last executing test programs: 28.951617207s ago: executing program 4 (id=802): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 22.423993344s ago: executing program 0 (id=824): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b", @ANYRESOCT=r1], 0xffdd) 21.474267643s ago: executing program 4 (id=829): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1b, r5, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) read(r7, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000380)={0x2, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000000), 0x2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@mpls_delroute={0x34, 0x19, 0x8, 0x70bd27, 0x25dfdbfc, {0x1c, 0x20, 0x80, 0x2, 0x82, 0x5, 0x0, 0x4, 0x800}, [@RTA_DST={0x8, 0x1, {0x0, 0x0, 0x1}}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_clone(0x81182b00, &(0x7f0000000380)="da46a1633cc14554e94b18b0dbe2da334bb00e8d6f233c0593452ac3497e78c2b148e90de1d8769c01b97e4697ba54aad88d1c3117d9a71e56479a795ae1eaeb8e92a74f146b2dc4c3a5c4d59c214db225176e056572b4be8fdc9c5dc627403ebc41", 0x62, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000400)="edae75f19e7760fc03faa2fc34161fb271ef62a317b39771d107f47179132de2e7a225c77bad3edbe5d9cdd6eb60f43d1aa2ca591c1616e418a25b6b15adac5f944465053da8bf596749917c37ac4646ec16468dd0604ed7") socket$netlink(0x10, 0x3, 0x10) 20.600028426s ago: executing program 2 (id=834): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407900060000000000000109022408010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="6006a5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0xa, 0x1, 0x84) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000140)="01000000100000000000006bb55a2a630b00c145f94cd977f9b8642cbe", 0x1d, 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000000)={@remote, @loopback, @remote}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000040)={@multicast2, @loopback, @remote}, 0xc) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f907, 0x0, '\x00', @p_u16=0x0}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 18.844253679s ago: executing program 1 (id=839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x54032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f0000000000)=0x3, 0x0, 0x4) 17.997183277s ago: executing program 1 (id=841): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 15.850736207s ago: executing program 5 (id=842): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 15.750610846s ago: executing program 5 (id=843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001da60000", 0x24) syz_usb_connect$cdc_ecm(0x2, 0x6a, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) socket$inet(0x2, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e65772064656661756c44c2dcc0e5dda52a1eef49587420757365723a73797a20303030303030303030303030303030303430393300"], 0x2a, 0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) 15.2671586s ago: executing program 1 (id=844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010002000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4301000000000008002900802c050004001880140003006261746164765f736c6176655f300000"], 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r8, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x20c015, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r10, &(0x7f00000001c0)='./file0\x00') 13.89797585s ago: executing program 3 (id=847): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13.635185752s ago: executing program 3 (id=848): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 11.899326615s ago: executing program 0 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffd, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x3, 0x2000, 0x7, r2, r3, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) read$sequencer(r4, 0x0, 0x2160) 11.604589132s ago: executing program 0 (id=850): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) syz_usb_disconnect(r0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.543686491s ago: executing program 5 (id=851): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x1000, 0x0, 0x10}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.511783837s ago: executing program 5 (id=852): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes256, 0x8, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb165b416f00380000000000019078ac1e0001ac1414aa090000000000000025000000000000"], 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 10.416582669s ago: executing program 3 (id=853): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000003140)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) 10.245564311s ago: executing program 4 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 9.565416922s ago: executing program 2 (id=855): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32, @ANYBLOB="000051e6f593d351a637919726ba00004100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x1000, 0x0, 0x10}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.514048393s ago: executing program 3 (id=856): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) socket$kcm(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9", @ANYBLOB=' '], 0x16) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024400010100"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 9.3661977s ago: executing program 1 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 8.498909301s ago: executing program 2 (id=858): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446c92b46acda77dda396b3602b62daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b4d67598507c33847951bcc2a6faf3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72b", 0xf4}, {&(0x7f0000000c00)="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", 0x178}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba14937", 0x29}, {&(0x7f00000007c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c972fa33a72341effa8108605dd6acfd1537c5ed72800059421264011d2f6b5b062a657acc20850926666076c37baf7ae531e4a4155e7387fd962da298981dfa503239f03b8166953553e74b1dcbd", 0x9f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2900a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918add6f28e302868e1d4500b073ac1a7c72c4e805ff1fce9c5e0273d0ea144b6999eb1661fed8ddba6250af47fde6e4225f438528b6660d8b67812726721f6b755bb37ca116f51e2f239675ff38126c1d681", 0x87}, {&(0x7f0000000180)="a1e27575d35fd4f38d622e5938b301a28a4c21084fa1f95f8e2343cff8831a5a663f3fac3d082e19b04d59a071c5599a98b7bc07bf2bf94767fec2", 0x3b}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.22745288s ago: executing program 4 (id=859): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r5, 0x5501) write$UHID_INPUT(r4, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) dup(r2) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="000000d60000000000b7080000030000007b8af8ff00000000bfa200000000800007e60000f8ffffffb703000008000000b704000001000000850000008200000018932ef9", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, &(0x7f0000000440)=""/196, 0xc4) write$apparmor_exec(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000"], 0x8) 8.119265472s ago: executing program 0 (id=860): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.116708266s ago: executing program 5 (id=861): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) dup2(0xffffffffffffffff, r2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) capset(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000408050000000000000000000300000106000240890d000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffd, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x3, 0x2000, 0x7, r2, r3, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) read$sequencer(r4, 0x0, 0x2160) 7.279839177s ago: executing program 2 (id=863): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0x1}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r6], &(0x7f0000000580)}) 7.050823868s ago: executing program 0 (id=864): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x1000, 0x0, 0x10}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.882973937s ago: executing program 3 (id=865): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000003100)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0]) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000003140)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1}, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) write$cgroup_int(r3, &(0x7f0000000040)=0x9, 0x12) 5.688033034s ago: executing program 2 (id=866): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) close(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e24, 0xd, @private1={0xfc, 0x1, '\x00', 0x4}, 0x3e}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x202, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x41}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x6, 0xfe, 0x2, 0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, 0xe) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 5.132956943s ago: executing program 0 (id=867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/128, 0x80}], 0x1, 0x219, 0x200) 4.56270519s ago: executing program 1 (id=868): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x8917, 0x0) 4.49537927s ago: executing program 3 (id=869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010002000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4301000000000008002900802c050004001880140003006261746164765f736c6176655f300000"], 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r8, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x20c015, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b1f00000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aaaaaaaaaa000000"], 0x48}}, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r10, &(0x7f00000001c0)='./file0\x00') 3.894780663s ago: executing program 1 (id=870): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 1.210082447s ago: executing program 4 (id=871): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 280.221605ms ago: executing program 4 (id=872): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x7, 0x9, 0x1, 0x0, 0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x3c, 0x0, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x3c}}, 0x4000) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 0s ago: executing program 5 (id=873): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x7, 0x6b1, 0xfffffffa, {0x77359400}, {0x77359400}, {0x4}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x2f, 0x2, 0x0, 0x0, "e7ed06f2fd0870e91c4309d5468b69360c30533334238f56c6a622c2426a81346bdb832337a003254dcb9a2eb21dcc62dbda8036bfda047f244bd6b1984b1896"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): e hsr debugfs directory [ 113.054571][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.103010][ T5859] hsr_slave_0: entered promiscuous mode [ 113.109534][ T5859] hsr_slave_1: entered promiscuous mode [ 113.116084][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 113.122610][ T5859] Cannot create hsr debugfs directory [ 113.203429][ T5862] hsr_slave_0: entered promiscuous mode [ 113.209994][ T5862] hsr_slave_1: entered promiscuous mode [ 113.216357][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 113.222123][ T5862] Cannot create hsr debugfs directory [ 113.281672][ T5868] team0: Port device team_slave_0 added [ 113.290844][ T5868] team0: Port device team_slave_1 added [ 113.427974][ T5860] hsr_slave_0: entered promiscuous mode [ 113.436162][ T5860] hsr_slave_1: entered promiscuous mode [ 113.442589][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 113.448325][ T5860] Cannot create hsr debugfs directory [ 113.471124][ T5871] Bluetooth: hci0: command tx timeout [ 113.535507][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.543122][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.569244][ T5871] Bluetooth: hci3: command tx timeout [ 113.569304][ T5871] Bluetooth: hci4: command tx timeout [ 113.580373][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.631389][ T5865] Bluetooth: hci2: command tx timeout [ 113.636852][ T5865] Bluetooth: hci1: command tx timeout [ 113.643023][ T5871] Bluetooth: hci5: command tx timeout [ 113.659386][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.666614][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.693034][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.000866][ T5868] hsr_slave_0: entered promiscuous mode [ 114.008609][ T5868] hsr_slave_1: entered promiscuous mode [ 114.015038][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 114.020763][ T5868] Cannot create hsr debugfs directory [ 114.288804][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.302746][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.329520][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.343022][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.487900][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.505472][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.519766][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.537583][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.639985][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.653173][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.676001][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.687559][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.814372][ T5859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.832858][ T5859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.853472][ T5859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.891354][ T5859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.961281][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.004191][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.017661][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.035714][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.099683][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.130015][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.173198][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.180438][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.233368][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.247563][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.260038][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.295489][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.314748][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.327205][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.334375][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.416761][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.474418][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.507812][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.514977][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.553945][ T5865] Bluetooth: hci0: command tx timeout [ 115.564431][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.571594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.615496][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.637335][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.645419][ T5865] Bluetooth: hci4: command tx timeout [ 115.650839][ T5865] Bluetooth: hci3: command tx timeout [ 115.711378][ T5865] Bluetooth: hci1: command tx timeout [ 115.716827][ T5865] Bluetooth: hci5: command tx timeout [ 115.731110][ T5881] Bluetooth: hci2: command tx timeout [ 115.775778][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.785342][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.792505][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.850281][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.857474][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.885201][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.892407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.915556][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.922720][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.985920][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.133355][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.206032][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.213236][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.248100][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.294096][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.345813][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.353486][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.492913][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.539562][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.581623][ T5860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.611316][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.646052][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.653247][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.744703][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.751902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.978881][ T5858] veth0_vlan: entered promiscuous mode [ 117.110479][ T5858] veth1_vlan: entered promiscuous mode [ 117.145403][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.294826][ T5858] veth0_macvtap: entered promiscuous mode [ 117.316287][ T5858] veth1_macvtap: entered promiscuous mode [ 117.338005][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.460871][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.495885][ T5869] veth0_vlan: entered promiscuous mode [ 117.527882][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.570551][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.595428][ T5869] veth1_vlan: entered promiscuous mode [ 117.632203][ T5865] Bluetooth: hci0: command tx timeout [ 117.702917][ T1092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.718833][ T5865] Bluetooth: hci3: command tx timeout [ 117.724402][ T5871] Bluetooth: hci4: command tx timeout [ 117.743098][ T1092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.760278][ T1092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.773421][ T5862] veth0_vlan: entered promiscuous mode [ 117.796446][ T5865] Bluetooth: hci5: command tx timeout [ 117.802017][ T5871] Bluetooth: hci2: command tx timeout [ 117.807431][ T5871] Bluetooth: hci1: command tx timeout [ 117.816691][ T1092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.959721][ T5862] veth1_vlan: entered promiscuous mode [ 117.980186][ T5860] veth0_vlan: entered promiscuous mode [ 118.052016][ T5860] veth1_vlan: entered promiscuous mode [ 118.092666][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.117651][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.140446][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.187629][ T5869] veth0_macvtap: entered promiscuous mode [ 118.196201][ T5862] veth0_macvtap: entered promiscuous mode [ 118.240869][ T5859] veth0_vlan: entered promiscuous mode [ 118.250746][ T5862] veth1_macvtap: entered promiscuous mode [ 118.275264][ T5869] veth1_macvtap: entered promiscuous mode [ 118.282856][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.290704][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.296768][ T5859] veth1_vlan: entered promiscuous mode [ 118.354675][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.384537][ T5860] veth0_macvtap: entered promiscuous mode [ 118.426545][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.435967][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.443477][ T5860] veth1_macvtap: entered promiscuous mode [ 118.479807][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.539165][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.570500][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.599450][ T5868] veth0_vlan: entered promiscuous mode [ 118.622537][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.632543][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.685054][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.707737][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.747472][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.757619][ T5859] veth0_macvtap: entered promiscuous mode [ 118.786126][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.795970][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.810858][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.847017][ T5859] veth1_macvtap: entered promiscuous mode [ 118.888498][ T5868] veth1_vlan: entered promiscuous mode [ 118.926514][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.005371][ T1092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.054986][ T1092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.081475][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.097177][ T1092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.109246][ T1092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.144008][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.157850][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.174574][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.197722][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.206119][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.247184][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.256206][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.272844][ T5868] veth0_macvtap: entered promiscuous mode [ 119.295490][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.304533][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.317777][ T5868] veth1_macvtap: entered promiscuous mode [ 119.340193][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.353002][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.436252][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.446827][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.467221][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.471390][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.530860][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.540483][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.581864][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.606763][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.620959][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.670553][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.815355][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.839519][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.850103][ T6011] loop4: detected capacity change from 0 to 8 [ 120.000405][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.032090][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.231777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.241310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.729514][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.752280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.761583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.780107][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.945605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 122.954623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.991628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.653249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.662922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 123.835370][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.874287][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.056366][ T6034] loop5: detected capacity change from 0 to 256 [ 124.288325][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.296719][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.411292][ T6037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.772311][ T6034] FAT-fs (loop5): Directory bread(block 64) failed [ 124.778978][ T6034] FAT-fs (loop5): Directory bread(block 65) failed [ 124.886725][ T6034] FAT-fs (loop5): Directory bread(block 66) failed [ 124.953914][ T6034] FAT-fs (loop5): Directory bread(block 67) failed [ 125.020021][ T6034] FAT-fs (loop5): Directory bread(block 68) failed [ 125.084623][ T6034] FAT-fs (loop5): Directory bread(block 69) failed [ 125.103936][ T6034] FAT-fs (loop5): Directory bread(block 70) failed [ 125.110519][ T6034] FAT-fs (loop5): Directory bread(block 71) failed [ 125.164432][ T6034] FAT-fs (loop5): Directory bread(block 72) failed [ 125.187584][ T6034] FAT-fs (loop5): Directory bread(block 73) failed [ 128.021517][ T6043] loop0: detected capacity change from 0 to 262144 [ 128.046435][ T6043] F2FS-fs (loop0): invalid crc value [ 128.247884][ T6043] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.499905][ T6065] loop2: detected capacity change from 0 to 512 [ 128.565089][ T6065] ======================================================= [ 128.565089][ T6065] WARNING: The mand mount option has been deprecated and [ 128.565089][ T6065] and is ignored by this kernel. Remove the mand [ 128.565089][ T6065] option from the mount to silence this warning. [ 128.565089][ T6065] ======================================================= [ 128.653917][ T6067] loop1: detected capacity change from 0 to 16 [ 128.792203][ T6067] erofs (device loop1): mounted with root inode @ nid 36. [ 129.194720][ T6065] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.338182][ T6065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.544860][ T6065] EXT4-fs (loop2): 1 truncate cleaned up [ 129.561313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 129.572580][ T6065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.864045][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.084776][ T6088] loop0: detected capacity change from 0 to 256 [ 132.955406][ T6088] exfat: Deprecated parameter 'utf8' [ 133.270434][ T6088] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 133.375419][ T6104] loop2: detected capacity change from 0 to 64 [ 133.657206][ T6088] exFAT-fs (loop0): IO charset i not found [ 133.938969][ T6111] binder: 6110:6111 ioctl c0306201 200000000040 returned -22 [ 134.915417][ T6117] loop2: detected capacity change from 0 to 128 [ 134.997968][ T6117] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 135.057222][ T6117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.115044][ T6120] Bluetooth: MGMT ver 1.23 [ 135.119700][ T6120] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 135.193079][ T6117] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 135.271353][ T6117] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 135.515734][ T6125] loop5: detected capacity change from 0 to 2048 [ 135.557009][ T6127] kAFS: No cell specified [ 135.689221][ T6131] loop0: detected capacity change from 0 to 128 [ 135.746255][ T6131] zonefs (loop0) ERROR: Not a zoned block device [ 135.780791][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.891412][ T6125] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.254813][ T6105] loop1: detected capacity change from 0 to 32768 [ 136.267261][ T6107] loop3: detected capacity change from 0 to 32768 [ 136.453329][ T6107] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.658263][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.711176][ T6107] XFS (loop3): Ending clean mount [ 136.791973][ T6107] XFS (loop3): Quotacheck needed: Please wait. [ 137.002237][ T6107] XFS (loop3): Quotacheck: Done. [ 137.123382][ T6107] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.489292][ T6152] loop5: detected capacity change from 0 to 2048 [ 138.327206][ T6163] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.631765][ T6166] binder: 6165:6166 ioctl c0306201 200000000040 returned -22 [ 140.062704][ T6178] loop5: detected capacity change from 0 to 16 [ 140.157300][ T6178] erofs (device loop5): mounted with root inode @ nid 36. [ 140.349361][ T6178] erofs (device loop5): corrupted dir block 8200 @ nid 36 [ 140.375609][ T6185] erofs (device loop5): readahead error at folio 12 @ nid 36 [ 140.420406][ T6185] erofs (device loop5): readahead error at folio 9 @ nid 36 [ 140.508503][ T6185] syz.5.52: attempt to access beyond end of device [ 140.508503][ T6185] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 141.355804][ T6185] syz.5.52: attempt to access beyond end of device [ 141.355804][ T6185] loop5: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 141.766589][ T6199] loop0: detected capacity change from 0 to 1024 [ 141.959238][ T5871] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 141.969394][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/u9:4 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 141.969451][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.969477][ T5871] Workqueue: hci4 hci_rx_work [ 141.969524][ T5871] Call Trace: [ 141.969537][ T5871] [ 141.969551][ T5871] dump_stack_lvl+0x16c/0x1f0 [ 141.969609][ T5871] sysfs_warn_dup+0x7f/0xa0 [ 141.969660][ T5871] sysfs_create_dir_ns+0x24b/0x2b0 [ 141.969710][ T5871] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 141.969764][ T5871] ? find_held_lock+0x2b/0x80 [ 141.969830][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.969887][ T5871] ? do_raw_spin_unlock+0x172/0x230 [ 141.969945][ T5871] kobject_add_internal+0x2c4/0x9b0 [ 141.970022][ T5871] kobject_add+0x16e/0x240 [ 141.970086][ T5871] ? __pfx_kobject_add+0x10/0x10 [ 141.970151][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.970203][ T5871] ? do_raw_spin_unlock+0x172/0x230 [ 141.970244][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.970298][ T5871] ? kobject_put+0xab/0x5a0 [ 141.970361][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.970427][ T5871] device_add+0x288/0x1aa0 [ 141.970494][ T5871] ? __pfx_dev_set_name+0x10/0x10 [ 141.970540][ T5871] ? __pfx_device_add+0x10/0x10 [ 141.970613][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.970667][ T5871] ? mgmt_send_event_skb+0x2fb/0x460 [ 141.970743][ T5871] hci_conn_add_sysfs+0x17e/0x230 [ 141.970799][ T5871] le_conn_complete_evt+0x1075/0x1d70 [ 141.970844][ T5871] ? preempt_count_sub+0x150/0x160 [ 141.970907][ T5871] ? find_held_lock+0x2b/0x80 [ 141.970961][ T5871] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 141.971008][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.971070][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.971127][ T5871] ? __mutex_unlock_slowpath+0x163/0x800 [ 141.971197][ T5871] hci_le_conn_complete_evt+0x23c/0x370 [ 141.971261][ T5871] hci_le_meta_evt+0x357/0x5e0 [ 141.971313][ T5871] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 141.971370][ T5871] hci_event_packet+0x685/0x11c0 [ 141.971414][ T5871] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 141.971465][ T5871] ? __pfx_hci_event_packet+0x10/0x10 [ 141.971508][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.971563][ T5871] ? kcov_remote_start+0x3c9/0x6d0 [ 141.971609][ T5871] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.971657][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.971720][ T5871] hci_rx_work+0x2c5/0x16b0 [ 141.971776][ T5871] ? rcu_is_watching+0x12/0xc0 [ 141.971836][ T5871] process_one_work+0x9cf/0x1b70 [ 141.971901][ T5871] ? __pfx_process_one_work+0x10/0x10 [ 141.971947][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.972008][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.972057][ T5871] ? assign_work+0x1a0/0x250 [ 141.972103][ T5871] worker_thread+0x6c8/0xf10 [ 141.972171][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 141.972218][ T5871] kthread+0x3c5/0x780 [ 141.972258][ T5871] ? __pfx_kthread+0x10/0x10 [ 141.972300][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.972351][ T5871] ? rcu_is_watching+0x12/0xc0 [ 141.972399][ T5871] ? __pfx_kthread+0x10/0x10 [ 141.972438][ T5871] ret_from_fork+0x5d7/0x6f0 [ 141.972472][ T5871] ? __pfx_kthread+0x10/0x10 [ 141.972509][ T5871] ret_from_fork_asm+0x1a/0x30 [ 141.972580][ T5871] [ 142.295696][ T5871] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 142.312050][ T5871] Bluetooth: hci4: failed to register connection device [ 142.525503][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.532255][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.651498][ T5935] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.537374][ T6214] loop3: detected capacity change from 0 to 262144 [ 144.580917][ T6214] F2FS-fs (loop3): invalid crc value [ 144.660532][ T6216] Zero length message leads to an empty skb [ 145.171097][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 145.234191][ T6214] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 145.247387][ T6214] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.201113][ T5935] usb 3-1: device descriptor read/all, error -71 [ 146.224077][ T6018] hfsplus: b-tree write err: -5, ino 4 [ 146.378429][ T6228] loop5: detected capacity change from 0 to 1024 [ 146.422383][ T6228] EXT4-fs: Ignoring removed orlov option [ 146.527798][ T6228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.414580][ T6228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.463626][ T6240] loop1: detected capacity change from 0 to 1024 [ 147.718350][ T30] audit: type=1800 audit(1755028843.694:2): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.73" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 147.861066][ T30] audit: type=1800 audit(1755028843.704:3): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.73" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 147.891686][ T6248] loop2: detected capacity change from 0 to 128 [ 147.923330][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.004555][ T6248] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.074263][ T6248] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.170340][ T6253] loop0: detected capacity change from 0 to 128 [ 148.199003][ T6248] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 148.368310][ T6253] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.455665][ T6248] random: crng reseeded on system resumption [ 148.730480][ T6253] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.915498][ T6253] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 149.008612][ T30] audit: type=1326 audit(1755028844.994:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.4.75" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2c1b8ebe9 code=0x0 [ 149.101705][ T6262] random: crng reseeded on system resumption [ 149.407044][ T6266] fuse: Unknown parameter '0x0000000000000004' [ 149.473981][ T5868] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.809916][ T6271] loop2: detected capacity change from 0 to 256 [ 149.905507][ T5858] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.961910][ T6271] FAT-fs (loop2): Directory bread(block 64) failed [ 149.971609][ T6270] loop1: detected capacity change from 0 to 2048 [ 149.971828][ T6273] loop5: detected capacity change from 0 to 2048 [ 150.007936][ T6271] FAT-fs (loop2): Directory bread(block 65) failed [ 150.028885][ T6271] FAT-fs (loop2): Directory bread(block 66) failed [ 150.100018][ T6271] FAT-fs (loop2): Directory bread(block 67) failed [ 150.106818][ T6271] FAT-fs (loop2): Directory bread(block 68) failed [ 150.113432][ T6271] FAT-fs (loop2): Directory bread(block 69) failed [ 150.120081][ T6271] FAT-fs (loop2): Directory bread(block 70) failed [ 150.126703][ T6271] FAT-fs (loop2): Directory bread(block 71) failed [ 150.133503][ T6271] FAT-fs (loop2): Directory bread(block 72) failed [ 150.140053][ T6271] FAT-fs (loop2): Directory bread(block 73) failed [ 150.211069][ T6277] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.283461][ T6271] syz.2.81: attempt to access beyond end of device [ 150.283461][ T6271] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 150.324545][ T6273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.391437][ T6271] syz.2.81: attempt to access beyond end of device [ 150.391437][ T6271] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 150.439482][ T6273] EXT4-fs error (device loop5): ext4_search_dir:1473: inode #12: block 9: comm syz.5.83: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 150.514533][ T6273] EXT4-fs (loop5): Remounting filesystem read-only [ 150.539509][ T30] audit: type=1800 audit(1755028846.524:5): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.81" name="file0" dev="loop2" ino=1048607 res=0 errno=0 [ 150.720046][ T6280] loop0: detected capacity change from 0 to 4096 [ 150.738933][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.800771][ T6280] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 151.806759][ T6280] ntfs3(loop0): ino=19, mi_enum_attr [ 151.859079][ T6280] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 151.921307][ T6295] binder: 6293:6295 ioctl c0306201 0 returned -14 [ 151.950575][ T6295] binder: 6293:6295 ioctl c0306201 200000000040 returned -22 [ 152.276858][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 153.791336][ T6308] loop5: detected capacity change from 0 to 128 [ 153.918736][ T6312] kAFS: No cell specified [ 154.080167][ T6308] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.231895][ T6308] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.522024][ T6321] loop1: detected capacity change from 0 to 128 [ 154.542801][ T6321] zonefs (loop1) ERROR: Not a zoned block device [ 155.266383][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.385948][ T6308] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08) [ 155.493401][ T6327] random: crng reseeded on system resumption [ 155.732496][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.827060][ T6326] loop0: detected capacity change from 0 to 2048 [ 155.942871][ T5859] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.950922][ T6316] loop2: detected capacity change from 0 to 8192 [ 155.991123][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 156.039687][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.040949][ T6329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.111677][ T6333] loop5: detected capacity change from 0 to 128 [ 156.126724][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.128435][ T6333] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 156.202619][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.242250][ T6333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.252376][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.325011][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.374509][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.404304][ T6333] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 156.490254][ T6333] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 156.694245][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 156.752490][ T9] usbtmc 2-1:16.0: can't read capabilities [ 156.914909][ T6056] usb 2-1: USB disconnect, device number 2 [ 157.450312][ T6352] loop2: detected capacity change from 0 to 512 [ 157.500258][ T6352] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.578492][ T6352] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.109: iget: special inode unallocated [ 157.636704][ T6352] EXT4-fs (loop2): get root inode failed [ 157.678345][ T6352] EXT4-fs (loop2): mount failed [ 162.805400][ T6381] loop5: detected capacity change from 0 to 512 [ 162.996702][ T6381] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 163.074377][ T6381] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.116: invalid indirect mapped block 8 (level 2) [ 163.195017][ T6381] EXT4-fs (loop5): Remounting filesystem read-only [ 163.226060][ T6381] EXT4-fs (loop5): 1 truncate cleaned up [ 165.112186][ T6390] loop1: detected capacity change from 0 to 262144 [ 165.155086][ T6381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.196668][ T6390] F2FS-fs (loop1): invalid crc value [ 166.556756][ T6390] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.780353][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.472925][ T5956] IPVS: starting estimator thread 0... [ 169.061183][ T6424] IPVS: using max 20 ests per chain, 48000 per kthread [ 170.863583][ T6430] loop1: detected capacity change from 0 to 2048 [ 171.003884][ T6442] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.205145][ T6444] kAFS: No cell specified [ 171.437312][ T6449] binder: 6448:6449 ioctl c0306201 200000000040 returned -22 [ 172.629999][ T6457] loop1: detected capacity change from 0 to 64 [ 175.181901][ T6481] loop1: detected capacity change from 0 to 1024 [ 175.575055][ T30] audit: type=1800 audit(1755028871.494:6): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 176.072638][ T6492] loop5: detected capacity change from 0 to 256 [ 176.140332][ T30] audit: type=1800 audit(1755028871.544:7): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 176.293358][ T6497] binder: 6496:6497 ioctl c0306201 200000000040 returned -22 [ 176.623852][ T5956] IPVS: starting estimator thread 0... [ 176.771562][ T6505] IPVS: using max 23 ests per chain, 55200 per kthread [ 177.576665][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 177.664818][ T6520] kAFS: No cell specified [ 178.185516][ T6523] loop1: detected capacity change from 0 to 128 [ 178.206825][ T6523] zonefs (loop1) ERROR: Not a zoned block device [ 180.213109][ T5956] IPVS: starting estimator thread 0... [ 180.432067][ T6540] IPVS: using max 22 ests per chain, 52800 per kthread [ 181.537194][ T6547] loop2: detected capacity change from 0 to 1024 [ 182.668624][ T6547] EXT4-fs: Ignoring removed orlov option [ 182.883868][ T6547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.080736][ T6547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.345804][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.581123][ T6575] kAFS: No cell specified [ 184.863088][ T6566] loop3: detected capacity change from 0 to 8192 [ 185.109394][ T6582] loop2: detected capacity change from 0 to 128 [ 185.129613][ T6582] zonefs (loop2) ERROR: Not a zoned block device [ 185.845153][ T5935] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.041180][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 186.082685][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.118828][ T5935] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 186.177751][ T6587] loop2: detected capacity change from 0 to 2048 [ 186.186131][ T5935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.231096][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.267888][ T5935] usb 1-1: SerialNumber: syz [ 186.319270][ T6594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.345852][ T5935] usb 1-1: USB disconnect, device number 2 [ 187.898386][ T6602] fuse: Unknown parameter 'fd0x0000000000000004' [ 187.983995][ T6604] binder: 6603:6604 ioctl c0306201 0 returned -14 [ 188.319209][ T6614] loop1: detected capacity change from 0 to 256 [ 188.735216][ T6623] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 188.742411][ T6623] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 188.749552][ T6623] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 188.756612][ T6623] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 188.768049][ T6623] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 188.775293][ T6623] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 188.782157][ T6623] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 190.138682][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.231448][ T6633] kernel profiling enabled (shift: 9) [ 190.550308][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 190.573993][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 190.588676][ T9] usb 3-1: config 0 has no interface number 0 [ 190.614287][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.681175][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 190.731032][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.791423][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.845940][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 190.875287][ T6637] loop0: detected capacity change from 0 to 8192 [ 190.889292][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.933549][ T9] usb 3-1: config 0 descriptor?? [ 191.007142][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 191.940850][ T5935] usb 3-1: USB disconnect, device number 4 [ 191.940983][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 192.172353][ T6631] ldusb: No device or device unplugged -19 [ 192.172356][ T5935] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 192.206266][ T5865] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 192.216171][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 192.216220][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.216244][ T5865] Workqueue: hci1 hci_rx_work [ 192.216290][ T5865] Call Trace: [ 192.216302][ T5865] [ 192.216315][ T5865] dump_stack_lvl+0x16c/0x1f0 [ 192.216364][ T5865] sysfs_warn_dup+0x7f/0xa0 [ 192.216406][ T5865] sysfs_create_dir_ns+0x24b/0x2b0 [ 192.216447][ T5865] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 192.216487][ T5865] ? find_held_lock+0x2b/0x80 [ 192.216540][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.216585][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 192.216632][ T5865] kobject_add_internal+0x2c4/0x9b0 [ 192.216697][ T5865] kobject_add+0x16e/0x240 [ 192.216752][ T5865] ? __pfx_kobject_add+0x10/0x10 [ 192.216809][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.216854][ T5865] ? do_raw_spin_unlock+0x172/0x230 [ 192.216895][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.216940][ T5865] ? kobject_put+0xab/0x5a0 [ 192.216994][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.217054][ T5865] device_add+0x288/0x1aa0 [ 192.217113][ T5865] ? __pfx_dev_set_name+0x10/0x10 [ 192.217151][ T5865] ? __pfx_device_add+0x10/0x10 [ 192.217212][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.217259][ T5865] ? mgmt_send_event_skb+0x2fb/0x460 [ 192.217312][ T5865] hci_conn_add_sysfs+0x17e/0x230 [ 192.217362][ T5865] le_conn_complete_evt+0x1075/0x1d70 [ 192.217401][ T5865] ? preempt_count_sub+0x150/0x160 [ 192.217455][ T5865] ? find_held_lock+0x2b/0x80 [ 192.217500][ T5865] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 192.217538][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.217592][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.217638][ T5865] ? __mutex_unlock_slowpath+0x163/0x800 [ 192.217719][ T5865] hci_le_conn_complete_evt+0x23c/0x370 [ 192.217766][ T5865] hci_le_meta_evt+0x357/0x5e0 [ 192.217803][ T5865] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 192.217843][ T5865] hci_event_packet+0x685/0x11c0 [ 192.217875][ T5865] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 192.217915][ T5865] ? __pfx_hci_event_packet+0x10/0x10 [ 192.217948][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.217990][ T5865] ? kcov_remote_start+0x3c9/0x6d0 [ 192.218027][ T5865] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.218069][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.218116][ T5865] hci_rx_work+0x2c5/0x16b0 [ 192.218155][ T5865] ? rcu_is_watching+0x12/0xc0 [ 192.218201][ T5865] process_one_work+0x9cf/0x1b70 [ 192.218254][ T5865] ? __pfx_process_one_work+0x10/0x10 [ 192.218290][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.218340][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.218380][ T5865] ? assign_work+0x1a0/0x250 [ 192.218415][ T5865] worker_thread+0x6c8/0xf10 [ 192.218468][ T5865] ? __pfx_worker_thread+0x10/0x10 [ 192.218504][ T5865] kthread+0x3c5/0x780 [ 192.218537][ T5865] ? __pfx_kthread+0x10/0x10 [ 192.218570][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.218610][ T5865] ? rcu_is_watching+0x12/0xc0 [ 192.218650][ T5865] ? __pfx_kthread+0x10/0x10 [ 192.218684][ T5865] ret_from_fork+0x5d7/0x6f0 [ 192.218714][ T5865] ? __pfx_kthread+0x10/0x10 [ 192.218747][ T5865] ret_from_fork_asm+0x1a/0x30 [ 192.218814][ T5865] [ 192.218849][ T5865] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 192.536323][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 192.538353][ T5865] Bluetooth: hci1: failed to register connection device [ 192.821084][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 193.121735][ T6667] loop0: detected capacity change from 0 to 40427 [ 193.166766][ T6667] F2FS-fs (loop0): invalid crc value [ 193.195842][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.251348][ T43] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 193.290269][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.346709][ T6667] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 193.356608][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.365205][ T6667] F2FS-fs (loop0): Start checkpoint disabled! [ 193.451304][ T43] usb 6-1: SerialNumber: syz [ 193.461879][ T6667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 193.759987][ T43] usb 6-1: USB disconnect, device number 2 [ 194.213364][ T12] kworker/u8:0: attempt to access beyond end of device [ 194.213364][ T12] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.276446][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 194.276497][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.276521][ T12] Workqueue: writeback wb_workfn (flush-7:0) [ 194.276583][ T12] Call Trace: [ 194.276595][ T12] [ 194.276609][ T12] dump_stack_lvl+0x16c/0x1f0 [ 194.276660][ T12] f2fs_handle_critical_error+0x624/0x9f0 [ 194.276710][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.276756][ T12] ? f2fs_build_fault_attr+0x53/0x1f0 [ 194.276811][ T12] f2fs_write_end_io+0x958/0xcf0 [ 194.276868][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 194.276925][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.276982][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 194.277032][ T12] bio_endio+0x70d/0x850 [ 194.277091][ T12] submit_bio_noacct+0x306/0x1eb0 [ 194.277146][ T12] __submit_merged_bio+0x33c/0x770 [ 194.277203][ T12] __submit_merged_write_cond+0x319/0x3f0 [ 194.277268][ T12] f2fs_write_cache_pages+0x2067/0x2570 [ 194.277360][ T12] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 194.277423][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.277469][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.277514][ T12] ? find_held_lock+0x2b/0x80 [ 194.277562][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.277612][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.277669][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 194.277729][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.277774][ T12] ? f2fs_available_free_memory+0x279/0xa30 [ 194.277902][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.277956][ T12] f2fs_write_data_pages+0x4ad/0xd90 [ 194.278024][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 194.278096][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.278140][ T12] ? __lock_acquire+0xb97/0x1ce0 [ 194.278201][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 194.278264][ T12] do_writepages+0x27a/0x600 [ 194.278319][ T12] ? __pfx_do_writepages+0x10/0x10 [ 194.278365][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.278409][ T12] ? reacquire_held_locks+0xcd/0x1f0 [ 194.278468][ T12] ? writeback_sb_inodes+0x3b0/0xfa0 [ 194.278524][ T12] __writeback_single_inode+0x160/0xfb0 [ 194.278580][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 194.278627][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.278671][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 194.278713][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.278768][ T12] writeback_sb_inodes+0x60d/0xfa0 [ 194.278844][ T12] ? alloc_vmap_area+0x2570/0x29c0 [ 194.278886][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 194.278934][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.278978][ T12] ? find_held_lock+0x2b/0x80 [ 194.279095][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.279140][ T12] ? rcu_is_watching+0x12/0xc0 [ 194.279186][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.279230][ T12] ? queue_io+0x3f6/0x520 [ 194.279279][ T12] wb_writeback+0x419/0xb70 [ 194.279344][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 194.279390][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.279450][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.279494][ T12] ? mark_held_locks+0x49/0x80 [ 194.279561][ T12] wb_workfn+0x14d/0xbe0 [ 194.279621][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 194.279670][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 194.279725][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.279775][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.279832][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.279876][ T12] ? rcu_is_watching+0x12/0xc0 [ 194.279931][ T12] process_one_work+0x9cf/0x1b70 [ 194.279995][ T12] ? __pfx_process_one_work+0x10/0x10 [ 194.280037][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.280095][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.280139][ T12] ? assign_work+0x1a0/0x250 [ 194.280181][ T12] worker_thread+0x6c8/0xf10 [ 194.280248][ T12] ? __pfx_worker_thread+0x10/0x10 [ 194.280290][ T12] kthread+0x3c5/0x780 [ 194.280329][ T12] ? __pfx_kthread+0x10/0x10 [ 194.280369][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.280414][ T12] ? rcu_is_watching+0x12/0xc0 [ 194.280455][ T12] ? __pfx_kthread+0x10/0x10 [ 194.280484][ T12] ret_from_fork+0x5d7/0x6f0 [ 194.280509][ T12] ? __pfx_kthread+0x10/0x10 [ 194.280537][ T12] ret_from_fork_asm+0x1a/0x30 [ 194.280592][ T12] [ 194.761112][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 196.022696][ T6674] loop2: detected capacity change from 0 to 32768 [ 196.092708][ T6674] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.210 (6674) [ 196.245805][ T6674] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 196.321252][ T6674] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 196.407215][ T6690] loop3: detected capacity change from 0 to 8192 [ 196.429970][ T6674] BTRFS info (device loop2): using free-space-tree [ 196.722148][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 196.729558][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 197.421669][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 197.455807][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 197.814295][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 198.043455][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 198.146903][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 198.222867][ T6709] input: syz1 as /devices/virtual/input/input5 [ 198.286378][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 198.286775][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 198.331725][ T6674] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 198.442611][ T6674] BTRFS error (device loop2): open_ctree failed: -12 [ 198.915900][ T6726] kAFS: No cell specified [ 199.886201][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 201.188491][ T5956] IPVS: starting estimator thread 0... [ 201.321498][ T6743] IPVS: using max 20 ests per chain, 48000 per kthread [ 201.672460][ T6746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.232'. [ 204.004962][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.031525][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.469995][ T6773] tipc: Started in network mode [ 204.513034][ T6773] tipc: Node identity e633ddd2cab9, cluster identity 4711 [ 204.567728][ T6773] tipc: Enabled bearer , priority 0 [ 204.617104][ T6779] syzkaller0: entered promiscuous mode [ 204.656312][ T6779] syzkaller0: entered allmulticast mode [ 204.803766][ T6779] tipc: Resetting bearer [ 204.877564][ T6772] tipc: Resetting bearer [ 204.930647][ T6790] loop3: detected capacity change from 0 to 128 [ 204.983018][ T6790] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 205.016883][ T6772] tipc: Disabling bearer [ 205.067220][ T6790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.518552][ T6804] input: syz1 as /devices/virtual/input/input6 [ 205.780416][ T6809] loop1: detected capacity change from 0 to 512 [ 206.411265][ T6809] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 206.495162][ T6809] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.256: invalid indirect mapped block 8 (level 2) [ 206.625118][ T6809] EXT4-fs (loop1): Remounting filesystem read-only [ 206.720756][ T6809] EXT4-fs (loop1): 1 truncate cleaned up [ 206.732681][ T6809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.626044][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.791568][ T6828] tty tty25: ldisc open failed (-12), clearing slot 24 [ 209.017170][ T6840] loop3: detected capacity change from 0 to 128 [ 209.081233][ T6840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 209.095760][ T6842] loop5: detected capacity change from 0 to 128 [ 209.141546][ T6840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.239165][ T6842] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 209.309477][ T6840] overlayfs: failed to resolve './bus': -2 [ 209.321764][ T6842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.523373][ T6844] sctp: [Deprecated]: syz.1.263 (pid 6844) Use of int in maxseg socket option. [ 209.523373][ T6844] Use struct sctp_assoc_value instead [ 211.688467][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.272'. [ 211.697691][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.272'. [ 211.714152][ T6860] dummy0: entered promiscuous mode [ 211.719975][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 211.788186][ T6860] team0: entered promiscuous mode [ 211.818360][ T6860] team_slave_0: entered promiscuous mode [ 211.855345][ T6860] team_slave_1: entered promiscuous mode [ 211.976849][ T6870] loop3: detected capacity change from 0 to 512 [ 211.991140][ T6869] input: syz1 as /devices/virtual/input/input7 [ 212.093861][ T6870] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 212.118768][ T6870] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.276: invalid indirect mapped block 8 (level 2) [ 212.233923][ T6870] EXT4-fs (loop3): Remounting filesystem read-only [ 212.276662][ T6870] EXT4-fs (loop3): 1 truncate cleaned up [ 212.323272][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.826493][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.905140][ T6883] loop5: detected capacity change from 0 to 1024 [ 214.090523][ T6890] loop0: detected capacity change from 0 to 128 [ 214.104350][ T30] audit: type=1800 audit(1755028910.064:8): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.279" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 214.110045][ T6890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 214.208388][ T6890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.261277][ T30] audit: type=1800 audit(1755028910.064:9): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.279" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 214.390170][ T6890] overlayfs: failed to resolve './bus': -2 [ 215.117638][ T6897] loop2: detected capacity change from 0 to 8192 [ 218.744728][ T6941] random: crng reseeded on system resumption [ 219.423946][ T6943] loop5: detected capacity change from 0 to 1024 [ 219.608395][ T30] audit: type=1800 audit(1755028915.584:10): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.298" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 219.690204][ T6950] loop3: detected capacity change from 0 to 128 [ 219.711308][ T30] audit: type=1800 audit(1755028915.584:11): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.298" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 220.034183][ T6950] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 221.349435][ T6056] IPVS: starting estimator thread 0... [ 221.621566][ T6950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.711115][ T6956] IPVS: using max 21 ests per chain, 50400 per kthread [ 221.812207][ T6950] overlayfs: failed to resolve './bus': -2 [ 222.290673][ T6958] netdevsim netdevsim2: Direct firmware load for . [ 222.290673][ T6958] failed with error -2 [ 222.507210][ T6958] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 222.507210][ T6958] [ 223.061500][ T6970] loop1: detected capacity change from 0 to 512 [ 223.118093][ T6970] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 223.157994][ T6970] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.307: invalid indirect mapped block 8 (level 2) [ 223.253127][ T6970] EXT4-fs (loop1): Remounting filesystem read-only [ 223.274988][ T6970] EXT4-fs (loop1): 1 truncate cleaned up [ 223.301420][ T6970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.698570][ T3420] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 224.429361][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.463796][ T6983] vlan2: entered promiscuous mode [ 224.468885][ T6983] bridge0: entered promiscuous mode [ 224.574901][ T3420] usb 1-1: Using ep0 maxpacket: 16 [ 224.593241][ T3420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.610403][ T3420] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 224.662613][ T3420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.711124][ T3420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.721803][ T3420] usb 1-1: SerialNumber: syz [ 225.341443][ T6056] usb 1-1: USB disconnect, device number 3 [ 225.445412][ T6983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.310'. [ 225.515499][ T6994] loop3: detected capacity change from 0 to 128 [ 225.686786][ T6994] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.775592][ T6994] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.831583][ T6997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.314'. [ 225.929564][ T6994] fscrypt (loop3, inode 12): Unsupported encryption flags (0x08) [ 226.048282][ T6998] random: crng reseeded on system resumption [ 227.673451][ T5860] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.013517][ T7009] loop5: detected capacity change from 0 to 128 [ 228.025233][ T7008] loop1: detected capacity change from 0 to 128 [ 228.060279][ T7009] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 228.078263][ T7009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.090749][ T7008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.142508][ T7008] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.153978][ T7010] loop3: detected capacity change from 0 to 1024 [ 228.255213][ T7008] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 228.268225][ T30] audit: type=1800 audit(1755028924.254:12): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.317" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 228.398281][ T7017] random: crng reseeded on system resumption [ 228.821118][ T30] audit: type=1800 audit(1755028924.284:13): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.317" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 228.937548][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.708209][ T7024] loop5: detected capacity change from 0 to 8192 [ 231.586278][ T5876] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 231.598543][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: kworker/u9:6 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 231.598593][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.598618][ T5876] Workqueue: hci3 hci_rx_work [ 231.598663][ T5876] Call Trace: [ 231.598674][ T5876] [ 231.598687][ T5876] dump_stack_lvl+0x16c/0x1f0 [ 231.598737][ T5876] sysfs_warn_dup+0x7f/0xa0 [ 231.598779][ T5876] sysfs_create_dir_ns+0x24b/0x2b0 [ 231.598821][ T5876] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 231.598867][ T5876] ? find_held_lock+0x2b/0x80 [ 231.598921][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.598966][ T5876] ? do_raw_spin_unlock+0x172/0x230 [ 231.599011][ T5876] kobject_add_internal+0x2c4/0x9b0 [ 231.599075][ T5876] kobject_add+0x16e/0x240 [ 231.599129][ T5876] ? __pfx_kobject_add+0x10/0x10 [ 231.599186][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.599231][ T5876] ? do_raw_spin_unlock+0x172/0x230 [ 231.599272][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.599320][ T5876] ? kobject_put+0xab/0x5a0 [ 231.599374][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.599429][ T5876] device_add+0x288/0x1aa0 [ 231.599490][ T5876] ? __pfx_dev_set_name+0x10/0x10 [ 231.599527][ T5876] ? __pfx_device_add+0x10/0x10 [ 231.599591][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.599636][ T5876] ? mgmt_send_event_skb+0x2fb/0x460 [ 231.599689][ T5876] hci_conn_add_sysfs+0x17e/0x230 [ 231.599737][ T5876] le_conn_complete_evt+0x1075/0x1d70 [ 231.599777][ T5876] ? preempt_count_sub+0x150/0x160 [ 231.599836][ T5876] ? find_held_lock+0x2b/0x80 [ 231.599882][ T5876] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 231.599919][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.599973][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.600017][ T5876] ? __mutex_unlock_slowpath+0x163/0x800 [ 231.600075][ T5876] hci_le_conn_complete_evt+0x23c/0x370 [ 231.600125][ T5876] hci_le_meta_evt+0x357/0x5e0 [ 231.600168][ T5876] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 231.600215][ T5876] hci_event_packet+0x685/0x11c0 [ 231.600254][ T5876] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 231.600300][ T5876] ? __pfx_hci_event_packet+0x10/0x10 [ 231.600341][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.600390][ T5876] ? kcov_remote_start+0x3c9/0x6d0 [ 231.600431][ T5876] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.600477][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.600532][ T5876] hci_rx_work+0x2c5/0x16b0 [ 231.600577][ T5876] ? rcu_is_watching+0x12/0xc0 [ 231.600630][ T5876] process_one_work+0x9cf/0x1b70 [ 231.600690][ T5876] ? __pfx_process_one_work+0x10/0x10 [ 231.600731][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.600788][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.600839][ T5876] ? assign_work+0x1a0/0x250 [ 231.600879][ T5876] worker_thread+0x6c8/0xf10 [ 231.600941][ T5876] ? __pfx_worker_thread+0x10/0x10 [ 231.600983][ T5876] kthread+0x3c5/0x780 [ 231.601021][ T5876] ? __pfx_kthread+0x10/0x10 [ 231.601059][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.601103][ T5876] ? rcu_is_watching+0x12/0xc0 [ 231.601150][ T5876] ? __pfx_kthread+0x10/0x10 [ 231.601188][ T5876] ret_from_fork+0x5d7/0x6f0 [ 231.601220][ T5876] ? __pfx_kthread+0x10/0x10 [ 231.601255][ T5876] ret_from_fork_asm+0x1a/0x30 [ 231.601324][ T5876] [ 231.929447][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 231.937323][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 231.943692][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 231.945553][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 231.955736][ T5876] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.969767][ T5876] Bluetooth: hci3: failed to register connection device [ 231.989109][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 232.290038][ T3420] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 232.771291][ T3420] usb 2-1: Using ep0 maxpacket: 16 [ 233.019810][ T3420] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.040270][ T3420] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 233.054538][ T3420] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.068651][ T3420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.085518][ T3420] usb 2-1: SerialNumber: syz [ 233.373535][ T3420] usb 2-1: USB disconnect, device number 3 [ 233.420318][ T7064] loop3: detected capacity change from 0 to 128 [ 233.450370][ T7064] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 233.784868][ T7064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.262270][ T7064] overlayfs: missing 'lowerdir' [ 236.972288][ T7086] loop0: detected capacity change from 0 to 8192 [ 239.494861][ T7134] loop5: detected capacity change from 0 to 128 [ 239.551134][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 239.599975][ T7134] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 239.641479][ T7134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.224011][ T7134] overlayfs: missing 'lowerdir' [ 240.558590][ T7142] loop0: detected capacity change from 0 to 512 [ 240.781342][ T7142] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 240.841620][ T7142] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.355: invalid indirect mapped block 8 (level 2) [ 241.029840][ T7142] EXT4-fs (loop0): Remounting filesystem read-only [ 241.039744][ T7142] EXT4-fs (loop0): 1 truncate cleaned up [ 241.048539][ T7142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.048050][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.421329][ T7161] overlayfs: missing 'lowerdir' [ 242.496700][ T7161] netlink: 'syz.5.357': attribute type 10 has an invalid length. [ 242.504856][ T7161] netlink: 40 bytes leftover after parsing attributes in process `syz.5.357'. [ 242.824069][ T7161] geneve0: entered promiscuous mode [ 242.833418][ T7161] team0: Port device geneve0 added [ 243.297302][ T7171] loop0: detected capacity change from 0 to 1024 [ 243.426347][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 243.888584][ T7165] loop1: detected capacity change from 0 to 8192 [ 244.101335][ T30] audit: type=1800 audit(1755028940.054:14): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.360" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 244.256008][ T30] audit: type=1800 audit(1755028940.054:15): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.360" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 246.718617][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.369'. [ 246.864989][ T7195] loop5: detected capacity change from 0 to 128 [ 246.975907][ T7195] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 247.080908][ T7195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.204966][ T7195] overlayfs: missing 'lowerdir' [ 247.244708][ T7199] loop1: detected capacity change from 0 to 128 [ 247.323107][ T7199] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 247.562544][ T7199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.686688][ T7205] fuse: Unknown parameter 'grou00000000000000000000' [ 248.632930][ T7221] loop2: detected capacity change from 0 to 128 [ 248.720104][ T7221] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.743720][ T7229] netlink: 68 bytes leftover after parsing attributes in process `syz.5.383'. [ 248.784446][ T7225] loop1: detected capacity change from 0 to 128 [ 248.892355][ T7221] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.940108][ T7225] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.018739][ T7221] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 249.039037][ T7225] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.083399][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.386'. [ 249.111099][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 249.162346][ T7238] random: crng reseeded on system resumption [ 249.226989][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.386'. [ 249.537010][ T7241] random: crng reseeded on system resumption [ 249.586497][ T7235] netlink: 'syz.5.386': attribute type 10 has an invalid length. [ 249.621485][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 249.718026][ T5868] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.730645][ T7235] bridge0: port 3(team0) entered blocking state [ 249.737203][ T7235] bridge0: port 3(team0) entered disabled state [ 249.743826][ T7235] team0: entered allmulticast mode [ 249.748952][ T7235] team_slave_0: entered allmulticast mode [ 249.753225][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.764889][ T7235] team_slave_1: entered allmulticast mode [ 249.764921][ T7235] geneve0: entered allmulticast mode [ 249.807699][ T7235] team0: left allmulticast mode [ 249.813345][ T7235] team_slave_0: left allmulticast mode [ 249.821933][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 249.828615][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.845091][ T7235] team_slave_1: left allmulticast mode [ 249.854882][ T7235] geneve0: left allmulticast mode [ 249.959382][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.978784][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 250.009448][ T10] usb 1-1: SerialNumber: syz [ 250.272043][ T10] usb 1-1: USB disconnect, device number 4 [ 250.361131][ T7254] fuse: Unknown parameter 'grou00000000000000000000' [ 250.568070][ T7255] batadv_slave_1: entered promiscuous mode [ 252.483832][ T7274] mmap: syz.5.397 (7274) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 252.789189][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 252.927084][ T7284] loop0: detected capacity change from 0 to 128 [ 252.960574][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 252.982077][ T24] usb 6-1: config 66 interface 0 has no altsetting 0 [ 253.013741][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 253.055770][ T7284] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.081583][ T7284] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.381156][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.389508][ T7284] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 253.443384][ T24] usb 6-1: Product: syz [ 253.456177][ T24] usb 6-1: Manufacturer: syz [ 253.532533][ T7293] random: crng reseeded on system resumption [ 253.786582][ T24] usb 6-1: SerialNumber: syz [ 253.874952][ T5858] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.093016][ T24] ati_remote2 6-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 254.139038][ T24] usb 6-1: USB disconnect, device number 3 [ 254.435480][ T7300] fuse: Unknown parameter 'group_i00000000000000000000' [ 254.942664][ T5867] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 255.201048][ T5956] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 255.421869][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 256.151201][ T5956] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.211397][ T5956] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 256.373776][ T5956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.396824][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.450480][ T5956] usb 3-1: SerialNumber: syz [ 256.972665][ T5956] usb 3-1: USB disconnect, device number 5 [ 257.340068][ T7251] batadv_slave_1: left promiscuous mode [ 258.035450][ T7335] loop2: detected capacity change from 0 to 128 [ 259.176824][ T7335] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.310489][ T7335] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.475397][ T7335] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 259.588266][ T7347] random: crng reseeded on system resumption [ 259.949322][ T5868] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.622804][ T7352] fuse: Unknown parameter 'group_i00000000000000000000' [ 260.930429][ T7357] vlan2: entered promiscuous mode [ 260.939725][ T7356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.999426][ T7357] bridge0: entered promiscuous mode [ 261.356214][ T7369] vti0: entered promiscuous mode [ 261.361504][ T7369] vti0: entered allmulticast mode [ 261.656339][ T7375] loop1: detected capacity change from 0 to 128 [ 261.675360][ T7375] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 261.693593][ T7375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.750832][ T7375] overlayfs: missing 'lowerdir' [ 265.396718][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.857560][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.124343][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 266.214793][ T7409] tipc: Started in network mode [ 266.245704][ T7409] tipc: Node identity 16544777d25f, cluster identity 4711 [ 266.283359][ T7409] tipc: Enabled bearer , priority 0 [ 266.324940][ T7411] syzkaller0: entered promiscuous mode [ 266.354922][ T7411] syzkaller0: entered allmulticast mode [ 266.384101][ T7409] tipc: Resetting bearer [ 266.411544][ T7408] tipc: Resetting bearer [ 266.582829][ T7408] tipc: Disabling bearer [ 266.600555][ T7416] loop3: detected capacity change from 0 to 1024 [ 266.701410][ T30] audit: type=1800 audit(1755028962.664:16): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.444" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 267.201050][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 268.134096][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.167572][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 268.177166][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 268.201100][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.569649][ T24] usb 4-1: config 0 descriptor?? [ 268.826732][ T7434] trusted_key: syz.0.451 sent an empty control message without MSG_MORE. [ 269.517407][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 269.524830][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 269.539687][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 269.551611][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 269.568580][ T24] usb 4-1: media controller created [ 269.595040][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.641579][ T3420] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 269.698019][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 269.781277][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 269.808260][ T7443] loop0: detected capacity change from 0 to 1024 [ 269.839535][ T7451] netlink: 196 bytes leftover after parsing attributes in process `syz.2.452'. [ 269.867161][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.876904][ T7451] batadv_slave_0: entered promiscuous mode [ 269.883841][ T7451] batadv_slave_0: entered allmulticast mode [ 269.910847][ T7451] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 269.931141][ T3420] usb 6-1: Using ep0 maxpacket: 16 [ 269.942369][ T7443] EXT4-fs: Ignoring removed orlov option [ 269.948065][ T7443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.963675][ T3420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.977785][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 270.004105][ T3420] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 270.035819][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 270.043705][ T3420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.062346][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 270.087333][ T7443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.104767][ T3420] usb 6-1: config 0 descriptor?? [ 270.142541][ T24] usb 4-1: USB disconnect, device number 2 [ 270.162531][ T7451] netlink: 'syz.2.452': attribute type 8 has an invalid length. [ 270.507293][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 270.665592][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.702843][ T3420] usbhid 6-1:0.0: can't add hid device: -71 [ 270.760079][ T3420] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 270.839801][ T3420] usb 6-1: USB disconnect, device number 4 [ 271.057063][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 271.111947][ T7473] loop1: detected capacity change from 0 to 1024 [ 271.312432][ T30] audit: type=1800 audit(1755028967.254:17): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.460" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 271.360515][ T7477] loop3: detected capacity change from 0 to 128 [ 271.435626][ T7477] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 271.508563][ T7477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.629313][ T7477] overlayfs: missing 'workdir' [ 273.122528][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 273.351207][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 273.500772][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 273.516079][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 273.753242][ T24] usb 6-1: Product: syz [ 273.757943][ T24] usb 6-1: Manufacturer: syz [ 273.762661][ T24] usb 6-1: SerialNumber: syz [ 273.774599][ T24] usb 6-1: config 0 descriptor?? [ 273.920166][ T7501] syz.3.468 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 274.642320][ T7482] vivid-000: disconnect [ 274.808027][ T7481] vivid-000: reconnect [ 274.813611][ T6056] usb 6-1: USB disconnect, device number 5 [ 275.894744][ T7512] process 'syz.0.471' launched './file0' with NULL argv: empty string added [ 276.401220][ T7524] syz.1.466 uses obsolete (PF_INET,SOCK_PACKET) [ 277.886930][ T7544] loop3: detected capacity change from 0 to 8192 [ 280.343109][ T7565] loop0: detected capacity change from 0 to 128 [ 280.521421][ T7565] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.580778][ T7570] loop5: detected capacity change from 0 to 512 [ 280.656725][ T7565] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.698626][ T7570] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 280.749809][ T7570] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.486: invalid indirect mapped block 8 (level 2) [ 280.769098][ T7565] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 280.788771][ T7570] EXT4-fs (loop5): Remounting filesystem read-only [ 280.845953][ T7576] random: crng reseeded on system resumption [ 281.123819][ T7570] EXT4-fs (loop5): 1 truncate cleaned up [ 281.283855][ T7570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.305995][ T5858] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 282.013393][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.241371][ T7590] loop1: detected capacity change from 0 to 1024 [ 282.474142][ T7602] loop5: detected capacity change from 0 to 128 [ 282.580638][ T7602] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 282.607839][ T30] audit: type=1800 audit(1755028978.574:18): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.492" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 282.899704][ T7602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.094444][ T7602] overlayfs: missing 'lowerdir' [ 283.437373][ T7603] loop3: detected capacity change from 0 to 8192 [ 283.749563][ T7615] kAFS: No cell specified [ 284.079127][ T7617] loop5: detected capacity change from 0 to 128 [ 284.086558][ T7617] zonefs (loop5) ERROR: Not a zoned block device [ 285.306753][ T5176] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 285.821185][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 286.063865][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 286.086289][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.146711][ T24] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 286.163124][ T7647] loop5: detected capacity change from 0 to 128 [ 286.212355][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.231862][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.239886][ T24] usb 3-1: SerialNumber: syz [ 286.245262][ T7645] loop1: detected capacity change from 0 to 1024 [ 286.271947][ T7647] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 286.336817][ T7647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.441460][ T30] audit: type=1800 audit(1755028982.424:19): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.508" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 286.462861][ T7647] overlayfs: missing 'lowerdir' [ 286.479220][ T3420] usb 3-1: USB disconnect, device number 6 [ 287.219310][ T7658] netlink: 56 bytes leftover after parsing attributes in process `syz.1.512'. [ 287.382371][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.513'. [ 287.521579][ T7668] kAFS: No cell specified [ 287.845488][ T7671] loop2: detected capacity change from 0 to 128 [ 287.853204][ T7671] zonefs (loop2) ERROR: Not a zoned block device [ 289.268372][ T7692] input: syz1 as /devices/virtual/input/input9 [ 291.513848][ T7722] loop1: detected capacity change from 0 to 128 [ 291.701445][ T7722] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 291.871260][ T7722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.251682][ T7722] overlayfs: missing 'lowerdir' [ 293.581045][ T6056] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 293.830995][ T6056] usb 4-1: Using ep0 maxpacket: 16 [ 293.873157][ T6056] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.940882][ T6056] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 294.061364][ T6056] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.112648][ T6056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 294.161164][ T6056] usb 4-1: SerialNumber: syz [ 294.409257][ T6056] usb 4-1: USB disconnect, device number 3 [ 297.142759][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 297.177348][ T7765] fuse: Unknown parameter 'group_i00000000000000000000' [ 297.475881][ T7768] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.761321][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 302.659116][ T7815] fuse: Unknown parameter 'group_id00000000000000000000' [ 304.175720][ T7829] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 305.211429][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 305.394603][ T10] usb 5-1: device descriptor read/64, error -71 [ 306.427611][ T7853] loop2: detected capacity change from 0 to 512 [ 306.581321][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 306.751319][ T10] usb 5-1: device descriptor read/64, error -71 [ 306.765061][ T7853] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 306.899473][ T10] usb usb5-port1: attempt power cycle [ 306.948582][ T7855] loop3: detected capacity change from 0 to 8192 [ 307.043449][ T7853] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.559: invalid indirect mapped block 8 (level 2) [ 307.130468][ T7853] EXT4-fs (loop2): Remounting filesystem read-only [ 307.178593][ T7853] EXT4-fs (loop2): 1 truncate cleaned up [ 307.229936][ T7853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.291083][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 307.932606][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.013545][ T10] usb 5-1: device descriptor read/8, error -71 [ 308.324341][ T7876] fuse: Unknown parameter 'group_id00000000000000000000' [ 308.414390][ T7879] input: syz1 as /devices/virtual/input/input11 [ 309.148651][ T7883] loop2: detected capacity change from 0 to 2048 [ 309.290997][ T7885] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.562816][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 312.278628][ T7892] loop0: detected capacity change from 0 to 32768 [ 312.409167][ T7892] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 312.601090][ T30] audit: type=1800 audit(1755029008.584:20): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.568" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 312.663233][ T7911] loop3: detected capacity change from 0 to 8192 [ 313.096812][ T5858] ocfs2: Unmounting device (7,0) on (node local) [ 313.292360][ T7928] loop5: detected capacity change from 0 to 2048 [ 313.444533][ T7934] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.801447][ T6056] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 313.932364][ T7940] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[7940] [ 313.945972][ T7940] netlink: 'syz.0.582': attribute type 2 has an invalid length. [ 314.064766][ T6056] usb 4-1: Using ep0 maxpacket: 8 [ 314.095489][ T6056] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 314.133850][ T6056] usb 4-1: config 0 has no interface number 0 [ 314.198741][ T6056] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.270334][ T6056] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 314.361035][ T6056] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.425582][ T6056] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.254055][ T6056] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 315.263202][ T6056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.284906][ T6056] usb 4-1: config 0 descriptor?? [ 315.295758][ T6056] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 315.563063][ T3420] usb 4-1: USB disconnect, device number 4 [ 315.563107][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 316.150336][ T7955] loop5: detected capacity change from 0 to 1024 [ 316.172976][ T30] audit: type=1800 audit(1755029012.164:21): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.591" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 316.861430][ T3420] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 317.991718][ T7983] loop2: detected capacity change from 0 to 128 [ 318.057291][ T7983] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 318.133823][ T7983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.189705][ T7985] loop1: detected capacity change from 0 to 1024 [ 318.240620][ T7983] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 318.300803][ T7983] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 318.399312][ T7988] kAFS: No cell specified [ 319.738685][ T7996] random: crng reseeded on system resumption [ 320.775335][ T8007] libceph: resolve '4..' (ret=-3): failed [ 321.097319][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 321.851110][ T5956] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 321.916080][ T8016] netlink: 48 bytes leftover after parsing attributes in process `syz.4.609'. [ 322.061022][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 322.093445][ T5956] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 322.131048][ T5956] usb 3-1: config 0 has no interface number 0 [ 322.143091][ T5956] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.165735][ T30] audit: type=1326 audit(1755029018.134:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.207854][ T5956] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 322.268158][ T5956] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.291276][ T30] audit: type=1326 audit(1755029018.134:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.377605][ T5956] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.501112][ T5956] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 322.510412][ T30] audit: type=1326 audit(1755029018.194:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.606866][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.745223][ T30] audit: type=1326 audit(1755029018.194:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.771363][ T30] audit: type=1326 audit(1755029018.194:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.795199][ T30] audit: type=1326 audit(1755029018.224:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d878d550 code=0x7ffc0000 [ 322.817810][ T30] audit: type=1326 audit(1755029018.224:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.866221][ T30] audit: type=1326 audit(1755029018.224:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.903760][ T5956] usb 3-1: config 0 descriptor?? [ 322.933185][ T5956] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 322.952855][ T30] audit: type=1326 audit(1755029018.224:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 322.975050][ T30] audit: type=1326 audit(1755029018.224:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 323.215016][ T5956] usb 3-1: USB disconnect, device number 7 [ 323.220929][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 323.636052][ T8031] kAFS: No cell specified [ 324.607629][ T5956] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 326.851605][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.857936][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.109216][ T8075] loop5: detected capacity change from 0 to 1024 [ 329.805062][ T8079] loop5: detected capacity change from 0 to 1024 [ 330.042222][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 330.042248][ T30] audit: type=1800 audit(1755029026.024:33): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.629" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 330.080226][ T5176] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 330.357037][ T8073] loop1: detected capacity change from 0 to 32768 [ 330.436617][ T5956] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 330.534350][ T8073] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 330.611177][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 330.638157][ T5956] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.658721][ T5956] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 330.688524][ T5956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.705064][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 330.802630][ T5956] usb 3-1: SerialNumber: syz [ 330.994289][ T5862] ocfs2: Unmounting device (7,1) on (node local) [ 331.035134][ T5956] usb 3-1: USB disconnect, device number 8 [ 331.146090][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.637'. [ 331.753093][ T5867] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 332.152747][ T8110] kAFS: No cell specified [ 332.666250][ T8118] loop2: detected capacity change from 0 to 128 [ 332.685526][ T8118] zonefs (loop2) ERROR: Not a zoned block device [ 333.462073][ T8116] fuse: Bad value for 'fd' [ 334.198710][ T8129] loop2: detected capacity change from 0 to 128 [ 334.487615][ T8135] loop5: detected capacity change from 0 to 128 [ 334.722965][ T8135] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.753772][ T8129] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.784166][ T8135] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.863959][ T8135] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08) [ 334.884268][ T8129] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.960787][ T8129] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 335.189346][ T8135] random: crng reseeded on system resumption [ 335.626558][ T8129] random: crng reseeded on system resumption [ 335.913467][ T5868] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.115653][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 336.249441][ T5859] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.828435][ T5867] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 336.960271][ T8160] loop5: detected capacity change from 0 to 1024 [ 336.980256][ T8162] fuse: Bad value for 'fd' [ 337.221252][ T30] audit: type=1800 audit(1755029033.194:34): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.656" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 338.265130][ T8170] loop1: detected capacity change from 0 to 8192 [ 339.679246][ T5867] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 340.497757][ T8211] fuse: Bad value for 'fd' [ 340.632822][ T8213] fuse: Bad value for 'rootmode' [ 342.854296][ T8235] netlink: 196 bytes leftover after parsing attributes in process `syz.2.683'. [ 342.935172][ T8235] netlink: 'syz.2.683': attribute type 8 has an invalid length. [ 344.479252][ T5867] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 344.621126][ T5956] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 344.660843][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.683423][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.708215][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.725304][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.753325][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.777906][ T5956] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 344.911028][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.921785][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.932706][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.942053][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.949498][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 344.968291][ T5956] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 345.009022][ T5956] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 345.028668][ T6056] hid-generic 0000:007F:0005.0001: unknown main item tag 0x0 [ 345.065117][ T5956] usb 3-1: Manufacturer: syz [ 345.089737][ T5956] usb 3-1: config 0 descriptor?? [ 345.109835][ T6056] hid-generic 0000:007F:0005.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.411431][ T5956] rc_core: IR keymap rc-hauppauge not found [ 345.429221][ T5956] Registered IR keymap rc-empty [ 345.462133][ T5956] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 345.527960][ T5956] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 345.577681][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 345.592440][ T8252] fido_id[8252]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 345.667828][ T5935] usb 3-1: USB disconnect, device number 9 [ 345.719704][ T8261] loop5: detected capacity change from 0 to 1024 [ 345.742392][ T6056] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 345.874052][ T30] audit: type=1800 audit(1755029041.864:35): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.692" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 345.950088][ T6056] usb 4-1: Using ep0 maxpacket: 8 [ 346.002394][ T6056] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 346.041406][ T6056] usb 4-1: config 0 has no interface number 0 [ 346.047572][ T6056] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.341523][ T6056] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 347.178105][ T6056] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.189912][ T6056] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.203227][ T6056] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 347.212589][ T6056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.252348][ T6056] usb 4-1: config 0 descriptor?? [ 347.270666][ T6056] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 347.500400][ T5935] usb 4-1: USB disconnect, device number 5 [ 347.629277][ T5935] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 347.772431][ T5867] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 348.780343][ T8295] fuse: Unknown parameter 'use00000000000000000000' [ 349.038507][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 349.267860][ T8300] dummy0: entered promiscuous mode [ 349.373903][ T8300] dummy0: left promiscuous mode [ 349.561732][ T973] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 349.721103][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 349.735006][ T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.780271][ T973] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 349.807483][ T8308] usb usb8: usbfs: process 8308 (syz.5.708) did not claim interface 0 before use [ 349.838486][ T973] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.857468][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.884391][ T973] usb 2-1: SerialNumber: syz [ 350.161500][ T973] usb 2-1: USB disconnect, device number 5 [ 350.163403][ T30] audit: type=1326 audit(1755029046.154:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.259766][ T30] audit: type=1326 audit(1755029046.194:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.282280][ T30] audit: type=1326 audit(1755029046.194:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.304704][ T30] audit: type=1326 audit(1755029046.194:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.327041][ T30] audit: type=1326 audit(1755029046.194:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.354532][ T30] audit: type=1326 audit(1755029046.194:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d878d550 code=0x7ffc0000 [ 350.577956][ T30] audit: type=1326 audit(1755029046.194:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.601134][ T30] audit: type=1326 audit(1755029046.204:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.670686][ T30] audit: type=1326 audit(1755029046.204:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 350.817187][ T8316] vlan0: entered promiscuous mode [ 351.020090][ T8319] loop1: detected capacity change from 0 to 1024 [ 351.114794][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 351.114819][ T30] audit: type=1800 audit(1755029047.104:47): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.712" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 351.301019][ T30] audit: type=1800 audit(1755029047.104:48): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.712" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 351.413901][ T8321] loop3: detected capacity change from 0 to 128 [ 351.501594][ T8321] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.544243][ T8321] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.628644][ T8321] fscrypt (loop3, inode 12): Unsupported encryption flags (0x08) [ 351.675530][ T8321] random: crng reseeded on system resumption [ 351.809243][ T5860] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.997744][ T8323] loop5: detected capacity change from 0 to 8192 [ 352.571109][ T973] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 352.860578][ T973] usb 4-1: config 0 has no interfaces? [ 352.882527][ T973] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.930190][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.970704][ T973] usb 4-1: config 0 descriptor?? [ 353.048642][ T8340] loop1: detected capacity change from 0 to 1024 [ 353.418311][ T30] audit: type=1800 audit(1755029049.374:49): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.719" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 354.815246][ T8369] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 355.176345][ T8374] fuse: Invalid rootmode [ 355.681455][ T8382] program syz.2.731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.381039][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 356.639008][ T43] usb 5-1: config 0 has no interfaces? [ 356.663457][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 356.672847][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.705470][ T43] usb 5-1: Product: syz [ 356.709684][ T43] usb 5-1: Manufacturer: syz [ 356.723357][ T43] usb 5-1: SerialNumber: syz [ 356.744608][ T43] usb 5-1: config 0 descriptor?? [ 358.185244][ T5935] usb 4-1: USB disconnect, device number 6 [ 360.016808][ T8419] fuse: Invalid rootmode [ 360.489226][ T8428] loop5: detected capacity change from 0 to 512 [ 360.644529][ T8428] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 360.687941][ T8428] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.745: invalid indirect mapped block 8 (level 2) [ 360.822528][ T8428] EXT4-fs (loop5): Remounting filesystem read-only [ 360.829395][ T8428] EXT4-fs (loop5): 1 truncate cleaned up [ 360.904221][ T8428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.211054][ T5935] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 361.457637][ T8438] netlink: 68 bytes leftover after parsing attributes in process `syz.3.748'. [ 361.571131][ T6056] usb 5-1: USB disconnect, device number 6 [ 361.592474][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 361.638317][ T5935] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.705598][ T5935] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 361.812686][ T5935] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.903545][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 362.000665][ T5935] usb 2-1: SerialNumber: syz [ 362.285330][ T5935] usb 2-1: USB disconnect, device number 6 [ 362.832346][ T8463] fuse: Bad value for 'rootmode' [ 363.764697][ T30] audit: type=1326 audit(1755029059.734:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 363.840607][ T30] audit: type=1326 audit(1755029059.744:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 363.975089][ T30] audit: type=1326 audit(1755029059.744:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 364.299020][ T30] audit: type=1326 audit(1755029059.744:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 365.574620][ T30] audit: type=1326 audit(1755029059.744:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 365.728959][ T30] audit: type=1326 audit(1755029059.754:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d878d550 code=0x7ffc0000 [ 365.839616][ T30] audit: type=1326 audit(1755029059.754:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 365.947491][ T30] audit: type=1326 audit(1755029059.754:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 366.058980][ T30] audit: type=1326 audit(1755029059.754:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 366.210856][ T30] audit: type=1326 audit(1755029059.784:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f66d878ebe9 code=0x7ffc0000 [ 366.383534][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.722007][ T8503] loop5: detected capacity change from 0 to 1024 [ 368.191863][ T5867] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 373.359892][ T8568] loop1: detected capacity change from 0 to 128 [ 373.473698][ T8568] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.516453][ T8568] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.694576][ T8568] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 373.751210][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 374.443701][ T8568] random: crng reseeded on system resumption [ 374.481050][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 374.493662][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.509160][ T5935] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 374.571168][ T5935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.580418][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 374.722614][ T5935] usb 1-1: SerialNumber: syz [ 374.962258][ T5862] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.989457][ T8579] loop6: detected capacity change from 0 to 63 [ 375.008113][ T5855] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.022721][ T8579] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.045595][ T8579] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.072854][ T5935] usb 1-1: USB disconnect, device number 5 [ 375.098997][ T5855] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.119638][ T5855] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.146586][ T8579] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.163292][ T5855] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.196688][ T5855] Buffer I/O error on dev loop6, logical block 0, async page read [ 378.479011][ T8617] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 379.426735][ T8626] loop2: detected capacity change from 0 to 128 [ 379.711605][ T8626] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.771476][ T8626] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.792404][ T8626] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 379.935343][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 379.935370][ T30] audit: type=1326 audit(1755029075.924:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 379.965655][ T8633] random: crng reseeded on system resumption [ 380.076128][ T30] audit: type=1326 audit(1755029075.984:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.100390][ T30] audit: type=1326 audit(1755029076.004:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.127882][ T30] audit: type=1326 audit(1755029076.004:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.281179][ T30] audit: type=1326 audit(1755029076.044:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.308744][ T30] audit: type=1326 audit(1755029076.044:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.348757][ T30] audit: type=1326 audit(1755029076.044:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.373097][ T30] audit: type=1326 audit(1755029076.044:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.396086][ T30] audit: type=1326 audit(1755029076.044:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.418680][ T30] audit: type=1326 audit(1755029076.044:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4caf98ebe9 code=0x7ffc0000 [ 380.553727][ T5868] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.902669][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'. [ 381.054200][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.814'. [ 381.673932][ T8656] netlink: 196 bytes leftover after parsing attributes in process `syz.2.815'. [ 382.023235][ T8653] loop5: detected capacity change from 0 to 8192 [ 382.782633][ T8669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.819'. [ 382.842667][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 384.543127][ T8679] syzkaller0: entered promiscuous mode [ 384.579424][ T8679] syzkaller0: entered allmulticast mode [ 384.914233][ T8667] loop1: detected capacity change from 0 to 32768 [ 385.056102][ T8667] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 385.522766][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 385.522792][ T30] audit: type=1800 audit(1755029081.514:74): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.818" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 385.601469][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 385.913360][ T5862] ocfs2: Unmounting device (7,1) on (node local) [ 386.236085][ T8714] fuse: Unknown parameter 'user_id00000000000000000000' [ 386.451078][ T5935] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 386.648125][ T5935] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 387.386454][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.411027][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.431115][ T5935] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 387.450250][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.481443][ T5935] usb 3-1: config 0 descriptor?? [ 388.277484][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.284441][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.331601][ T5935] hid_parser_main: 33 callbacks suppressed [ 388.331634][ T5935] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 388.373196][ T5935] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 388.456789][ T5935] dragonrise 0003:0079:0006.0002: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 388.515862][ T5935] dragonrise 0003:0079:0006.0002: no inputs found [ 388.539647][ T5935] dragonrise 0003:0079:0006.0002: force feedback init failed [ 391.826997][ T8756] netlink: 196 bytes leftover after parsing attributes in process `syz.1.844'. [ 394.730345][ T8703] bridge_slave_1: left allmulticast mode [ 394.771144][ T8703] bridge_slave_1: left promiscuous mode [ 394.777226][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.801376][ T8769] fuse: Bad value for 'fd' [ 394.883197][ T8703] bridge_slave_0: left allmulticast mode [ 394.888906][ T8703] bridge_slave_0: left promiscuous mode [ 394.925679][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.333117][ T5956] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 395.961581][ T5956] usb 1-1: device descriptor read/64, error -71 [ 396.061512][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.069408][ T8753] batadv_slave_0: entered promiscuous mode [ 396.089882][ T8753] batadv_slave_0: entered allmulticast mode [ 396.193452][ T8753] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 396.221076][ T5956] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 396.319003][ T8777] loop5: detected capacity change from 0 to 128 [ 396.406422][ T5956] usb 1-1: device descriptor read/64, error -71 [ 396.790347][ T5956] usb usb1-port1: attempt power cycle [ 396.864788][ T8777] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.942059][ T24] usb 3-1: USB disconnect, device number 10 [ 396.980533][ T8777] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.145149][ T8777] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08) [ 397.241254][ T5956] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 397.276260][ T8791] random: crng reseeded on system resumption [ 397.318612][ T5956] usb 1-1: device descriptor read/8, error -71 [ 397.348177][ T5867] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 397.581232][ T973] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 398.131932][ T5956] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 398.281102][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 398.309635][ T973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.327031][ T973] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 398.347780][ T973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.398371][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 398.425696][ T5956] usb 1-1: device descriptor read/8, error -71 [ 398.477249][ T973] usb 4-1: SerialNumber: syz [ 398.508177][ T5859] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.584083][ T30] audit: type=1326 audit(1755029094.574:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 398.585728][ T5956] usb usb1-port1: unable to enumerate USB device [ 398.657665][ T30] audit: type=1326 audit(1755029094.604:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 398.730846][ T30] audit: type=1326 audit(1755029094.604:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 398.774156][ T5935] usb 4-1: USB disconnect, device number 7 [ 398.825429][ T8813] fuse: Bad value for 'fd' [ 398.869204][ T30] audit: type=1326 audit(1755029094.604:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 398.960783][ T30] audit: type=1326 audit(1755029094.604:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 399.152748][ T8810] input: syz1 as /devices/virtual/input/input15 [ 399.221710][ T30] audit: type=1326 audit(1755029094.604:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 399.275410][ T30] audit: type=1326 audit(1755029094.604:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 399.469701][ T30] audit: type=1326 audit(1755029094.604:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 399.469780][ T30] audit: type=1326 audit(1755029094.604:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa2c1b8ebe9 code=0x7ffc0000 [ 402.171256][ T5956] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 402.741549][ T5956] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 403.326717][ T5956] usb 1-1: config 0 has no interface number 0 [ 403.422389][ T8852] netlink: 196 bytes leftover after parsing attributes in process `syz.3.869'. [ 403.452121][ T8852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.460312][ T8852] batadv_slave_0: entered promiscuous mode [ 403.484995][ T5956] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 403.496828][ T8852] batadv_slave_0: entered allmulticast mode [ 403.551199][ T8852] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 403.609371][ T5956] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 404.396301][ T5956] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 404.436036][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.606446][ T5956] usb 1-1: Product: syz [ 404.700978][ T5956] usb 1-1: Manufacturer: syz [ 404.705639][ T5956] usb 1-1: SerialNumber: syz [ 404.854110][ T5956] usb 1-1: config 0 descriptor?? [ 405.738276][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 407.109653][ T8869] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN NOPTI [ 407.121762][ T8869] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 407.130187][ T8869] CPU: 1 UID: 0 PID: 8869 Comm: syz.4.872 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 407.142094][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.152157][ T8869] RIP: 0010:fib_lookup_good_nhc+0xaf/0x3f0 [ 407.158008][ T8869] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 1e 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 2b 48 8d bd 18 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ef 02 00 00 4c 8b bd 18 04 00 00 e8 4b 5d 7b 01 [ 407.177658][ T8869] RSP: 0018:ffffc9001fdafa48 EFLAGS: 00010212 [ 407.183770][ T8869] RAX: dffffc0000000000 RBX: ffff88807721c220 RCX: ffffc90013205000 [ 407.191773][ T8869] RDX: 0000000000000083 RSI: ffffffff8a1613c9 RDI: 0000000000000418 [ 407.199779][ T8869] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 407.207750][ T8869] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807bd220e0 [ 407.215733][ T8869] R13: ffff88807721c237 R14: 0000000000000001 R15: ffff88807896fd18 [ 407.223701][ T8869] FS: 00007fa2c2a1a6c0(0000) GS:ffff8881247c0000(0000) knlGS:0000000000000000 [ 407.232640][ T8869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.239233][ T8869] CR2: 0000001b32f09ff8 CR3: 00000000325c1000 CR4: 0000000000350ef0 [ 407.247214][ T8869] Call Trace: [ 407.250484][ T8869] [ 407.253418][ T8869] fib_table_lookup+0x158e/0x2300 [ 407.258486][ T8869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.264154][ T8869] fib_lookup.constprop.0+0x13e/0x530 [ 407.269572][ T8869] ip_route_output_key_hash_rcu+0xde8/0x28c0 [ 407.275585][ T8869] ip_route_output_key_hash+0x137/0x2e0 [ 407.281150][ T8869] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 407.287248][ T8869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.292899][ T8869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.298555][ T8869] __ip4_datagram_connect+0x846/0x14c0 [ 407.304049][ T8869] ip4_datagram_connect+0x2e/0x50 [ 407.309117][ T8869] inet_dgram_connect+0x143/0x200 [ 407.314186][ T8869] ? __pfx_inet_dgram_connect+0x10/0x10 [ 407.319780][ T8869] __sys_connect_file+0x141/0x1a0 [ 407.324825][ T8869] __sys_connect+0x13b/0x160 [ 407.329436][ T8869] ? __pfx___sys_connect+0x10/0x10 [ 407.334575][ T8869] ? xfd_validate_state+0x61/0x180 [ 407.339710][ T8869] ? __sys_setsockopt+0x1c0/0x230 [ 407.344740][ T8869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.350430][ T8869] __x64_sys_connect+0x72/0xb0 [ 407.355209][ T8869] ? lockdep_hardirqs_on+0x7c/0x110 [ 407.360436][ T8869] do_syscall_64+0xcd/0x4c0 [ 407.364974][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.370884][ T8869] RIP: 0033:0x7fa2c1b8ebe9 [ 407.375307][ T8869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.394944][ T8869] RSP: 002b:00007fa2c2a1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 407.403383][ T8869] RAX: ffffffffffffffda RBX: 00007fa2c1db6360 RCX: 00007fa2c1b8ebe9 [ 407.411365][ T8869] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 000000000000000a [ 407.419344][ T8869] RBP: 00007fa2c1c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 407.427318][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.435295][ T8869] R13: 00007fa2c1db63f8 R14: 00007fa2c1db6360 R15: 00007ffeadfb2aa8 [ 407.443287][ T8869] [ 407.446301][ T8869] Modules linked in: [ 407.451026][ T8869] ---[ end trace 0000000000000000 ]--- [ 407.591233][ T5956] usb 1-1: can't set config #0, error -71 [ 407.597707][ T8869] RIP: 0010:fib_lookup_good_nhc+0xaf/0x3f0 [ 407.608323][ T5956] usb 1-1: USB disconnect, device number 10 [ 407.655740][ T8869] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 1e 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 2b 48 8d bd 18 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ef 02 00 00 4c 8b bd 18 04 00 00 e8 4b 5d 7b 01 [ 407.689325][ T8869] RSP: 0018:ffffc9001fdafa48 EFLAGS: 00010212 [ 407.703206][ T8869] RAX: dffffc0000000000 RBX: ffff88807721c220 RCX: ffffc90013205000 [ 407.713123][ T8869] RDX: 0000000000000083 RSI: ffffffff8a1613c9 RDI: 0000000000000418 [ 407.731710][ T8869] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 407.742981][ T8869] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807bd220e0 [ 407.776037][ T8869] R13: ffff88807721c237 R14: 0000000000000001 R15: ffff88807896fd18 [ 407.784327][ T8869] FS: 00007fa2c2a1a6c0(0000) GS:ffff8881246c0000(0000) knlGS:0000000000000000 [ 407.793926][ T8869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.807351][ T8869] CR2: 0000001b32f06ff8 CR3: 00000000325c1000 CR4: 0000000000350ef0 [ 407.816099][ T8869] Kernel panic - not syncing: Fatal exception [ 407.822414][ T8869] Kernel Offset: disabled [ 407.826828][ T8869] Rebooting in 86400 seconds..