last executing test programs: 15m39.451020124s ago: executing program 2 (id=97): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000000001000b00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000340)}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000100000000040000018110000", @ANYRES16], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="00004d1bbdc3215c6976001f59b9e48e2cfd572b", @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x1400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x468481, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = syz_io_uring_setup(0x1003f, &(0x7f0000000080)={0x0, 0x55d9, 0x1, 0x0, 0x4000000}, &(0x7f0000000240), &(0x7f00000005c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000040)={0x6, 0xb}, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) 15m36.217614397s ago: executing program 2 (id=102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)) 15m34.88354679s ago: executing program 2 (id=104): memfd_create(0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 15m33.220375583s ago: executing program 2 (id=108): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) socket$xdp(0x2c, 0x3, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x12, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x12, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb0"}}}}}}}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r5, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 15m29.851227842s ago: executing program 2 (id=113): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 15m27.932977514s ago: executing program 2 (id=115): syz_open_dev$tty1(0xc, 0x4, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 15m12.840984449s ago: executing program 32 (id=115): syz_open_dev$tty1(0xc, 0x4, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 13.165167097s ago: executing program 1 (id=2360): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902"], 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 10.645988058s ago: executing program 0 (id=2367): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) semget$private(0x0, 0x1, 0x8) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$inet6(0xa, 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ppoll(&(0x7f0000000540)=[{r1, 0x80}, {r3, 0x104}, {r2, 0x1}], 0x3, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x4]}, 0x8) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL") r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x8001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030028bd7000ffdbdf250800000018000280100003800c000180080001000700100004000100180001801400020073797a5f74756e00"], 0x44}}, 0x10004000) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x80000, 0x40) 9.620424221s ago: executing program 0 (id=2368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00c2bbb585317b0cccd6c2cbea7fee1d0000000001e21c1a39a258407a2434357dff929e7b0f2a"], 0x58}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r2, 0x9, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 9.536837184s ago: executing program 1 (id=2369): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) r3 = io_uring_setup(0x1d0a, &(0x7f00000003c0)={0x0, 0x903, 0x80, 0x1, 0x36d}) fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048040) 9.449636717s ago: executing program 5 (id=2371): r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000006c0)="18f87db2ce437acfcc81ff2c2dc5d3170f62906d", 0x14}], 0x1}, 0x8005) 9.02838966s ago: executing program 4 (id=2372): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600", 0x62, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000300)=0x800) 7.980966974s ago: executing program 5 (id=2374): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.78012543s ago: executing program 5 (id=2375): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 6.818365651s ago: executing program 4 (id=2376): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.24390284s ago: executing program 4 (id=2377): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 6.202724071s ago: executing program 5 (id=2378): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000016c0)={0x2020}, 0x2020) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f01657020686173683d626c616b6532732d3232342d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000"], 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, 0x0, 0x0, 0x80800) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x80000, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 5.850635432s ago: executing program 1 (id=2380): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x200800, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_fuse_handle_req(r0, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x69015a58, 0xdcd, 0xff, 0x8, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a1b911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60592813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d0076aeb85488d371488f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba86c1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e953f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a2cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe52a396f51adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c601304e62b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98b55c190537184c60cd00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x4, 0x6, 0x5, 0x5, 0x3, 0x0, 0x4, 0x3, 0x4, 0x2000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3e, 0x1ce72a6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f0000000200)) 5.62887287s ago: executing program 0 (id=2381): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.428375556s ago: executing program 4 (id=2382): io_uring_setup(0x5, &(0x7f00000002c0)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) socketpair(0x8, 0x80000, 0x10001, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r4, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r2, &(0x7f0000002fc0)=""/52, 0x34) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x13) getpeername$packet(r1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x5, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000100)=0x1) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000380)) 4.476423507s ago: executing program 1 (id=2383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x200) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041810) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80000000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0x1, 0x40, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0xb9, 0x4}, 0x0, 0x0, 0x80000000, 0xfffffffffffffffb, 0x2, 0x564b5c43, 0x0, 0x7}}], 0xb0, 0x4044004}, 0x40) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4.427291558s ago: executing program 3 (id=2384): r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000006c0)="18f87db2ce437acfcc81ff2c2dc5d3170f62906d", 0x14}], 0x1}, 0x8005) 4.37691687s ago: executing program 5 (id=2385): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.35915412s ago: executing program 5 (id=2386): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0xcc8c8000) write$binfmt_elf32(r0, 0x0, 0x4cd) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x8, &(0x7f0000000600)=0x0) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}]) 4.311799132s ago: executing program 0 (id=2387): syz_emit_ethernet(0x12, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @empty, @void, {@llc_tr={0x11, {@llc={0xfe, 0xf4, "f303"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f0000002300)="08b5b2c0caf6337a3cabd4830ba9a93fc8cb47b98d0bf44c71e4e4b5f9f3bf4688a45e5b0e157505385d401cec3d", 0x2e}], 0x1) sendmsg$nl_route_sched(r2, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 4.200684396s ago: executing program 4 (id=2388): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 4.008829712s ago: executing program 0 (id=2389): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f00000005c0)=0x7fff, 0x4) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) syz_mount_image$squashfs(&(0x7f0000000640), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4003, &(0x7f00000000c0)=ANY=[], 0x0, 0x1be, &(0x7f0000000780)="$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") 3.997181392s ago: executing program 1 (id=2390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) r3 = io_uring_setup(0x1d0a, &(0x7f00000003c0)={0x0, 0x903, 0x80, 0x1, 0x36d}) fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048040) 2.779763571s ago: executing program 3 (id=2391): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x130, 0x0, 0x3, {0xd, 0x405, 0x0, '\x00', {0x4, 0xe, 0x10006, 0x1, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x1, 0x81, 0x4, {}, {0x4a, 0x4}, {0xfffffffffffffffb, 0x2}, {0x1, 0xfffffffc}, 0x1002, 0x0, 0x7fff, 0x1}}}}) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6b0bb4d06f0bb183269557f25", 0x15}], 0x1}, 0x4048081) io_uring_setup(0x2e34, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x40, &(0x7f000001f500)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) write$UHID_INPUT(r6, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.244839959s ago: executing program 0 (id=2392): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 2.237344939s ago: executing program 4 (id=2393): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r0) socket(0x1e, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mbind(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0xd, 0xb, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) 1.654879918s ago: executing program 3 (id=2394): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1.432613614s ago: executing program 3 (id=2395): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) semget$private(0x0, 0x1, 0x8) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$inet6(0xa, 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ppoll(&(0x7f0000000540)=[{r1, 0x80}, {r3, 0x104}, {r2, 0x1}], 0x3, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x4]}, 0x8) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)}], 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x8001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030028bd7000ffdbdf250800000018000280100003800c000180080001000700100004000100180001801400020073797a5f74756e00"], 0x44}}, 0x10004000) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x80000, 0x40) 219.469944ms ago: executing program 3 (id=2396): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 125.766417ms ago: executing program 1 (id=2397): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 3 (id=2398): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000000640)=ANY=[@ANYBLOB="73686f72746e616d653d89556f117c77696e6e34efec5aad82f876dc537455af49b189e159fdb69d1f18412983cf45c9e03073ca8977d8fbd1e7765029895c27ac0f7635459e94f37945f9aae4b7b44a6c05b2938d18a5cb7ff592de7486b1072fc3f2f7e8f3cd2caf3fd7f34c68368364971439a7", @ANYRESHEX=0x0, @ANYBLOB=',shortname=lower,shortname=winnt,check=strict,\x00'], 0x11, 0x305, &(0x7f0000002480)="$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") socket$kcm(0x11, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000500), 0x40000000, &(0x7f0000000580)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4508}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000180)=0xf0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): 40 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 804.696617][ T3599] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 804.765991][T10301] loop8: detected capacity change from 0 to 524287999 [ 804.775128][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.784325][ C1] buffer_io_error: 8 callbacks suppressed [ 804.784333][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 804.874511][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.883734][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 804.923509][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.932728][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 804.961504][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.970713][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 805.097841][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 805.107077][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 805.126564][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 805.135795][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 805.144369][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 805.153557][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 805.168291][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 805.177499][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 806.191779][ T4435] ldm_validate_partition_table(): Disk read failed. [ 806.255930][T10312] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 806.263782][T10312] netlink: 'syz.0.1650': attribute type 2 has an invalid length. [ 806.265944][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.280664][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 806.290139][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 806.298822][ T4435] Dev loop8: unable to read RDB block 0 [ 806.310943][ T3599] usb 2-1: unable to get BOS descriptor or descriptor too short [ 806.330739][ T3599] usb 2-1: not running at top speed; connect to a high speed hub [ 806.338694][ T4435] loop8: unable to read partition table [ 806.351440][ T3599] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.355316][T10301] ldm_validate_partition_table(): Disk read failed. [ 806.379837][ T3599] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 806.390042][T10301] Dev loop8: unable to read RDB block 0 [ 806.405583][T10301] loop8: unable to read partition table [ 806.411920][ T3599] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 806.433903][T10301] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 806.448241][ T3599] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice=e7.3f [ 806.474310][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.482831][ T3599] usb 2-1: Product: syz [ 806.487047][ T3599] usb 2-1: Manufacturer: syz [ 806.492220][ T3599] usb 2-1: SerialNumber: syz [ 806.692772][ T7] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 806.897450][ T7] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 806.919961][ T7] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 806.963787][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 807.005405][ T7] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 807.070168][ T7] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 807.076600][ T3599] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 807.125410][ T3599] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 807.138409][ T7] usb 1-1: Manufacturer: syz [ 807.177104][ T3599] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 807.198878][ T7] usb 1-1: config 0 descriptor?? [ 807.207836][ T7] igorplugusb 1-1:0.0: incorrect number of endpoints [ 807.249771][ T3599] usb 2-1: USB disconnect, device number 26 [ 807.344717][T10326] loop5: detected capacity change from 0 to 16 [ 807.352977][T10326] erofs: (device loop5): mounted with root inode @ nid 36. [ 807.376987][ T4285] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 807.399359][T10326] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 807.410534][ T27] audit: type=1800 audit(1779491233.556:174): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1651" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 807.627625][T10328] loop4: detected capacity change from 0 to 32768 [ 807.638286][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.656892][T10328] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 807.752397][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056225000: rx timeout, send abort [ 808.047855][T10332] loop5: detected capacity change from 0 to 4096 [ 808.320584][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056227000: rx timeout, send abort [ 808.328879][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056225000: abort rx timeout. Force session deactivation [ 809.780266][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056227000: abort rx timeout. Force session deactivation [ 809.845312][T10333] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 810.002376][ T7] usb 1-1: USB disconnect, device number 27 [ 810.170915][T10338] input: syz0 as /devices/virtual/input/input14 [ 810.267375][ T4285] Bluetooth: hci0: Malformed LE Event: 0x0d [ 810.467120][T10343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1660'. [ 813.006381][T10359] loop3: detected capacity change from 0 to 16 [ 813.022889][T10359] erofs: (device loop3): mounted with root inode @ nid 36. [ 813.037242][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 813.048801][T10359] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 813.060293][ T27] audit: type=1800 audit(1779491238.843:175): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1666" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 813.380524][T10361] loop1: detected capacity change from 0 to 32768 [ 813.423044][T10361] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 813.433386][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ca1b400: rx timeout, send abort [ 813.441830][T10361] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 813.450620][T10361] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 813.460356][T10361] BTRFS info (device loop1): use zstd compression, level 3 [ 813.467656][T10361] BTRFS info (device loop1): force clearing of disk cache [ 813.474789][T10361] BTRFS info (device loop1): enabling disk space caching [ 813.481868][T10361] BTRFS info (device loop1): disk space caching is enabled [ 813.587219][T10366] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 813.806229][T10366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 813.831944][T10371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 813.839046][T10371] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 813.851408][T10371] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 813.898442][T10373] device gretap1 entered promiscuous mode [ 813.912209][T10373] bond1: (slave gretap1): making interface the new active one [ 813.933327][T10390] binder: 10386:10390 ioctl 4018620d 0 returned -22 [ 813.964933][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ca1a400: rx timeout, send abort [ 813.967730][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ca1b400: abort rx timeout. Force session deactivation [ 814.025870][T10373] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 814.047001][T10361] BTRFS info (device loop1): enabling ssd optimizations [ 814.047696][T10361] BTRFS info (device loop1): rebuilding free space tree [ 814.053141][T10361] BTRFS info (device loop1): disabling free space tree [ 814.053175][T10361] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 814.053209][T10361] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 814.396453][ T4272] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 814.469355][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 814.504920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ca1a400: abort rx timeout. Force session deactivation [ 814.567345][T10366] device macvlan0 entered promiscuous mode [ 815.076497][T10414] input: syz0 as /devices/virtual/input/input15 [ 815.119750][ T4466] udevd[4466]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 817.444574][T10431] trusted_key: encrypted_key: keylen parameter is missing [ 817.907578][T10439] binder: 10437:10439 ioctl c0306201 0 returned -14 [ 817.974246][T10431] loop4: detected capacity change from 0 to 32768 [ 818.009489][T10431] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 819.405352][ T4435] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 819.730121][T10450] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1685'. [ 820.050288][ T5867] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 820.816454][T10456] input: syz0 as /devices/virtual/input/input16 [ 820.841182][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 820.848199][ T5867] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 820.872733][ T5867] usb 6-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 820.897727][ T5867] usb 6-1: config 179 has no interface number 0 [ 820.973735][ T5867] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 820.985061][ T5867] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 821.007225][ T5867] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 821.034763][ T5867] usb 6-1: config 179 interface 65 has no altsetting 0 [ 821.041796][ T5867] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 821.064945][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.317315][T10400] usb 6-1: USB disconnect, device number 19 [ 821.361679][T10461] loop8: detected capacity change from 0 to 524287999 [ 821.387116][ C0] blk_print_req_error: 28 callbacks suppressed [ 821.387127][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.402424][ C0] buffer_io_error: 25 callbacks suppressed [ 821.402431][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.464236][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.473461][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.494992][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.504208][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.512258][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.521437][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.561275][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.570561][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.578927][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.588124][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.653259][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.662526][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.673217][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.682424][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.690540][ T4435] ldm_validate_partition_table(): Disk read failed. [ 821.706635][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.715831][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.724148][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.733327][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 821.790256][ T4435] Dev loop8: unable to read RDB block 0 [ 821.809524][ T4435] loop8: unable to read partition table [ 821.841513][T10461] ldm_validate_partition_table(): Disk read failed. [ 821.856729][T10461] Dev loop8: unable to read RDB block 0 [ 821.870532][T10461] loop8: unable to read partition table [ 821.911679][T10461] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 822.834457][T10475] trusted_key: encrypted_key: keylen parameter is missing [ 824.258988][T10467] syz.5.1691 (10467): drop_caches: 2 [ 824.541047][ T4285] Bluetooth: hci0: Malformed LE Event: 0x0d [ 825.570558][T10475] loop3: detected capacity change from 0 to 32768 [ 825.709482][T10475] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 826.116685][ T4435] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 826.346544][T10512] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 826.455059][T10512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.499777][T10505] input: syz0 as /devices/virtual/input/input17 [ 826.680567][T10515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.697562][T10515] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 826.740434][T10521] loop8: detected capacity change from 0 to 524287999 [ 826.773357][T10515] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 826.791912][ C1] blk_print_req_error: 26 callbacks suppressed [ 826.791923][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.807357][ C1] buffer_io_error: 25 callbacks suppressed [ 826.807369][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 826.888154][T10512] device gretap1 entered promiscuous mode [ 826.899333][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.908568][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 826.921972][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.924050][T10512] bond1: (slave gretap1): making interface the new active one [ 826.931192][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 826.946946][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.956158][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 826.965820][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 826.975056][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 827.047824][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 827.057039][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 827.124521][T10512] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 827.152852][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 827.162091][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 827.174094][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 827.183271][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 827.191125][ T4435] ldm_validate_partition_table(): Disk read failed. [ 827.218782][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 827.227968][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 827.262723][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 827.271906][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 827.333170][ T4435] Dev loop8: unable to read RDB block 0 [ 827.343619][ T4435] loop8: unable to read partition table [ 827.366851][T10521] ldm_validate_partition_table(): Disk read failed. [ 827.383076][T10521] Dev loop8: unable to read RDB block 0 [ 827.425171][T10521] loop8: unable to read partition table [ 827.456345][T10521] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 827.493666][T10529] loop5: detected capacity change from 0 to 128 [ 827.571480][T10529] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 828.728673][T10529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.690421][ T4285] Bluetooth: hci2: Malformed LE Event: 0x0d [ 829.855893][T10545] device bridge15 entered promiscuous mode [ 830.581044][ T4285] Bluetooth: hci1: Malformed LE Event: 0x0d [ 831.402097][T10553] trusted_key: encrypted_key: keylen parameter is missing [ 832.865775][T10553] loop0: detected capacity change from 0 to 32768 [ 832.873615][T10569] device syzkaller0 entered promiscuous mode [ 832.904728][T10553] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 834.488702][ T4435] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 834.776174][ T4285] Bluetooth: hci2: Malformed LE Event: 0x0d [ 835.710694][T10593] loop4: detected capacity change from 0 to 128 [ 835.798879][T10589] loop1: detected capacity change from 0 to 4096 [ 835.834109][T10593] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 835.898273][T10597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 835.997817][T10593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 837.204827][T10617] device syzkaller0 entered promiscuous mode [ 839.546929][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.555218][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.877020][T10643] loop1: detected capacity change from 0 to 4096 [ 840.040727][T10654] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 842.703512][T10681] device syzkaller0 entered promiscuous mode [ 844.060453][T10695] loop0: detected capacity change from 0 to 128 [ 844.112716][T10695] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 844.175230][T10695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.569933][T10719] device syzkaller0 entered promiscuous mode [ 846.953383][T10733] device syzkaller0 entered promiscuous mode [ 848.381556][ T4285] Bluetooth: hci1: Malformed LE Event: 0x0d [ 848.902040][ T27] audit: type=1326 audit(1779491272.373:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 849.151010][ T27] audit: type=1326 audit(1779491272.513:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 849.226057][T10762] loop0: detected capacity change from 0 to 128 [ 849.332174][T10762] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 849.400363][ T27] audit: type=1326 audit(1779491272.522:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 849.495605][T10762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.581657][ T27] audit: type=1326 audit(1779491272.522:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 849.809723][ T27] audit: type=1326 audit(1779491272.522:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 849.991138][ T27] audit: type=1326 audit(1779491272.522:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 850.170617][ T27] audit: type=1326 audit(1779491272.522:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 850.197588][ T27] audit: type=1326 audit(1779491272.522:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 850.225543][ T27] audit: type=1326 audit(1779491272.663:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 850.364431][ T27] audit: type=1326 audit(1779491272.663:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.3.1754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd882d9ce59 code=0x7ffc0000 [ 851.439367][T10789] loop1: detected capacity change from 0 to 16 [ 851.449918][T10789] erofs: (device loop1): mounted with root inode @ nid 36. [ 851.472228][ T4285] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 851.486172][T10788] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 852.172565][T10401] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 852.207380][T10787] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 852.337286][T10787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 852.482556][T10401] usb 4-1: Using ep0 maxpacket: 32 [ 853.264456][T10792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.298474][T10792] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 853.313379][T10792] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 853.384038][T10787] device gretap1 entered promiscuous mode [ 853.415623][T10799] device syzkaller0 entered promiscuous mode [ 853.696768][ T4285] Bluetooth: hci5: Malformed LE Event: 0x0d [ 855.394702][T10401] usb 4-1: device descriptor read/all, error -71 [ 855.785949][T10827] trusted_key: encrypted_key: keylen parameter is missing [ 856.175483][ T4285] Bluetooth: hci4: Malformed LE Event: 0x0d [ 857.231495][T10827] loop0: detected capacity change from 0 to 32768 [ 857.398262][T10827] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 857.672318][T10849] netlink: 'syz.4.1793': attribute type 1 has an invalid length. [ 857.688515][ T4435] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 857.838447][T10849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 857.906942][T10861] fuse: Bad value for 'fd' [ 858.028097][T10853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 858.073881][T10853] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 858.104962][T10853] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 859.476822][T10881] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1805'. [ 859.510702][T10883] trusted_key: encrypted_key: keylen parameter is missing [ 859.593154][T10401] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 859.868543][T10401] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 859.897205][T10401] usb 1-1: config 0 has no interfaces? [ 859.904005][T10401] usb 1-1: config 0 has no interfaces? [ 859.930318][T10401] usb 1-1: config 0 has no interfaces? [ 859.942331][T10401] usb 1-1: config 0 has no interfaces? [ 859.953314][T10401] usb 1-1: config 0 has no interfaces? [ 859.967785][T10401] usb 1-1: config 0 has no interfaces? [ 859.985964][T10401] usb 1-1: config 0 has no interfaces? [ 859.995480][T10892] loop1: detected capacity change from 0 to 16 [ 860.002686][T10892] erofs: (device loop1): mounted with root inode @ nid 36. [ 860.028302][ T4285] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 860.040208][T10892] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 860.051578][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 860.051591][ T27] audit: type=1800 audit(1779491282.816:198): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1811" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 860.059377][T10401] usb 1-1: config 0 has no interfaces? [ 860.118715][T10883] loop5: detected capacity change from 0 to 32768 [ 860.160411][T10883] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 860.204416][T10401] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.248398][T10401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.278329][T10401] usb 1-1: Product: syz [ 860.282663][T10401] usb 1-1: Manufacturer: syz [ 860.314462][T10401] usb 1-1: SerialNumber: syz [ 860.327109][T10401] usb 1-1: config 0 descriptor?? [ 860.551537][ T4466] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 860.796360][T10399] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 861.600589][T10400] usb 1-1: USB disconnect, device number 28 [ 861.725859][T10399] usb 4-1: Using ep0 maxpacket: 16 [ 861.739443][T10399] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 861.810014][T10399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.860160][T10399] usb 4-1: Product: syz [ 861.881819][T10399] usb 4-1: Manufacturer: syz [ 861.891720][T10399] usb 4-1: SerialNumber: syz [ 861.898358][T10399] usb 4-1: config 0 descriptor?? [ 861.906249][T10399] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 862.356491][T10400] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 862.570150][T10400] usb 1-1: Using ep0 maxpacket: 32 [ 862.577926][T10400] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 862.597276][T10400] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 862.609124][T10400] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 862.619284][T10400] usb 1-1: Product: syz [ 862.624720][T10400] usb 1-1: Manufacturer: syz [ 862.633135][T10400] usb 1-1: SerialNumber: syz [ 862.644443][T10400] usb 1-1: config 0 descriptor?? [ 862.654719][T10875] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 862.792697][T10400] usb 4-1: USB disconnect, device number 31 [ 862.837282][T10399] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 862.918898][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.942146][T10930] trusted_key: encrypted_key: keylen parameter is missing [ 862.960454][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.042923][T10399] usb 5-1: unable to get BOS descriptor or descriptor too short [ 863.054007][T10399] usb 5-1: not running at top speed; connect to a high speed hub [ 863.065347][T10399] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.083366][T10399] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 863.094024][T10399] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.109591][T10399] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice=e7.3f [ 863.125780][T10399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.144861][T10399] usb 5-1: Product: syz [ 863.160228][T10399] usb 5-1: Manufacturer: syz [ 863.164857][T10399] usb 5-1: SerialNumber: syz [ 864.505517][ T7798] usb 1-1: USB disconnect, device number 29 [ 864.667853][T10399] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 864.689860][T10399] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 864.757995][T10399] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 864.841103][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.863733][T10399] usb 5-1: USB disconnect, device number 20 [ 864.988327][T10950] loop5: detected capacity change from 0 to 4096 [ 865.031310][T10952] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 865.060957][T10930] loop3: detected capacity change from 0 to 32768 [ 865.087432][T10930] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 866.234807][ T4466] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 867.732800][T10980] loop0: detected capacity change from 0 to 4096 [ 867.785036][T10983] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 867.856721][T10981] device bridge19 entered promiscuous mode [ 868.414099][T10992] trusted_key: encrypted_key: keylen parameter is missing [ 868.875610][ T3599] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 869.787770][ T3599] usb 2-1: config 0 has no interfaces? [ 869.802004][ T3599] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 869.838373][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.905414][T10992] loop0: detected capacity change from 0 to 32768 [ 869.979880][T10992] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 870.070657][ T3599] usb 2-1: config 0 descriptor?? [ 870.307920][ T4435] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 870.322605][ T3599] usb 2-1: USB disconnect, device number 27 [ 870.515155][T11005] loop8: detected capacity change from 0 to 524287999 [ 870.538274][ C1] blk_print_req_error: 26 callbacks suppressed [ 870.538290][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.553733][ C1] buffer_io_error: 25 callbacks suppressed [ 870.553745][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.580638][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.589919][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.662155][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.671418][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.707002][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.716279][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.809004][T10401] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 870.867585][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.876841][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.888165][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.897409][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.921841][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.931091][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.942408][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.951640][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 870.959691][ T4466] ldm_validate_partition_table(): Disk read failed. [ 870.966704][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 870.975868][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 871.026774][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.036037][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 871.157569][ T4466] Dev loop8: unable to read RDB block 0 [ 871.191456][ T4466] loop8: unable to read partition table [ 871.260522][T11005] ldm_validate_partition_table(): Disk read failed. [ 871.422050][T11005] Dev loop8: unable to read RDB block 0 [ 871.628015][T11005] loop8: unable to read partition table [ 871.773019][T11005] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 871.802809][T10401] usb 5-1: Using ep0 maxpacket: 16 [ 871.809613][T10401] usb 5-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 871.834537][T10401] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.856289][T10401] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 871.865654][T10401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.888169][T10401] usb 5-1: Product: syz [ 871.892448][T10401] usb 5-1: Manufacturer: syz [ 871.897588][T10401] usb 5-1: SerialNumber: syz [ 872.131596][T10401] usb 5-1: 0:2 : does not exist [ 872.152096][T10401] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 872.197929][T10401] usb 5-1: USB disconnect, device number 21 [ 873.173838][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.186071][ T3599] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 873.376028][T11035] trusted_key: encrypted_key: keylen parameter is missing [ 873.396207][ T3599] usb 1-1: Using ep0 maxpacket: 16 [ 873.405319][ T3599] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 873.425605][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.455724][ T3599] usb 1-1: Product: syz [ 873.474973][ T3599] usb 1-1: Manufacturer: syz [ 873.490604][ T3599] usb 1-1: SerialNumber: syz [ 873.508500][ T3599] usb 1-1: config 0 descriptor?? [ 873.525805][ T3599] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 873.789309][ T4315] usb 1-1: USB disconnect, device number 30 [ 873.950738][T11043] trusted_key: encrypted_key: keylen parameter is missing [ 874.041350][T11035] loop5: detected capacity change from 0 to 32768 [ 874.063937][T11035] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 874.233222][ T4435] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 874.704801][T11043] loop1: detected capacity change from 0 to 32768 [ 874.730345][T11043] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 875.192798][ T4435] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 876.576012][T11057] loop0: detected capacity change from 0 to 4096 [ 876.611599][T11059] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 878.434420][T11080] netlink: 'syz.5.1874': attribute type 10 has an invalid length. [ 878.445580][T11080] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1874'. [ 878.459834][T11080] device dummy0 entered promiscuous mode [ 878.477503][T11080] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 878.775233][T11085] netlink: 'syz.4.1871': attribute type 1 has an invalid length. [ 878.815470][T11085] netlink: 'syz.4.1871': attribute type 2 has an invalid length. [ 879.215237][ T27] audit: type=1326 audit(1779491300.746:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.5.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f589519ce59 code=0x0 [ 879.238789][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.240313][T10401] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 879.487524][T10401] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 879.506802][T10401] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 879.522399][T10401] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.548499][T10401] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 879.569052][T10401] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 879.590183][T10401] usb 5-1: Manufacturer: syz [ 879.595210][T10402] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 879.645567][T10401] usb 5-1: config 0 descriptor?? [ 879.684307][T10401] igorplugusb 5-1:0.0: incorrect number of endpoints [ 879.828140][T10402] usb 1-1: Using ep0 maxpacket: 16 [ 879.837143][T10402] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 879.860992][T10402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.873670][T10402] usb 1-1: Product: syz [ 879.902903][T10402] usb 1-1: Manufacturer: syz [ 879.907536][T10402] usb 1-1: SerialNumber: syz [ 879.925292][T10402] r8152-cfgselector 1-1: config 0 descriptor?? [ 880.074189][T11110] fuse: Bad value for 'fd' [ 880.115333][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 880.369139][T10402] r8152-cfgselector 1-1: Unknown version 0x0000 [ 880.382003][T10402] r8152-cfgselector 1-1: bad CDC descriptors [ 880.413019][T10402] r8152-cfgselector 1-1: Unknown version 0x0000 [ 880.456575][T10402] r8152-cfgselector 1-1: USB disconnect, device number 31 [ 880.487271][T10400] usb 5-1: USB disconnect, device number 22 [ 880.565649][T10401] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 881.105169][T11128] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 881.130730][T11128] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 881.176795][T10401] usb 6-1: unable to get BOS descriptor or descriptor too short [ 881.189036][T10401] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 881.215762][T10401] usb 6-1: can't read configurations, error -71 [ 881.730429][ T4315] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 881.878990][T11141] loop3: detected capacity change from 0 to 4096 [ 881.910020][T11144] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 881.920123][T11143] fuse: Bad value for 'fd' [ 881.954602][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 881.956193][ T4315] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 881.956218][ T4315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.958107][ T4315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.958135][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.958154][ T4315] usb 2-1: Product: syz [ 881.958175][ T4315] usb 2-1: Manufacturer: syz [ 881.958189][ T4315] usb 2-1: SerialNumber: syz [ 882.126400][T11148] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 882.126455][T11148] netlink: 'syz.3.1893': attribute type 2 has an invalid length. [ 882.186189][ T4315] usb 2-1: 0:2 : does not exist [ 882.194160][ T4315] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 882.419841][ T4315] usb 2-1: USB disconnect, device number 28 [ 882.531614][T10402] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 882.671723][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.750227][T10402] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 882.801850][T10402] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 882.868166][T11157] device syzkaller0 entered promiscuous mode [ 882.880353][T10402] usb 4-1: config 0 interface 0 has no altsetting 0 [ 882.929652][T10402] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 882.968689][T10402] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 882.987822][T10402] usb 4-1: Manufacturer: syz [ 883.025820][T10402] usb 4-1: config 0 descriptor?? [ 883.060635][T10402] igorplugusb 4-1:0.0: incorrect number of endpoints [ 883.244372][ C1] sd 0:0:1:0: [sda] tag#6824 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 883.254880][ C1] sd 0:0:1:0: [sda] tag#6824 CDB: Write(6) 0a 00 00 00 00 00 00 01 00 00 00 00 [ 883.277407][T10402] usb 4-1: USB disconnect, device number 32 [ 883.333134][ T4315] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 883.536112][ T4315] usb 6-1: Using ep0 maxpacket: 8 [ 883.543424][ T4315] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 883.553617][ T4315] usb 6-1: config 179 has no interface number 0 [ 883.560381][ T4315] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 883.572170][ T4315] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 883.588601][ T4315] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 883.605206][ T4315] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 883.617569][ T4315] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 883.636180][ T4315] usb 6-1: config 179 interface 65 has no altsetting 0 [ 883.643582][ T4315] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 883.652693][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.705476][ T4315] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input18 [ 883.906936][ T4315] usb 6-1: USB disconnect, device number 22 [ 883.912959][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 883.948863][ T4315] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 884.498875][T11180] loop3: detected capacity change from 0 to 4096 [ 884.506442][ T7801] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 884.546731][T11181] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 884.731395][T11183] loop5: detected capacity change from 0 to 512 [ 884.736932][ T7801] usb 1-1: Using ep0 maxpacket: 16 [ 884.750169][ T7801] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 884.773177][ T7801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.799531][ T7801] usb 1-1: Product: syz [ 884.804170][ T7801] usb 1-1: Manufacturer: syz [ 884.815696][ T7801] usb 1-1: SerialNumber: syz [ 884.997848][T11183] FAT-fs (loop5): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 885.038501][ T7801] usb 1-1: config 0 descriptor?? [ 885.077038][ T7801] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 885.306837][T11183] loop5: detected capacity change from 0 to 40427 [ 885.321768][ T7801] usb 1-1: USB disconnect, device number 32 [ 885.337106][T11183] F2FS-fs (loop5): invalid crc value [ 885.376135][T11183] F2FS-fs (loop5): Found nat_bits in checkpoint [ 885.426141][T11183] F2FS-fs (loop5): Start checkpoint disabled! [ 885.447688][T11183] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 885.510064][T10400] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 885.682930][ T4482] kworker/u4:15: attempt to access beyond end of device [ 885.682930][ T4482] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 885.758970][T10400] usb 2-1: Using ep0 maxpacket: 16 [ 885.766631][T10400] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 885.796730][T10400] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.820614][T10400] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 885.843372][T10400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.852285][T11198] fuse: Bad value for 'group_id' [ 885.857605][T10400] usb 2-1: Product: syz [ 885.861787][T10400] usb 2-1: Manufacturer: syz [ 885.882017][T10400] usb 2-1: SerialNumber: syz [ 886.111191][T11200] loop3: detected capacity change from 0 to 32768 [ 886.126823][T11200] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1910 (11200) [ 886.134891][T11202] netlink: 'syz.5.1911': attribute type 1 has an invalid length. [ 886.155721][T11200] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 886.165870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056460c00: rx timeout, send abort [ 886.175371][T11200] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 886.184187][T11200] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 886.193750][T11200] BTRFS info (device loop3): use zstd compression, level 3 [ 886.201062][T11200] BTRFS info (device loop3): force clearing of disk cache [ 886.208253][T11200] BTRFS info (device loop3): enabling disk space caching [ 886.215308][T11200] BTRFS info (device loop3): disk space caching is enabled [ 886.224460][T10400] usb 2-1: 0:2 : does not exist [ 886.246156][T10400] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 886.263957][T10400] usb 2-1: USB disconnect, device number 29 [ 886.266891][T11202] netlink: 'syz.5.1911': attribute type 2 has an invalid length. [ 886.347337][T11200] BTRFS info (device loop3): enabling ssd optimizations [ 886.355511][T11200] BTRFS info (device loop3): rebuilding free space tree [ 886.368309][T11200] BTRFS info (device loop3): disabling free space tree [ 886.375208][T11200] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 886.385100][T11200] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 886.575981][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.692588][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e495400: rx timeout, send abort [ 886.701221][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056460c00: abort rx timeout. Force session deactivation [ 886.746776][T11229] device syz_tun entered promiscuous mode [ 886.817616][T11229] device macsec1 entered promiscuous mode [ 886.839146][T11229] device syz_tun left promiscuous mode [ 887.084007][T10400] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 887.235188][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e495400: abort rx timeout. Force session deactivation [ 887.287109][T10400] usb 6-1: Using ep0 maxpacket: 32 [ 887.298045][T10400] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 887.309487][T10400] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.335762][T10400] usb 6-1: config 0 has no interface number 0 [ 887.347943][T10400] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 887.379181][T10400] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 887.398939][T10400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.416972][T10400] usb 6-1: Product: syz [ 887.426307][T10400] usb 6-1: Manufacturer: syz [ 887.438257][T10400] usb 6-1: SerialNumber: syz [ 887.458403][T10400] usb 6-1: config 0 descriptor?? [ 887.474804][T10400] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 887.777156][T10400] usb 6-1: qt2_attach - failed to power on unit: -71 [ 887.791129][T10400] quatech2: probe of 6-1:0.51 failed with error -71 [ 887.811606][T10400] usb 6-1: USB disconnect, device number 23 [ 887.834001][ T4270] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 888.476719][T11251] loop3: detected capacity change from 0 to 4096 [ 888.510601][T11254] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 888.764455][T11258] fuse: Bad value for 'group_id' [ 888.994792][T11262] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 889.019264][T11262] netlink: 'syz.3.1923': attribute type 2 has an invalid length. [ 889.816823][T11269] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 889.830735][T11269] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 890.005175][T11271] loop1: detected capacity change from 0 to 32768 [ 890.041820][T11271] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1927 (11271) [ 890.062637][T11271] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 890.073060][T11271] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 890.081858][T11271] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 890.091265][T11271] BTRFS info (device loop1): use zstd compression, level 3 [ 890.098553][T11271] BTRFS info (device loop1): force clearing of disk cache [ 890.105647][T11271] BTRFS info (device loop1): enabling disk space caching [ 890.112950][T11271] BTRFS info (device loop1): disk space caching is enabled [ 890.150010][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593dd800: rx timeout, send abort [ 890.282394][T11271] BTRFS info (device loop1): enabling ssd optimizations [ 890.304112][T11271] BTRFS info (device loop1): rebuilding free space tree [ 890.322499][T11271] BTRFS info (device loop1): disabling free space tree [ 890.329515][T11271] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 890.339255][T11271] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 890.684368][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd2c000: rx timeout, send abort [ 890.692723][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593dd800: abort rx timeout. Force session deactivation [ 890.840948][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 890.868056][T11300] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1930'. [ 890.923256][T11302] loop5: detected capacity change from 0 to 4096 [ 890.954063][T11306] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.226938][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd2c000: abort rx timeout. Force session deactivation [ 891.317586][T11315] netlink: 'syz.3.1934': attribute type 1 has an invalid length. [ 891.343835][T11316] loop4: detected capacity change from 0 to 16 [ 891.359688][T11316] erofs: (device loop4): mounted with root inode @ nid 36. [ 891.447358][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 891.460094][T11317] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 891.471775][ T27] audit: type=1800 audit(1779491312.219:200): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1935" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 891.509168][T11315] netlink: 'syz.3.1934': attribute type 2 has an invalid length. [ 892.296429][T11323] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 892.318648][T11323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 892.368820][T11326] device syzkaller0 entered promiscuous mode [ 892.599117][ T4272] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 892.634998][T11330] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 892.644015][T11330] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 893.923046][T11336] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 894.183650][T11336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.212779][T11336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.232997][T11336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.250388][T11356] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 894.270197][T11336] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.297317][T11336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.326059][T11336] usb 2-1: config 0 descriptor?? [ 894.339753][T11356] netlink: 'syz.0.1948': attribute type 2 has an invalid length. [ 894.813453][T11361] loop4: detected capacity change from 0 to 32768 [ 894.847593][T11336] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 894.872959][T11361] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1950 (11361) [ 894.907131][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026d27800: rx timeout, send abort [ 894.941543][T11361] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 894.952024][T11361] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 894.960868][T11361] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 894.970370][T11361] BTRFS info (device loop4): use zstd compression, level 3 [ 894.977576][T11361] BTRFS info (device loop4): force clearing of disk cache [ 894.985127][T11361] BTRFS info (device loop4): enabling disk space caching [ 894.992510][T11361] BTRFS info (device loop4): disk space caching is enabled [ 895.050556][T11336] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 895.084867][T11369] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 895.230618][T11369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 895.265889][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.280375][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.362034][T11336] usb 2-1: USB disconnect, device number 30 [ 895.365701][T11340] usb 2-1: string descriptor 0 read error: -19 [ 895.441479][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026d24c00: rx timeout, send abort [ 895.449787][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026d27800: abort rx timeout. Force session deactivation [ 895.472660][T11380] fido_id[11380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 895.508794][T11361] BTRFS info (device loop4): enabling ssd optimizations [ 895.526548][T11361] BTRFS info (device loop4): rebuilding free space tree [ 895.538219][T11361] BTRFS info (device loop4): disabling free space tree [ 895.545095][T11361] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 895.554815][T11361] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 895.984017][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026d24c00: abort rx timeout. Force session deactivation [ 896.010723][T11398] device bridge19 entered promiscuous mode [ 898.269391][ T4269] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 898.400956][T11422] fuse: Bad value for 'fd' [ 898.751145][T11432] netlink: 'syz.4.1961': attribute type 1 has an invalid length. [ 898.759464][T11432] netlink: 'syz.4.1961': attribute type 2 has an invalid length. [ 900.479296][T11445] loop5: detected capacity change from 0 to 32768 [ 900.506632][T11445] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1971 (11445) [ 900.522396][T11445] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 900.532634][T11445] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 900.541523][T11445] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 900.550954][T11445] BTRFS info (device loop5): use zstd compression, level 3 [ 900.558159][T11445] BTRFS info (device loop5): force clearing of disk cache [ 900.565602][T11445] BTRFS info (device loop5): enabling disk space caching [ 900.572678][T11445] BTRFS info (device loop5): disk space caching is enabled [ 900.580026][ T3599] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 900.610305][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f317800: rx timeout, send abort [ 900.785257][ T3599] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.808964][ T3599] usb 1-1: config 0 has no interface number 0 [ 900.853884][ T3599] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 900.877084][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.900978][ T3599] usb 1-1: Product: syz [ 900.905181][ T3599] usb 1-1: Manufacturer: syz [ 900.913451][ T3599] usb 1-1: SerialNumber: syz [ 900.925428][ T3599] usb 1-1: config 0 descriptor?? [ 901.002881][T11464] device bridge15 entered promiscuous mode [ 901.025628][T11445] BTRFS info (device loop5): enabling ssd optimizations [ 901.033834][T11445] BTRFS info (device loop5): rebuilding free space tree [ 901.044796][T11445] BTRFS info (device loop5): disabling free space tree [ 901.051811][T11445] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 901.061500][T11445] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 901.171514][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056586800: rx timeout, send abort [ 901.179748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f317800: abort rx timeout. Force session deactivation [ 901.193248][T11441] syz.0.1968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 901.222255][ T3599] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 901.254021][ T3599] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 901.284399][ T3599] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 901.304157][ T3599] usb 1-1: media controller created [ 901.418244][ T3599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.544808][ T3599] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 901.630023][ T3599] usb 1-1: USB disconnect, device number 33 [ 901.714052][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056586800: abort rx timeout. Force session deactivation [ 902.175434][T11477] fuse: Bad value for 'fd' [ 902.382606][T11480] loop4: detected capacity change from 0 to 16 [ 902.400040][T11480] erofs: (device loop4): mounted with root inode @ nid 36. [ 902.426647][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 902.439410][T11480] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 902.452799][ T27] audit: type=1800 audit(1779491322.494:201): pid=11480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1969" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 903.449667][T11489] loop1: detected capacity change from 0 to 16 [ 903.463488][T11489] erofs: (device loop1): mounted with root inode @ nid 36. [ 903.546165][ T4285] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 903.560045][T11491] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 903.571522][ T27] audit: type=1800 audit(1779491323.542:202): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1978" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 904.058477][T11482] device syzkaller0 entered promiscuous mode [ 904.749664][ T4920] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 904.902647][ T14] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 905.157307][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.165996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.186276][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 905.277855][ T14] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 905.474662][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.514651][ T14] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.537843][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.560046][ T14] usb 2-1: Product: syz [ 905.564247][ T14] usb 2-1: Manufacturer: syz [ 905.568863][ T14] usb 2-1: SerialNumber: syz [ 905.826192][ T14] usb 2-1: 0:2 : does not exist [ 905.838176][ T14] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 905.889687][ T14] usb 2-1: USB disconnect, device number 31 [ 906.080256][T11525] fuse: Bad value for 'fd' [ 906.192435][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.569851][T11531] loop1: detected capacity change from 0 to 16 [ 907.479858][T11531] erofs: (device loop1): mounted with root inode @ nid 36. [ 907.562586][ T4285] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 907.575680][T11533] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 907.587179][ T27] audit: type=1800 audit(1779491327.295:203): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1988" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 907.844722][T11529] device syz_tun entered promiscuous mode [ 907.921821][T11529] device macsec1 entered promiscuous mode [ 907.982584][T11529] device syz_tun left promiscuous mode [ 908.965955][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057819800: rx timeout, send abort [ 909.578813][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566c6000: rx timeout, send abort [ 909.587159][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057819800: abort rx timeout. Force session deactivation [ 909.647390][T11555] loop1: detected capacity change from 0 to 16 [ 909.662068][T11555] erofs: (device loop1): mounted with root inode @ nid 36. [ 909.693795][ T4285] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 909.708264][T11555] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 909.719745][ T27] audit: type=1800 audit(1779491329.288:204): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1991" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 910.121467][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566c6000: abort rx timeout. Force session deactivation [ 911.107696][T11568] device syzkaller0 entered promiscuous mode [ 911.937610][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ea8b000: rx timeout, send abort [ 912.581540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ec19000: rx timeout, send abort [ 912.589758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ea8b000: abort rx timeout. Force session deactivation [ 913.124073][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ec19000: abort rx timeout. Force session deactivation [ 917.658832][T11579] device syz_tun entered promiscuous mode [ 917.664649][T11579] device macsec1 entered promiscuous mode [ 917.678791][T11579] device syz_tun left promiscuous mode [ 919.694080][T11633] binder: 11628:11633 ioctl c0306201 0 returned -14 [ 920.273250][T11646] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 920.281920][T11646] netlink: 'syz.0.2011': attribute type 2 has an invalid length. [ 921.644046][ T7] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 921.845791][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 921.854927][ T7] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 921.894249][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.907795][T11658] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2023'. [ 921.925168][ T7] usb 4-1: Product: syz [ 921.937607][ T7] usb 4-1: Manufacturer: syz [ 921.948145][ T7] usb 4-1: SerialNumber: syz [ 921.970498][ T7] usb 4-1: config 0 descriptor?? [ 921.992143][ T7] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 922.206282][T10402] usb 4-1: USB disconnect, device number 33 [ 924.278507][T11692] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 924.337162][T11692] netlink: 'syz.3.2035': attribute type 2 has an invalid length. [ 925.930277][T11705] loop3: detected capacity change from 0 to 16 [ 925.941239][T11705] erofs: (device loop3): mounted with root inode @ nid 36. [ 925.963277][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 925.975610][T11705] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 925.987079][ T27] audit: type=1800 audit(1779491344.513:205): pid=11705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2038" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 927.487915][T10405] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 927.723219][T10405] usb 4-1: Using ep0 maxpacket: 16 [ 927.732744][T10405] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 927.774516][T10405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.809664][T10405] usb 4-1: Product: syz [ 927.813845][T10405] usb 4-1: Manufacturer: syz [ 927.818468][T10405] usb 4-1: SerialNumber: syz [ 927.879595][T10405] usb 4-1: config 0 descriptor?? [ 927.914065][T10405] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 928.119000][T11725] loop4: detected capacity change from 0 to 4096 [ 928.225708][T11728] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 928.321042][T10405] usb 4-1: USB disconnect, device number 34 [ 930.748521][T11753] loop4: detected capacity change from 0 to 16 [ 930.759784][T11753] erofs: (device loop4): mounted with root inode @ nid 36. [ 930.789075][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 930.803374][T11753] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 930.815236][ T27] audit: type=1800 audit(1779491349.033:206): pid=11753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2051" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 930.834890][ C0] vkms_vblank_simulate: vblank timer overrun [ 931.755286][T11758] loop8: detected capacity change from 0 to 524287999 [ 931.842514][ C1] blk_print_req_error: 26 callbacks suppressed [ 931.842532][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.857933][ C1] buffer_io_error: 25 callbacks suppressed [ 931.857945][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 931.978391][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.987612][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.023976][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.033179][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.046924][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.056123][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.065477][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.074693][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.113359][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.122561][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.139350][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.148556][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.156768][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.165945][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.177569][T11758] ldm_validate_partition_table(): Disk read failed. [ 932.199481][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.208689][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.223864][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 932.233061][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 932.344821][T11758] Dev loop8: unable to read RDB block 0 [ 932.353209][T11758] loop8: unable to read partition table [ 932.419051][T11758] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 934.319331][T11780] loop3: detected capacity change from 0 to 4096 [ 935.081997][T11781] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 937.691145][T11792] device syzkaller0 entered promiscuous mode [ 938.156345][T11813] loop3: detected capacity change from 0 to 16 [ 938.168252][T11813] erofs: (device loop3): mounted with root inode @ nid 36. [ 938.249817][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 938.262939][T11814] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 938.274585][ T27] audit: type=1800 audit(1779491356.014:207): pid=11814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2066" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 940.252579][T11829] input: syz0 as /devices/virtual/input/input20 [ 941.269021][T11832] loop4: detected capacity change from 0 to 512 [ 941.281468][T11832] FAT-fs (loop4): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 941.578704][T11832] loop4: detected capacity change from 0 to 40427 [ 941.588236][T11832] F2FS-fs (loop4): invalid crc value [ 941.609580][T11832] F2FS-fs (loop4): Found nat_bits in checkpoint [ 941.653350][T11832] F2FS-fs (loop4): Start checkpoint disabled! [ 941.674417][T11832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 942.216750][ T4387] kworker/u4:10: attempt to access beyond end of device [ 942.216750][ T4387] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 944.061700][T11855] loop8: detected capacity change from 0 to 524287999 [ 944.095681][ C1] blk_print_req_error: 9 callbacks suppressed [ 944.095696][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.110963][ C1] buffer_io_error: 8 callbacks suppressed [ 944.110971][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.126254][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.135418][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.146862][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.156047][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.226933][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.236147][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.246244][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.255412][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.385361][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.394613][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.446610][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.455808][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.465118][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.474326][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.482436][T11855] ldm_validate_partition_table(): Disk read failed. [ 944.559638][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.568892][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.590083][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.599315][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 944.608507][T11855] Dev loop8: unable to read RDB block 0 [ 944.625834][T11855] loop8: unable to read partition table [ 944.639213][T11855] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 945.007259][T11869] input: syz0 as /devices/virtual/input/input21 [ 945.426068][T11874] loop3: detected capacity change from 0 to 512 [ 945.469559][T11874] FAT-fs (loop3): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 947.692221][T11886] device syzkaller0 entered promiscuous mode [ 951.714613][T11927] loop4: detected capacity change from 0 to 512 [ 951.721736][T11927] FAT-fs (loop4): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 952.031691][T11927] loop4: detected capacity change from 0 to 40427 [ 952.048509][T11927] F2FS-fs (loop4): invalid crc value [ 952.093624][T11927] F2FS-fs (loop4): Found nat_bits in checkpoint [ 952.143893][T11927] F2FS-fs (loop4): Start checkpoint disabled! [ 952.197391][T11927] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 952.836007][ T4546] kworker/u4:16: attempt to access beyond end of device [ 952.836007][ T4546] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 956.072871][T11969] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 956.105490][T11969] netlink: 'syz.0.2107': attribute type 2 has an invalid length. [ 957.116060][T11990] loop8: detected capacity change from 0 to 524287999 [ 957.147237][ C0] blk_print_req_error: 9 callbacks suppressed [ 957.147251][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.162541][ C0] buffer_io_error: 8 callbacks suppressed [ 957.162550][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.191513][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.200725][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.208849][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.218019][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.231528][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.240716][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.256973][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.266141][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.306320][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.315548][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.325046][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.334202][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.373224][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.382409][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.391629][T11990] ldm_validate_partition_table(): Disk read failed. [ 957.405841][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.415047][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.423716][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.432867][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 957.451322][T11990] Dev loop8: unable to read RDB block 0 [ 957.466918][T11990] loop8: unable to read partition table [ 957.495782][T11990] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 958.023453][T12006] device syzkaller0 entered promiscuous mode [ 958.360100][T12012] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 958.402119][T12012] netlink: 'syz.4.2119': attribute type 2 has an invalid length. [ 958.904565][T12020] loop0: detected capacity change from 0 to 16 [ 958.953137][T12020] erofs: (device loop0): mounted with root inode @ nid 36. [ 959.046036][ T4285] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 959.058434][T12022] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 959.070121][ T27] audit: type=1800 audit(1779491375.479:208): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2120" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 960.282117][T12028] loop3: detected capacity change from 0 to 16 [ 960.362061][T12028] erofs: (device loop3): mounted with root inode @ nid 36. [ 960.440952][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 960.453552][T12029] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 960.465741][ T27] audit: type=1800 audit(1779491376.770:209): pid=12029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2123" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 963.971948][T11337] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 964.183764][T11337] usb 1-1: Using ep0 maxpacket: 16 [ 964.190672][T11337] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 964.233512][T11337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.286478][T11337] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.329070][T11337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.363460][T11337] usb 1-1: Product: syz [ 964.382244][T11337] usb 1-1: Manufacturer: syz [ 964.397808][T11337] usb 1-1: SerialNumber: syz [ 964.646740][T11337] usb 1-1: 0:2 : does not exist [ 964.669988][T11337] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 964.788655][T11337] usb 1-1: USB disconnect, device number 34 [ 964.970329][T12064] device bridge16 entered promiscuous mode [ 965.763777][T12082] loop3: detected capacity change from 0 to 16 [ 965.783349][T12082] erofs: (device loop3): mounted with root inode @ nid 36. [ 965.805719][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 965.818264][T12082] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 965.831527][ T27] audit: type=1800 audit(1779491381.805:210): pid=12082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2141" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 965.851151][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.751537][T12087] loop4: detected capacity change from 0 to 16 [ 966.773156][T12087] erofs: (device loop4): mounted with root inode @ nid 36. [ 966.853229][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 966.865746][T12088] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 966.877937][ T27] audit: type=1800 audit(1779491382.778:211): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2140" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 967.869638][T12092] device syzkaller0 entered promiscuous mode [ 968.450839][ T4315] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 968.660386][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 968.680170][ T4315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.719404][ T4315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 968.764115][ T4315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 968.798312][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.854930][ T4315] usb 2-1: Product: syz [ 968.861473][ T4315] usb 2-1: Manufacturer: syz [ 968.871954][ T4315] usb 2-1: SerialNumber: syz [ 969.125371][ T4315] usb 2-1: 0:2 : does not exist [ 969.138359][ T4315] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 969.227316][ T4315] usb 2-1: USB disconnect, device number 32 [ 969.505956][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.801364][T12119] loop5: detected capacity change from 0 to 16 [ 969.824017][T12119] erofs: (device loop5): mounted with root inode @ nid 36. [ 969.905473][ T4285] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 969.917982][T12120] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 969.930820][ T27] audit: type=1800 audit(1779491385.642:212): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2153" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 970.715560][T12125] loop1: detected capacity change from 0 to 16 [ 970.732864][T12125] erofs: (device loop1): mounted with root inode @ nid 36. [ 970.812674][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 970.819329][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 970.848595][ T4285] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 970.861302][T12126] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 971.698915][ T27] audit: type=1800 audit(1779491386.521:213): pid=12126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2155" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 973.880506][T12143] device syz_tun entered promiscuous mode [ 973.906770][T12143] device macsec1 entered promiscuous mode [ 973.954491][T12143] device syz_tun left promiscuous mode [ 974.610563][T12163] device bridge17 entered promiscuous mode [ 975.989259][T12186] loop4: detected capacity change from 0 to 16 [ 976.003518][T12186] erofs: (device loop4): mounted with root inode @ nid 36. [ 976.026906][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 976.039881][T12186] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 976.051366][ T27] audit: type=1800 audit(1779491391.359:214): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2170" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 977.206687][T12190] loop3: detected capacity change from 0 to 16 [ 977.283994][T12190] erofs: (device loop3): mounted with root inode @ nid 36. [ 977.347672][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 977.362142][T12190] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 977.374893][ T27] audit: type=1800 audit(1779491392.604:215): pid=12190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2171" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 978.357062][T12194] device syzkaller0 entered promiscuous mode [ 978.613115][T12211] trusted_key: encrypted_key: keylen parameter is missing [ 979.431711][T12211] loop0: detected capacity change from 0 to 32768 [ 979.490509][T12211] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 979.888503][ T4435] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 980.174820][T12223] loop0: detected capacity change from 0 to 4096 [ 981.396180][T12224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 982.571072][T12235] loop3: detected capacity change from 0 to 16 [ 982.590943][T12235] erofs: (device loop3): mounted with root inode @ nid 36. [ 982.673057][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 982.685778][T12236] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 982.697725][ T27] audit: type=1800 audit(1779491397.582:216): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2186" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 985.242630][T12233] device bridge14 entered promiscuous mode [ 985.883119][T12256] loop1: detected capacity change from 0 to 32768 [ 985.894871][T12256] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2193 (12256) [ 985.913228][T12256] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 985.923870][T12256] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 985.934375][T12256] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 985.943922][T12256] BTRFS info (device loop1): use zstd compression, level 3 [ 985.951475][T12256] BTRFS info (device loop1): force clearing of disk cache [ 985.958690][T12256] BTRFS info (device loop1): enabling disk space caching [ 985.965895][T12256] BTRFS info (device loop1): disk space caching is enabled [ 986.176327][T12264] loop0: detected capacity change from 0 to 4096 [ 986.295329][T12268] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 986.687609][T12256] BTRFS info (device loop1): enabling ssd optimizations [ 986.696946][T12256] BTRFS info (device loop1): rebuilding free space tree [ 986.728199][T12256] BTRFS info (device loop1): disabling free space tree [ 986.735143][T12256] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 986.744880][T12256] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 987.516711][ T4272] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 989.249822][T12306] loop1: detected capacity change from 0 to 16 [ 989.262040][T12306] erofs: (device loop1): mounted with root inode @ nid 36. [ 989.295352][ T4285] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 989.310080][T12306] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 989.321774][ T27] audit: type=1800 audit(1779491403.787:217): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2198" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 989.723480][T12313] loop0: detected capacity change from 0 to 16 [ 989.734666][T12313] erofs: (device loop0): mounted with root inode @ nid 36. [ 989.758344][ T4285] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 989.771473][T12313] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 989.783114][ T27] audit: type=1800 audit(1779491404.208:218): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2205" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 990.559591][T12314] trusted_key: encrypted_key: keylen parameter is missing [ 991.046311][T12321] loop5: detected capacity change from 0 to 32768 [ 991.062502][T12321] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.2209 (12321) [ 991.079117][T12321] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 991.089369][T12321] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 991.098158][T12321] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 991.107618][T12321] BTRFS info (device loop5): use zstd compression, level 3 [ 991.114897][T12321] BTRFS info (device loop5): force clearing of disk cache [ 991.122025][T12321] BTRFS info (device loop5): enabling disk space caching [ 991.129092][T12321] BTRFS info (device loop5): disk space caching is enabled [ 991.339076][T12324] device bridge20 entered promiscuous mode [ 991.608165][T12321] BTRFS info (device loop5): enabling ssd optimizations [ 991.616078][T12321] BTRFS info (device loop5): rebuilding free space tree [ 991.641492][T12321] BTRFS info (device loop5): disabling free space tree [ 991.648648][T12321] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 991.658369][T12321] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 992.330726][ T4920] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 992.384899][T12314] loop1: detected capacity change from 0 to 32768 [ 992.515488][T12314] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 993.221115][ T4466] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 993.390383][T10405] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 993.592163][T10405] usb 2-1: Using ep0 maxpacket: 16 [ 993.599810][T10405] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.665823][T10405] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 994.819277][T10405] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 994.846321][T10405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.916741][T10405] usb 2-1: Product: syz [ 994.943274][T10405] usb 2-1: Manufacturer: syz [ 994.958940][T10405] usb 2-1: SerialNumber: syz [ 995.229612][T10405] usb 2-1: 0:2 : does not exist [ 995.249901][T10405] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 995.287867][T10405] usb 2-1: USB disconnect, device number 33 [ 995.550905][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.738382][T12379] loop4: detected capacity change from 0 to 16 [ 995.748998][T12379] erofs: (device loop4): mounted with root inode @ nid 36. [ 995.773174][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 995.786997][T12379] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 995.798619][ T27] audit: type=1800 audit(1779491409.841:219): pid=12379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2219" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 998.099508][T12390] loop1: detected capacity change from 0 to 32768 [ 998.107538][T12390] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2223 (12390) [ 998.121457][T12390] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 998.131811][T12390] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 998.140808][T12390] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 998.150454][T12390] BTRFS info (device loop1): use zstd compression, level 3 [ 998.157695][T12390] BTRFS info (device loop1): force clearing of disk cache [ 998.164976][T12390] BTRFS info (device loop1): enabling disk space caching [ 998.172836][T12390] BTRFS info (device loop1): disk space caching is enabled [ 998.463661][T12406] trusted_key: encrypted_key: keylen parameter is missing [ 998.930537][T12390] BTRFS info (device loop1): enabling ssd optimizations [ 998.939290][T12390] BTRFS info (device loop1): rebuilding free space tree [ 998.951420][T12390] BTRFS info (device loop1): disabling free space tree [ 998.958370][T12390] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 998.968131][T12390] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 999.611413][ T4272] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1000.168596][T12409] loop3: detected capacity change from 0 to 32768 [ 1000.228196][T12409] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1000.449367][ T4466] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1001.942753][ T4435] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1002.388640][T12442] loop4: detected capacity change from 0 to 16 [ 1002.404748][T12442] erofs: (device loop4): mounted with root inode @ nid 36. [ 1002.427664][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1002.445782][T12442] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1002.457701][ T27] audit: type=1800 audit(1779491416.074:220): pid=12442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2232" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1004.906127][T12446] device syz_tun entered promiscuous mode [ 1004.965003][T12446] device macsec1 entered promiscuous mode [ 1004.987886][T12446] device syz_tun left promiscuous mode [ 1005.273461][T10403] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1005.362542][T12459] loop5: detected capacity change from 0 to 32768 [ 1005.375764][T12459] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.2237 (12459) [ 1005.395517][T12459] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1005.405783][T12459] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1005.414684][T12459] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1005.424297][T12459] BTRFS info (device loop5): use zstd compression, level 3 [ 1005.431510][T12459] BTRFS info (device loop5): force clearing of disk cache [ 1005.438883][T12459] BTRFS info (device loop5): enabling disk space caching [ 1005.445945][T12459] BTRFS info (device loop5): disk space caching is enabled [ 1005.473858][T12459] BTRFS info (device loop5): enabling ssd optimizations [ 1005.483719][T12457] loop8: detected capacity change from 0 to 524287999 [ 1005.485406][T10403] usb 2-1: Using ep0 maxpacket: 32 [ 1005.490773][T12459] BTRFS info (device loop5): rebuilding free space tree [ 1005.508313][ C0] blk_print_req_error: 9 callbacks suppressed [ 1005.508326][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.523641][ C0] buffer_io_error: 8 callbacks suppressed [ 1005.523651][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1005.536690][T12459] BTRFS info (device loop5): disabling free space tree [ 1005.544248][T12459] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1005.553907][T12459] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1005.582225][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1005.591422][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.174979][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.184244][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.185046][T12487] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 1006.201107][T12487] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1006.230316][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.239503][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.249410][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.258576][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.267799][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.276986][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.285884][T10403] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1006.302683][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.311865][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.355356][T10403] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.365942][T10403] usb 2-1: config 0 has no interface number 0 [ 1006.381602][T10403] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1006.397278][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.406462][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.417168][ T4466] ldm_validate_partition_table(): Disk read failed. [ 1006.430208][T10403] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1006.458963][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.468179][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.472015][T10403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.497563][T10403] usb 2-1: Product: syz [ 1006.505653][T10403] usb 2-1: Manufacturer: syz [ 1006.520972][T10403] usb 2-1: SerialNumber: syz [ 1006.533470][T10403] usb 2-1: config 0 descriptor?? [ 1006.543355][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.550094][T10403] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1006.552488][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1006.583760][ T4920] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1006.601224][ T4466] Dev loop8: unable to read RDB block 0 [ 1006.676273][ T4466] loop8: unable to read partition table [ 1006.791674][T10403] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1006.802644][T10403] quatech2: probe of 2-1:0.51 failed with error -71 [ 1006.852611][T10403] usb 2-1: USB disconnect, device number 34 [ 1006.875927][ T4435] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop5 scanned by udevd (4435) [ 1008.392261][T12508] trusted_key: encrypted_key: keylen parameter is missing [ 1008.413408][T11336] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1008.621235][T11336] usb 1-1: Using ep0 maxpacket: 16 [ 1008.631872][T11336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.691150][T11336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1008.757246][T11336] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1008.808849][T11336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.816944][T11336] usb 1-1: Product: syz [ 1008.843461][T11336] usb 1-1: Manufacturer: syz [ 1008.848363][T11336] usb 1-1: SerialNumber: syz [ 1009.127475][T11336] usb 1-1: 0:2 : does not exist [ 1009.148640][T11336] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1009.263619][T11336] usb 1-1: USB disconnect, device number 35 [ 1009.276141][T12508] loop1: detected capacity change from 0 to 32768 [ 1009.383959][T12508] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1009.592316][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.624432][ T4471] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1011.504437][T12542] loop4: detected capacity change from 0 to 16 [ 1011.518400][T12542] erofs: (device loop4): mounted with root inode @ nid 36. [ 1011.543816][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1011.558802][T12542] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1011.570456][ T27] audit: type=1800 audit(1779491424.599:221): pid=12542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2256" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1011.576542][T12498] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1012.538183][T12498] usb 6-1: Using ep0 maxpacket: 16 [ 1012.553903][T12498] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1012.563609][T12498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.571855][T12498] usb 6-1: Product: syz [ 1012.577137][T12498] usb 6-1: Manufacturer: syz [ 1012.582132][T12498] usb 6-1: SerialNumber: syz [ 1012.597217][T12498] r8152-cfgselector 6-1: config 0 descriptor?? [ 1013.058859][T12498] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1013.081549][T12498] r8152-cfgselector 6-1: bad CDC descriptors [ 1013.130989][T12560] device syz_tun entered promiscuous mode [ 1013.141822][T12498] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1013.184771][T12498] r8152-cfgselector 6-1: USB disconnect, device number 24 [ 1013.234151][T12560] device macsec1 entered promiscuous mode [ 1013.306621][T12560] device syz_tun left promiscuous mode [ 1013.511531][T11337] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1013.713698][T11337] usb 2-1: Using ep0 maxpacket: 32 [ 1013.720822][T11337] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1013.750934][T11337] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.847602][T11337] usb 2-1: config 0 has no interface number 0 [ 1013.903794][T11337] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.954527][T12569] device syzkaller0 entered promiscuous mode [ 1013.975171][T11337] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1014.027894][T11337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.658057][T11337] usb 2-1: Product: syz [ 1015.024313][T11337] usb 2-1: Manufacturer: syz [ 1015.049364][T11337] usb 2-1: SerialNumber: syz [ 1015.067845][T11337] usb 2-1: config 0 descriptor?? [ 1015.093912][T11337] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1015.295009][T12581] loop3: detected capacity change from 0 to 16 [ 1015.309493][T12581] erofs: (device loop3): mounted with root inode @ nid 36. [ 1015.338855][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1015.362419][T12581] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1015.374491][ T27] audit: type=1800 audit(1779491428.164:222): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2269" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1016.193482][T11337] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1016.200231][T11337] quatech2: probe of 2-1:0.51 failed with error -71 [ 1016.262730][T11337] usb 2-1: USB disconnect, device number 35 [ 1016.369934][T12584] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 1016.450843][T12584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1016.578451][T12587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1016.609357][T12587] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1016.660014][T12587] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1017.068411][T12605] loop3: detected capacity change from 0 to 16 [ 1017.085294][T12605] erofs: (device loop3): mounted with root inode @ nid 36. [ 1017.109512][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1017.122327][T12605] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1017.134002][ T27] audit: type=1800 audit(1779491429.811:223): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2276" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1017.974503][T12609] device syzkaller0 entered promiscuous mode [ 1018.394129][T10403] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1018.607889][T10403] usb 5-1: Using ep0 maxpacket: 16 [ 1018.642533][T12621] loop0: detected capacity change from 0 to 16 [ 1018.726734][T12621] erofs: (device loop0): mounted with root inode @ nid 36. [ 1018.752146][ T4285] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1018.765183][T12621] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1018.776926][ T27] audit: type=1800 audit(1779491431.346:224): pid=12621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2283" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1019.489052][T10403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.499428][T10403] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1019.511085][T10403] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1019.520297][T10403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.528589][T10403] usb 5-1: Product: syz [ 1019.532766][T10403] usb 5-1: Manufacturer: syz [ 1019.537699][T10403] usb 5-1: SerialNumber: syz [ 1019.550734][T10403] usb 5-1: config 0 descriptor?? [ 1019.710268][T12624] loop8: detected capacity change from 0 to 524287999 [ 1019.718064][ C1] blk_print_req_error: 9 callbacks suppressed [ 1019.718073][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.733353][ C1] buffer_io_error: 8 callbacks suppressed [ 1019.733365][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.775374][T10403] usb 5-1: USB disconnect, device number 23 [ 1019.794211][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.803387][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.816011][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.825155][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.882400][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.891581][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.900433][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.909607][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.918084][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.927252][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.937704][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.946958][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.961306][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.970593][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1019.978560][T12624] ldm_validate_partition_table(): Disk read failed. [ 1019.998469][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1020.007738][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1020.018415][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1020.027580][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1020.055008][T12624] Dev loop8: unable to read RDB block 0 [ 1020.067815][T12624] loop8: unable to read partition table [ 1020.079074][T12624] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1020.288983][T12638] netlink: 'syz.5.2288': attribute type 1 has an invalid length. [ 1020.314354][T12638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.342083][T12638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.349095][T12638] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1020.361473][T12638] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1020.386901][T12640] device gretap1 entered promiscuous mode [ 1020.543061][T12640] bond1: (slave gretap1): making interface the new active one [ 1020.602572][T12640] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1020.626681][T12643] device syz_tun entered promiscuous mode [ 1020.691334][T12643] device macsec1 entered promiscuous mode [ 1020.707060][T12643] device syz_tun left promiscuous mode [ 1020.708882][T12650] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 1020.737072][T12650] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1020.785781][T12648] device syzkaller0 entered promiscuous mode [ 1020.862854][T10403] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1021.055129][T10403] usb 2-1: Using ep0 maxpacket: 32 [ 1021.092380][T10403] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1021.109337][T12661] loop3: detected capacity change from 0 to 16 [ 1021.121905][T12661] erofs: (device loop3): mounted with root inode @ nid 36. [ 1021.145942][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1021.159753][T12661] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1021.171700][ T27] audit: type=1800 audit(1779491433.592:225): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2295" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1021.261875][T10403] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.382961][T10403] usb 2-1: config 0 has no interface number 0 [ 1021.457833][T10403] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.640669][T10403] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1021.763942][T10403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.860572][T10403] usb 2-1: Product: syz [ 1021.929650][T10403] usb 2-1: Manufacturer: syz [ 1022.001174][T10403] usb 2-1: SerialNumber: syz [ 1022.026754][T10403] usb 2-1: config 0 descriptor?? [ 1022.092276][T10403] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1022.309220][T10403] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1022.322688][T10403] quatech2: probe of 2-1:0.51 failed with error -71 [ 1022.340966][T10403] usb 2-1: USB disconnect, device number 36 [ 1022.743360][T11336] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1022.880331][T12682] loop8: detected capacity change from 0 to 524287999 [ 1022.937389][T12682] ldm_validate_partition_table(): Disk read failed. [ 1022.947276][T12682] Dev loop8: unable to read RDB block 0 [ 1022.957158][T11336] usb 6-1: Using ep0 maxpacket: 16 [ 1022.967030][T12682] loop8: unable to read partition table [ 1022.971812][T11336] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.987790][T12682] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1023.056670][T11336] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1023.105444][T11336] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1023.145319][T11336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.192581][T11336] usb 6-1: Product: syz [ 1023.196796][T11336] usb 6-1: Manufacturer: syz [ 1023.201401][T11336] usb 6-1: SerialNumber: syz [ 1023.265142][T11336] usb 6-1: config 0 descriptor?? [ 1023.476650][T12692] device bridge16 entered promiscuous mode [ 1023.518372][T10403] usb 6-1: USB disconnect, device number 25 [ 1023.801348][T12701] loop0: detected capacity change from 0 to 16 [ 1023.823952][T12701] erofs: (device loop0): mounted with root inode @ nid 36. [ 1023.848490][ T4285] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1023.861240][T12701] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1023.873005][ T27] audit: type=1800 audit(1779491436.119:226): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2308" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1024.644797][T12703] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 1024.667174][T12703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1024.699093][T12703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1024.706072][T12703] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1024.717358][T12703] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 1024.797751][T12707] device syzkaller0 entered promiscuous mode [ 1025.178310][T12711] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 1025.187187][T12711] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1025.681764][T12727] device syz_tun entered promiscuous mode [ 1025.736576][T12727] device macsec1 entered promiscuous mode [ 1025.844364][T12727] device syz_tun left promiscuous mode [ 1026.013400][T11336] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1026.217131][T11336] usb 2-1: Using ep0 maxpacket: 32 [ 1026.226320][T11336] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1026.269617][T11336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.333604][T11336] usb 2-1: config 0 has no interface number 0 [ 1026.364639][T11336] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1026.387980][T11336] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1026.397516][T11336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.406769][T11336] usb 2-1: Product: syz [ 1026.421528][T11336] usb 2-1: Manufacturer: syz [ 1026.426572][T11336] usb 2-1: SerialNumber: syz [ 1026.454316][T11336] usb 2-1: config 0 descriptor?? [ 1026.490782][T11336] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1026.668598][T12744] loop5: detected capacity change from 0 to 16 [ 1026.688091][T12744] erofs: (device loop5): mounted with root inode @ nid 36. [ 1026.720410][ T4285] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1026.735292][T12744] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1026.752468][ T27] audit: type=1800 audit(1779491438.814:227): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2321" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1027.535337][T11336] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1027.553322][T11336] quatech2: probe of 2-1:0.51 failed with error -71 [ 1027.636928][T11336] usb 2-1: USB disconnect, device number 37 [ 1027.821939][T12748] device syzkaller0 entered promiscuous mode [ 1027.835912][T12750] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 1027.966769][T12750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1028.191858][T12752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1028.199330][T12752] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1028.212082][T12752] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 1028.475544][T12773] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 1028.484822][T12773] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1029.076663][T12784] loop3: detected capacity change from 0 to 16 [ 1029.121623][T12784] erofs: (device loop3): mounted with root inode @ nid 36. [ 1029.146655][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1029.160249][T12784] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1029.171976][ T27] audit: type=1800 audit(1779491441.069:228): pid=12784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2334" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1030.257071][T12800] device syzkaller0 entered promiscuous mode [ 1030.925542][T12812] loop3: detected capacity change from 0 to 4096 [ 1032.272770][T12811] netlink: 'syz.5.2343': attribute type 1 has an invalid length. [ 1032.551178][T12813] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1032.933937][T12811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.067933][T12815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.075228][T12815] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1033.165531][T12815] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 1033.203036][T12826] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 1033.251338][T12826] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1033.614097][T12835] loop0: detected capacity change from 0 to 16 [ 1033.625938][T12835] erofs: (device loop0): mounted with root inode @ nid 36. [ 1033.651315][ T4285] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1033.666878][T12835] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1033.679262][ T27] audit: type=1800 audit(1779491445.289:229): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2349" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1034.664431][T12842] loop5: detected capacity change from 0 to 16 [ 1034.675712][T12842] erofs: (device loop5): mounted with root inode @ nid 36. [ 1034.705212][ T4285] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1034.721936][T12842] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1034.733617][ T27] audit: type=1800 audit(1779491446.281:230): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2351" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1035.510124][T12856] loop1: detected capacity change from 0 to 512 [ 1035.539208][T12856] FAT-fs (loop1): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 1036.110175][T12866] loop4: detected capacity change from 0 to 4096 [ 1036.404159][T12868] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1036.850099][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1036.856435][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1037.552060][T12879] device batadv_slave_1 entered promiscuous mode [ 1037.586339][T12879] netlink: 'syz.5.2356': attribute type 1 has an invalid length. [ 1037.596601][T12879] netlink: 'syz.5.2356': attribute type 2 has an invalid length. [ 1038.016585][T12889] loop3: detected capacity change from 0 to 16 [ 1038.029954][T12889] erofs: (device loop3): mounted with root inode @ nid 36. [ 1038.056984][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1038.070077][T12889] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1038.081747][ T27] audit: type=1800 audit(1779491449.407:231): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2362" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1038.966092][T12879] device batadv_slave_1 left promiscuous mode [ 1039.015999][T12892] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 1039.074941][T12892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1039.210656][ T7] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1039.500781][ T7] usb 2-1: config 0 has no interfaces? [ 1039.506519][ T7] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1039.535766][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.588513][ T7] usb 2-1: config 0 descriptor?? [ 1039.810581][ T7] usb 2-1: USB disconnect, device number 38 [ 1040.074584][T12905] loop0: detected capacity change from 0 to 16 [ 1040.172093][T12905] erofs: (device loop0): mounted with root inode @ nid 36. [ 1040.198132][ T4285] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1040.224213][T12905] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1040.235995][ T27] audit: type=1800 audit(1779491451.419:232): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2367" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1041.015595][T12902] device bridge17 entered promiscuous mode [ 1041.215079][T12915] loop3: detected capacity change from 0 to 512 [ 1041.277759][T12915] FAT-fs (loop3): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 1041.525314][T12915] loop3: detected capacity change from 0 to 40427 [ 1041.541576][T12915] F2FS-fs (loop3): invalid crc value [ 1041.570841][T12915] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1041.599811][T12915] F2FS-fs (loop3): Start checkpoint disabled! [ 1041.609291][T12915] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1042.201567][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'. [ 1042.628665][ T56] kworker/u4:4: attempt to access beyond end of device [ 1042.628665][ T56] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1044.440358][T12950] netlink: 'syz.4.2377': attribute type 1 has an invalid length. [ 1044.504005][T12950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1045.240575][T12967] loop3: detected capacity change from 0 to 16 [ 1045.252469][T12967] erofs: (device loop3): mounted with root inode @ nid 36. [ 1045.282431][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1045.296626][T12967] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1045.310013][ T27] audit: type=1800 audit(1779491456.173:233): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2379" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1047.464341][T13004] loop0: detected capacity change from 0 to 8 [ 1048.071919][T13006] loop3: detected capacity change from 0 to 32768 [ 1048.089673][T13006] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 1048.205424][ T4435] blk_print_req_error: 28 callbacks suppressed [ 1048.205440][ T4435] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1049.329431][T13016] loop3: detected capacity change from 0 to 16 [ 1049.343381][T13016] erofs: (device loop3): mounted with root inode @ nid 36. [ 1049.368168][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1049.381867][T13016] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1049.393696][ T27] audit: type=1800 audit(1779491460.000:234): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2395" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1050.609398][T13013] ksmbd: Unknown IPC event: 4, ignore. [ 1050.633288][T13024] mmap: syz.5.2386 (13024) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1050.659161][T13023] loop3: detected capacity change from 0 to 512 [ 1050.675381][T13024] [ 1050.677739][T13024] ====================================================== [ 1050.684763][T13024] WARNING: possible circular locking dependency detected [ 1050.691801][T13024] syzkaller #0 Not tainted [ 1050.696219][T13024] ------------------------------------------------------ [ 1050.703240][T13024] syz.5.2386/13024 is trying to acquire lock: [ 1050.709305][T13024] ffff88802e9fc1b0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 1050.720055][T13024] [ 1050.720055][T13024] but task is already holding lock: [ 1050.727429][T13024] ffff88807913ae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 1050.737474][T13024] [ 1050.737474][T13024] which lock already depends on the new lock. [ 1050.737474][T13024] [ 1050.747880][T13024] [ 1050.747880][T13024] the existing dependency chain (in reverse order) is: [ 1050.756898][T13024] [ 1050.756898][T13024] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1050.764477][T13024] down_read_killable+0x4c/0x340 [ 1050.769974][T13024] mmap_read_lock_killable+0x1d/0x60 [ 1050.775793][T13024] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1050.781499][T13024] do_user_addr_fault+0x2db/0xb10 [ 1050.784123][T13023] FAT-fs (loop3): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 1050.787030][T13024] exc_page_fault+0x60/0x100 [ 1050.787054][T13024] asm_exc_page_fault+0x22/0x30 [ 1050.787072][T13024] fault_in_readable+0x13e/0x1f0 [ 1050.787093][T13024] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1050.787116][T13024] generic_perform_write+0x1f1/0x5c0 [ 1050.787136][T13024] __generic_file_write_iter+0x148/0x2a0 [ 1050.787156][T13024] generic_file_write_iter+0xab/0x2e0 [ 1050.843570][T13024] vfs_write+0x4b1/0xa30 [ 1050.848336][T13024] ksys_write+0x14c/0x250 [ 1050.853196][T13024] do_syscall_64+0x4c/0xa0 [ 1050.858134][T13024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1050.864548][T13024] [ 1050.864548][T13024] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1050.873233][T13024] __lock_acquire+0x2d07/0x7d10 [ 1050.878602][T13024] lock_acquire+0x1bb/0x4a0 [ 1050.883624][T13024] down_write+0x36/0x60 [ 1050.888299][T13024] process_measurement+0x3a2/0x1c30 [ 1050.894021][T13024] ima_file_mmap+0x102/0x150 [ 1050.899136][T13024] __se_sys_remap_file_pages+0x559/0x7b0 [ 1050.905290][T13024] do_syscall_64+0x4c/0xa0 [ 1050.910224][T13024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1050.916629][T13024] [ 1050.916629][T13024] other info that might help us debug this: [ 1050.916629][T13024] [ 1050.926842][T13024] Possible unsafe locking scenario: [ 1050.926842][T13024] [ 1050.934279][T13024] CPU0 CPU1 [ 1050.939627][T13024] ---- ---- [ 1050.944991][T13024] lock(&mm->mmap_lock); [ 1050.949320][T13024] lock(&sb->s_type->i_mutex_key#13); [ 1050.957306][T13024] lock(&mm->mmap_lock); [ 1050.964143][T13024] lock(&sb->s_type->i_mutex_key#13); [ 1050.969594][T13024] [ 1050.969594][T13024] *** DEADLOCK *** [ 1050.969594][T13024] [ 1050.977721][T13024] 1 lock held by syz.5.2386/13024: [ 1050.982834][T13024] #0: ffff88807913ae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 1050.993281][T13024] [ 1050.993281][T13024] stack backtrace: [ 1050.999151][T13024] CPU: 0 PID: 13024 Comm: syz.5.2386 Not tainted syzkaller #0 [ 1051.006597][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1051.016644][T13024] Call Trace: [ 1051.019912][T13024] [ 1051.022835][T13024] dump_stack_lvl+0x188/0x24e [ 1051.027514][T13024] ? load_image+0x400/0x400 [ 1051.032010][T13024] ? show_regs_print_info+0x12/0x12 [ 1051.037201][T13024] ? print_circular_bug+0x12b/0x1a0 [ 1051.042395][T13024] check_noncircular+0x296/0x330 [ 1051.047323][T13024] ? look_up_lock_class+0x75/0x140 [ 1051.052426][T13024] ? add_chain_block+0x940/0x940 [ 1051.057357][T13024] ? lockdep_lock+0xf1/0x1f0 [ 1051.061940][T13024] ? _find_first_zero_bit+0xcf/0x100 [ 1051.067216][T13024] __lock_acquire+0x2d07/0x7d10 [ 1051.072062][T13024] ? ima_match_policy+0x107/0x2120 [ 1051.077163][T13024] ? __lock_acquire+0x7d10/0x7d10 [ 1051.082180][T13024] ? verify_lock_unused+0x140/0x140 [ 1051.087371][T13024] ? ima_match_policy+0x107/0x2120 [ 1051.092471][T13024] ? ima_match_policy+0x2093/0x2120 [ 1051.097666][T13024] lock_acquire+0x1bb/0x4a0 [ 1051.102160][T13024] ? process_measurement+0x3a2/0x1c30 [ 1051.107522][T13024] ? mark_lock+0x94/0x320 [ 1051.111842][T13024] ? __might_sleep+0xd0/0xd0 [ 1051.116418][T13024] ? read_lock_is_recursive+0x10/0x10 [ 1051.121781][T13024] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1051.127753][T13024] ? ima_get_action+0x71/0xa0 [ 1051.132422][T13024] down_write+0x36/0x60 [ 1051.136575][T13024] ? process_measurement+0x3a2/0x1c30 [ 1051.141939][T13024] process_measurement+0x3a2/0x1c30 [ 1051.147139][T13024] ? __schedule+0x11d9/0x40e0 [ 1051.151807][T13024] ? ima_file_mmap+0x150/0x150 [ 1051.156565][T13024] ? lock_chain_count+0x20/0x20 [ 1051.161410][T13024] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1051.167559][T13024] ima_file_mmap+0x102/0x150 [ 1051.172139][T13024] ? ima_file_free+0x3e0/0x3e0 [ 1051.176890][T13024] ? security_mmap_file+0xdd/0x180 [ 1051.181995][T13024] ? bpf_lsm_mmap_file+0x5/0x10 [ 1051.186838][T13024] ? security_mmap_file+0x11b/0x180 [ 1051.192030][T13024] __se_sys_remap_file_pages+0x559/0x7b0 [ 1051.197658][T13024] ? lockdep_hardirqs_on+0x94/0x140 [ 1051.202852][T13024] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1051.208565][T13024] ? lock_chain_count+0x20/0x20 [ 1051.213408][T13024] ? lockdep_hardirqs_on+0x94/0x140 [ 1051.218602][T13024] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1051.224315][T13024] do_syscall_64+0x4c/0xa0 [ 1051.228725][T13024] ? clear_bhb_loop+0x60/0xb0 [ 1051.233393][T13024] ? clear_bhb_loop+0x60/0xb0 [ 1051.238061][T13024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.243945][T13024] RIP: 0033:0x7f589519ce59 [ 1051.248351][T13024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.267946][T13024] RSP: 002b:00007f5896045028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1051.276365][T13024] RAX: ffffffffffffffda RBX: 00007f5895416180 RCX: 00007f589519ce59 [ 1051.284323][T13024] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000903000 [ 1051.292285][T13024] RBP: 00007f5895232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1051.300244][T13024] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1051.308211][T13024] R13: 00007f5895416218 R14: 00007f5895416180 R15: 00007ffc693fb238 [ 1051.316193][T13024] [ 1051.319256][ C0] vkms_vblank_simulate: vblank timer overrun [ 1051.591621][T13023] loop3: detected capacity change from 0 to 40427 [ 1051.599732][T13023] F2FS-fs (loop3): invalid crc value [ 1051.602050][T13027] netlink: 'syz.0.2392': attribute type 1 has an invalid length. [ 1051.635400][T13023] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1051.670451][T13023] F2FS-fs (loop3): Start checkpoint disabled! [ 1051.677581][T13023] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1051.927457][T13027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1052.011313][ T9146] kworker/u4:7: attempt to access beyond end of device [ 1052.011313][ T9146] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427