last executing test programs: 3m38.642866212s ago: executing program 2 (id=450): socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r2, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26, 0x1000000}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, 0x0) 3m35.383147202s ago: executing program 2 (id=452): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2e000000010002", 0x7) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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") socket$nl_route(0x10, 0x3, 0x0) 3m33.03359134s ago: executing program 2 (id=456): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m32.536754432s ago: executing program 2 (id=460): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m31.096452717s ago: executing program 2 (id=463): socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r2, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26, 0x1000000}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, 0x0) 3m30.282071998s ago: executing program 2 (id=466): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2e000000010002", 0x7) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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") socket$nl_route(0x10, 0x3, 0x0) 3m29.530221046s ago: executing program 32 (id=466): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2e000000010002", 0x7) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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") socket$nl_route(0x10, 0x3, 0x0) 17.106610822s ago: executing program 0 (id=853): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000100)="64b6365de974de7a040000000000000000000000496e9000", 0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r3, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb22f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3be, 0x100080, {0x400000006, 0x6, 0x4000000000040000, 0xfe2b25d, 0x2, 0x0, 0x3, 0x4, 0x0, 0x4000, 0xfffffffc, 0x0, 0x0, 0xfffffff9, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000a, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000390001002bbd7000ffdbdf250b000000080005"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16.528019137s ago: executing program 0 (id=856): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x2008000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x800000ff, 0xf00, 0x2000005}}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000080)=""/68, 0x44) close(0x3) 14.042645687s ago: executing program 1 (id=866): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x16f97b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) close_range(r0, 0xffffffffffffffff, 0x0) 12.497655875s ago: executing program 4 (id=868): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) socket$inet6_tcp(0xa, 0x1, 0x0) 11.05720806s ago: executing program 0 (id=870): open(&(0x7f00000001c0)='./bus\x00', 0x64842, 0x1ff) syz_open_dev$loop(0x0, 0x4, 0x40800) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0xa00086, &(0x7f0000009780), 0x1, 0x9759, &(0x7f000000e040)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x2000000000000000) 10.958864592s ago: executing program 3 (id=871): syz_mount_image$nilfs2(&(0x7f0000000f80), &(0x7f0000000a80)='./file3\x00', 0x0, &(0x7f0000000c00)={[{@errors_remount_ro}, {@order_strict}, {@nodiscard}, {@norecovery}, {@errors_remount_ro}, {@discard}, {@nobarrier}, {@nobarrier}, {@errors_remount_ro}, {@errors_continue}]}, 0x1, 0xa88, &(0x7f0000002140)="$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") clock_adjtime(0x0, &(0x7f0000000380)={0xffffffffffff2b95, 0x81, 0x1, 0x94a, 0x100, 0x8001, 0x7e, 0x8000000000000000, 0x200000000000ffb, 0xffff, 0x3b9ac9ff, 0x9854, 0x845, 0x9, 0xfff, 0x9, 0x6, 0x9a000004, 0x1000, 0xc7, 0x3, 0x400, 0x7, 0xc, 0x8000000000000003, 0x8}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x10000000002}, {0x0, 0x0, 0x28, 0xfffe, 0x1000000000000101}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 10.876715614s ago: executing program 4 (id=872): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x1, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x4, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x10, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x2, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x8ed2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x4, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x9, 0xff, 0x1005, 0x7ff, 0x5f32, 0xffff1ef5, 0x0, 0x9, 0x2, 0x9, 0x4, 0x7f, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x7ffc, 0xffff, 0x2, 0x7f, 0x6, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0x8000, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x80, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x2, 0x10002, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x0, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) removexattr(0x0, &(0x7f0000000480)=@known='trusted.overlay.opaque\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.754245417s ago: executing program 1 (id=873): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x2200000, &(0x7f0000000100)={[{@pquota}]}, 0x1, 0xba17, &(0x7f00000151c0)="$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") mkdir(&(0x7f0000005900)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) 10.499828113s ago: executing program 4 (id=874): write(0xffffffffffffffff, &(0x7f0000000100)="509a1bbdc4a74e1c99b0452a49f9cf33c77767044fdccaf21149fc98b8344a9a64e5c920abafcbfbc253acf2677b706a709c4e547ccf6555713414e67eb7dca3819bc8b9894e88ba9bf056", 0x4b) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 10.035567945s ago: executing program 4 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 9.660062754s ago: executing program 3 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) syz_open_dev$midi(&(0x7f00000000c0), 0x100000000, 0x10880) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 8.333168517s ago: executing program 3 (id=877): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=@udp6=r4, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 7.963854675s ago: executing program 3 (id=878): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x2008000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x6, 0x800000ff, 0xf00, 0x2000005}}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000080)=""/68, 0x44) close(0x3) 6.758404875s ago: executing program 0 (id=879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.480095852s ago: executing program 1 (id=880): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) socket$inet6_tcp(0xa, 0x1, 0x0) 3.723363109s ago: executing program 1 (id=881): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f0000000900)={&(0x7f0000000500)={&(0x7f00000004c0)={&(0x7f0000000480)}}, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={&(0x7f0000000540)}}}, &(0x7f0000000980)=0x18) r3 = fsopen(&(0x7f0000000000)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x803, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) syz_emit_ethernet(0x4e, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket(0x28, 0x801, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',wfd', @ANYRESHEX=r7, @ANYBLOB=',\x00']) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@userptr={0xbb6, 0x1, 0x4, 0x1, 0xc8bd, {0x0, 0xea60}, {0x3, 0xc, 0x6, 0x7, 0x0, 0xf, "050b2e3b"}, 0x5, 0x2, {&(0x7f0000000440)}, 0xc, 0x0, r4}) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x80, 0x4) 3.552692943s ago: executing program 4 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) write(0xffffffffffffffff, 0x0, 0x0) 2.836108811s ago: executing program 0 (id=883): write(0xffffffffffffffff, &(0x7f0000000100)="509a1bbdc4a74e1c99b0452a49f9cf33c77767044fdccaf21149fc98b8344a9a64e5c920abafcbfbc253acf2677b706a709c4e547ccf6555713414e67eb7dca3819bc8b9894e88ba9bf056", 0x4b) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b00"], 0x88) 2.532977198s ago: executing program 1 (id=884): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls\x00', 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) 2.269577055s ago: executing program 3 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) syz_open_dev$midi(&(0x7f00000000c0), 0x100000000, 0x10880) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 1.774270557s ago: executing program 4 (id=886): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) 683.467644ms ago: executing program 3 (id=887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x8, &(0x7f0000000240)=[{0x5, 0x6, 0xd, 0x1}, {0x5, 0x7f, 0x2, 0x6}, {0x0, 0x0, 0x9, 0x3}, {0xe20, 0x7, 0x9, 0x3}, {0x6, 0xb7, 0x7, 0x10000}, {0x9, 0x5, 0x6, 0x7fffffff}, {0x2, 0x2, 0x6, 0x3}, {0x8004, 0x57, 0x2, 0x4}]}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000001c0)={0x1, 0x0, {0x6, 0x6, 0x1, 0x5}}) epoll_create(0x3) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 49.390299ms ago: executing program 1 (id=888): socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000001840)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x2, 0x0, 0x0, 0x2, 0x200, {0x5, 0x4, 0x2, 0x3c, 0x100, 0x64, 0x4, 0xff, 0x33, 0x101, @remote, @broadcast}}}}}}, 0x0) 0s ago: executing program 0 (id=889): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): 506077][ T5780] veth1_vlan: entered promiscuous mode [ 103.577277][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.586542][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.640360][ T5779] veth0_macvtap: entered promiscuous mode [ 103.689078][ T5779] veth1_macvtap: entered promiscuous mode [ 103.728781][ T5788] veth0_vlan: entered promiscuous mode [ 103.744704][ T5780] veth0_macvtap: entered promiscuous mode [ 103.800904][ T5780] veth1_macvtap: entered promiscuous mode [ 103.816776][ T5086] Bluetooth: hci0: command tx timeout [ 103.833927][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.865793][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.881315][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.893979][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.911748][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.934197][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.944356][ T5788] veth1_vlan: entered promiscuous mode [ 103.980924][ T5086] Bluetooth: hci1: command tx timeout [ 103.988692][ T5778] Bluetooth: hci2: command tx timeout [ 104.010149][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.028148][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.062159][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.084427][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.136412][ T5086] Bluetooth: hci3: command tx timeout [ 104.189425][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.226152][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.237295][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.249387][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.264285][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.303314][ T5842] syz.3.6[5842]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.333337][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.353170][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.363966][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.388615][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.408348][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.455204][ T5788] veth0_macvtap: entered promiscuous mode [ 104.490269][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.507629][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.522476][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.532103][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.569825][ T5788] veth1_macvtap: entered promiscuous mode [ 104.691513][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.710572][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.760682][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.774877][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.792454][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.803408][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.813804][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.824700][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.838735][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.869862][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.882136][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.893293][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.904605][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.915047][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.926245][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.939086][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.963756][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.972117][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.999716][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.016753][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.029229][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.038680][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.184840][ T5842] loop3: detected capacity change from 0 to 32768 [ 105.205470][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.236614][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.312819][ T5842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (5842) [ 105.417761][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.436177][ T5842] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.457015][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.475418][ T5842] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 105.505856][ T5842] BTRFS info (device loop3): force clearing of disk cache [ 105.538185][ T5842] BTRFS info (device loop3): enabling auto defrag [ 105.558235][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.586581][ T5842] BTRFS info (device loop3): max_inline at 0 [ 105.596176][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.608580][ T5842] BTRFS info (device loop3): enabling disk space caching [ 105.625151][ T5842] BTRFS info (device loop3): disk space caching is enabled [ 105.711176][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.719869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.901360][ T5086] Bluetooth: hci0: command tx timeout [ 106.027308][ T5842] BTRFS info (device loop3): enabling ssd optimizations [ 106.056756][ T5086] Bluetooth: hci1: command tx timeout [ 106.063127][ T5778] Bluetooth: hci2: command tx timeout [ 106.091495][ T5842] BTRFS info (device loop3): rebuilding free space tree [ 106.163322][ T5842] BTRFS info (device loop3): disabling free space tree [ 106.186369][ T5842] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 106.215853][ T5778] Bluetooth: hci3: command tx timeout [ 106.230620][ T5842] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.487256][ T5867] loop1: detected capacity change from 0 to 8 [ 106.529229][ T28] audit: type=1800 audit(1786365961.062:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 106.622091][ T5867] SQUASHFS error: zlib decompression failed, data probably corrupt [ 106.652891][ T5867] SQUASHFS error: Failed to read block 0x9b: -5 [ 106.668927][ T5867] SQUASHFS error: Unable to read metadata cache entry [99] [ 106.689877][ T5867] SQUASHFS error: Unable to read inode 0x104 [ 106.743316][ T5845] loop0: detected capacity change from 0 to 32768 [ 106.862141][ T5845] (syz.0.1,5845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.994463][ T5845] (syz.0.1,5845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.026604][ T5786] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.120106][ T5872] loop2: detected capacity change from 0 to 16 [ 107.279503][ T5872] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 107.713426][ T5845] JBD2: Ignoring recovery information on journal [ 107.963290][ T5845] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.069929][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.815374][ T5889] binder: 5888:5889 unknown command 0 [ 108.822501][ T5889] binder: 5888:5889 ioctl c0306201 2000000001c0 returned -22 [ 109.445114][ T5898] loop1: detected capacity change from 0 to 8 [ 109.516482][ T5898] SQUASHFS error: zlib decompression failed, data probably corrupt [ 109.564871][ T5898] SQUASHFS error: Failed to read block 0x9b: -5 [ 109.603774][ T5898] SQUASHFS error: Unable to read metadata cache entry [99] [ 109.624144][ T5898] SQUASHFS error: Unable to read inode 0x104 [ 109.858043][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 110.149715][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.596830][ T5925] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 110.827920][ T5929] pim6reg: entered allmulticast mode [ 111.182766][ T5935] pim6reg: left allmulticast mode [ 112.925741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 113.335847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.157388][ T28] audit: type=1800 audit(1786365970.692:3): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.27" name="ipv4_address" dev="configfs" ino=6618 res=0 errno=0 [ 116.259246][ T28] audit: type=1800 audit(1786365970.692:4): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.27" name="ipv4_port" dev="configfs" ino=8089 res=0 errno=0 [ 116.279573][ T28] audit: type=1800 audit(1786365970.702:5): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.27" name="num" dev="configfs" ino=8090 res=0 errno=0 [ 116.462492][ T5945] loop0: detected capacity change from 0 to 512 [ 116.545478][ T5948] loop2: detected capacity change from 0 to 8 [ 116.584205][ T5948] SQUASHFS error: zlib decompression failed, data probably corrupt [ 116.615892][ T5948] SQUASHFS error: Failed to read block 0x9b: -5 [ 116.622265][ T5948] SQUASHFS error: Unable to read metadata cache entry [99] [ 116.695433][ T5948] SQUASHFS error: Unable to read inode 0x104 [ 116.803435][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.859755][ T5945] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.931852][ T5945] Zero length message leads to an empty skb [ 117.910272][ T5967] 9pnet_fd: p9_fd_create_tcp (5967): problem connecting socket to 127.0.0.1 [ 118.760657][ T5979] netlink: 48 bytes leftover after parsing attributes in process `syz.1.36'. [ 118.850835][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.264142][ T28] audit: type=1800 audit(1786365973.792:6): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37" name="ipv4_address" dev="configfs" ino=8217 res=0 errno=0 [ 119.342933][ T28] audit: type=1800 audit(1786365973.822:7): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37" name="ipv4_port" dev="configfs" ino=8218 res=0 errno=0 [ 119.451415][ T5987] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 119.505440][ T28] audit: type=1800 audit(1786365973.822:8): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37" name="num" dev="configfs" ino=8219 res=0 errno=0 [ 119.695685][ T5992] pim6reg: entered allmulticast mode [ 120.026761][ T5995] pim6reg: left allmulticast mode [ 120.605764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 121.015848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.108144][ T6013] loop2: detected capacity change from 0 to 8 [ 123.167891][ T6013] Major/Minor mismatch, older Squashfs -31784.0 filesystems are unsupported [ 123.312961][ T5786] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.128490][ T6019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.46'. [ 124.553855][ T6011] loop3: detected capacity change from 0 to 32768 [ 124.683281][ T6011] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.850070][ T6011] XFS (loop3): Ending clean mount [ 124.923269][ T6011] XFS (loop3): Quotacheck needed: Please wait. [ 125.131182][ T6011] XFS (loop3): Quotacheck: Done. [ 125.387369][ T28] audit: type=1804 audit(1786365979.912:9): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.44" name="/newroot/11/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 125.470311][ T28] audit: type=1804 audit(1786365979.952:10): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.44" name="/newroot/11/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 125.523476][ T28] audit: type=1800 audit(1786365980.042:11): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="ipv4_address" dev="configfs" ino=8259 res=0 errno=0 [ 125.546144][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.568497][ T28] audit: type=1800 audit(1786365980.042:12): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="ipv4_port" dev="configfs" ino=8260 res=0 errno=0 [ 125.592282][ T28] audit: type=1800 audit(1786365980.042:13): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="num" dev="configfs" ino=8261 res=0 errno=0 [ 125.867046][ T6039] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 126.159275][ T6042] pim6reg: entered allmulticast mode [ 126.571403][ T6042] pim6reg: left allmulticast mode [ 129.429783][ T28] audit: type=1800 audit(1786365983.942:14): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="ipv4_address" dev="configfs" ino=6889 res=0 errno=0 [ 129.506025][ T28] audit: type=1800 audit(1786365983.992:15): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="num" dev="configfs" ino=6919 res=0 errno=0 [ 130.078872][ T6089] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 130.335832][ T6095] pim6reg: entered allmulticast mode [ 130.775592][ T6101] pim6reg: left allmulticast mode [ 132.231331][ T6120] 9pnet_fd: p9_fd_create_tcp (6120): problem connecting socket to 127.0.0.1 [ 132.548178][ T974] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.142705][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.185060][ T974] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 133.228816][ T974] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 133.245752][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.302650][ T6125] loop3: detected capacity change from 0 to 8 [ 133.320616][ T974] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 133.363093][ T974] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 133.386781][ T6125] SQUASHFS error: zlib decompression failed, data probably corrupt [ 133.394857][ T6125] SQUASHFS error: Failed to read block 0x9b: -5 [ 133.455881][ T6125] SQUASHFS error: Unable to read metadata cache entry [99] [ 133.465158][ T6125] SQUASHFS error: Unable to read inode 0x104 [ 133.752294][ T6107] loop2: detected capacity change from 0 to 32768 [ 133.781883][ T6107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.69 (6107) [ 133.833183][ T6107] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.861227][ T6107] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 133.874012][ T6107] BTRFS info (device loop2): setting nodatasum [ 133.913435][ T6107] BTRFS info (device loop2): force zlib compression, level 3 [ 133.934450][ T6107] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 133.954362][ T6107] BTRFS info (device loop2): use lzo compression, level 0 [ 133.969072][ T6107] BTRFS info (device loop2): turning on flush-on-commit [ 133.981866][ T6107] BTRFS info (device loop2): enabling auto defrag [ 133.993896][ T6107] BTRFS info (device loop2): max_inline at 4096 [ 134.005922][ T6107] BTRFS info (device loop2): using free space tree [ 134.121859][ T6107] BTRFS info (device loop2): enabling ssd optimizations [ 134.373538][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.139811][ T6157] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 135.164442][ T6159] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 136.843465][ T6159] pim6reg: entered allmulticast mode [ 136.905033][ T6159] pim6reg: left allmulticast mode [ 137.143939][ T6115] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 137.201038][ T5836] usb 2-1: USB disconnect, device number 2 [ 137.254008][ T5836] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 137.319150][ T5836] spcp8x5 2-1:1.0: device disconnected [ 137.475713][ T28] audit: type=1800 audit(1786365992.002:16): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.84" name="ipv4_address" dev="configfs" ino=7011 res=0 errno=0 [ 137.545840][ T28] audit: type=1800 audit(1786365992.012:17): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.84" name="num" dev="configfs" ino=7012 res=0 errno=0 [ 137.663813][ T6175] loop3: detected capacity change from 0 to 8 [ 137.686600][ T6175] SQUASHFS error: zlib decompression failed, data probably corrupt [ 137.724873][ T6175] SQUASHFS error: Failed to read block 0x9b: -5 [ 137.745183][ T6175] SQUASHFS error: Unable to read metadata cache entry [99] [ 137.790680][ T6177] ======================================================= [ 137.790680][ T6177] WARNING: The mand mount option has been deprecated and [ 137.790680][ T6177] and is ignored by this kernel. Remove the mand [ 137.790680][ T6177] option from the mount to silence this warning. [ 137.790680][ T6177] ======================================================= [ 137.795957][ T6175] SQUASHFS error: Unable to read inode 0x104 [ 137.890283][ T5786] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.110899][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.88'. [ 138.220462][ T6184] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 138.665126][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.683077][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.072785][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 141.085838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.495671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 141.921906][ T28] audit: type=1800 audit(1786365996.452:18): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="ipv4_address" dev="configfs" ino=7055 res=0 errno=0 [ 141.982424][ T28] audit: type=1800 audit(1786365996.452:19): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="num" dev="configfs" ino=7056 res=0 errno=0 [ 142.178727][ T6203] loop1: detected capacity change from 0 to 8 [ 142.220703][ T6199] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 142.281354][ T6203] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.335818][ T6203] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.365853][ T6203] SQUASHFS error: Unable to read metadata cache entry [99] [ 142.427672][ T6203] SQUASHFS error: Unable to read inode 0x104 [ 142.496566][ T6205] pim6reg: entered allmulticast mode [ 142.516172][ T6205] pim6reg: left allmulticast mode [ 144.742548][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 145.466052][ T6219] loop2: detected capacity change from 0 to 2048 [ 145.499314][ T6219] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 145.515726][ T6219] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 145.524670][ T6219] UDF-fs: Scanning with blocksize 512 failed [ 145.539553][ T6219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.109741][ T6234] loop1: detected capacity change from 0 to 8 [ 147.213535][ T6234] SQUASHFS error: zlib decompression failed, data probably corrupt [ 147.226581][ T6238] loop3: detected capacity change from 0 to 512 [ 147.253402][ T6238] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.281569][ T6234] SQUASHFS error: Failed to read block 0x9b: -5 [ 147.291536][ T6234] SQUASHFS error: Unable to read metadata cache entry [99] [ 147.299584][ T6234] SQUASHFS error: Unable to read inode 0x104 [ 147.318373][ T6238] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 147.342517][ T6238] EXT4-fs (loop3): Remounting filesystem read-only [ 147.355072][ T6238] EXT4-fs (loop3): 1 truncate cleaned up [ 147.362494][ T6238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.547534][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.879838][ T6249] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 148.062669][ T5836] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.088543][ T6254] pim6reg: entered allmulticast mode [ 148.532513][ T6259] pim6reg: left allmulticast mode [ 149.225292][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 149.385521][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.143975][ T5836] usb 4-1: config 0 descriptor?? [ 150.422074][ T5836] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 150.703196][ T6263] loop2: detected capacity change from 0 to 256 [ 151.331840][ T6268] loop0: detected capacity change from 0 to 2048 [ 151.364983][ T6268] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 151.377601][ T6268] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 151.386120][ T6268] UDF-fs: Scanning with blocksize 512 failed [ 151.403578][ T6268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.263319][ T5836] usb 4-1: USB disconnect, device number 2 [ 153.667471][ T6288] loop1: detected capacity change from 0 to 8 [ 153.716693][ T6288] SQUASHFS error: zlib decompression failed, data probably corrupt [ 153.745231][ T6288] SQUASHFS error: Failed to read block 0x9b: -5 [ 153.775992][ T6288] SQUASHFS error: Unable to read metadata cache entry [99] [ 153.817356][ T6288] SQUASHFS error: Unable to read inode 0x104 [ 154.018105][ T6297] 9pnet_fd: Insufficient options for proto=fd [ 156.040868][ T6312] 9pnet: Could not find request transport: fd0x0000000000000005 [ 158.335855][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.398028][ T6344] loop0: detected capacity change from 0 to 8 [ 158.447687][ T6344] SQUASHFS error: zlib decompression failed, data probably corrupt [ 158.512199][ T6344] SQUASHFS error: Failed to read block 0x9b: -5 [ 158.522309][ T6344] SQUASHFS error: Unable to read metadata cache entry [99] [ 158.533795][ T6344] SQUASHFS error: Unable to read inode 0x104 [ 158.549286][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 158.572771][ T23] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 158.597933][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.629042][ T23] usb 2-1: Product: syz [ 158.643794][ T23] usb 2-1: Manufacturer: syz [ 158.649119][ T23] usb 2-1: SerialNumber: syz [ 158.689603][ T23] usb 2-1: config 0 descriptor?? [ 158.715158][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 159.120623][ T23] gspca_se401: Wrong descriptor type [ 159.217626][ T6358] 9pnet: Could not find request transport: fd0x0000000000000005 [ 160.841185][ T6383] loop3: detected capacity change from 0 to 8 [ 160.894316][ T6383] SQUASHFS error: zlib decompression failed, data probably corrupt [ 160.911261][ T6383] SQUASHFS error: Failed to read block 0x9b: -5 [ 160.925940][ T6383] SQUASHFS error: Unable to read metadata cache entry [99] [ 160.943668][ T6383] SQUASHFS error: Unable to read inode 0x104 [ 161.115302][ T5759] usb 2-1: USB disconnect, device number 3 [ 161.195733][ T6373] loop0: detected capacity change from 0 to 32768 [ 161.227291][ T6373] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.142 (6373) [ 161.300743][ T6373] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.356392][ T6373] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 161.391433][ T6373] BTRFS info (device loop0): setting nodatacow, compression disabled [ 161.404500][ T6373] BTRFS info (device loop0): setting datasum, datacow enabled [ 161.420628][ T6373] BTRFS info (device loop0): force clearing of disk cache [ 161.429850][ T6373] BTRFS info (device loop0): enabling ssd optimizations [ 161.443972][ T6378] loop2: detected capacity change from 0 to 32768 [ 161.448508][ T6373] BTRFS info (device loop0): using spread ssd allocation scheme [ 161.469935][ T6373] BTRFS info (device loop0): turning on sync discard [ 161.477115][ T6373] BTRFS info (device loop0): turning on flush-on-commit [ 161.495168][ T6373] BTRFS info (device loop0): not using ssd optimizations [ 161.519397][ T6373] BTRFS info (device loop0): not using spread ssd allocation scheme [ 161.544379][ T6373] BTRFS info (device loop0): using free space tree [ 161.590151][ T6378] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 161.824535][ T6373] BTRFS info (device loop0): rebuilding free space tree [ 161.838824][ T6411] 9pnet: Could not find request transport: fd0x0000000000000005 [ 162.012382][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 162.517797][ T6424] loop1: detected capacity change from 0 to 8 [ 162.573621][ T6424] SQUASHFS error: zlib decompression failed, data probably corrupt [ 162.665877][ T6424] SQUASHFS error: Failed to read block 0x9b: -5 [ 162.672352][ T6424] SQUASHFS error: Unable to read metadata cache entry [99] [ 162.717574][ T6424] SQUASHFS error: Unable to read inode 0x104 [ 163.820338][ T5779] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.338822][ T6445] 9pnet_fd: Insufficient options for proto=fd [ 164.648058][ T6453] loop0: detected capacity change from 0 to 8 [ 164.706357][ T6453] SQUASHFS error: zlib decompression failed, data probably corrupt [ 164.728736][ T6453] SQUASHFS error: Failed to read block 0x9b: -5 [ 164.762229][ T6453] SQUASHFS error: Unable to read metadata cache entry [99] [ 164.780378][ T6453] SQUASHFS error: Unable to read inode 0x104 [ 166.833227][ T6471] 9pnet_fd: Insufficient options for proto=fd [ 166.942156][ T6473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.172'. [ 167.515608][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 169.655728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 171.388793][ T6512] 9pnet_fd: Insufficient options for proto=fd [ 174.879652][ T6560] tipc: Started in network mode [ 174.907951][ T6560] tipc: Node identity 72f9b3d65019, cluster identity 4711 [ 174.936654][ T6560] tipc: Enabled bearer , priority 0 [ 174.959810][ T6565] syzkaller0: entered promiscuous mode [ 174.965409][ T6565] syzkaller0: entered allmulticast mode [ 175.257118][ T6556] tipc: Resetting bearer [ 175.302340][ T6555] tipc: Resetting bearer [ 175.350282][ T6555] tipc: Disabling bearer [ 175.636059][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.967215][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.099920][ T5836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.244948][ T5836] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.385786][ T5836] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.468932][ T5836] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 176.485143][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.540080][ T5836] usb 4-1: Product: syz [ 176.544365][ T5836] usb 4-1: Manufacturer: syz [ 176.595088][ T5836] usb 4-1: SerialNumber: syz [ 177.405956][ T5836] usb 4-1: Limiting number of CPorts to U8_MAX [ 177.499584][ T5836] usb 4-1: Not enough endpoints found in device, aborting! [ 179.022652][ T5836] usb 4-1: USB disconnect, device number 3 [ 183.546187][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 183.576210][ T6333] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 183.776777][ T6333] usb 4-1: Using ep0 maxpacket: 8 [ 183.787447][ T6333] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 183.810263][ T6333] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.830381][ T6333] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.867035][ T6333] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.898728][ T6333] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.912286][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.937104][ T6333] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.946923][ T6333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.105916][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 184.133767][ T5819] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 184.151150][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.160492][ T5819] usb 3-1: Product: syz [ 184.164997][ T5819] usb 3-1: Manufacturer: syz [ 184.179409][ T5819] usb 3-1: SerialNumber: syz [ 184.179819][ T6333] usb 4-1: GET_CAPABILITIES returned 0 [ 184.195152][ T5819] usb 3-1: config 0 descriptor?? [ 184.204391][ T6333] usbtmc 4-1:16.0: can't read capabilities [ 184.215306][ T5819] gspca_main: se401-2.14.0 probing 047d:5003 [ 184.395844][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.430074][ T6333] usb 4-1: USB disconnect, device number 4 [ 184.599036][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 184.625726][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.659266][ T5836] usb 1-1: config 0 descriptor?? [ 184.660727][ T5819] gspca_se401: Wrong descriptor type [ 184.672393][ T5836] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 184.799562][ T23] libceph: connect (1)[c::]:6789 error -101 [ 184.818055][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 184.863361][ T23] libceph: connect (1)[c::]:6789 error -101 [ 184.887545][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 184.894228][ T6665] ceph: No mds server is up or the cluster is laggy [ 186.219632][ T5836] usb 1-1: USB disconnect, device number 2 [ 187.303659][ T23] usb 3-1: USB disconnect, device number 2 [ 187.606399][ T6703] loop1: detected capacity change from 0 to 256 [ 187.762674][ T6703] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 191.185901][ T5759] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 191.242735][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 191.376819][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 191.400155][ T5759] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 191.414131][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.428332][ T5759] usb 3-1: Product: syz [ 191.432739][ T5759] usb 3-1: Manufacturer: syz [ 191.438317][ T5759] usb 3-1: SerialNumber: syz [ 191.459203][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 191.483244][ T5759] usb 3-1: config 0 descriptor?? [ 191.495771][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.527799][ T5759] gspca_main: se401-2.14.0 probing 047d:5003 [ 191.552856][ T9] usb 2-1: config 0 descriptor?? [ 191.580858][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 191.964555][ T5759] gspca_se401: Wrong descriptor type [ 192.675747][ T6762] loop3: detected capacity change from 0 to 16 [ 193.444390][ T6762] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 194.187880][ T23] usb 3-1: USB disconnect, device number 3 [ 194.639423][ T9] usb 2-1: USB disconnect, device number 4 [ 195.146913][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 195.208838][ T28] audit: type=1800 audit(1786366049.732:20): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="ipv4_address" dev="configfs" ino=10837 res=0 errno=0 [ 195.299153][ T28] audit: type=1800 audit(1786366049.742:21): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="ipv4_port" dev="configfs" ino=10840 res=0 errno=0 [ 195.321015][ T28] audit: type=1800 audit(1786366049.772:22): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="local" dev="configfs" ino=10029 res=0 errno=0 [ 196.935877][ T6808] capability: warning: `syz.1.258' uses deprecated v2 capabilities in a way that may be insecure [ 197.081332][ T6811] loop1: detected capacity change from 0 to 512 [ 197.256875][ T6811] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 197.274825][ T6811] EXT4-fs (loop1): Remounting filesystem read-only [ 197.283172][ T6811] EXT4-fs (loop1): 1 truncate cleaned up [ 197.302337][ T6811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.813486][ T6811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.066408][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 198.285831][ T6333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.296432][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 198.334367][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 198.354074][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.369509][ T9] usb 3-1: Product: syz [ 198.375319][ T28] audit: type=1800 audit(1786366052.902:23): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.264" name="ipv4_address" dev="configfs" ino=10101 res=0 errno=0 [ 198.382008][ T9] usb 3-1: Manufacturer: syz [ 198.415865][ T9] usb 3-1: SerialNumber: syz [ 198.432292][ T28] audit: type=1800 audit(1786366052.902:24): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.264" name="ipv4_port" dev="configfs" ino=10102 res=0 errno=0 [ 198.464592][ T9] usb 3-1: config 0 descriptor?? [ 198.483802][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 198.501399][ T6333] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 198.516963][ T28] audit: type=1800 audit(1786366052.912:25): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.264" name="num" dev="configfs" ino=10103 res=0 errno=0 [ 198.526532][ T6333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.573647][ T6333] usb 4-1: config 0 descriptor?? [ 198.611252][ T6333] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 198.628755][ T28] audit: type=1800 audit(1786366052.932:26): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.264" name="local" dev="configfs" ino=10104 res=0 errno=0 [ 198.789517][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 198.935284][ T9] gspca_se401: Wrong descriptor type [ 200.036499][ T6333] usb 4-1: USB disconnect, device number 5 [ 200.059810][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.066496][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.079705][ T1297] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 200.089882][ T972] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 200.289403][ T972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.300012][ T972] usb 1-1: not running at top speed; connect to a high speed hub [ 200.311335][ T972] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 200.321094][ T972] usb 1-1: config 0 has no interface number 0 [ 200.331102][ T972] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 200.343311][ T972] usb 1-1: config 0 interface 88 has no altsetting 0 [ 200.361091][ T972] usb 1-1: language id specifier not provided by device, defaulting to English [ 200.384627][ T972] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 200.394475][ T972] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 200.403349][ T972] usb 1-1: Product: syz [ 200.410337][ T972] usb 1-1: SerialNumber: Љ [ 200.425946][ T972] usb 1-1: config 0 descriptor?? [ 200.433605][ T6848] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 200.680815][ T6848] vlan2: entered promiscuous mode [ 200.720649][ T6848] vlan2: entered allmulticast mode [ 200.744028][ T6848] hsr_slave_1: entered allmulticast mode [ 200.773918][ T6333] usb 3-1: USB disconnect, device number 4 [ 200.815993][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 200.837173][ T6848] hsr_slave_0: left promiscuous mode [ 201.161572][ T6856] tipc: Started in network mode [ 201.175734][ T6856] tipc: Node identity 2eabfd533828, cluster identity 4711 [ 201.187928][ T6856] tipc: Enabled bearer , priority 0 [ 201.203835][ T6856] syzkaller0: entered promiscuous mode [ 201.215753][ T6856] syzkaller0: entered allmulticast mode [ 201.247710][ T972] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 201.325979][ T972] usb 1-1: USB disconnect, device number 3 [ 201.326087][ C0] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 201.381140][ T6858] tipc: Resetting bearer [ 201.476184][ T6855] tipc: Resetting bearer [ 201.571288][ T6855] tipc: Disabling bearer [ 201.632187][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 201.915272][ T6870] overlayfs: missing 'lowerdir' [ 201.985501][ T6870] file system registered [ 202.127741][ T5788] ffs_data_put(): freeing [ 202.335850][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.415751][ T6333] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.435957][ T972] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.530364][ T23] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 202.544388][ T23] usb 4-1: config 1 has no interface number 0 [ 202.551130][ T23] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 202.569031][ T23] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 202.592744][ T23] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 202.609190][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.619502][ T23] usb 4-1: Product: syz [ 202.623116][ T6333] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 202.623831][ T23] usb 4-1: Manufacturer: syz [ 202.639365][ T972] usb 2-1: Using ep0 maxpacket: 8 [ 202.644875][ T6333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.658739][ T23] usb 4-1: SerialNumber: syz [ 202.668031][ T972] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 202.678212][ T6333] usb 1-1: config 0 descriptor?? [ 202.687163][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.695494][ T972] usb 2-1: Product: syz [ 202.704568][ T6333] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 202.711051][ T972] usb 2-1: Manufacturer: syz [ 202.720514][ T6873] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.733474][ T972] usb 2-1: SerialNumber: syz [ 202.749701][ T23] usb 4-1: Expected 3 endpoints, found: 1 [ 202.757288][ T972] usb 2-1: config 0 descriptor?? [ 202.774917][ T972] gspca_main: se401-2.14.0 probing 047d:5003 [ 202.964102][ T9] usb 4-1: USB disconnect, device number 6 [ 203.193216][ T972] gspca_se401: Wrong descriptor type [ 203.432061][ T6887] tipc: Enabled bearer , priority 0 [ 203.441857][ T6887] syzkaller0: entered promiscuous mode [ 203.448333][ T6887] syzkaller0: entered allmulticast mode [ 203.484939][ T6887] tipc: Resetting bearer [ 203.501990][ T6886] tipc: Resetting bearer [ 203.557830][ T6886] tipc: Disabling bearer [ 203.636899][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 203.999941][ T6895] loop2: detected capacity change from 0 to 16 [ 204.034379][ T6895] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 204.164191][ T6333] usb 1-1: USB disconnect, device number 4 [ 204.933771][ T6899] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 205.505952][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.792150][ T6903] pim6reg: entered allmulticast mode [ 206.524613][ T6903] pim6reg: left allmulticast mode [ 208.806361][ T23] usb 2-1: USB disconnect, device number 5 [ 209.399679][ T6918] tipc: Enabled bearer , priority 0 [ 209.421457][ T6918] syzkaller0: entered promiscuous mode [ 209.448604][ T6918] syzkaller0: entered allmulticast mode [ 209.559344][ T6918] tipc: Resetting bearer [ 209.629394][ T6917] tipc: Resetting bearer [ 209.730992][ T6917] tipc: Disabling bearer [ 210.505800][ T5759] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 210.695898][ T5759] usb 1-1: Using ep0 maxpacket: 8 [ 210.711639][ T5759] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 210.725149][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.737931][ T5759] usb 1-1: Product: syz [ 210.755745][ T5759] usb 1-1: Manufacturer: syz [ 210.763526][ T5759] usb 1-1: SerialNumber: syz [ 210.781338][ T5759] usb 1-1: config 0 descriptor?? [ 210.800759][ T5759] gspca_main: se401-2.14.0 probing 047d:5003 [ 211.183473][ T6940] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 211.291165][ T6947] 9pnet_fd: p9_fd_create_tcp (6947): problem connecting socket to 127.0.0.1 [ 212.198818][ T5759] gspca_se401: Wrong descriptor type [ 212.651510][ T6952] pim6reg: entered allmulticast mode [ 212.727095][ T6944] pim6reg: left allmulticast mode [ 213.404269][ T972] usb 1-1: USB disconnect, device number 6 [ 213.896095][ T5759] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.113226][ T5759] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 214.136624][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.159095][ T5759] usb 4-1: config 0 descriptor?? [ 214.179537][ T5759] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 214.590821][ T6957] loop0: detected capacity change from 0 to 32768 [ 214.663771][ T6957] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.987292][ T6957] XFS (loop0): Ending clean mount [ 215.015493][ T6957] XFS (loop0): Quotacheck needed: Please wait. [ 215.113345][ T6957] XFS (loop0): Quotacheck: Done. [ 215.203926][ T28] audit: type=1804 audit(1786366069.732:27): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.307" name="/newroot/61/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 215.266261][ T28] audit: type=1804 audit(1786366069.732:28): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.307" name="/newroot/61/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 215.346457][ T5779] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.642931][ T5759] usb 4-1: USB disconnect, device number 7 [ 215.952098][ T6984] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 216.515711][ T6985] pim6reg: entered allmulticast mode [ 216.536666][ T6985] pim6reg: left allmulticast mode [ 218.808309][ T6996] loop2: detected capacity change from 0 to 32768 [ 218.880284][ T6996] (syz.2.321,6996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.903602][ T6996] (syz.2.321,6996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.983659][ T6996] JBD2: Ignoring recovery information on journal [ 219.159697][ T6996] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 219.752332][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 220.599083][ T7030] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 220.852364][ T7040] pim6reg: entered allmulticast mode [ 221.254621][ T7046] pim6reg: left allmulticast mode [ 222.615761][ T7037] Bluetooth: hci0: command 0x0406 tx timeout [ 222.622031][ T7037] Bluetooth: hci2: command 0x0406 tx timeout [ 222.628466][ T7037] Bluetooth: hci1: command 0x0406 tx timeout [ 222.634619][ T7037] Bluetooth: hci3: command 0x0406 tx timeout [ 222.978561][ T7056] 9pnet_fd: p9_fd_create_tcp (7056): problem connecting socket to 127.0.0.1 [ 224.233764][ T7050] loop3: detected capacity change from 0 to 32768 [ 224.285846][ T974] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 224.330141][ T7050] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.485834][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 224.505022][ T974] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 224.516183][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.524495][ T974] usb 1-1: Product: syz [ 224.531522][ T974] usb 1-1: Manufacturer: syz [ 224.536283][ T974] usb 1-1: SerialNumber: syz [ 224.570567][ T974] usb 1-1: config 0 descriptor?? [ 224.602343][ T7050] XFS (loop3): Ending clean mount [ 224.608169][ T974] gspca_main: se401-2.14.0 probing 047d:5003 [ 224.659886][ T7050] XFS (loop3): Quotacheck needed: Please wait. [ 224.717280][ T7077] tipc: Started in network mode [ 224.722283][ T7077] tipc: Node identity be76abce083, cluster identity 4711 [ 224.767954][ T7050] XFS (loop3): Quotacheck: Done. [ 224.787419][ T7077] tipc: Enabled bearer , priority 0 [ 224.836597][ T7080] syzkaller0: entered promiscuous mode [ 224.842877][ T7080] syzkaller0: entered allmulticast mode [ 224.940894][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.947844][ T7077] tipc: Resetting bearer [ 224.968043][ T7076] tipc: Resetting bearer [ 225.003413][ T7076] tipc: Disabling bearer [ 225.026813][ T974] gspca_se401: Wrong descriptor type [ 225.413437][ T7087] 9pnet_fd: p9_fd_create_tcp (7087): problem connecting socket to 127.0.0.1 [ 226.615347][ T7097] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 226.778714][ T7100] pim6reg: entered allmulticast mode [ 227.208878][ T7103] pim6reg: left allmulticast mode [ 228.359411][ T5836] usb 1-1: USB disconnect, device number 7 [ 230.162051][ T7108] tipc: Enabled bearer , priority 0 [ 230.307213][ T7104] tipc: Disabling bearer [ 233.313484][ T28] audit: type=1800 audit(1786366087.842:29): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.359" name="ipv4_address" dev="configfs" ino=12685 res=0 errno=0 [ 233.405960][ T28] audit: type=1800 audit(1786366087.842:30): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.359" name="ipv4_port" dev="configfs" ino=12686 res=0 errno=0 [ 233.488087][ T28] audit: type=1800 audit(1786366087.872:31): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.359" name="num" dev="configfs" ino=12687 res=0 errno=0 [ 233.540156][ T28] audit: type=1800 audit(1786366087.902:32): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.359" name="local" dev="configfs" ino=12688 res=0 errno=0 [ 233.975752][ T5759] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 234.175805][ T5759] usb 4-1: Using ep0 maxpacket: 8 [ 234.191877][ T5759] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 234.208889][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.221462][ T5759] usb 4-1: Product: syz [ 234.241927][ T5759] usb 4-1: Manufacturer: syz [ 234.247800][ T7146] tipc: Enabled bearer , priority 0 [ 234.263306][ T7146] syzkaller0: entered promiscuous mode [ 234.270755][ T5759] usb 4-1: SerialNumber: syz [ 234.281179][ T7146] syzkaller0: entered allmulticast mode [ 234.290515][ T5759] usb 4-1: config 0 descriptor?? [ 234.313482][ T5759] gspca_main: se401-2.14.0 probing 047d:5003 [ 234.371225][ T7146] tipc: Resetting bearer [ 234.411763][ T7145] tipc: Resetting bearer [ 234.465207][ T7145] tipc: Disabling bearer [ 234.720443][ T5759] gspca_se401: Wrong descriptor type [ 234.885435][ T7150] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 235.059253][ T5759] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 235.079190][ T7152] pim6reg: entered allmulticast mode [ 235.544165][ T7153] pim6reg: left allmulticast mode [ 236.445414][ T5759] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 236.564698][ T5759] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 236.633316][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.266792][ T7148] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 237.280019][ T5759] opticon 1-1:1.0: opticon converter detected [ 237.289782][ T5759] usb 1-1: opticon converter now attached to ttyUSB0 [ 237.307490][ T8] usb 4-1: USB disconnect, device number 8 [ 237.438847][ T28] audit: type=1800 audit(1786366091.972:33): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.371" name="ipv4_address" dev="configfs" ino=12719 res=0 errno=0 [ 237.543411][ T28] audit: type=1800 audit(1786366091.972:34): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.371" name="ipv4_port" dev="configfs" ino=12720 res=0 errno=0 [ 237.603376][ T28] audit: type=1800 audit(1786366091.972:35): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.371" name="num" dev="configfs" ino=12721 res=0 errno=0 [ 237.678839][ T28] audit: type=1800 audit(1786366091.972:36): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.371" name="local" dev="configfs" ino=12722 res=0 errno=0 [ 237.725869][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 237.954809][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 237.985367][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.034136][ T8] usb 4-1: config 0 descriptor?? [ 238.087504][ T8] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 238.587357][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 238.598733][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 238.606389][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.616521][ T5778] Workqueue: hci2 hci_rx_work [ 238.621312][ T5778] Call Trace: [ 238.624664][ T5778] [ 238.627666][ T5778] dump_stack_lvl+0x18c/0x250 [ 238.632471][ T5778] ? show_regs_print_info+0x20/0x20 [ 238.637756][ T5778] ? load_image+0x420/0x420 [ 238.642419][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 238.647645][ T5778] ? __lock_acquire+0x7d80/0x7d80 [ 238.652778][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 238.657547][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 238.662920][ T5778] kobject_add_internal+0x617/0xc90 [ 238.668267][ T5778] kobject_add+0x164/0x240 [ 238.672774][ T5778] ? preempt_schedule_thunk+0x1a/0x30 [ 238.678239][ T5778] ? kobject_init+0x1d0/0x1d0 [ 238.683094][ T5778] ? get_device_parent+0x366/0x390 [ 238.688292][ T5778] device_add+0x3fa/0xc40 [ 238.692718][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 238.697753][ T5778] le_conn_complete_evt+0xe9f/0x1480 [ 238.703138][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 238.709550][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 238.715285][ T5778] ? mutex_unlock+0x10/0x10 [ 238.720060][ T5778] ? skb_pull_data+0xf0/0x1f0 [ 238.724970][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 238.730605][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 238.736760][ T5778] hci_event_packet+0x7b4/0x1280 [ 238.741793][ T5778] ? __lock_acquire+0x7d80/0x7d80 [ 238.747001][ T5778] ? lock_chain_count+0x20/0x20 [ 238.751967][ T5778] ? bis_list+0x290/0x290 [ 238.756388][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 238.761761][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 238.767034][ T5778] hci_rx_work+0x43a/0xd60 [ 238.771566][ T5778] ? process_scheduled_works+0x975/0x1600 [ 238.777399][ T5778] process_scheduled_works+0xa60/0x1600 [ 238.783069][ T5778] ? worker_attach_to_pool+0x370/0x370 [ 238.788626][ T5778] ? assign_work+0x3cc/0x5d0 [ 238.793399][ T5778] worker_thread+0xa5e/0xfe0 [ 238.798173][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 238.803112][ T5778] ? __kthread_parkme+0x71/0x1c0 [ 238.808144][ T5778] kthread+0x2fa/0x390 [ 238.812292][ T5778] ? pr_cont_work+0x550/0x550 [ 238.817086][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 238.821835][ T5778] ret_from_fork+0x48/0x80 [ 238.826332][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 238.831012][ T5778] ret_from_fork_asm+0x11/0x20 [ 238.835954][ T5778] [ 238.929578][ T5778] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.944760][ T5778] Bluetooth: hci2: failed to register connection device [ 239.815639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 239.938596][ T8] usb 4-1: USB disconnect, device number 9 [ 240.456520][ T5819] usb 1-1: USB disconnect, device number 8 [ 240.610251][ T5819] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 240.640334][ T5819] opticon 1-1:1.0: device disconnected [ 240.660171][ T7172] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.376'. [ 240.899902][ T28] audit: type=1800 audit(1786366095.432:37): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="ipv4_address" dev="configfs" ino=12767 res=0 errno=0 [ 240.945112][ T7182] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 241.007083][ T28] audit: type=1800 audit(1786366095.472:38): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="ipv4_port" dev="configfs" ino=11667 res=0 errno=0 [ 241.032583][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 241.178621][ T28] audit: type=1800 audit(1786366095.492:39): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="num" dev="configfs" ino=11668 res=0 errno=0 [ 241.277457][ T7184] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 241.309356][ T28] audit: type=1800 audit(1786366095.542:40): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="local" dev="configfs" ino=12768 res=0 errno=0 [ 241.512705][ T7186] pim6reg: entered allmulticast mode [ 241.890587][ T7186] pim6reg: left allmulticast mode [ 243.387595][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 244.691857][ T7206] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.387'. [ 244.754262][ T28] audit: type=1800 audit(1786366099.282:41): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.390" name="ipv4_address" dev="configfs" ino=11712 res=0 errno=0 [ 244.855353][ T28] audit: type=1800 audit(1786366099.312:42): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.390" name="ipv4_port" dev="configfs" ino=11713 res=0 errno=0 [ 244.975816][ T28] audit: type=1800 audit(1786366099.312:43): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.390" name="num" dev="configfs" ino=11714 res=0 errno=0 [ 245.006155][ T7214] netlink: 72 bytes leftover after parsing attributes in process `syz.2.392'. [ 245.018786][ T28] audit: type=1800 audit(1786366099.312:44): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.390" name="local" dev="configfs" ino=11715 res=0 errno=0 [ 245.165192][ T7217] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 245.515828][ T5819] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 245.876888][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 245.894273][ T5819] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 245.916247][ T5819] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 245.936311][ T5819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.963746][ T5819] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 245.981914][ T5819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 245.994726][ T5819] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.008718][ T5819] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.018831][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.273957][ T5819] usb 3-1: GET_CAPABILITIES returned 0 [ 246.311125][ T5819] usbtmc 3-1:16.0: can't read capabilities [ 246.409099][ T7233] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 246.496318][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 246.646174][ T7220] usbtmc 3-1:16.0: Unable to send data, error -71 [ 246.684268][ T7238] pim6reg: entered allmulticast mode [ 246.857423][ T5819] usb 3-1: USB disconnect, device number 5 [ 247.055990][ T7240] pim6reg: left allmulticast mode [ 249.290050][ T7252] netlink: 72 bytes leftover after parsing attributes in process `syz.1.401'. [ 249.390338][ T7255] jffs2: notice: (7255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.509724][ T7256] loop3: detected capacity change from 0 to 16 [ 249.534944][ T7256] erofs: (device loop3): mounted with root inode @ nid 36. [ 249.824209][ T7260] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 250.382572][ T7264] loop3: detected capacity change from 0 to 128 [ 250.585978][ T7268] 9pnet_fd: p9_fd_create_tcp (7268): problem connecting socket to 127.0.0.1 [ 253.725650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 256.017575][ T7286] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 256.249531][ T7293] pim6reg: entered allmulticast mode [ 256.319093][ T7296] pim6reg: left allmulticast mode [ 258.490641][ T7302] loop1: detected capacity change from 0 to 512 [ 258.549850][ T7298] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 258.653294][ T7302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.750903][ T7302] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.717967][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.744165][ T5819] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 259.925702][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 259.925728][ T974] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 259.949788][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.972228][ T5819] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 259.991712][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.021378][ T5819] usb 3-1: config 0 descriptor?? [ 260.922658][ T5819] logitech-djreceiver 0003:046D:C513.0001: unknown main item tag 0x1 [ 260.958115][ T5819] logitech-djreceiver 0003:046D:C513.0001: collection stack underflow [ 260.987753][ T5819] logitech-djreceiver 0003:046D:C513.0001: item 0 2 0 12 parsing failed [ 261.017604][ T5819] logitech-djreceiver 0003:046D:C513.0001: logi_dj_probe: parse failed [ 261.048073][ T5819] logitech-djreceiver: probe of 0003:046D:C513.0001 failed with error -22 [ 261.168875][ T5836] usb 3-1: USB disconnect, device number 6 [ 261.205258][ T974] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 261.225826][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.246993][ T974] usb 1-1: config 0 descriptor?? [ 261.277286][ T974] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 261.500905][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.507455][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.518365][ T1297] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 261.541455][ T7333] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 262.167411][ T7340] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 262.391537][ T7346] pim6reg: entered allmulticast mode [ 262.753496][ T7351] pim6reg: left allmulticast mode [ 263.343211][ T7350] block nbd3: shutting down sockets [ 263.468456][ T974] usb 1-1: USB disconnect, device number 9 [ 264.409378][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 267.944291][ T7382] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 268.213464][ T28] audit: type=1804 audit(1786366122.742:45): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.439" name="/newroot/112/bus/file2" dev="overlay" ino=606 res=1 errno=0 [ 268.315848][ T6333] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 268.518788][ T6333] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 268.538375][ T6333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.560952][ T7388] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 268.570780][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 268.579455][ T6333] usb 4-1: config 0 descriptor?? [ 268.612964][ T6333] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 269.195718][ T7391] pim6reg: entered allmulticast mode [ 269.214886][ T7391] pim6reg: left allmulticast mode [ 271.780641][ T6333] usb 4-1: USB disconnect, device number 10 [ 273.480171][ T7419] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 276.225913][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 277.423605][ T7430] loop2: detected capacity change from 0 to 16 [ 277.485062][ T7430] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 278.319813][ T5786] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.341377][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 278.406105][ T5778] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 279.136681][ T7450] loop2: detected capacity change from 0 to 1024 [ 279.277235][ T7450] EXT4-fs: Ignoring removed orlov option [ 279.682403][ T7450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.927146][ T7450] jffs2: notice: (7450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.065713][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 280.288134][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 280.310298][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.360609][ T23] usb 4-1: config 0 descriptor?? [ 280.377158][ T23] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 280.474799][ T7450] syz.2.460 (7450): drop_caches: 2 [ 280.549706][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.565855][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.577945][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.591905][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.603967][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.617426][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.630569][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.643689][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.662749][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 280.674667][ T5788] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 281.130323][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.347825][ T7465] loop1: detected capacity change from 0 to 16 [ 281.360081][ T7465] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 281.382250][ T7467] netlink: 72 bytes leftover after parsing attributes in process `syz.0.465'. [ 281.415249][ T6318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.674852][ T6318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.724937][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 281.822181][ T6318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.166024][ T23] usb 4-1: USB disconnect, device number 11 [ 282.223485][ T6318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.539750][ T5778] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 282.549609][ T5778] Bluetooth: hci1: Injecting HCI hardware error event [ 282.562535][ T5086] Bluetooth: hci1: hardware error 0x00 [ 284.463088][ T6318] tipc: Left network mode [ 284.862271][ T5086] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 285.403141][ T7494] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 286.091116][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 286.149742][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.169275][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.178483][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.190068][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.198372][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.228972][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.415607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 288.295990][ T5086] Bluetooth: hci3: command tx timeout [ 289.811326][ T7540] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 290.375902][ T5086] Bluetooth: hci3: command tx timeout [ 290.923892][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 291.496625][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 291.766885][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 291.830926][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.909774][ T9] usb 4-1: config 0 has no interface number 0 [ 292.006965][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 292.133235][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.222756][ T9] usb 4-1: Product: syz [ 292.263741][ T9] usb 4-1: Manufacturer: syz [ 292.301796][ T9] usb 4-1: SerialNumber: syz [ 292.414502][ T9] usb 4-1: config 0 descriptor?? [ 292.456368][ T5086] Bluetooth: hci3: command tx timeout [ 292.597162][ T9] usb 4-1: selecting invalid altsetting 2 [ 292.652291][ T9] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 294.167813][ T27] usb 4-1: USB disconnect, device number 12 [ 294.537437][ T5086] Bluetooth: hci3: command tx timeout [ 295.780229][ T7576] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 297.096036][ T6318] hsr_slave_0: left promiscuous mode [ 297.150270][ T6318] hsr_slave_1: left promiscuous mode [ 297.262489][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.364217][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.568533][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.671596][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.940399][ T6318] bridge_slave_1: left allmulticast mode [ 297.946374][ T6318] bridge_slave_1: left promiscuous mode [ 297.955032][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.987806][ T6318] bridge_slave_0: left allmulticast mode [ 297.993583][ T6318] bridge_slave_0: left promiscuous mode [ 298.024806][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.214401][ T6318] veth1_macvtap: left promiscuous mode [ 298.239559][ T6318] veth0_macvtap: left promiscuous mode [ 298.246642][ T6318] veth1_vlan: left promiscuous mode [ 298.252667][ T6318] veth0_vlan: left promiscuous mode [ 298.405722][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.604809][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 298.613627][ T23] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 298.630592][ T23] usb 4-1: config 2 has no interface number 0 [ 298.650196][ T23] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 298.660509][ T23] usb 4-1: config 2 interface 88 has no altsetting 0 [ 298.684693][ T23] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 298.694226][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 298.702490][ T23] usb 4-1: Product: syz [ 298.706816][ T23] usb 4-1: Manufacturer: syz [ 298.711492][ T23] usb 4-1: SerialNumber: syz [ 298.734187][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.974076][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.544866][ T6318] team0 (unregistering): Port device team_slave_1 removed [ 299.629965][ T6318] team0 (unregistering): Port device team_slave_0 removed [ 299.711079][ T6318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.796237][ T6318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.028394][ T23] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 300.052507][ T23] asix: probe of 4-1:2.88 failed with error -71 [ 300.073290][ T23] usb 4-1: USB disconnect, device number 13 [ 300.358137][ T6318] bond0 (unregistering): Released all slaves [ 300.501893][ T7506] chnl_net:caif_netlink_parms(): no params data found [ 300.518011][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 301.765417][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.392633][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.415385][ T7610] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 302.596705][ T7506] bridge_slave_0: entered allmulticast mode [ 302.643402][ T7506] bridge_slave_0: entered promiscuous mode [ 302.701659][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.742465][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.763523][ T7506] bridge_slave_1: entered allmulticast mode [ 302.802348][ T7506] bridge_slave_1: entered promiscuous mode [ 303.820134][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.878009][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.062426][ T7506] team0: Port device team_slave_0 added [ 306.501033][ T7506] team0: Port device team_slave_1 added [ 306.618660][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 306.724728][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.756615][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.834496][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.875201][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.925833][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.975901][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.205425][ T7506] hsr_slave_0: entered promiscuous mode [ 307.266531][ T7506] hsr_slave_1: entered promiscuous mode [ 307.322030][ T7506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.365840][ T7506] Cannot create hsr debugfs directory [ 307.834710][ T7651] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 310.455986][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 310.701362][ T7506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.752793][ T7506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.788337][ T7506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.877317][ T7506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.761997][ T7695] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 312.666678][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.780676][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.839505][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.846855][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.877646][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.884902][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.056275][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 313.265756][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 313.960418][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 313.968298][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 313.977874][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.989679][ T27] usb 1-1: config 0 descriptor?? [ 314.232492][ T7713] loop1: detected capacity change from 0 to 136 [ 314.378830][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 314.442633][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 314.474391][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 314.536061][ T27] usb 1-1: USB disconnect, device number 10 [ 314.552175][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.960375][ T7737] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 315.974886][ T28] audit: type=1800 audit(1786366170.482:46): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.529" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 315.997685][ T7737] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 316.008627][ T7737] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 316.165492][ T7740] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 316.813717][ T7506] veth0_vlan: entered promiscuous mode [ 316.890783][ T7506] veth1_vlan: entered promiscuous mode [ 317.050852][ T7506] veth0_macvtap: entered promiscuous mode [ 317.168900][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 317.349638][ T7506] veth1_macvtap: entered promiscuous mode [ 317.924818][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.936687][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.946959][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.957699][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.968130][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.979342][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.996434][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.008545][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.019458][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.029475][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.062381][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.125691][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.185629][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.242567][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.302343][ T7506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.322558][ T7506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.351529][ T7506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.361124][ T7506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.662909][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.692246][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.901834][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.940593][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.144074][ T7785] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 323.672453][ T7820] sched: RT throttling activated [ 323.689786][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.888710][ T7821] 9pnet_fd: p9_fd_create_tcp (7821): problem connecting socket to 127.0.0.1 [ 324.144841][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.737474][ T7830] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 325.988499][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 327.578043][ T7861] 9pnet_fd: p9_fd_create_tcp (7861): problem connecting socket to 127.0.0.1 [ 328.998744][ T7879] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 331.076600][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 331.776760][ T7901] syz.0.568 uses obsolete (PF_INET,SOCK_PACKET) [ 332.011706][ T7912] 9pnet_fd: p9_fd_create_tcp (7912): problem connecting socket to 127.0.0.1 [ 336.014576][ T7930] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 336.900096][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 338.152599][ T7957] 9pnet_fd: p9_fd_create_tcp (7957): problem connecting socket to 127.0.0.1 [ 339.276001][ T7968] overlayfs: overlapping lowerdir path [ 340.517770][ T7977] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 344.426253][ T8001] 9pnet_fd: p9_fd_create_tcp (8001): problem connecting socket to 127.0.0.1 [ 346.166366][ T5843] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 346.489199][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 346.623783][ T5843] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.730407][ T5843] usb 2-1: config 0 has no interface number 0 [ 346.841988][ T5843] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 346.957880][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.074802][ T5843] usb 2-1: Product: syz [ 347.148147][ T5843] usb 2-1: Manufacturer: syz [ 347.224252][ T5843] usb 2-1: SerialNumber: syz [ 347.427405][ T5843] usb 2-1: config 0 descriptor?? [ 347.714518][ T5843] usb 2-1: selecting invalid altsetting 2 [ 347.821426][ T5843] i2c-cp2615: probe of 2-1:0.1 failed with error -22 [ 349.011191][ T8029] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 349.584128][ T5843] usb 2-1: USB disconnect, device number 7 [ 351.079264][ T8045] 9pnet_fd: p9_fd_create_tcp (8045): problem connecting socket to 127.0.0.1 [ 353.467874][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 353.483340][ T5086] CPU: 1 PID: 5086 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 353.491044][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.501181][ T5086] Workqueue: hci0 hci_rx_work [ 353.506165][ T5086] Call Trace: [ 353.509593][ T5086] [ 353.512784][ T5086] dump_stack_lvl+0x18c/0x250 [ 353.517703][ T5086] ? show_regs_print_info+0x20/0x20 [ 353.523077][ T5086] ? load_image+0x420/0x420 [ 353.527858][ T5086] sysfs_create_dir_ns+0x26e/0x2a0 [ 353.533194][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 353.538374][ T5086] ? sysfs_warn_dup+0xa0/0xa0 [ 353.543159][ T5086] ? do_raw_spin_unlock+0x121/0x230 [ 353.548489][ T5086] kobject_add_internal+0x617/0xc90 [ 353.553859][ T5086] kobject_add+0x164/0x240 [ 353.558396][ T5086] ? kobject_init+0x1d0/0x1d0 [ 353.563184][ T5086] ? get_device_parent+0x366/0x390 [ 353.568435][ T5086] device_add+0x3fa/0xc40 [ 353.572848][ T5086] hci_conn_add_sysfs+0xd5/0x1e0 [ 353.577965][ T5086] le_conn_complete_evt+0xe9f/0x1480 [ 353.583398][ T5086] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 353.589698][ T5086] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 353.595594][ T5086] ? mutex_unlock+0x10/0x10 [ 353.600158][ T5086] ? skb_pull_data+0xf0/0x1f0 [ 353.605003][ T5086] hci_le_conn_complete_evt+0x187/0x440 [ 353.610599][ T5086] ? hci_remote_host_features_evt+0x150/0x150 [ 353.616730][ T5086] hci_event_packet+0x7b4/0x1280 [ 353.621706][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 353.626761][ T5086] ? lock_chain_count+0x20/0x20 [ 353.631734][ T5086] ? bis_list+0x290/0x290 [ 353.636119][ T5086] ? lockdep_hardirqs_on+0x98/0x150 [ 353.641483][ T5086] ? hci_send_to_monitor+0xd7/0x4f0 [ 353.646721][ T5086] hci_rx_work+0x43a/0xd60 [ 353.651273][ T5086] ? process_scheduled_works+0x975/0x1600 [ 353.657085][ T5086] process_scheduled_works+0xa60/0x1600 [ 353.662728][ T5086] ? worker_attach_to_pool+0x370/0x370 [ 353.668267][ T5086] ? assign_work+0x3cc/0x5d0 [ 353.672935][ T5086] worker_thread+0xa5e/0xfe0 [ 353.677578][ T5086] ? _raw_spin_unlock+0x40/0x40 [ 353.682503][ T5086] ? __kthread_parkme+0x71/0x1c0 [ 353.687482][ T5086] kthread+0x2fa/0x390 [ 353.691587][ T5086] ? pr_cont_work+0x550/0x550 [ 353.696295][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 353.700915][ T5086] ret_from_fork+0x48/0x80 [ 353.705404][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 353.710031][ T5086] ret_from_fork_asm+0x11/0x20 [ 353.714908][ T5086] [ 353.722369][ T5086] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 353.736924][ T5086] Bluetooth: hci0: failed to register connection device [ 355.815911][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 357.461820][ T8088] 9pnet_fd: p9_fd_create_tcp (8088): problem connecting socket to 127.0.0.1 [ 359.933797][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 359.947300][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 359.954962][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.965099][ T5778] Workqueue: hci2 hci_rx_work [ 359.969864][ T5778] Call Trace: [ 359.973202][ T5778] [ 359.976196][ T5778] dump_stack_lvl+0x18c/0x250 [ 359.980973][ T5778] ? show_regs_print_info+0x20/0x20 [ 359.986261][ T5778] ? load_image+0x420/0x420 [ 359.990886][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 359.996080][ T5778] ? __lock_acquire+0x7d80/0x7d80 [ 360.001191][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 360.005978][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 360.011288][ T5778] kobject_add_internal+0x617/0xc90 [ 360.016865][ T5778] kobject_add+0x164/0x240 [ 360.021479][ T5778] ? preempt_schedule_thunk+0x1a/0x30 [ 360.026935][ T5778] ? kobject_init+0x1d0/0x1d0 [ 360.031662][ T5778] ? get_device_parent+0x366/0x390 [ 360.036823][ T5778] device_add+0x3fa/0xc40 [ 360.041514][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 360.046515][ T5778] le_conn_complete_evt+0xe9f/0x1480 [ 360.051975][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 360.058394][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 360.064149][ T5778] ? mutex_unlock+0x10/0x10 [ 360.068761][ T5778] ? skb_pull_data+0xf0/0x1f0 [ 360.073535][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 360.079313][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 360.085462][ T5778] hci_event_packet+0x7b4/0x1280 [ 360.090514][ T5778] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 360.096325][ T5778] ? bis_list+0x290/0x290 [ 360.100698][ T5778] ? kcov_remote_start+0x1b5/0x7e0 [ 360.105904][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 360.111192][ T5778] hci_rx_work+0x43a/0xd60 [ 360.115712][ T5778] ? process_scheduled_works+0x975/0x1600 [ 360.121517][ T5778] process_scheduled_works+0xa60/0x1600 [ 360.127307][ T5778] ? worker_attach_to_pool+0x370/0x370 [ 360.132842][ T5778] ? assign_work+0x3cc/0x5d0 [ 360.137502][ T5778] worker_thread+0xa5e/0xfe0 [ 360.142626][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 360.147557][ T5778] ? __kthread_parkme+0x71/0x1c0 [ 360.152562][ T5778] kthread+0x2fa/0x390 [ 360.156859][ T5778] ? pr_cont_work+0x550/0x550 [ 360.161599][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 360.166255][ T5778] ret_from_fork+0x48/0x80 [ 360.170731][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 360.175419][ T5778] ret_from_fork_asm+0x11/0x20 [ 360.180259][ T5778] [ 360.205846][ T5778] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 360.225603][ T5778] Bluetooth: hci2: failed to register connection device [ 360.407939][ T28] audit: type=1326 audit(1786366214.882:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.620" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ab3d9e0d9 code=0x0 [ 361.197713][ T8124] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 362.297038][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 362.398660][ T8141] 9pnet_fd: p9_fd_create_tcp (8141): problem connecting socket to 127.0.0.1 [ 366.407464][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 366.417142][ T5086] CPU: 1 PID: 5086 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 366.424882][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.435115][ T5086] Workqueue: hci2 hci_rx_work [ 366.439887][ T5086] Call Trace: [ 366.443244][ T5086] [ 366.446281][ T5086] dump_stack_lvl+0x18c/0x250 [ 366.451051][ T5086] ? show_regs_print_info+0x20/0x20 [ 366.456326][ T5086] ? load_image+0x420/0x420 [ 366.460976][ T5086] sysfs_create_dir_ns+0x26e/0x2a0 [ 366.466169][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 366.471364][ T5086] ? sysfs_warn_dup+0xa0/0xa0 [ 366.476212][ T5086] ? do_raw_spin_unlock+0x121/0x230 [ 366.481512][ T5086] kobject_add_internal+0x617/0xc90 [ 366.486818][ T5086] kobject_add+0x164/0x240 [ 366.491337][ T5086] ? kobject_init+0x1d0/0x1d0 [ 366.496141][ T5086] ? get_device_parent+0x366/0x390 [ 366.501347][ T5086] device_add+0x3fa/0xc40 [ 366.505862][ T5086] hci_conn_add_sysfs+0xd5/0x1e0 [ 366.511033][ T5086] le_conn_complete_evt+0xe9f/0x1480 [ 366.516545][ T5086] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 366.522893][ T5086] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 366.528614][ T5086] ? mutex_unlock+0x10/0x10 [ 366.533527][ T5086] ? skb_pull_data+0xf0/0x1f0 [ 366.538572][ T5086] hci_le_conn_complete_evt+0x187/0x440 [ 366.544275][ T5086] ? hci_remote_host_features_evt+0x150/0x150 [ 366.550437][ T5086] hci_event_packet+0x7b4/0x1280 [ 366.555538][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 366.560645][ T5086] ? lock_chain_count+0x20/0x20 [ 366.565580][ T5086] ? bis_list+0x290/0x290 [ 366.570187][ T5086] ? lockdep_hardirqs_on+0x98/0x150 [ 366.575474][ T5086] ? hci_send_to_monitor+0xd7/0x4f0 [ 366.580748][ T5086] hci_rx_work+0x43a/0xd60 [ 366.585401][ T5086] ? process_scheduled_works+0x975/0x1600 [ 366.591185][ T5086] process_scheduled_works+0xa60/0x1600 [ 366.596827][ T5086] ? worker_attach_to_pool+0x370/0x370 [ 366.602787][ T5086] ? assign_work+0x3cc/0x5d0 [ 366.607463][ T5086] worker_thread+0xa5e/0xfe0 [ 366.612155][ T5086] ? _raw_spin_unlock+0x40/0x40 [ 366.617078][ T5086] ? __kthread_parkme+0x71/0x1c0 [ 366.622108][ T5086] kthread+0x2fa/0x390 [ 366.626262][ T5086] ? pr_cont_work+0x550/0x550 [ 366.631010][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 366.635663][ T5086] ret_from_fork+0x48/0x80 [ 366.640164][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 366.644820][ T5086] ret_from_fork_asm+0x11/0x20 [ 366.649669][ T5086] [ 366.656389][ T5086] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 366.671885][ T5086] Bluetooth: hci2: failed to register connection device [ 366.843362][ T8174] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 367.949600][ T8183] loop3: detected capacity change from 0 to 512 [ 368.077721][ T8187] 9pnet_fd: p9_fd_create_tcp (8187): problem connecting socket to 127.0.0.1 [ 368.695865][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 369.584260][ T8183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.605953][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 369.772413][ T8183] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.895770][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 369.983713][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.119621][ T8] usb 1-1: config 0 has no interface number 0 [ 370.247081][ T8] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 370.412633][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.558403][ T8] usb 1-1: Product: syz [ 370.642398][ T8] usb 1-1: Manufacturer: syz [ 370.733581][ T8] usb 1-1: SerialNumber: syz [ 371.706960][ T8] usb 1-1: config 0 descriptor?? [ 371.856474][ T8] usb 1-1: can't set config #0, error -71 [ 372.336845][ T8] usb 1-1: USB disconnect, device number 11 [ 374.014963][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 374.025107][ T5778] CPU: 1 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 374.032721][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.042817][ T5778] Workqueue: hci3 hci_rx_work [ 374.047561][ T5778] Call Trace: [ 374.050895][ T5778] [ 374.053884][ T5778] dump_stack_lvl+0x18c/0x250 [ 374.058607][ T5778] ? show_regs_print_info+0x20/0x20 [ 374.063853][ T5778] ? load_image+0x420/0x420 [ 374.068421][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 374.073584][ T5778] ? __lock_acquire+0x7d80/0x7d80 [ 374.078687][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 374.083471][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 374.088734][ T5778] kobject_add_internal+0x617/0xc90 [ 374.094001][ T5778] kobject_add+0x164/0x240 [ 374.098510][ T5778] ? preempt_schedule_thunk+0x1a/0x30 [ 374.103981][ T5778] ? kobject_init+0x1d0/0x1d0 [ 374.108736][ T5778] ? get_device_parent+0x366/0x390 [ 374.113904][ T5778] device_add+0x3fa/0xc40 [ 374.118276][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 374.123260][ T5778] le_conn_complete_evt+0xe9f/0x1480 [ 374.128597][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 374.134892][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 374.140592][ T5778] ? mutex_unlock+0x10/0x10 [ 374.145240][ T5778] ? skb_pull_data+0xf0/0x1f0 [ 374.150147][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 374.155773][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 374.161996][ T5778] hci_event_packet+0x7b4/0x1280 [ 374.167000][ T5778] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 374.172715][ T5778] ? bis_list+0x290/0x290 [ 374.177203][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 374.182553][ T5778] hci_rx_work+0x43a/0xd60 [ 374.187038][ T5778] ? process_scheduled_works+0x975/0x1600 [ 374.192898][ T5778] process_scheduled_works+0xa60/0x1600 [ 374.198531][ T5778] ? worker_attach_to_pool+0x370/0x370 [ 374.204628][ T5778] ? assign_work+0x3cc/0x5d0 [ 374.209316][ T5778] worker_thread+0xa5e/0xfe0 [ 374.214000][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 374.218943][ T5778] ? __kthread_parkme+0x71/0x1c0 [ 374.224124][ T5778] kthread+0x2fa/0x390 [ 374.228247][ T5778] ? pr_cont_work+0x550/0x550 [ 374.233055][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 374.237751][ T5778] ret_from_fork+0x48/0x80 [ 374.242253][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 374.246886][ T5778] ret_from_fork_asm+0x11/0x20 [ 374.251734][ T5778] [ 374.261545][ T5778] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 374.276581][ T5778] Bluetooth: hci3: failed to register connection device [ 374.924969][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.560464][ T5778] Bluetooth: hci3: command tx timeout [ 377.035498][ T8239] 9pnet_fd: p9_fd_create_tcp (8239): problem connecting socket to 127.0.0.1 [ 377.639034][ T8240] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 379.125653][ T55] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 379.345742][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 379.355640][ T55] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.365490][ T55] usb 2-1: config 0 has no interface number 0 [ 379.381955][ T55] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 379.391367][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.399727][ T55] usb 2-1: Product: syz [ 379.404037][ T55] usb 2-1: Manufacturer: syz [ 379.455430][ T55] usb 2-1: SerialNumber: syz [ 379.819835][ T55] usb 2-1: config 0 descriptor?? [ 379.837591][ T55] usb 2-1: selecting invalid altsetting 2 [ 379.900249][ T55] i2c-cp2615: probe of 2-1:0.1 failed with error -22 [ 380.745823][ T55] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 380.971759][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 381.005316][ T55] usb 1-1: config 0 interface 0 has no altsetting 0 [ 381.013726][ T55] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 381.023870][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.041957][ T55] usb 1-1: config 0 descriptor?? [ 381.159102][ T8] usb 2-1: USB disconnect, device number 8 [ 381.261892][ T8261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.651'. [ 381.563584][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 381.692517][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 381.702110][ T55] usbhid: probe of 1-1:0.0 failed with error -71 [ 381.734223][ T55] usb 1-1: USB disconnect, device number 12 [ 381.734392][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 381.889554][ T8272] loop4: detected capacity change from 0 to 512 [ 381.915150][ T8272] EXT4-fs (loop4): Test dummy encryption mode enabled [ 381.981676][ T8272] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.654: corrupted in-inode xattr: invalid ea_ino [ 382.005785][ T8272] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.654: couldn't read orphan inode 15 (err -117) [ 382.027617][ T8272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.579580][ T8291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'. [ 382.693043][ T8293] 9pnet_fd: p9_fd_create_tcp (8293): problem connecting socket to 127.0.0.1 [ 384.417634][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.424375][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.771386][ T7506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.410436][ T8310] netlink: 72 bytes leftover after parsing attributes in process `syz.1.661'. [ 386.249869][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 387.077414][ T974] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 388.625728][ T28] audit: type=1326 audit(1786366243.112:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.1.667" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe00199e0d9 code=0x0 [ 388.685594][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 389.076408][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 390.153872][ T974] usb 4-1: device descriptor read/all, error -71 [ 391.456850][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 392.018851][ T8343] 9pnet_fd: p9_fd_create_tcp (8343): problem connecting socket to 127.0.0.1 [ 392.129738][ T8345] Bluetooth: MGMT ver 1.22 [ 393.324180][ T27] usb 2-1: device descriptor read/all, error -71 [ 393.439584][ T8351] netlink: 72 bytes leftover after parsing attributes in process `syz.0.672'. [ 393.560460][ T28] audit: type=1800 audit(1786366248.092:49): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.671" name="size" dev="configfs" ino=15744 res=0 errno=0 [ 393.689426][ T28] audit: type=1800 audit(1786366248.112:50): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.671" name="zoned" dev="configfs" ino=15745 res=0 errno=0 [ 393.765757][ T28] audit: type=1800 audit(1786366248.122:51): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.671" name="zone_size" dev="configfs" ino=15747 res=0 errno=0 [ 393.808093][ T28] audit: type=1800 audit(1786366248.132:52): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.671" name="power" dev="configfs" ino=15748 res=0 errno=0 [ 393.832027][ T8361] overlayfs: failed to resolve './file0': -2 [ 393.941344][ T8353] null_blk: disk nullb1 created [ 394.033498][ T8365] loop0: detected capacity change from 0 to 512 [ 394.167670][ T8365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.250172][ T8365] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.606245][ T6164] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 398.435784][ T6164] usb 4-1: Using ep0 maxpacket: 8 [ 398.464492][ T6164] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.494611][ T6164] usb 4-1: config 0 has no interface number 0 [ 398.694357][ T8393] 9pnet_fd: p9_fd_create_tcp (8393): problem connecting socket to 127.0.0.1 [ 399.727815][ T6164] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 399.785627][ T6164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.827305][ T6164] usb 4-1: config 0 descriptor?? [ 399.852845][ T6164] usb 4-1: can't set config #0, error -71 [ 399.906859][ T6164] usb 4-1: USB disconnect, device number 16 [ 401.422630][ T8405] overlayfs: failed to resolve './file0': -2 [ 404.026378][ T8427] binder: 8425:8427 ioctl c0306201 0 returned -14 [ 404.585174][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.062418][ T8441] 9pnet_fd: p9_fd_create_tcp (8441): problem connecting socket to 127.0.0.1 [ 409.916879][ T974] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 411.109747][ T8455] overlayfs: overlapping lowerdir path [ 411.316909][ T8458] loop3: detected capacity change from 0 to 512 [ 411.454668][ T8458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.709258][ T8458] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.743168][ T8468] loop0: detected capacity change from 0 to 2048 [ 412.517576][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 412.586655][ T8468] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 412.603100][ T8468] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 412.611117][ T8468] UDF-fs: Scanning with blocksize 512 failed [ 412.682168][ T8468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.536548][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 421.307575][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.945674][ T5836] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 426.345738][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 426.635303][ T5836] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.647373][ T5836] usb 4-1: config 0 has no interface number 0 [ 426.667068][ T5836] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 426.676902][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.686400][ T5836] usb 4-1: Product: syz [ 426.690868][ T5836] usb 4-1: Manufacturer: syz [ 426.697200][ T5836] usb 4-1: SerialNumber: syz [ 426.759171][ T5836] usb 4-1: config 0 descriptor?? [ 426.852875][ T5836] usb 4-1: selecting invalid altsetting 2 [ 426.922090][ T5836] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 426.943545][ T6164] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 427.442243][ T5836] usb 4-1: USB disconnect, device number 17 [ 427.624816][ T8562] netlink: 72 bytes leftover after parsing attributes in process `syz.4.722'. [ 427.739249][ T6164] usb 2-1: Using ep0 maxpacket: 8 [ 427.756497][ T6164] usb 2-1: config 0 interface 0 has no altsetting 0 [ 427.763610][ T6164] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 427.785933][ T6164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.807761][ T6164] usb 2-1: config 0 descriptor?? [ 428.426451][ T6164] usbhid 2-1:0.0: can't add hid device: -71 [ 428.437202][ T6164] usbhid: probe of 2-1:0.0 failed with error -71 [ 428.455125][ T6164] usb 2-1: USB disconnect, device number 11 [ 428.530484][ T8580] loop0: detected capacity change from 0 to 512 [ 428.579028][ T8580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.614063][ T8580] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.586135][ T8594] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 430.620003][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.965781][ T8603] loop1: detected capacity change from 0 to 512 [ 432.987568][ T8605] netlink: 72 bytes leftover after parsing attributes in process `syz.0.731'. [ 433.745942][ T8603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.718437][ T8603] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.383998][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.076125][ T8641] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 438.351621][ T8646] netlink: 72 bytes leftover after parsing attributes in process `syz.1.742'. [ 438.705622][ T5836] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 439.535435][ T5836] usb 4-1: not running at top speed; connect to a high speed hub [ 439.552034][ T5836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.574877][ T5836] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 439.866464][ T974] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 440.821459][ T5836] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 442.263765][ T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.516900][ T974] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 442.526440][ T5836] usb 4-1: string descriptor 0 read error: -71 [ 442.532841][ T974] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 442.542222][ T5836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.552444][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.560626][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.571175][ T974] usb 2-1: config 0 descriptor?? [ 442.579486][ T5836] usb 4-1: can't set config #1, error -71 [ 442.597663][ T5836] usb 4-1: USB disconnect, device number 18 [ 442.674016][ T974] usb 2-1: can't set config #0, error -71 [ 442.687337][ T974] usb 2-1: USB disconnect, device number 12 [ 442.725834][ T8667] block nbd3: Device being setup by another task [ 442.973319][ T8675] overlayfs: failed to resolve './file0': -2 [ 443.460012][ T8684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.752'. [ 443.577610][ T8687] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 444.662303][ T8697] netlink: 84 bytes leftover after parsing attributes in process `syz.3.755'. [ 444.696217][ T8697] vlan1: entered allmulticast mode [ 444.731852][ T8697] veth0_vlan: entered allmulticast mode [ 444.985845][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 445.127888][ T974] IPVS: starting estimator thread 0... [ 445.191203][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.210114][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 445.226822][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.245947][ T8711] IPVS: using max 16 ests per chain, 38400 per kthread [ 445.272548][ T9] usb 1-1: config 0 descriptor?? [ 445.353392][ T8713] block nbd3: Device being setup by another task [ 445.877641][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.884165][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.900109][ T1297] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 446.871598][ T8733] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 446.890371][ T8734] netlink: 72 bytes leftover after parsing attributes in process `syz.3.764'. [ 448.321590][ T55] usb 1-1: USB disconnect, device number 15 [ 448.687301][ T8759] block nbd4: shutting down sockets [ 449.524101][ T8775] netlink: 72 bytes leftover after parsing attributes in process `syz.4.776'. [ 449.596718][ T8776] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 450.214236][ T8765] sctp: failed to load transform for md5: -2 [ 450.416645][ T8793] syzkaller0: entered promiscuous mode [ 450.422367][ T8793] syzkaller0: entered allmulticast mode [ 451.054339][ T8812] block nbd4: shutting down sockets [ 451.075757][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 451.286073][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 451.308149][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 451.324031][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 451.343931][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.368313][ T9] usb 1-1: config 0 descriptor?? [ 451.424843][ T8819] netlink: 72 bytes leftover after parsing attributes in process `syz.4.786'. [ 451.640783][ T8823] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 452.006228][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 452.043275][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 452.098744][ T9] usb 1-1: USB disconnect, device number 16 [ 452.193947][ T8833] netlink: 'syz.3.789': attribute type 10 has an invalid length. [ 452.227483][ T8833] veth1_macvtap: left promiscuous mode [ 452.377809][ T8833] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 454.175384][ T8849] block nbd1: shutting down sockets [ 454.689090][ T8859] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 455.087414][ T8872] process 'syz.0.800' launched '/dev/fd/-1' with NULL argv: empty string added [ 455.154133][ T8876] device-mapper: ioctl: Invalid ioctl structure: uuid ÿÿÿÿ, name , dev 2 [ 455.956859][ T8893] block nbd3: Device being setup by another task [ 457.142044][ T8912] loop1: detected capacity change from 0 to 256 [ 457.260637][ T28] audit: type=1800 audit(1786366311.792:53): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.808" name="file2" dev="loop1" ino=1048598 res=0 errno=0 [ 457.419310][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 458.426243][ T8935] 9pnet_fd: Insufficient options for proto=fd [ 458.814372][ T5836] IPVS: starting estimator thread 0... [ 458.925704][ T8945] IPVS: using max 17 ests per chain, 40800 per kthread [ 459.011619][ T8951] loop4: detected capacity change from 0 to 2048 [ 459.043311][ T8951] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 459.055082][ T8951] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 459.062918][ T8951] UDF-fs: Scanning with blocksize 512 failed [ 459.129788][ T8951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.143104][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 460.006443][ T8971] 9pnet_fd: p9_fd_create_tcp (8971): problem connecting socket to 127.0.0.1 [ 460.977351][ T8980] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 461.539075][ T974] IPVS: starting estimator thread 0... [ 461.645904][ T8989] IPVS: using max 18 ests per chain, 43200 per kthread [ 462.167908][ T8997] loop1: detected capacity change from 0 to 2048 [ 462.195653][ T8997] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 462.216385][ T8997] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 462.224188][ T8997] UDF-fs: Scanning with blocksize 512 failed [ 462.264946][ T8997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.704373][ T9001] loop1: detected capacity change from 0 to 2048 [ 462.854380][ T9001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.900285][ T9007] loop0: detected capacity change from 0 to 512 [ 462.967202][ T9007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.039794][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.640746][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.865617][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 467.125303][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 467.182500][ T9028] raw_sendmsg: syz.0.832 forgot to set AF_INET. Fix it! [ 467.189938][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 467.208155][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 467.246442][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.273684][ T9] usb 2-1: config 0 descriptor?? [ 467.353597][ T9041] 9pnet_fd: p9_fd_create_tcp (9041): problem connecting socket to 127.0.0.1 [ 468.260197][ T9] usb 2-1: can't set config #0, error -71 [ 468.308924][ T9] usb 2-1: USB disconnect, device number 13 [ 468.683625][ T9055] 9pnet_fd: p9_fd_create_tcp (9055): problem connecting socket to 127.0.0.1 [ 469.508490][ T9047] loop4: detected capacity change from 0 to 2048 [ 469.518799][ T9047] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 469.530119][ T9047] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 469.537904][ T9047] UDF-fs: Scanning with blocksize 512 failed [ 469.557277][ T9047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.040801][ T9061] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 470.334613][ T9067] syz_tun: entered allmulticast mode [ 470.391811][ T9067] dvmrp8: entered allmulticast mode [ 470.473639][ T9065] syz_tun: left allmulticast mode [ 471.276418][ T972] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 471.515704][ T972] usb 1-1: Using ep0 maxpacket: 8 [ 471.554660][ T972] usb 1-1: config 0 interface 0 has no altsetting 0 [ 471.592418][ T972] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 471.653911][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.709493][ T972] usb 1-1: config 0 descriptor?? [ 471.800156][ T9092] 9pnet_fd: p9_fd_create_tcp (9092): problem connecting socket to 127.0.0.1 [ 472.931400][ T9097] loop1: detected capacity change from 0 to 2048 [ 472.977947][ T9097] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 472.989714][ T9097] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 472.997528][ T9097] UDF-fs: Scanning with blocksize 512 failed [ 473.010526][ T9097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.112509][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.156021][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.168807][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.177989][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.196565][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.217978][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.233995][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.279990][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.344357][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.398538][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.415654][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.424300][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.433989][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.442852][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.474162][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.592744][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.605895][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.614461][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.623250][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.637134][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.646353][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.655768][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.664738][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.674461][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.683631][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.725722][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.734410][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.745792][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.754296][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.763213][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.771772][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.875769][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.884390][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.893037][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.903378][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.912012][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.920558][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 473.933990][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 474.026080][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 474.034689][ T972] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 474.056771][ T972] usb 1-1: USB disconnect, device number 17 [ 474.291934][ T9104] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 474.502400][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 475.596060][ T9131] 9pnet_fd: p9_fd_create_tcp (9131): problem connecting socket to 127.0.0.1 [ 476.353985][ T9134] loop1: detected capacity change from 0 to 2048 [ 476.364216][ T9134] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 476.375780][ T9134] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 476.383484][ T9134] UDF-fs: Scanning with blocksize 512 failed [ 476.401219][ T9134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.832318][ T9143] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 476.875846][ T972] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 477.099798][ T972] usb 4-1: Using ep0 maxpacket: 8 [ 477.129044][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.153557][ T972] usb 4-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 477.177638][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.207762][ T972] usb 4-1: config 0 descriptor?? [ 477.655002][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.692587][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.724006][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.763359][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.788416][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.807794][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.845578][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.864416][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.908559][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.938109][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 477.965385][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 478.002142][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 478.034642][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 478.054097][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 478.084601][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 478.113746][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 478.133019][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 478.316525][ T9171] 9pnet_fd: p9_fd_create_tcp (9171): problem connecting socket to 127.0.0.1 [ 479.126020][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.150293][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.192359][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.218853][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.245279][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.283371][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.326259][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.361624][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 479.648439][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.380779][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.389302][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.397838][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.406358][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.414898][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.423720][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.432510][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.441163][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.454746][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.464215][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.472816][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.481275][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.489869][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.498351][ T972] logitech-djreceiver 0003:046D:C513.0003: unknown main item tag 0x0 [ 480.545442][ T972] usb 4-1: USB disconnect, device number 19 [ 480.872039][ T9184] loop3: detected capacity change from 0 to 2048 [ 480.950698][ T9184] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 481.088185][ T9191] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.107922][ T9184] syz.3.871: attempt to access beyond end of device [ 481.107922][ T9184] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 482.030939][ T9182] loop0: detected capacity change from 0 to 32768 [ 482.423805][ T9213] 9pnet_fd: p9_fd_create_tcp (9213): problem connecting socket to 127.0.0.1 [ 482.553383][ T9182] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 483.257976][ T9182] XFS (loop0): Ending clean mount [ 483.425220][ T28] audit: type=1800 audit(1786431873.951:54): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.870" name="bus" dev="loop0" ino=4425 res=0 errno=0 [ 483.643752][ T28] audit: type=1800 audit(1786431874.171:55): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.870" name="bus" dev="loop0" ino=4425 res=0 errno=0 [ 484.890815][ T5779] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 490.245261][ T9267] 9pnet_fd: p9_fd_create_tcp (9267): problem connecting socket to 127.0.0.1 [ 494.383950][ T9274] [ 494.386403][ T9274] ====================================================== [ 494.393481][ T9274] WARNING: possible circular locking dependency detected [ 494.400707][ T9274] syzkaller #0 Not tainted [ 494.405177][ T9274] ------------------------------------------------------ [ 494.412260][ T9274] syz.4.886/9274 is trying to acquire lock: [ 494.418215][ T9274] ffffffff8ddf69d0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 494.428163][ T9274] [ 494.428163][ T9274] but task is already holding lock: [ 494.435584][ T9274] ffff88807b7b7400 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 494.446192][ T9274] [ 494.446192][ T9274] which lock already depends on the new lock. [ 494.446192][ T9274] [ 494.458574][ T9274] [ 494.458574][ T9274] the existing dependency chain (in reverse order) is: [ 494.467622][ T9274] [ 494.467622][ T9274] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 494.476462][ T9274] down_write+0x97/0x200 [ 494.481268][ T9274] configfs_depend_item_unlocked+0x157/0x430 [ 494.487827][ T9274] usbg_make_tpg+0x1f7/0x580 [ 494.493177][ T9274] target_fabric_make_tpg+0xa4/0x6d0 [ 494.499036][ T9274] configfs_mkdir+0x515/0x9e0 [ 494.504279][ T9274] vfs_mkdir+0x2a5/0x470 [ 494.509084][ T9274] do_mkdirat+0x1dc/0x450 [ 494.513992][ T9274] __x64_sys_mkdir+0x6e/0x80 [ 494.519159][ T9274] do_syscall_64+0x55/0xb0 [ 494.524439][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.530939][ T9274] [ 494.530939][ T9274] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 494.538832][ T9274] __mutex_lock+0x135/0xc80 [ 494.543908][ T9274] tcm_set_name+0x2a/0x90 [ 494.548811][ T9274] function_make+0x199/0x350 [ 494.554000][ T9274] configfs_mkdir+0x515/0x9e0 [ 494.559242][ T9274] vfs_mkdir+0x2a5/0x470 [ 494.564038][ T9274] do_mkdirat+0x1dc/0x450 [ 494.569035][ T9274] __x64_sys_mkdir+0x6e/0x80 [ 494.574193][ T9274] do_syscall_64+0x55/0xb0 [ 494.579168][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.585622][ T9274] [ 494.585622][ T9274] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 494.594178][ T9274] __lock_acquire+0x37ef/0x7d80 [ 494.599788][ T9274] lock_acquire+0x19e/0x420 [ 494.604947][ T9274] __mutex_lock+0x135/0xc80 [ 494.610110][ T9274] configfs_rmdir+0x63c/0x980 [ 494.615558][ T9274] vfs_rmdir+0x352/0x4b0 [ 494.620384][ T9274] do_rmdir+0x29f/0x590 [ 494.625104][ T9274] __x64_sys_rmdir+0x49/0x50 [ 494.630284][ T9274] do_syscall_64+0x55/0xb0 [ 494.635278][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.641733][ T9274] [ 494.641733][ T9274] other info that might help us debug this: [ 494.641733][ T9274] [ 494.652014][ T9274] Chain exists of: [ 494.652014][ T9274] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 494.652014][ T9274] [ 494.666874][ T9274] Possible unsafe locking scenario: [ 494.666874][ T9274] [ 494.674363][ T9274] CPU0 CPU1 [ 494.679758][ T9274] ---- ---- [ 494.685161][ T9274] lock(&sb->s_type->i_mutex_key#23); [ 494.690880][ T9274] lock(&opts->dep_lock); [ 494.698009][ T9274] lock(&sb->s_type->i_mutex_key#23); [ 494.706048][ T9274] lock(gadget_subsys.su_mutex); [ 494.711111][ T9274] [ 494.711111][ T9274] *** DEADLOCK *** [ 494.711111][ T9274] [ 494.719391][ T9274] 3 locks held by syz.4.886/9274: [ 494.724453][ T9274] #0: ffff888018fb6418 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 494.733870][ T9274] #1: ffff88807f224160 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 494.744735][ T9274] #2: ffff88807b7b7400 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 494.754893][ T9274] [ 494.754893][ T9274] stack backtrace: [ 494.760830][ T9274] CPU: 0 PID: 9274 Comm: syz.4.886 Not tainted syzkaller #0 [ 494.768254][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.778352][ T9274] Call Trace: [ 494.781675][ T9274] [ 494.784758][ T9274] dump_stack_lvl+0x18c/0x250 [ 494.789686][ T9274] ? load_image+0x420/0x420 [ 494.794260][ T9274] ? show_regs_print_info+0x20/0x20 [ 494.799509][ T9274] ? print_circular_bug+0x12b/0x1a0 [ 494.804768][ T9274] check_noncircular+0x2fc/0x400 [ 494.809797][ T9274] ? print_deadlock_bug+0x5d0/0x5d0 [ 494.815052][ T9274] ? lockdep_lock+0xf5/0x230 [ 494.819685][ T9274] ? _find_first_zero_bit+0xd6/0x100 [ 494.825105][ T9274] __lock_acquire+0x37ef/0x7d80 [ 494.830017][ T9274] ? verify_lock_unused+0x140/0x140 [ 494.835371][ T9274] ? verify_lock_unused+0x140/0x140 [ 494.840637][ T9274] lock_acquire+0x19e/0x420 [ 494.845207][ T9274] ? configfs_rmdir+0x63c/0x980 [ 494.850116][ T9274] ? __might_sleep+0xe0/0xe0 [ 494.854815][ T9274] ? read_lock_is_recursive+0x20/0x20 [ 494.860284][ T9274] __mutex_lock+0x135/0xc80 [ 494.864839][ T9274] ? configfs_rmdir+0x63c/0x980 [ 494.869749][ T9274] ? configfs_rmdir+0x63c/0x980 [ 494.874672][ T9274] ? mutex_lock_nested+0x20/0x20 [ 494.879774][ T9274] ? __lock_acquire+0x7d80/0x7d80 [ 494.885306][ T9274] ? lockref_put_or_lock+0x72/0xb0 [ 494.890498][ T9274] ? dput+0x3b/0x1e0 [ 494.894729][ T9274] ? dput+0x3b/0x1e0 [ 494.898818][ T9274] configfs_rmdir+0x63c/0x980 [ 494.903702][ T9274] vfs_rmdir+0x352/0x4b0 [ 494.908029][ T9274] do_rmdir+0x29f/0x590 [ 494.912246][ T9274] ? __check_object_size+0x4fc/0xa40 [ 494.917580][ T9274] ? d_delete_notify+0x150/0x150 [ 494.922563][ T9274] ? getname_flags+0x20a/0x500 [ 494.927375][ T9274] __x64_sys_rmdir+0x49/0x50 [ 494.932005][ T9274] do_syscall_64+0x55/0xb0 [ 494.936557][ T9274] ? clear_bhb_loop+0x40/0x90 [ 494.941296][ T9274] ? clear_bhb_loop+0x40/0x90 [ 494.946047][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.952187][ T9274] RIP: 0033:0x7f5ab3d9e0d9 [ 494.956653][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.976387][ T9274] RSP: 002b:00007f5ab4c89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 494.984947][ T9274] RAX: ffffffffffffffda RBX: 00007f5ab4025fa0 RCX: 00007f5ab3d9e0d9 [ 494.992988][ T9274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 495.001248][ T9274] RBP: 00007f5ab3e35024 R08: 0000000000000000 R09: 0000000000000000 [ 495.009708][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.017828][ T9274] R13: 00007f5ab4026038 R14: 00007f5ab4025fa0 R15: 00007ffe65c2c538 [ 495.025862][ T9274]