzkaller0: entered promiscuous mode [ 304.791711][ T8821] syzkaller0: entered allmulticast mode [ 305.533197][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'. [ 307.064843][ T8855] loop0: detected capacity change from 0 to 512 [ 307.114730][ T8855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.282421][ T8863] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 308.537783][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.769358][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.928'. [ 308.973677][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 309.101172][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 309.101199][ T30] audit: type=1326 audit(1786231086.406:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.158369][ T9] usb 3-1: device descriptor read/64, error -71 [ 309.211154][ T30] audit: type=1326 audit(1786231086.406:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.300531][ T30] audit: type=1326 audit(1786231086.406:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.306147][ T8902] loop5: detected capacity change from 0 to 512 [ 309.373697][ T30] audit: type=1326 audit(1786231086.406:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.410546][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 309.418901][ T8902] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 309.473281][ T30] audit: type=1326 audit(1786231086.406:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.508466][ T8902] EXT4-fs (loop5): 1 truncate cleaned up [ 309.513289][ T30] audit: type=1326 audit(1786231086.406:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.536062][ T8902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.603656][ T9] usb 3-1: device descriptor read/64, error -71 [ 309.670199][ T30] audit: type=1326 audit(1786231086.406:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.717184][ T9] usb usb3-port1: attempt power cycle [ 309.772914][ T30] audit: type=1326 audit(1786231086.406:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.807251][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.826598][ T30] audit: type=1326 audit(1786231086.406:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.846171][ T8908] loop0: detected capacity change from 0 to 512 [ 309.870086][ T30] audit: type=1326 audit(1786231086.406:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 309.927278][ T8908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.084917][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 310.115014][ T9] usb 3-1: device descriptor read/8, error -71 [ 310.518252][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 310.788243][ T9] usb 3-1: device descriptor read/8, error -71 [ 310.872678][ T8918] netlink: 'syz.5.938': attribute type 1 has an invalid length. [ 310.910347][ T9] usb usb3-port1: unable to enumerate USB device [ 311.070006][ T8922] loop1: detected capacity change from 0 to 512 [ 311.115080][ T8922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 311.190900][ T8922] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.940: invalid indirect mapped block 4294967295 (level 0) [ 311.220995][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.273067][ T8922] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 311.274279][ C1] EXT4-fs (loop1): initial error at time 1786231088: ext4_free_branches:1020: inode 16 [ 311.293331][ C1] EXT4-fs (loop1): last error at time 1786231088: ext4_free_branches:1020: inode 16 [ 311.355788][ T8922] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.940: invalid indirect mapped block 4294967295 (level 1) [ 311.408894][ T8922] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 311.419027][ T8922] EXT4-fs (loop1): 1 orphan inode deleted [ 311.476781][ T8922] EXT4-fs (loop1): 1 truncate cleaned up [ 311.522584][ T8922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.658781][ T8922] EXT4-fs error (device loop1): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz.1.940: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 311.818314][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.944'. [ 311.891866][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.971989][ T8952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.447399][ T8961] loop4: detected capacity change from 0 to 512 [ 313.524669][ T8961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.559497][ T8961] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.780435][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.839412][ T8968] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 313.927891][ T8975] loop4: detected capacity change from 0 to 128 [ 313.976945][ T8975] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.992712][ T8975] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.009535][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'. [ 314.173803][ T5741] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 314.185213][ T5602] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.237001][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 314.237028][ T30] audit: type=1326 audit(1786231091.546:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.275957][ T30] audit: type=1326 audit(1786231091.546:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.347595][ T5741] usb 3-1: device descriptor read/64, error -71 [ 314.448550][ T30] audit: type=1326 audit(1786231091.586:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.495528][ T30] audit: type=1326 audit(1786231091.586:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.542320][ T30] audit: type=1326 audit(1786231091.586:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.623824][ T5741] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 314.677956][ T30] audit: type=1326 audit(1786231091.586:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.751683][ T30] audit: type=1326 audit(1786231091.586:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.777117][ T5741] usb 3-1: device descriptor read/64, error -71 [ 314.806780][ T30] audit: type=1326 audit(1786231091.586:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.895000][ T5741] usb usb3-port1: attempt power cycle [ 314.914289][ T30] audit: type=1326 audit(1786231091.586:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 314.980766][ T30] audit: type=1326 audit(1786231091.586:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.962" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 315.235926][ T5741] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 315.265509][ T5741] usb 3-1: device descriptor read/8, error -71 [ 315.374205][ T9007] loop4: detected capacity change from 0 to 512 [ 315.428782][ T9007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.470394][ T9007] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.523742][ T5741] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 315.557531][ T9007] netlink: 256 bytes leftover after parsing attributes in process `syz.4.973'. [ 315.566267][ T5741] usb 3-1: device descriptor read/8, error -71 [ 315.577954][ T9007] netlink: 80 bytes leftover after parsing attributes in process `syz.4.973'. [ 315.656914][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.674232][ T5741] usb usb3-port1: unable to enumerate USB device [ 315.705945][ T9015] loop0: detected capacity change from 0 to 128 [ 315.746021][ T9015] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.775271][ T9015] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 315.855896][ T9018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 316.032800][ T9023] loop1: detected capacity change from 0 to 512 [ 316.108655][ T9023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.374226][ T9030] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 316.795770][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.804947][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.989930][ T5603] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.251168][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.593868][ T9049] loop0: detected capacity change from 0 to 512 [ 317.658182][ T9049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.695282][ T9048] syzkaller0: entered promiscuous mode [ 317.713112][ T9049] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.738365][ T9048] syzkaller0: entered allmulticast mode [ 317.783313][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.990'. [ 317.865907][ T9049] netlink: 256 bytes leftover after parsing attributes in process `syz.0.988'. [ 317.891009][ T9049] netlink: 80 bytes leftover after parsing attributes in process `syz.0.988'. [ 318.049457][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.174852][ T9066] loop5: detected capacity change from 0 to 512 [ 318.206275][ T9066] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 318.265273][ T9066] EXT4-fs (loop5): 1 truncate cleaned up [ 318.298768][ T9066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.522892][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.562860][ T9076] loop1: detected capacity change from 0 to 512 [ 318.593746][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 318.638035][ T9076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.900579][ T10] usb 5-1: device descriptor read/64, error -71 [ 318.917635][ T9081] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 319.661057][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 319.803818][ T10] usb 5-1: device descriptor read/64, error -71 [ 319.888339][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.929954][ T9094] loop3: detected capacity change from 0 to 256 [ 319.936865][ T10] usb usb5-port1: attempt power cycle [ 320.004878][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 320.004903][ T30] audit: type=1800 audit(1786231097.316:1159): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1003" name="file0" dev="loop3" ino=1048621 res=0 errno=0 [ 320.062392][ T9094] syz.3.1003: attempt to access beyond end of device [ 320.062392][ T9094] loop3: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 320.166781][ T13] kworker/u8:1: attempt to access beyond end of device [ 320.166781][ T13] loop3: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 320.197926][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1005'. [ 320.323954][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 320.359224][ T10] usb 5-1: device descriptor read/8, error -71 [ 320.508684][ T9105] loop5: detected capacity change from 0 to 512 [ 320.559032][ T9105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.596769][ T9105] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.613731][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 320.633622][ T9110] syzkaller0: entered promiscuous mode [ 320.639325][ T9110] syzkaller0: entered allmulticast mode [ 320.655537][ T9105] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1007'. [ 320.668724][ T10] usb 5-1: device descriptor read/8, error -71 [ 320.668891][ T9105] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1007'. [ 320.806109][ T10] usb usb5-port1: unable to enumerate USB device [ 320.903884][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.108541][ T9124] loop5: detected capacity change from 0 to 512 [ 321.133132][ T9124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.181339][ T9127] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 321.327750][ T9129] loop3: detected capacity change from 0 to 512 [ 321.367016][ T9129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.402503][ T9129] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.1014: invalid indirect mapped block 4294967295 (level 0) [ 321.486896][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.498243][ T9129] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 321.501815][ T9129] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.1014: invalid indirect mapped block 4294967295 (level 1) [ 321.511320][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 321.511348][ C0] EXT4-fs (loop3): initial error at time 1786231098: ext4_free_branches:1020: inode 16 [ 321.511391][ C0] EXT4-fs (loop3): last error at time 1786231098: ext4_free_branches:1020: inode 16 [ 321.670076][ T9129] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 321.671478][ T9129] EXT4-fs (loop3): 1 orphan inode deleted [ 321.701628][ T9132] loop1: detected capacity change from 0 to 512 [ 321.720189][ T9129] EXT4-fs (loop3): 1 truncate cleaned up [ 321.747619][ T9129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.789378][ T9132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.875526][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1015'. [ 322.055482][ T9129] EXT4-fs error (device loop3): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz.3.1014: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 322.509340][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.787873][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1019'. [ 322.856796][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.042416][ T30] audit: type=1326 audit(1786231100.346:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.117460][ T30] audit: type=1326 audit(1786231100.386:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.212487][ T30] audit: type=1326 audit(1786231100.386:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.300600][ T30] audit: type=1326 audit(1786231100.386:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.385290][ T30] audit: type=1326 audit(1786231100.386:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.488539][ T30] audit: type=1326 audit(1786231100.386:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.558940][ T30] audit: type=1326 audit(1786231100.386:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.620736][ T30] audit: type=1326 audit(1786231100.396:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 323.743441][ T30] audit: type=1326 audit(1786231100.396:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.1021" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5999e0d9 code=0x7ffc0000 [ 324.318414][ T9176] loop5: detected capacity change from 0 to 512 [ 324.418360][ T9176] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1027: iget: bad i_size value: 38620345925642 [ 324.470722][ T9176] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 324.473565][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 324.489224][ C0] EXT4-fs (loop5): initial error at time 1786231101: ext4_orphan_get:1399: inode 15 [ 324.498687][ C0] EXT4-fs (loop5): last error at time 1786231101: ext4_orphan_get:1399: inode 15 [ 324.525060][ T9176] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1027: couldn't read orphan inode 15 (err -117) [ 324.558808][ T9176] loop5: lost filesystem error report for type 5 error -117 [ 324.585469][ T9176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.716179][ T9178] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.1027: bg 0: block 5: invalid block bitmap [ 324.779949][ T9178] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 324.793464][ T9178] EXT4-fs (loop5): This should not happen!! Data will be lost [ 324.793464][ T9178] [ 324.813222][ T9178] EXT4-fs (loop5): Total free blocks count 0 [ 324.828086][ T9178] EXT4-fs (loop5): Free/Dirty block details [ 324.836256][ T9178] EXT4-fs (loop5): free_blocks=0 [ 324.847814][ T9178] EXT4-fs (loop5): dirty_blocks=120 [ 324.853236][ T9178] EXT4-fs (loop5): Block reservation details [ 324.872725][ T9178] EXT4-fs (loop5): i_reserved_data_blocks=120 [ 324.899862][ T9178] EXT4-fs (loop5): shut down requested (0) [ 326.455226][ T9194] tipc: Enabling of bearer rejected, failed to enable media [ 326.729617][ T9204] loop4: detected capacity change from 0 to 512 [ 326.774289][ T9205] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 326.856095][ T9204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.990088][ T9211] loop3: detected capacity change from 0 to 512 [ 327.178562][ T9211] EXT4-fs (loop3): 1 truncate cleaned up [ 327.562315][ T9211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.784656][ T147] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm kworker/u8:6: bg 0: block 465: padding at end of block bitmap is not set [ 327.808456][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.898963][ T147] EXT4-fs (loop3): Remounting filesystem read-only [ 327.948023][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.534028][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 328.673710][ T9] usb 1-1: device descriptor read/64, error -71 [ 328.923621][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 329.084142][ T9] usb 1-1: device descriptor read/64, error -71 [ 329.213952][ T9] usb usb1-port1: attempt power cycle [ 329.417491][ T5721] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 329.455493][ T9256] loop3: detected capacity change from 0 to 1024 [ 329.512814][ T9256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.564503][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 329.604968][ T9] usb 1-1: device descriptor read/8, error -71 [ 329.608279][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 329.671381][ T5721] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 329.672031][ T9256] EXT4-fs error (device loop3): ext4_generic_delete_entry:2672: inode #2: block 16: comm syz.3.1051: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 329.694230][ T5721] usb 3-1: config 0 has no interface number 0 [ 329.758293][ T5721] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.880352][ T5721] usb 3-1: config 0 interface 85 has no altsetting 0 [ 329.889965][ T9256] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 329.913164][ T5721] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 329.922965][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.933309][ T5721] usb 3-1: Product: syz [ 329.934240][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 329.937640][ T5721] usb 3-1: Manufacturer: syz [ 329.949989][ T9256] EXT4-fs warning (device loop3): ext4_rename_delete:3737: inode #2: comm syz.3.1051: Deleting old file: nlink 1, error=-117 [ 329.980102][ T9266] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 329.993656][ T5721] usb 3-1: SerialNumber: syz [ 329.994993][ T9] usb 1-1: device descriptor read/8, error -71 [ 330.348600][ T9] usb usb1-port1: unable to enumerate USB device [ 330.367345][ T5721] usb 3-1: config 0 descriptor?? [ 330.452963][ T9256] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.1051: bg 0: block 440: padding at end of block bitmap is not set [ 330.612070][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.630143][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.640990][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.178105][ T5721] appletouch 3-1:0.85: Geyser mode initialized. [ 331.213952][ T5721] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input8 [ 331.492008][ T9291] random: crng reseeded on system resumption [ 331.518520][ T9288] loop3: detected capacity change from 0 to 4096 [ 331.614178][ T9288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.677698][ T9288] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.1060: invalid fast symlink length 131109 [ 331.880034][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.066107][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 332.066135][ T30] audit: type=1326 audit(1786231109.376:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.167894][ T30] audit: type=1326 audit(1786231109.376:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.226753][ T30] audit: type=1326 audit(1786231109.426:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.297742][ T30] audit: type=1326 audit(1786231109.426:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.416075][ T30] audit: type=1326 audit(1786231109.426:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.477578][ T30] audit: type=1326 audit(1786231109.426:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.537009][ T30] audit: type=1326 audit(1786231109.426:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.645267][ T30] audit: type=1326 audit(1786231109.436:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.647812][ T9] usb 3-1: USB disconnect, device number 19 [ 332.764028][ T30] audit: type=1326 audit(1786231109.436:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.833215][ T30] audit: type=1326 audit(1786231109.446:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.1064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadedd9e0d9 code=0x7ffc0000 [ 332.837513][ T9] appletouch 3-1:0.85: input: appletouch disconnected [ 333.523627][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 333.686540][ T9] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 333.709665][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.729237][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.744275][ T9] usb 2-1: Product: syz [ 333.749481][ T9] usb 2-1: Manufacturer: syz [ 333.762675][ T9] usb 2-1: SerialNumber: syz [ 333.844096][ T5741] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.077354][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.112502][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.144966][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.174769][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.205499][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.234712][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.256162][ T5721] usb 2-1: USB disconnect, device number 19 [ 334.424789][ T9326] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 334.943802][ T5741] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 334.959539][ T5741] ath9k_htc: Failed to initialize the device [ 334.974530][ T5721] usb 2-1: ath9k_htc: USB layer deinitialized [ 335.283792][ T5721] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 335.343682][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 335.444311][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 335.457147][ T5721] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 335.473684][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 335.502201][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.508029][ T9] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 335.552643][ T5721] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 335.561627][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 335.584536][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.595347][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.609078][ T9] usb 1-1: Product: syz [ 335.625620][ T9] usb 1-1: Manufacturer: syz [ 335.637697][ T5721] usb 2-1: config 0 descriptor?? [ 335.644808][ T9] usb 1-1: SerialNumber: syz [ 335.661989][ T5721] mos7840 2-1:0.0: required endpoints missing [ 335.719215][ T5741] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 335.985182][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.994567][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.003804][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 336.030715][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.070541][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.099720][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.112897][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.262237][ T9350] loop5: detected capacity change from 0 to 512 [ 336.272813][ T5721] usb 1-1: USB disconnect, device number 16 [ 336.303765][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 336.311283][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 336.323646][ T10] usb 3-1: config 0 has no interface number 0 [ 336.336886][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.364299][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 336.373387][ T9350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.401759][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 336.425338][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.451277][ T10] usb 3-1: Product: syz [ 336.466974][ T10] usb 3-1: Manufacturer: syz [ 336.480959][ T10] usb 3-1: SerialNumber: syz [ 336.539105][ T10] usb 3-1: config 0 descriptor?? [ 336.596404][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.787128][ T5741] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 336.802844][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.823867][ T5741] ath9k_htc: Failed to initialize the device [ 336.826035][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.840165][ T5721] usb 1-1: ath9k_htc: USB layer deinitialized [ 337.021864][ T9] usb 2-1: USB disconnect, device number 20 [ 337.194250][ T5721] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 337.233886][ T5755] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 337.376304][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 337.397217][ T5755] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.408416][ T5721] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 337.425892][ T10] appletouch 3-1:0.85: Geyser mode initialized. [ 337.430799][ T5755] usb 5-1: not running at top speed; connect to a high speed hub [ 337.442380][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 337.457838][ T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input9 [ 337.462220][ T5721] usb 1-1: New USB device found, idVendor=230a, idProduct=0109, bcdDevice=bd.da [ 337.477481][ T5755] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.493882][ T5755] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 337.510859][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.523377][ T5755] usb 5-1: string descriptor 0 read error: -22 [ 337.544352][ T5755] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 337.568165][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.578058][ T5721] usb 1-1: config 0 descriptor?? [ 337.659687][ T5755] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 337.696817][ T5755] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 337.724536][ T5755] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 337.755956][ T5755] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 337.852512][ T5755] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 337.885376][ T5755] usb 5-1: found format II with max.bitrate = 0, frame size=7 [ 337.911874][ T5755] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 337.926646][ T5755] usb 5-1: found format II with max.bitrate = 0, frame size=7 [ 338.017560][ T9375] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 338.141006][ T5755] usb 5-1: USB disconnect, device number 17 [ 338.810405][ T839] usb 3-1: USB disconnect, device number 20 [ 338.892035][ T839] appletouch 3-1:0.85: input: appletouch disconnected [ 338.959702][ T10] usb 1-1: USB disconnect, device number 17 [ 339.815297][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 339.815323][ T30] audit: type=1326 audit(1786231117.126:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 339.829818][ T9405] loop0: detected capacity change from 0 to 512 [ 339.931051][ T30] audit: type=1326 audit(1786231117.166:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 339.970251][ T30] audit: type=1326 audit(1786231117.166:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.008142][ T9405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.014754][ T30] audit: type=1326 audit(1786231117.166:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.056257][ T30] audit: type=1326 audit(1786231117.166:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.081814][ T30] audit: type=1326 audit(1786231117.166:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.107420][ T30] audit: type=1326 audit(1786231117.166:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.132818][ T30] audit: type=1326 audit(1786231117.166:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.257747][ T30] audit: type=1326 audit(1786231117.176:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.330578][ T30] audit: type=1326 audit(1786231117.176:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1100" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33fd79e0d9 code=0x7ffc0000 [ 340.793830][ T5721] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 340.987550][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 341.021324][ T5721] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 341.047143][ T5721] usb 3-1: config 0 has no interface number 0 [ 341.058531][ T5721] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.084010][ T5721] usb 3-1: config 0 interface 85 has no altsetting 0 [ 341.102184][ T5721] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 341.140907][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.151416][ T5721] usb 3-1: Product: syz [ 341.155776][ T5721] usb 3-1: Manufacturer: syz [ 341.160539][ T5721] usb 3-1: SerialNumber: syz [ 341.176354][ T5721] usb 3-1: config 0 descriptor?? [ 341.387977][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.435689][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.457395][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.574924][ T9420] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1104'. [ 342.015930][ T5721] appletouch 3-1:0.85: Geyser mode initialized. [ 342.032930][ T5721] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input10 [ 343.638894][ T5721] usb 3-1: USB disconnect, device number 21 [ 343.712904][ T9439] loop1: detected capacity change from 0 to 512 [ 343.753104][ T5721] appletouch 3-1:0.85: input: appletouch disconnected [ 343.788066][ T9439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.911263][ T9456] loop2: detected capacity change from 0 to 1024 [ 345.027881][ T9456] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.1116: iget: bad i_size value: -360287970189638630 [ 345.131328][ T9456] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 345.133718][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 345.149653][ C0] EXT4-fs (loop2): initial error at time 1786231122: ext4_orphan_get:1399: inode 13 [ 345.159088][ C0] EXT4-fs (loop2): last error at time 1786231122: ext4_orphan_get:1399: inode 13 [ 345.169137][ T9456] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1116: couldn't read orphan inode 13 (err -117) [ 345.192392][ T5721] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 345.211991][ T9456] loop2: lost filesystem error report for type 5 error -117 [ 345.235703][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.271241][ T9456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.339057][ T9456] __quota_error: 16 callbacks suppressed [ 345.339083][ T9456] Quota error (device loop2): do_check_range: Getting block 64 out of range 0-5 [ 345.386553][ T5721] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 345.412767][ T5721] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 345.464959][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.488712][ T5721] usb 4-1: Product: syz [ 345.504321][ T5721] usb 4-1: Manufacturer: syz [ 345.510878][ T5721] usb 4-1: SerialNumber: syz [ 345.575337][ T5748] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 345.632816][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.839369][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.892373][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.962719][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.018004][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.069330][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.127450][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.173481][ T10] usb 4-1: USB disconnect, device number 17 [ 346.292872][ T9467] loop4: detected capacity change from 0 to 512 [ 346.351114][ T9467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.364057][ T9467] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.393684][ T5755] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 346.503664][ T5721] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 346.577069][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.587344][ T5755] usb 2-1: not running at top speed; connect to a high speed hub [ 346.599471][ T5755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.610350][ T5755] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 346.626749][ T5755] usb 2-1: string descriptor 0 read error: -22 [ 346.638493][ T5755] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 346.649207][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.674817][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 346.690600][ T5721] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 346.701903][ T5755] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 346.713292][ T5748] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 346.720296][ T5721] usb 3-1: config 0 has no interface number 0 [ 346.727444][ T5748] ath9k_htc: Failed to initialize the device [ 346.734114][ T5755] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 346.742320][ T5721] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.757182][ T5755] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 346.766458][ T5721] usb 3-1: config 0 interface 85 has no altsetting 0 [ 346.773246][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 346.773246][ T5755] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 346.780225][ T5721] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 346.797623][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.806268][ T5721] usb 3-1: Product: syz [ 346.810971][ T5721] usb 3-1: Manufacturer: syz [ 346.816550][ T5721] usb 3-1: SerialNumber: syz [ 346.829928][ T5721] usb 3-1: config 0 descriptor?? [ 346.895702][ T5755] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 346.907445][ T5755] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 346.917947][ T5755] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 346.926878][ T5755] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 347.046089][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.065751][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.153107][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.254055][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 347.309689][ T5755] usb 2-1: USB disconnect, device number 21 [ 347.423697][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 347.444025][ T10] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 347.487703][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 347.502381][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1128'. [ 347.532899][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.560341][ T10] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 347.594081][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.611908][ T5721] appletouch 3-1:0.85: Geyser mode initialized. [ 347.623386][ T10] usb 4-1: config 0 descriptor?? [ 347.630609][ T5721] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input11 [ 347.649206][ T10] mos7840 4-1:0.0: required endpoints missing [ 347.799186][ T9501] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 348.961660][ T191] usb 4-1: USB disconnect, device number 18 [ 349.335362][ T5755] usb 3-1: USB disconnect, device number 22 [ 349.400273][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1136'. [ 349.440033][ T9524] loop4: detected capacity change from 0 to 512 [ 349.451509][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1136'. [ 349.497945][ T5755] appletouch 3-1:0.85: input: appletouch disconnected [ 349.530618][ T9524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.568205][ T9538] kAFS: unable to lookup cell 'ÿ' [ 350.589903][ T9539] kAFS: unable to lookup cell '(,c¾Ì' [ 350.647479][ T9536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1140'. [ 350.658205][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.032216][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1142'. [ 351.330372][ T9552] loop4: detected capacity change from 0 to 1024 [ 351.357033][ T9552] ext4: Unknown parameter 'seclabel' [ 351.410184][ T9557] loop2: detected capacity change from 0 to 512 [ 351.447843][ T9557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 351.501873][ T9557] EXT4-fs (loop2): 1 truncate cleaned up [ 351.551658][ T9557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.596082][ T9557] EXT4-fs: Cannot specify journal on remount [ 351.678364][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.894249][ T5721] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 352.063665][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 352.081849][ T5721] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 352.090770][ T5721] usb 6-1: config 0 has no interface number 0 [ 352.093732][ T191] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 352.099734][ T5721] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.116295][ T5721] usb 6-1: config 0 interface 85 has no altsetting 0 [ 352.144362][ T5721] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 352.154916][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.180743][ T5721] usb 6-1: Product: syz [ 352.188893][ T5721] usb 6-1: Manufacturer: syz [ 352.194784][ T5721] usb 6-1: SerialNumber: syz [ 352.208613][ T5721] usb 6-1: config 0 descriptor?? [ 352.277212][ T191] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 352.295264][ T191] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 352.305589][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 352.320068][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.333945][ T191] usb 4-1: Product: syz [ 352.341428][ T191] usb 4-1: Manufacturer: syz [ 352.353580][ T191] usb 4-1: SerialNumber: syz [ 352.413105][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 352.425061][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.434850][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.488721][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 352.500664][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 352.514672][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.526117][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 352.547165][ T10] usb 2-1: string descriptor 0 read error: -22 [ 352.554207][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 352.571796][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.622660][ T10] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 352.637469][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.654171][ T10] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 352.666986][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.695910][ T10] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 352.708290][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.723889][ T10] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 352.733300][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.768638][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.794445][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.838482][ T5755] usb 4-1: USB disconnect, device number 19 [ 352.859808][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 352.888901][ T10] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 352.917324][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 352.940068][ T10] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 352.953415][ T5721] appletouch 6-1:0.85: Geyser mode initialized. [ 352.992943][ T5721] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input12 [ 353.241439][ T10] usb 2-1: USB disconnect, device number 22 [ 353.505624][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 353.543491][ T9] ath9k_htc: Failed to initialize the device [ 353.575118][ T5755] usb 4-1: ath9k_htc: USB layer deinitialized [ 353.596651][ T9592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1159'. [ 353.905713][ T5755] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 354.077498][ T5755] usb 4-1: Using ep0 maxpacket: 32 [ 354.113027][ T5755] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 354.121767][ T5755] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 354.153632][ T5755] usb 4-1: New USB device found, idVendor=110a, idProduct=0110, bcdDevice=bd.da [ 354.171810][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.193433][ T5755] usb 4-1: config 0 descriptor?? [ 354.523698][ T9602] loop2: detected capacity change from 0 to 2048 [ 354.611569][ T9602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.671757][ T5721] usb 6-1: USB disconnect, device number 16 [ 354.816241][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.817751][ T5721] appletouch 6-1:0.85: input: appletouch disconnected [ 355.309191][ T30] audit: type=1804 audit(1786231132.616:1244): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1168" name="bus" dev="ramfs" ino=20925 res=1 errno=0 [ 355.391266][ T9615] IPVS: sed: FWM 3 0x00000003 - no destination available [ 355.500141][ T5721] usb 4-1: USB disconnect, device number 20 [ 355.860458][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1172'. [ 357.151266][ T9639] capability: warning: `syz.3.1178' uses 32-bit capabilities (legacy support in use) [ 357.981823][ T9648] loop4: detected capacity change from 0 to 512 [ 358.052768][ T9648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.882724][ T9659] loop5: detected capacity change from 0 to 128 [ 359.090642][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.488431][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.572526][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 359.664018][ T5748] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 359.847669][ T5748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.886459][ T5748] usb 4-1: not running at top speed; connect to a high speed hub [ 359.907864][ T9679] fido_id[9679]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 359.931659][ T5748] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 359.960969][ T5748] usb 4-1: string descriptor 0 read error: -22 [ 359.977415][ T5748] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 360.017405][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.083618][ T5748] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 360.112829][ T5748] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 360.146334][ T5748] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 360.183659][ T5748] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 360.302167][ T5748] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 360.328931][ T5748] usb 4-1: found format II with max.bitrate = 0, frame size=7 [ 360.365646][ T5748] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 360.394689][ T5748] usb 4-1: found format II with max.bitrate = 0, frame size=7 [ 360.664065][ T5748] usb 4-1: USB disconnect, device number 21 [ 362.443767][ T9704] loop2: detected capacity change from 0 to 512 [ 362.511426][ T9704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.603969][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.419643][ T9743] loop2: detected capacity change from 0 to 512 [ 365.465638][ T9743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.842338][ T9748] syzkaller0: entered promiscuous mode [ 366.195159][ T9748] syzkaller0: entered allmulticast mode [ 366.369892][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.625181][ T9755] loop2: detected capacity change from 0 to 512 [ 366.686722][ T9755] FAT-fs (loop2): Directory bread(block 2080) failed [ 366.726106][ T9755] FAT-fs (loop2): Directory bread(block 2081) failed [ 366.751636][ T9755] FAT-fs (loop2): Directory bread(block 2082) failed [ 366.777645][ T9755] FAT-fs (loop2): Directory bread(block 2083) failed [ 366.800594][ T9755] FAT-fs (loop2): Directory bread(block 2084) failed [ 366.825410][ T9755] FAT-fs (loop2): Directory bread(block 2085) failed [ 366.864229][ T9755] FAT-fs (loop2): Directory bread(block 2086) failed [ 366.891349][ T9755] FAT-fs (loop2): Directory bread(block 2087) failed [ 366.951174][ T9755] FAT-fs (loop2): Directory bread(block 2080) failed [ 366.973117][ T9755] FAT-fs (loop2): Directory bread(block 2081) failed [ 367.366092][ T5741] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 367.556536][ T5741] usb 5-1: unable to get BOS descriptor or descriptor too short [ 367.572281][ T5741] usb 5-1: not running at top speed; connect to a high speed hub [ 367.601720][ T5741] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 367.651647][ T5741] usb 5-1: string descriptor 0 read error: -22 [ 367.661936][ T5741] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 367.688568][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.759070][ T5741] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 367.772611][ T5741] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 367.787584][ T5741] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 367.810845][ T5741] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 367.887819][ T30] audit: type=1326 audit(1786231145.186:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 367.964934][ T30] audit: type=1326 audit(1786231145.186:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.011650][ T5741] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 368.033663][ T5741] usb 5-1: found format II with max.bitrate = 0, frame size=7 [ 368.051109][ T5741] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 368.064801][ T30] audit: type=1326 audit(1786231145.186:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.073670][ T5741] usb 5-1: found format II with max.bitrate = 0, frame size=7 [ 368.146911][ T30] audit: type=1326 audit(1786231145.186:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.231139][ T30] audit: type=1326 audit(1786231145.186:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.291058][ T30] audit: type=1326 audit(1786231145.186:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.329712][ T5741] usb 5-1: USB disconnect, device number 18 [ 368.388891][ T30] audit: type=1326 audit(1786231145.186:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.452733][ T30] audit: type=1326 audit(1786231145.196:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.573139][ T30] audit: type=1326 audit(1786231145.196:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 368.658199][ T30] audit: type=1326 audit(1786231145.196:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.1232" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 372.311069][ T9831] kAFS: unable to lookup cell 'ÿ' [ 372.380662][ T9831] kAFS: unable to lookup cell '(,c¾Ì' [ 372.451028][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1245'. [ 373.278440][ T29] IPVS: starting estimator thread 0... [ 373.521152][ T5748] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 373.613662][ T9846] IPVS: using max 23 ests per chain, 55200 per kthread [ 373.880992][ T5748] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.077594][ T5748] usb 2-1: not running at top speed; connect to a high speed hub [ 374.257681][ T5748] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 374.313268][ T5748] usb 2-1: string descriptor 0 read error: -22 [ 374.345408][ T5748] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 374.418443][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.468701][ T5748] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 374.492600][ T5748] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 374.512114][ T5748] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 374.550966][ T5748] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 374.710023][ T5748] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 374.734663][ T5748] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 374.769920][ T5748] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 374.816162][ T5748] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 375.225911][ T5748] usb 2-1: USB disconnect, device number 23 [ 375.639831][ T9885] loop2: detected capacity change from 0 to 2048 [ 375.694342][ T9885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.760579][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.982897][ T9895] kAFS: unable to lookup cell 'ÿ' [ 377.007761][ T9895] kAFS: unable to lookup cell '(,c¾Ì' [ 377.028926][ T9895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1260'. [ 377.876871][ T5748] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 377.991510][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.999312][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.033776][ T5748] usb 3-1: Using ep0 maxpacket: 8 [ 378.041389][ T5748] usb 3-1: config 6 has an invalid interface number: 213 but max is 1 [ 378.050414][ T5748] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 378.060868][ T5748] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 378.069887][ T5748] usb 3-1: config 6 has no interface number 0 [ 378.076100][ T5748] usb 3-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 378.095421][ T5748] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 378.104656][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 378.112677][ T5748] usb 3-1: Manufacturer: syz [ 378.117649][ T5748] usb 3-1: SerialNumber: syz [ 378.473248][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 378.642220][ T5748] usb 3-1: USB disconnect, device number 23 [ 378.814857][ T9910] syzkaller0: entered promiscuous mode [ 378.826962][ T9910] syzkaller0: entered allmulticast mode [ 379.298441][ T9919] loop0: detected capacity change from 0 to 2048 [ 379.362547][ T9919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.473636][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 379.604554][ T9929] kAFS: unable to lookup cell 'ÿ' [ 379.617519][ T9929] kAFS: unable to lookup cell '(,c¾Ì' [ 379.656313][ T9] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 379.679656][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 379.690817][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.704755][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.722101][ T9929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1273'. [ 379.731688][ T9] usb 6-1: Product: syz [ 379.738270][ T9] usb 6-1: Manufacturer: syz [ 379.757398][ T9] usb 6-1: SerialNumber: syz [ 379.803268][ T5741] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 380.060982][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.119329][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.172364][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.202324][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.263093][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.303177][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.343280][ T5748] usb 6-1: USB disconnect, device number 17 [ 380.387246][ T29] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 380.408249][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 380.408275][ T30] audit: type=1326 audit(1786231157.716:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 380.547937][ T30] audit: type=1326 audit(1786231157.716:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 380.644358][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.674420][ T29] usb 1-1: not running at top speed; connect to a high speed hub [ 380.719953][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 380.743384][ T30] audit: type=1326 audit(1786231157.756:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 380.801430][ T30] audit: type=1326 audit(1786231157.756:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 380.835583][ T30] audit: type=1326 audit(1786231157.756:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 380.887033][ T29] usb 1-1: string descriptor 0 read error: -22 [ 380.912907][ T29] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 380.922760][ T30] audit: type=1326 audit(1786231157.756:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 380.977505][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.977966][ T5741] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 381.074500][ T5741] ath9k_htc: Failed to initialize the device [ 381.085684][ T30] audit: type=1326 audit(1786231157.756:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 381.112046][ T5748] usb 6-1: ath9k_htc: USB layer deinitialized [ 381.145454][ T29] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 381.148322][ T30] audit: type=1326 audit(1786231157.756:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 381.182163][ T29] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 381.210759][ T29] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 381.242845][ T29] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 381.309458][ T29] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 381.316523][ T30] audit: type=1326 audit(1786231157.756:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 381.351834][ T29] usb 1-1: found format II with max.bitrate = 0, frame size=7 [ 381.406502][ T29] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 381.432199][ T29] usb 1-1: found format II with max.bitrate = 0, frame size=7 [ 381.444414][ T30] audit: type=1326 audit(1786231157.756:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.4.1266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x7ffc0000 [ 381.515022][ T5748] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 381.697947][ T5748] usb 6-1: Using ep0 maxpacket: 32 [ 381.732008][ T5748] usb 6-1: config index 0 descriptor too short (expected 241, got 72) [ 381.767385][ T5748] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 381.809022][ T29] usb 1-1: USB disconnect, device number 18 [ 381.824304][ T5748] usb 6-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 381.889574][ T5748] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 381.934475][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.976474][ T5748] usb 6-1: config 0 descriptor?? [ 382.005904][ T5748] mos7840 6-1:0.0: missing endpoints [ 383.280135][ T5741] usb 6-1: USB disconnect, device number 18 [ 385.334327][ T9979] loop0: detected capacity change from 0 to 512 [ 385.368856][ T9979] FAT-fs (loop0): Directory bread(block 2080) failed [ 385.383325][ T9979] FAT-fs (loop0): Directory bread(block 2081) failed [ 385.402782][ T9979] FAT-fs (loop0): Directory bread(block 2082) failed [ 385.422191][ T9979] FAT-fs (loop0): Directory bread(block 2083) failed [ 385.448329][ T9979] FAT-fs (loop0): Directory bread(block 2084) failed [ 385.470396][ T9979] FAT-fs (loop0): Directory bread(block 2085) failed [ 385.486039][ T9979] FAT-fs (loop0): Directory bread(block 2086) failed [ 385.510811][ T9979] FAT-fs (loop0): Directory bread(block 2087) failed [ 385.609825][ T9986] loop1: detected capacity change from 0 to 2048 [ 386.666059][ T9986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.823408][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.131898][T10003] kAFS: unable to lookup cell 'ÿ' [ 387.203848][T10005] loop4: detected capacity change from 0 to 128 [ 387.240283][T10006] kAFS: unable to lookup cell '(,c¾Ì' [ 387.344968][T10003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1287'. [ 388.641392][T10022] syzkaller0: entered promiscuous mode [ 388.676116][T10022] syzkaller0: entered allmulticast mode [ 388.783705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 389.342612][T10027] syzkaller0: entered promiscuous mode [ 389.370694][T10027] syzkaller0: entered allmulticast mode [ 389.371934][T10039] netlink: 'syz.2.1299': attribute type 3 has an invalid length. [ 389.657537][T10044] loop4: detected capacity change from 0 to 512 [ 389.678819][T10041] loop5: detected capacity change from 0 to 512 [ 389.737097][T10044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.811483][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 389.811510][ T30] audit: type=1326 audit(1786231167.116:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 389.853688][ T30] audit: type=1326 audit(1786231167.156:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 389.920031][T10041] FAT-fs (loop5): Directory bread(block 2080) failed [ 389.923608][ T30] audit: type=1326 audit(1786231167.156:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 389.998126][T10041] FAT-fs (loop5): Directory bread(block 2081) failed [ 390.070701][T10041] FAT-fs (loop5): Directory bread(block 2082) failed [ 390.076816][ T30] audit: type=1326 audit(1786231167.156:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 390.102712][T10041] FAT-fs (loop5): Directory bread(block 2083) failed [ 390.102777][T10041] FAT-fs (loop5): Directory bread(block 2084) failed [ 390.102816][T10041] FAT-fs (loop5): Directory bread(block 2085) failed [ 390.102855][T10041] FAT-fs (loop5): Directory bread(block 2086) failed [ 390.102893][T10041] FAT-fs (loop5): Directory bread(block 2087) failed [ 390.202386][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.221807][ T30] audit: type=1326 audit(1786231167.156:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 390.275947][ T30] audit: type=1326 audit(1786231167.156:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 390.303361][ T30] audit: type=1326 audit(1786231167.166:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 390.358890][ T30] audit: type=1326 audit(1786231167.166:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 390.453819][ T30] audit: type=1326 audit(1786231167.166:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 390.584812][ T30] audit: type=1326 audit(1786231167.186:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.2.1303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f241cd9e0d9 code=0x7ffc0000 [ 390.656827][T10058] loop0: detected capacity change from 0 to 512 [ 390.710874][T10058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 390.771983][T10058] System zones: 0-2, 18-18, 34-34 [ 390.813352][T10058] EXT4-fs (loop0): 1 orphan inode deleted [ 390.825218][T10058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.845800][T10058] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.401648][T10081] loop5: detected capacity change from 0 to 1024 [ 391.417588][T10081] EXT4-fs: Invalid want_extra_isize 2 [ 392.044745][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.662081][T10082] syzkaller0: entered promiscuous mode [ 395.667769][T10082] syzkaller0: entered allmulticast mode [ 396.112680][T10120] loop5: detected capacity change from 0 to 512 [ 396.157805][T10120] FAT-fs (loop5): Directory bread(block 2080) failed [ 396.179445][T10120] FAT-fs (loop5): Directory bread(block 2081) failed [ 396.187870][T10120] FAT-fs (loop5): Directory bread(block 2082) failed [ 396.206489][T10120] FAT-fs (loop5): Directory bread(block 2083) failed [ 396.233332][T10120] FAT-fs (loop5): Directory bread(block 2084) failed [ 396.241059][T10120] FAT-fs (loop5): Directory bread(block 2085) failed [ 396.248066][T10120] FAT-fs (loop5): Directory bread(block 2086) failed [ 396.274967][T10120] FAT-fs (loop5): Directory bread(block 2087) failed [ 396.547132][T10128] kAFS: unable to lookup cell 'ÿ' [ 396.567154][T10128] kAFS: unable to lookup cell '(,c¾Ì' [ 396.628865][T10128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1319'. [ 396.896785][T10133] loop1: detected capacity change from 0 to 1024 [ 396.958083][T10133] EXT4-fs: quotafile must be on filesystem root [ 397.290783][T10137] loop5: detected capacity change from 0 to 512 [ 397.387770][T10137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.488217][T10137] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.545292][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 397.545318][ T30] audit: type=1800 audit(1786231174.856:1318): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1323" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 397.745453][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.899796][T10154] syzkaller0: entered promiscuous mode [ 399.916356][T10154] syzkaller0: entered allmulticast mode [ 400.018186][T10167] syzkaller0: entered promiscuous mode [ 400.024593][T10167] syzkaller0: entered allmulticast mode [ 400.233904][ T5741] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 400.418707][ T5741] usb 4-1: unable to get BOS descriptor or descriptor too short [ 400.434412][ T5741] usb 4-1: not running at top speed; connect to a high speed hub [ 400.447414][ T5741] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 400.482492][ T5741] usb 4-1: string descriptor 0 read error: -22 [ 400.501503][ T5741] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 400.522656][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.572445][ T5741] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 400.602234][ T5741] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 400.614029][ T5741] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 400.632248][ T5741] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 400.798205][ T5741] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 400.828668][ T5741] usb 4-1: found format II with max.bitrate = 0, frame size=7 [ 400.847885][ T5741] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 400.869043][ T5741] usb 4-1: found format II with max.bitrate = 0, frame size=7 [ 401.098779][ T5741] usb 4-1: USB disconnect, device number 22 [ 401.606035][T10196] loop0: detected capacity change from 0 to 128 [ 401.673655][T10196] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 401.688860][T10196] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.783682][ T5603] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.745977][T10203] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1337'. [ 402.889842][T10205] loop0: detected capacity change from 0 to 512 [ 402.937806][T10205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.215876][T10213] kAFS: unable to lookup cell 'ÿ' [ 404.292780][T10214] kAFS: unable to lookup cell '(,c¾Ì' [ 404.377348][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.397043][T10212] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1340'. [ 405.061880][T10225] loop3: detected capacity change from 0 to 512 [ 405.127766][T10225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.438945][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.577676][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 405.598986][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 405.623010][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 405.635924][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 405.648159][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 405.704039][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 405.711964][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 405.724849][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 405.733985][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 405.743132][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 405.783289][T10237] syzkaller0: entered promiscuous mode [ 405.872384][T10237] syzkaller0: entered allmulticast mode [ 406.614687][T10257] kAFS: unable to lookup cell 'ÿ' [ 406.655683][T10257] kAFS: unable to lookup cell '(,c¾Ì' [ 406.727679][T10257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1354'. [ 406.840463][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1357'. [ 406.883745][ T29] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 406.973292][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.061510][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 407.079585][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 407.097681][ T29] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 407.141708][ T29] usb 6-1: string descriptor 0 read error: -22 [ 407.155475][ T29] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 407.192458][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.251336][ T29] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 407.269637][ T29] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 407.285785][ T29] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 407.310908][ T29] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 407.397040][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.468598][ T29] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 407.499815][ T29] usb 6-1: found format II with max.bitrate = 0, frame size=7 [ 407.528465][ T29] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 407.546409][ T29] usb 6-1: found format II with max.bitrate = 0, frame size=7 [ 407.622519][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.701411][T10272] syzkaller0: entered promiscuous mode [ 407.718194][T10272] syzkaller0: entered allmulticast mode [ 407.825007][ T5609] Bluetooth: hci6: command tx timeout [ 407.866445][ T29] usb 6-1: USB disconnect, device number 19 [ 408.445420][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.141342][T10302] syzkaller0: entered promiscuous mode [ 409.155138][T10302] syzkaller0: entered allmulticast mode [ 409.297599][T10312] loop1: detected capacity change from 0 to 512 [ 409.384022][T10312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.761369][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.904129][ T5609] Bluetooth: hci6: command tx timeout [ 410.110611][T10325] kAFS: unable to lookup cell 'ÿ' [ 410.137323][T10325] kAFS: unable to lookup cell '(,c¾Ì' [ 410.181409][T10325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1372'. [ 411.273961][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 411.458176][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.495686][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 411.557902][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 411.632452][ T9] usb 1-1: string descriptor 0 read error: -22 [ 411.646848][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 411.676767][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.730393][ T9] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 411.765532][ T9] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 411.790971][ T9] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 411.828120][ T9] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 411.984308][ T5609] Bluetooth: hci6: command tx timeout [ 412.031396][ T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 412.068983][ T9] usb 1-1: found format II with max.bitrate = 0, frame size=7 [ 412.102312][ T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 412.133224][ T9] usb 1-1: found format II with max.bitrate = 0, frame size=7 [ 412.391236][ T9] usb 1-1: USB disconnect, device number 19 [ 414.064183][ T5609] Bluetooth: hci6: command tx timeout [ 414.542002][T10365] loop4: detected capacity change from 0 to 2048 [ 414.624392][T10365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.883738][T10371] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 414.938238][ T36] bridge_slave_1: left allmulticast mode [ 414.965715][ T36] bridge_slave_1: left promiscuous mode [ 414.996133][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.310110][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.325359][ T36] bridge_slave_0: left allmulticast mode [ 415.331050][ T36] bridge_slave_0: left promiscuous mode [ 415.374986][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.520691][ T191] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 415.657907][T10387] kAFS: unable to lookup cell 'ÿ' [ 415.747948][ T191] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 415.779260][T10393] kAFS: unable to lookup cell '(,c¾Ì' [ 415.781724][ T191] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 415.827720][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.873249][ T191] usb 2-1: Product: syz [ 415.896332][ T191] usb 2-1: Manufacturer: syz [ 415.919323][ T191] usb 2-1: SerialNumber: syz [ 415.951896][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1388'. [ 416.020966][ T5756] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.287296][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.347652][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.409035][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.440664][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.481315][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.497396][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.520281][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.228692][ T5756] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 417.242289][ T191] usb 2-1: USB disconnect, device number 24 [ 417.262647][ T5756] ath9k_htc: Failed to initialize the device [ 417.278169][ T191] usb 2-1: ath9k_htc: USB layer deinitialized [ 417.340742][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.404491][ T36] bond0 (unregistering): Released all slaves [ 418.263613][ T5721] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 418.269624][T10411] syzkaller0: entered promiscuous mode [ 418.286949][T10411] syzkaller0: entered allmulticast mode [ 418.366359][T10440] loop4: detected capacity change from 0 to 128 [ 418.454493][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.483333][T10440] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.508499][ T5721] usb 1-1: not running at top speed; connect to a high speed hub [ 418.543443][ T5721] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 418.584813][T10440] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.637450][ T5721] usb 1-1: string descriptor 0 read error: -22 [ 418.648311][ T5721] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 418.691034][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.728935][ T5721] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 418.759919][ T5721] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 418.780489][ T5721] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 418.796730][ T5721] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 418.954718][ T5721] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 418.979815][ T5721] usb 1-1: found format II with max.bitrate = 0, frame size=7 [ 418.999236][ T5721] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 419.009771][ T5721] usb 1-1: found format II with max.bitrate = 0, frame size=7 [ 419.220706][ T5721] usb 1-1: USB disconnect, device number 20 [ 421.689620][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 421.868762][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.904367][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.916329][ T5602] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.925754][T10239] bridge_slave_0: entered allmulticast mode [ 421.928048][T10239] bridge_slave_0: entered promiscuous mode [ 422.111109][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.143356][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.194400][T10239] bridge_slave_1: entered allmulticast mode [ 422.223106][T10239] bridge_slave_1: entered promiscuous mode [ 422.336678][T10469] loop0: detected capacity change from 0 to 164 [ 422.424825][T10469] Unsupported NM flag settings (240) [ 422.786083][T10473] kAFS: unable to lookup cell 'ÿ' [ 422.802777][T10473] kAFS: unable to lookup cell '(,c¾Ì' [ 422.857017][T10480] loop4: detected capacity change from 0 to 128 [ 422.929707][T10473] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1403'. [ 422.934522][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.975126][ T30] audit: type=1800 audit(1786231200.266:1319): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1405" name="file2" dev="loop4" ino=1048624 res=0 errno=0 [ 423.002845][T10480] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 423.026904][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.048999][T10480] FAT-fs (loop4): Filesystem has been set read-only [ 423.429679][T10239] team0: Port device team_slave_0 added [ 423.445560][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 423.479903][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 423.539861][T10239] team0: Port device team_slave_1 added [ 423.862033][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.890796][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.970075][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.053725][ T5721] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 424.192290][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.226440][ T5721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 424.234708][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.254913][ T5721] usb 4-1: not running at top speed; connect to a high speed hub [ 424.322678][ T5721] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 424.353679][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.392570][ T5721] usb 4-1: string descriptor 0 read error: -22 [ 424.419806][ T5721] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 424.472078][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.549546][ T5721] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 424.588543][ T5721] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 424.604248][ T5721] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 424.622897][ T5721] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 424.652876][T10508] syzkaller0: entered promiscuous mode [ 424.689825][T10508] syzkaller0: entered allmulticast mode [ 424.763293][T10517] loop0: detected capacity change from 0 to 512 [ 424.818873][ T5721] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 425.002422][T10517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.065859][ T36] hsr_slave_0: left promiscuous mode [ 425.151460][ T36] hsr_slave_1: left promiscuous mode [ 425.226138][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.260957][ T5721] usb 4-1: found format II with max.bitrate = 0, frame size=7 [ 425.268966][ T5721] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 425.276882][ T5721] usb 4-1: found format II with max.bitrate = 0, frame size=7 [ 425.291059][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.332158][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.385562][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.531108][ T5721] usb 4-1: USB disconnect, device number 23 [ 425.545333][ T36] veth1_macvtap: left promiscuous mode [ 425.570154][ T36] veth0_macvtap: left promiscuous mode [ 425.663467][ T36] veth1_vlan: left promiscuous mode [ 425.911404][ T36] veth0_vlan: left promiscuous mode [ 426.529167][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.909386][ T36] team0 (unregistering): Port device team_slave_1 removed [ 426.939750][ T36] team0 (unregistering): Port device team_slave_0 removed [ 427.362090][T10545] loop0: detected capacity change from 0 to 512 [ 427.394515][T10545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.548674][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.753013][T10549] loop0: detected capacity change from 0 to 512 [ 427.842312][T10549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.877864][T10549] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.973920][ T30] audit: type=1800 audit(1786231205.286:1320): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1416" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 428.067786][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.349249][T10556] loop0: detected capacity change from 0 to 512 [ 429.461531][T10556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.474394][T10556] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.702077][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.908359][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 430.113387][T10239] hsr_slave_0: entered promiscuous mode [ 430.149031][T10239] hsr_slave_1: entered promiscuous mode [ 430.356877][T10573] kAFS: unable to lookup cell 'ÿ' [ 430.385883][T10573] kAFS: unable to lookup cell '(,c¾Ì' [ 430.446473][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1420'. [ 430.812711][ T36] IPVS: stop unused estimator thread 0... [ 431.154190][T10581] loop4: detected capacity change from 0 to 8192 [ 431.240909][ T30] audit: type=1800 audit(1786231208.546:1321): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1427" name="file1" dev="loop4" ino=1048625 res=0 errno=0 [ 431.259098][T10592] program syz.0.1429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.634803][ T5756] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 431.710263][T10239] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.762780][T10239] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.792833][T10239] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 431.816122][ T5756] usb 6-1: unable to get BOS descriptor or descriptor too short [ 431.855207][ T5756] usb 6-1: not running at top speed; connect to a high speed hub [ 431.866178][T10239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.894760][ T5756] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 431.912379][T10239] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 431.942498][ T5756] usb 6-1: string descriptor 0 read error: -22 [ 431.965144][ T5756] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 431.970810][T10239] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.006363][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.012423][T10239] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.022222][T10606] loop4: detected capacity change from 0 to 512 [ 432.038043][T10239] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.098492][ T5756] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 432.145958][ T5756] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 432.174508][T10606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.188702][T10608] syzkaller0: entered promiscuous mode [ 432.199324][T10606] ext4 filesystem being mounted at /243/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.199346][ T5756] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 432.199386][ T5756] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 432.286011][T10608] syzkaller0: entered allmulticast mode [ 432.302796][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 432.334023][ T5756] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 432.393304][ T5756] usb 6-1: found format II with max.bitrate = 0, frame size=7 [ 432.427394][ T5756] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 432.459660][ T5756] usb 6-1: found format II with max.bitrate = 0, frame size=7 [ 432.465035][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.180641][ T5756] usb 6-1: USB disconnect, device number 20 [ 433.508550][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 433.539756][T10635] loop1: detected capacity change from 0 to 512 [ 433.598452][T10635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.680363][T10635] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.697535][T10239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.697798][T10629] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 433.736979][T10629] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 433.737605][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.766436][T10643] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1439'. [ 433.796582][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.803830][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.886379][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.893651][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.125518][T10629] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 434.298847][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.685726][T10664] kAFS: unable to lookup cell 'ÿ' [ 434.720663][T10664] kAFS: unable to lookup cell '(,c¾Ì' [ 434.867291][T10664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1443'. [ 434.872867][T10668] loop5: detected capacity change from 0 to 512 [ 434.972275][T10668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.388863][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.583749][ T5609] Bluetooth: hci6: command 0x0c1a tx timeout [ 436.135677][T10694] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1452'. [ 436.452191][T10697] loop5: detected capacity change from 0 to 512 [ 436.480501][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.489031][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.581802][T10697] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 436.618113][T10697] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 436.881723][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.935331][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.274260][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 437.434317][ T6336] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.452720][ T6336] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.488655][ T6336] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.538143][ T6336] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.664229][ T5609] Bluetooth: hci6: command 0x0c1a tx timeout [ 437.683505][T10719] loop4: detected capacity change from 0 to 128 [ 437.723297][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.780239][T10719] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.832479][T10719] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.951999][T10719] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.1460: No space for directory leaf checksum. Please run e2fsck -D. [ 438.015917][T10719] EXT4-fs error (device loop4): __ext4_find_entry:1624: inode #2: comm syz.4.1460: checksumming directory block 0 [ 438.293365][ T5602] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.322252][T10733] loop5: detected capacity change from 0 to 512 [ 438.475961][T10733] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 438.557782][T10733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 438.600001][T10733] EXT4-fs (loop5): orphan cleanup on readonly fs [ 438.607005][T10733] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1463: bad orphan inode 3 [ 438.617831][T10733] loop5: lost filesystem error report for type 5 error -117 [ 438.623766][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 438.637658][ C0] EXT4-fs (loop5): initial error at time 1786231215: ext4_orphan_get:1425 [ 438.646233][ C0] EXT4-fs (loop5): last error at time 1786231215: ext4_orphan_get:1425 [ 438.670836][T10733] EXT4-fs (loop5): Remounting filesystem read-only [ 438.765706][T10733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 438.891350][T10733] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.1463: dx entry: limit 0 != root limit 125 [ 438.955447][T10733] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.1463: Corrupt directory, running e2fsck is recommended [ 439.207139][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 439.236637][T10239] veth0_vlan: entered promiscuous mode [ 439.291624][T10239] veth1_vlan: entered promiscuous mode [ 439.422050][T10239] veth0_macvtap: entered promiscuous mode [ 439.436127][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.444150][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.476682][T10239] veth1_macvtap: entered promiscuous mode [ 439.586087][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.648064][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.676976][T10758] loop4: detected capacity change from 0 to 512 [ 439.734921][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.744148][ T5609] Bluetooth: hci6: command 0x0c1a tx timeout [ 439.773464][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.790055][T10758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.883811][T10758] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.884096][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.997385][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.180724][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.233428][ T6336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.261640][ T6336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.447875][ T30] audit: type=1326 audit(1786231217.746:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.4.1475" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83cb19e0d9 code=0x0 [ 440.456531][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.798444][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.062534][T10788] loop1: detected capacity change from 0 to 512 [ 442.186255][T10788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.716827][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.007964][T10844] loop1: detected capacity change from 0 to 512 [ 445.049798][T10844] EXT4-fs: Ignoring removed oldalloc option [ 445.111854][T10844] EXT4-fs: Ignoring removed oldalloc option [ 445.219077][T10844] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.1501: corrupted in-inode xattr: invalid ea_ino [ 445.278074][T10844] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.279823][T10844] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1501: couldn't read orphan inode 15 (err -117) [ 445.289077][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 445.289114][ C1] EXT4-fs (loop1): initial error at time 1786231222: ext4_iget_extra_inode:5179: inode 15 [ 445.289170][ C1] EXT4-fs (loop1): last error at time 1786231222: ext4_iget_extra_inode:5179: inode 15 [ 445.328725][T10844] loop1: lost filesystem error report for type 5 error -117 [ 445.346867][T10844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.789984][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.129589][T10859] loop0: detected capacity change from 0 to 512 [ 446.318355][T10859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.268271][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.614101][T10892] loop6: detected capacity change from 0 to 128 [ 448.806101][T10896] loop1: detected capacity change from 0 to 256 [ 448.814009][T10896] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 448.853700][ T30] audit: type=1800 audit(1786231226.156:1323): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1522" name="bridge_slave_0" dev="loop1" ino=1048632 res=0 errno=0 [ 450.021351][ T30] audit: type=1326 audit(1786231227.326:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10912 comm="syz.6.1525" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72ad59e0d9 code=0x0 [ 450.347546][T10921] loop1: detected capacity change from 0 to 512 [ 450.909691][T10921] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 451.043489][T10921] EXT4-fs (loop1): 1 truncate cleaned up [ 451.165868][T10921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.676814][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.028620][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.041252][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.050574][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.063745][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.072792][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.281164][T10943] loop1: detected capacity change from 0 to 512 [ 452.403430][T10943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.078980][T10958] loop4: detected capacity change from 0 to 128 [ 454.145732][ T50] Bluetooth: hci5: command tx timeout [ 454.182909][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.770114][T11011] loop1: detected capacity change from 0 to 128 [ 455.841629][ T30] audit: type=1800 audit(1786231233.146:1325): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1550" name="file2" dev="loop1" ino=1048633 res=0 errno=0 [ 455.964227][ T5748] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 456.156279][ T5748] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 456.192937][ T5748] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 456.223840][ T50] Bluetooth: hci5: command tx timeout [ 456.224820][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.289195][ T5748] usb 5-1: Product: syz [ 456.310872][ T5748] usb 5-1: Manufacturer: syz [ 456.335968][ T5748] usb 5-1: SerialNumber: syz [ 456.446953][ T5721] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 456.751953][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.784501][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.808404][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.821129][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.852281][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.874561][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.917544][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.958128][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.992757][T10937] bridge_slave_0: entered allmulticast mode [ 457.033052][T10937] bridge_slave_0: entered promiscuous mode [ 457.114041][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.172277][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.226586][T10937] bridge_slave_1: entered allmulticast mode [ 457.314451][T10937] bridge_slave_1: entered promiscuous mode [ 457.698933][T11044] loop1: detected capacity change from 0 to 512 [ 457.764757][T11044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 457.791592][T10937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.876171][T11044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 457.929335][T10937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.950249][T11044] System zones: 1-12 [ 457.980547][T11044] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1558: bad orphan inode 131072 [ 458.062062][T11044] loop1: lost filesystem error report for type 5 error -117 [ 458.081495][T11044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.315426][ T50] Bluetooth: hci5: command tx timeout [ 458.356890][T11044] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.1558: invalid fast symlink length 39 [ 458.404779][T10937] team0: Port device team_slave_0 added [ 458.465387][T10937] team0: Port device team_slave_1 added [ 458.811635][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.853917][T10937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.923275][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.163643][T10937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.280858][T10937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.338755][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.380314][ T5748] usb 5-1: USB disconnect, device number 19 [ 459.408539][ T5721] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 459.416268][ T5721] ath9k_htc: Failed to initialize the device [ 459.423436][ T5748] usb 5-1: ath9k_htc: USB layer deinitialized [ 459.432566][T10937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.676550][T10937] hsr_slave_0: entered promiscuous mode [ 459.705809][T10937] hsr_slave_1: entered promiscuous mode [ 459.731794][T10937] debugfs: 'hsr0' already exists in 'hsr' [ 459.757676][T10937] Cannot create hsr debugfs directory [ 460.238207][T11076] loop5: detected capacity change from 0 to 128 [ 460.383874][ T50] Bluetooth: hci5: command tx timeout [ 460.400018][ T30] audit: type=1800 audit(1786231237.706:1326): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1564" name="file2" dev="loop5" ino=1048634 res=0 errno=0 [ 462.100138][T10937] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 462.160010][T10937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.207881][T11109] kAFS: unable to lookup cell 'ÿ' [ 462.261574][T11109] kAFS: unable to lookup cell '(,c¾Ì' [ 462.333313][T10937] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 462.363971][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1573'. [ 462.390438][T10937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.415733][T10937] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 462.442945][T10937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.490105][T10937] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 462.522577][T10937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.059939][T10937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.116777][T10937] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.169508][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.176742][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.257103][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.264359][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.376805][T11125] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 463.478996][T11128] loop5: detected capacity change from 0 to 512 [ 463.563793][T11128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.772809][T11127] syzkaller0: entered promiscuous mode [ 463.808209][T11127] syzkaller0: entered allmulticast mode [ 465.071114][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.346790][T11144] loop5: detected capacity change from 0 to 128 [ 465.455710][ T30] audit: type=1800 audit(1786231242.756:1327): pid=11144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1582" name="file2" dev="loop5" ino=1048635 res=0 errno=0 [ 465.732832][T11150] loop4: detected capacity change from 0 to 256 [ 465.755417][T11152] loop0: detected capacity change from 0 to 512 [ 465.844402][T11152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.878857][T11150] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00008005) [ 465.998677][T11150] FAT-fs (loop4): Filesystem has been set read-only [ 466.031808][T11150] FAT-fs (loop4): error, invalid access to FAT (entry 0x00008005) [ 466.214117][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.664834][T11173] netlink: 'syz.5.1592': attribute type 1 has an invalid length. [ 466.680099][T10937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.736831][T11177] loop0: detected capacity change from 0 to 512 [ 466.750973][T11174] ------------[ cut here ]------------ [ 466.756709][T11174] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 466.764229][T11174] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x52e/0x660, CPU#1: syz.4.1591/11174 [ 466.776128][T11174] Modules linked in: [ 466.780543][T11174] CPU: 1 UID: 0 PID: 11174 Comm: syz.4.1591 Not tainted syzkaller #0 PREEMPT(full) [ 466.790935][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 466.801143][T11174] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 466.807605][T11174] Code: 89 c5 89 c6 e8 77 86 6b f8 45 85 ed 0f 85 be fb ff ff e8 f9 8b 6b f8 48 8d 3d 82 05 92 07 ba 48 00 00 00 48 c7 c6 e0 21 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 d7 8b 6b f8 48 8d bd 00 08 00 00 [ 466.827587][T11174] RSP: 0018:ffffc900034f7a80 EFLAGS: 00010283 [ 466.833863][T11174] RAX: 0000000000000315 RBX: ffff88807f550000 RCX: ffffc9000623a000 [ 466.841856][T11174] RDX: 0000000000000048 RSI: ffffffff8d1821e0 RDI: ffffffff9130cd50 [ 466.850111][T11174] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 466.858379][T11174] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 466.866577][T11174] R13: 0000000000000000 R14: ffff88805046a568 R15: ffffc900034f7be0 [ 466.874619][T11174] FS: 00007f83cbfcb6c0(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000 [ 466.884395][T11174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.891242][T11174] CR2: 0000200000002020 CR3: 0000000085a6c000 CR4: 0000000000350ef0 [ 466.899276][T11174] Call Trace: [ 466.902549][T11174] [ 466.905528][T11174] io_register_zcrx+0xe94/0x1d30 [ 466.910495][T11174] ? __pfx_io_register_zcrx+0x10/0x10 [ 466.916029][T11174] ? __pfx___futex_wait+0x10/0x10 [ 466.922579][T11174] ? lock_acquire+0x1b9/0x370 [ 466.927368][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933019][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.938721][T11174] ? rcu_is_watching+0x12/0xc0 [ 466.944281][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.950300][T11174] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 466.956384][T11174] ? __fget_files+0x215/0x3d0 [ 466.961078][T11174] ? __fget_files+0x215/0x3d0 [ 466.965878][T11174] __do_sys_io_uring_register+0x1193/0x1bc0 [ 466.971788][T11174] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 466.978426][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 466.984400][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.990072][T11174] ? __x64_sys_futex+0x358/0x4d0 [ 466.995136][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.000811][T11174] ? xfd_validate_state+0x129/0x190 [ 467.006133][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.011819][T11174] do_syscall_64+0x115/0x870 [ 467.016547][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.022509][T11174] RIP: 0033:0x7f83cb19e0d9 [ 467.027024][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.046883][T11174] RSP: 002b:00007f83cbfcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 467.055393][T11174] RAX: ffffffffffffffda RBX: 00007f83cb425fa0 RCX: 00007f83cb19e0d9 [ 467.063361][T11174] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003 [ 467.071358][T11174] RBP: 00007f83cb235024 R08: 0000000000000000 R09: 0000000000000000 [ 467.079390][T11174] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 467.087731][T11174] R13: 00007f83cb426038 R14: 00007f83cb425fa0 R15: 00007ffe5e7c8488 [ 467.096083][T11174] [ 467.099102][T11174] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 467.106377][T11174] CPU: 1 UID: 0 PID: 11174 Comm: syz.4.1591 Not tainted syzkaller #0 PREEMPT(full) [ 467.115768][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 467.125838][T11174] Call Trace: [ 467.129116][T11174] [ 467.132040][T11174] dump_stack_lvl+0x100/0x190 [ 467.136735][T11174] vpanic+0x552/0x970 [ 467.140727][T11174] ? __pfx_vpanic+0x10/0x10 [ 467.145276][T11174] panic+0xd1/0xe0 [ 467.149002][T11174] ? __pfx_panic+0x10/0x10 [ 467.153435][T11174] check_panic_on_warn.cold+0x19/0x34 [ 467.158827][T11174] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 467.164596][T11174] __warn.cold+0x191/0x318 [ 467.169053][T11174] __report_bug+0x30f/0x440 [ 467.173611][T11174] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 467.179374][T11174] ? __pfx___report_bug+0x10/0x10 [ 467.184428][T11174] ? find_held_lock+0x2b/0x80 [ 467.189135][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.194802][T11174] ? mark_held_locks+0x40/0x70 [ 467.199582][T11174] report_bug_entry+0xe1/0x290 [ 467.204368][T11174] ? netdev_queue_get_dma_dev+0x53a/0x660 [ 467.210106][T11174] handle_bug+0x1cd/0x2a0 [ 467.214461][T11174] exc_invalid_op+0x17/0x50 [ 467.218965][T11174] asm_exc_invalid_op+0x1a/0x20 [ 467.223816][T11174] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 467.230155][T11174] Code: 89 c5 89 c6 e8 77 86 6b f8 45 85 ed 0f 85 be fb ff ff e8 f9 8b 6b f8 48 8d 3d 82 05 92 07 ba 48 00 00 00 48 c7 c6 e0 21 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 d7 8b 6b f8 48 8d bd 00 08 00 00 [ 467.249787][T11174] RSP: 0018:ffffc900034f7a80 EFLAGS: 00010283 [ 467.255882][T11174] RAX: 0000000000000315 RBX: ffff88807f550000 RCX: ffffc9000623a000 [ 467.263874][T11174] RDX: 0000000000000048 RSI: ffffffff8d1821e0 RDI: ffffffff9130cd50 [ 467.271858][T11174] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 467.279850][T11174] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 467.287865][T11174] R13: 0000000000000000 R14: ffff88805046a568 R15: ffffc900034f7be0 [ 467.295884][T11174] io_register_zcrx+0xe94/0x1d30 [ 467.300856][T11174] ? __pfx_io_register_zcrx+0x10/0x10 [ 467.306255][T11174] ? __pfx___futex_wait+0x10/0x10 [ 467.311297][T11174] ? lock_acquire+0x1b9/0x370 [ 467.315986][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.321638][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.327274][T11174] ? rcu_is_watching+0x12/0xc0 [ 467.332050][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.337697][T11174] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 467.343729][T11174] ? __fget_files+0x215/0x3d0 [ 467.348422][T11174] ? __fget_files+0x215/0x3d0 [ 467.353129][T11174] __do_sys_io_uring_register+0x1193/0x1bc0 [ 467.359045][T11174] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 467.365299][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.370952][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.376605][T11174] ? __x64_sys_futex+0x358/0x4d0 [ 467.381572][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.387211][T11174] ? xfd_validate_state+0x129/0x190 [ 467.392423][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.398091][T11174] do_syscall_64+0x115/0x870 [ 467.402702][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.408594][T11174] RIP: 0033:0x7f83cb19e0d9 [ 467.413006][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.432616][T11174] RSP: 002b:00007f83cbfcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 467.441221][T11174] RAX: ffffffffffffffda RBX: 00007f83cb425fa0 RCX: 00007f83cb19e0d9 [ 467.449190][T11174] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003 [ 467.457157][T11174] RBP: 00007f83cb235024 R08: 0000000000000000 R09: 0000000000000000 [ 467.465123][T11174] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 467.473091][T11174] R13: 00007f83cb426038 R14: 00007f83cb425fa0 R15: 00007ffe5e7c8488 [ 467.481079][T11174] [ 467.484298][T11174] Kernel Offset: disabled [ 467.488611][T11174] Rebooting in 86400 seconds..