last executing test programs: 7.23582497s ago: executing program 1 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x5) 7.046246425s ago: executing program 1 (id=1601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, 0x0}, 0x5) 6.85466693s ago: executing program 1 (id=1602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0xd, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x8, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfff9, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 5.943183742s ago: executing program 1 (id=1607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff) write(r0, 0x0, 0x0) 5.839166275s ago: executing program 1 (id=1610): ioprio_set$uid(0x3, 0x0, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 4.980036886s ago: executing program 1 (id=1615): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x8, 0x8) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000080000000000000000"]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = mq_open(&(0x7f0000000240)='/dev/cpu/#/msr\x00', 0x40, 0x17, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0xffffffffffffff65, 0x3}) mq_notify(r5, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 3.831825295s ago: executing program 2 (id=1621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_tunnel_key={0x5c, 0x1, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 3.61079688s ago: executing program 2 (id=1625): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x8, 0x8) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000080000000000000000"]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 2.989664066s ago: executing program 0 (id=1627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.863165889s ago: executing program 0 (id=1628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x5) 2.733577612s ago: executing program 2 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 2.657047214s ago: executing program 3 (id=1630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0xd, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x8, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfff9, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 2.483656448s ago: executing program 0 (id=1632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 2.028606489s ago: executing program 3 (id=1633): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) utime(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="08008edf", 0x4) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0\x00') r1 = syz_open_procfs(0x0, 0x0) syz_open_pts(r1, 0x8000) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x80020000}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/pm_freeze_timeout', 0x101a82, 0x100) copy_file_range(r3, &(0x7f0000000040)=0x8000000000000007, r3, 0x0, 0xb, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0x20000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff) write(r4, &(0x7f0000001000)='8', 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f00000000c0)={0x0, 0x2}) 1.950387631s ago: executing program 4 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff) write(r0, &(0x7f0000001000), 0x0) 1.926602252s ago: executing program 2 (id=1636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xa0, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x6c, 0x2, [@TCA_MATCHALL_ACT={0x68, 0x2, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.914542713s ago: executing program 3 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x41217df2c9ce37e8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.820165184s ago: executing program 4 (id=1638): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)="1528b861", 0x4) 1.773832826s ago: executing program 0 (id=1639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xfc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x34bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.735108527s ago: executing program 2 (id=1640): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x8, 0x8) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000080000000000000000"]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 875.121408ms ago: executing program 4 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010000000000000004000000181100", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 874.646518ms ago: executing program 3 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 785.97311ms ago: executing program 0 (id=1643): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) userfaultfd(0x801) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000040), 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) 745.114771ms ago: executing program 4 (id=1644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0xd, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x8, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfff9, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 423.222679ms ago: executing program 0 (id=1645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 338.883532ms ago: executing program 3 (id=1646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 187.344455ms ago: executing program 4 (id=1647): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000080)="08008edf", 0x4) r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0\x00') r2 = syz_open_procfs(0x0, 0x0) syz_open_pts(r2, 0x8000) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x80020000}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/pm_freeze_timeout', 0x101a82, 0x100) copy_file_range(r4, &(0x7f0000000040)=0x8000000000000007, r4, 0x0, 0xb, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0x20000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000340)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff) write(r5, &(0x7f0000001000)='8', 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000000c0)={0x0, 0x2}) 181.611275ms ago: executing program 2 (id=1648): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 57.126288ms ago: executing program 4 (id=1649): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) utime(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="08008edf", 0x4) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0\x00') r1 = syz_open_procfs(0x0, 0x0) syz_open_pts(r1, 0x8000) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x80020000}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/pm_freeze_timeout', 0x101a82, 0x100) copy_file_range(r3, &(0x7f0000000040)=0x8000000000000007, r3, 0x0, 0xb, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0x20000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff) write(r4, &(0x7f0000001000)='8', 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f00000000c0)={0x0, 0x2}) 0s ago: executing program 3 (id=1650): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) kernel console output (not intermixed with test programs): iority 0 [ 88.165779][ T4588] device syzkaller0 entered promiscuous mode [ 88.186825][ T4584] tipc: Resetting bearer [ 88.277326][ T4583] tipc: Resetting bearer [ 88.311427][ T4583] tipc: Disabling bearer [ 88.442019][ T4591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.503629][ T4591] loop1: detected capacity change from 0 to 1024 [ 88.659699][ T4591] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 89.098046][ T4594] loop2: detected capacity change from 0 to 128 [ 89.484479][ T4601] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4601] [ 89.515931][ T4601] netlink: 260 bytes leftover after parsing attributes in process `syz.2.81'. [ 89.525122][ T4601] netlink: 104 bytes leftover after parsing attributes in process `syz.2.81'. [ 89.534043][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 90.071454][ T4194] Bluetooth: Wrong link type (-22) [ 91.301551][ T4604] device syzkaller0 entered promiscuous mode [ 92.352037][ T4625] device syzkaller0 entered promiscuous mode [ 93.098720][ T4636] loop2: detected capacity change from 0 to 512 [ 93.216731][ T4636] EXT4-fs (loop2): Unrecognized mount option "obj_type=/dev/loop" or missing value [ 95.099186][ T4657] sched: RT throttling activated [ 95.295574][ T4661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.96'. [ 95.351794][ T4664] loop4: detected capacity change from 0 to 64 [ 95.611984][ T4671] device syzkaller0 entered promiscuous mode [ 96.188402][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 97.124446][ T4681] Mass Storage Function, version: 2009/09/11 [ 97.132472][ T4681] LUN: removable file: (no medium) [ 97.165274][ T4681] LUN: removable file: (no medium) [ 98.772962][ T4695] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 98.786976][ T4695] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.275415][ T4693] device syzkaller0 entered promiscuous mode [ 101.438284][ T4712] Console: switching to colour VGA+ 80x25 [ 101.666017][ T4724] loop4: detected capacity change from 0 to 256 [ 101.691117][ T4725] device syzkaller0 entered promiscuous mode [ 104.175215][ T4740] loop4: detected capacity change from 0 to 32768 [ 104.292960][ T4740] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 104.618799][ T4757] vivid-004: ================= START STATUS ================= [ 104.626919][ T4757] vivid-004: Radio HW Seek Mode: Bounded [ 104.632804][ T4757] vivid-004: Radio Programmable HW Seek: false [ 104.639070][ T4757] vivid-004: RDS Rx I/O Mode: Block I/O [ 104.644823][ T4757] vivid-004: Generate RBDS Instead of RDS: false [ 104.651171][ T4757] vivid-004: RDS Reception: true [ 104.656159][ T4757] vivid-004: RDS Program Type: 0 inactive [ 104.661901][ T4757] vivid-004: RDS PS Name: inactive [ 104.667188][ T4757] vivid-004: RDS Radio Text: inactive [ 104.672688][ T4757] vivid-004: RDS Traffic Announcement: false inactive [ 104.679501][ T4757] vivid-004: RDS Traffic Program: false inactive [ 104.685896][ T4757] vivid-004: RDS Music: false inactive [ 104.691374][ T4757] vivid-004: ================== END STATUS ================== [ 106.452759][ T4740] syz.4.116 (4740) used greatest stack depth: 18304 bytes left [ 106.782356][ T4773] device syzkaller0 entered promiscuous mode [ 106.783988][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 107.323862][ T4780] device syzkaller0 entered promiscuous mode [ 108.342433][ T4793] device syzkaller0 entered promiscuous mode [ 108.421403][ T4796] loop0: detected capacity change from 0 to 256 [ 110.507566][ T4799] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 110.550070][ T4799] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 110.577219][ T4799] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 110.588584][ T4815] overlayfs: missing 'lowerdir' [ 110.721379][ T4822] 9pnet: Insufficient options for proto=fd [ 111.648253][ T4823] tmpfs: Unknown parameter 'grpquota_iÚrØA' [ 112.593955][ T4827] loop3: detected capacity change from 0 to 256 [ 112.644620][ T4827] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.695590][ T4831] program syz.2.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.328599][ T4838] Process accounting resumed [ 115.367496][ T4835] device syzkaller0 entered promiscuous mode [ 119.872799][ T4906] device syzkaller0 entered promiscuous mode [ 120.303036][ T4914] device syzkaller0 entered promiscuous mode [ 121.201529][ T4927] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 121.234151][ T4927] VFS: Can't find a romfs filesystem on dev nullb0. [ 121.234151][ T4927] [ 124.125112][ T4965] loop3: detected capacity change from 0 to 32768 [ 126.334713][ T4961] binder_alloc: 4952: binder_alloc_buf, no vma [ 126.581375][ T4971] overlayfs: failed to clone upperpath [ 128.242331][ T4996] device syzkaller0 entered promiscuous mode [ 128.739110][ T4999] netlink: 188 bytes leftover after parsing attributes in process `syz.2.185'. [ 129.612304][ T5003] device syzkaller0 entered promiscuous mode [ 131.110228][ T5016] tmpfs: Unknown parameter '' [ 131.148055][ T5023] device syzkaller0 entered promiscuous mode [ 132.316694][ T5048] device syzkaller0 entered promiscuous mode [ 132.632334][ T5051] device syzkaller0 entered promiscuous mode [ 132.762438][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168442][ T5062] lo speed is unknown, defaulting to 1000 [ 133.176002][ T5062] lo speed is unknown, defaulting to 1000 [ 133.190171][ T5062] lo speed is unknown, defaulting to 1000 [ 133.296575][ T5062] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.876634][ T5062] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.041388][ T5062] lo speed is unknown, defaulting to 1000 [ 134.058964][ T5062] lo speed is unknown, defaulting to 1000 [ 134.703768][ T5062] lo speed is unknown, defaulting to 1000 [ 134.727252][ T5078] block device autoloading is deprecated and will be removed. [ 134.769717][ T5062] lo speed is unknown, defaulting to 1000 [ 134.798302][ T5062] lo speed is unknown, defaulting to 1000 [ 135.087277][ T5085] block device autoloading is deprecated and will be removed. [ 135.095214][ T5085] md: loop0 has zero or unknown size, marking faulty! [ 135.140035][ T5092] device syzkaller0 entered promiscuous mode [ 135.148850][ T26] audit: type=1326 audit(1786178303.523:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 135.173199][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.177400][ T26] audit: type=1326 audit(1786178303.523:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 136.201595][ T26] audit: type=1326 audit(1786178303.543:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 136.225439][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.232917][ T26] audit: type=1326 audit(1786178303.543:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 136.256762][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.847958][ T26] audit: type=1326 audit(1786178303.553:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 137.827925][ T5169] rt1711h 0-004e: check vid/pid fail [ 137.834001][ T5169] rt1711h: probe of 0-004e failed with error -5 [ 137.844024][ T5169] i2c i2c-0: new_device: Instantiated device rt1711h at 0x4e [ 138.719593][ T26] audit: type=1326 audit(1786178303.553:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 138.863413][ T26] audit: type=1326 audit(1786178303.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 139.796560][ T26] audit: type=1326 audit(1786178303.563:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 139.829312][ T26] audit: type=1326 audit(1786178303.563:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 140.029453][ T26] audit: type=1326 audit(1786178303.563:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 140.092739][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 140.101846][ T5186] netlink: 'syz.4.219': attribute type 10 has an invalid length. [ 140.109809][ T5186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.219'. [ 140.121988][ T5186] device geneve2 entered promiscuous mode [ 140.590361][ T5190] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.768611][ T26] audit: type=1326 audit(1786178303.563:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 140.803043][ T26] audit: type=1326 audit(1786178303.563:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 140.829367][ T26] audit: type=1326 audit(1786178303.563:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 140.901952][ T5192] device syzkaller0 entered promiscuous mode [ 140.939395][ T26] audit: type=1326 audit(1786178303.563:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 140.964141][ T26] audit: type=1326 audit(1786178303.563:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 140.989677][ T26] audit: type=1326 audit(1786178303.563:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 141.020748][ T26] audit: type=1326 audit(1786178303.563:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 143.155645][ T26] audit: type=1326 audit(1786178303.583:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 143.452760][ T26] audit: type=1326 audit(1786178303.583:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 143.708816][ T26] audit: type=1326 audit(1786178303.583:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef70ff80d9 code=0x7ffc0000 [ 143.813644][ T5218] loop2: detected capacity change from 0 to 128 [ 143.907532][ T5218] FAT-fs (loop2): bread failed, FSINFO block (sector = 28417) [ 144.382141][ T5230] loop1: detected capacity change from 0 to 256 [ 144.843173][ T5230] exfat: Deprecated parameter 'utf8' [ 144.860549][ T5230] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 145.095466][ T5238] loop3: detected capacity change from 0 to 32768 [ 145.112620][ T5237] loop2: detected capacity change from 0 to 512 [ 145.304627][ T5238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.233 (5238) [ 145.388108][ T5238] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 145.397192][ T5238] BTRFS info (device loop3): use zlib compression, level 3 [ 145.404655][ T5238] BTRFS info (device loop3): turning on sync discard [ 145.411621][ T5238] BTRFS info (device loop3): using free space tree [ 145.418261][ T5238] BTRFS info (device loop3): has skinny extents [ 145.460639][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.496115][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.529884][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 145.544822][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.556000][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.566403][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.577515][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.588996][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.599389][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.609736][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.620446][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.628464][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 145.631272][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.639949][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 145.648242][ T5234] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.682640][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 145.732860][ T5237] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.758563][ T5246] loop1: detected capacity change from 0 to 1024 [ 145.975160][ T5246] hfsplus: failed to load extents file [ 145.986136][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 146.044361][ T5238] BTRFS info (device loop3): enabling ssd optimizations [ 146.505696][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 147.287081][ T5273] can: request_module (can-proto-3) failed. [ 147.357830][ T5284] device syzkaller0 entered promiscuous mode [ 147.801615][ T5292] loop1: detected capacity change from 0 to 8192 [ 147.895697][ T5297] loop2: detected capacity change from 0 to 8 [ 148.027614][ T5304] loop4: detected capacity change from 0 to 512 [ 148.602000][ T5304] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.244: ea_inode with extended attributes [ 148.619329][ T5304] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.244: error while reading EA inode 11 err=-117 [ 148.633255][ T5304] EXT4-fs (loop4): 1 orphan inode deleted [ 148.639103][ T5304] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,data_err=ignore,debug_want_extra_isize=0x000000000000004c,noload,delalloc,grpjquota=,bsdgroups,,errors=continue. Quota mode: none. [ 148.845268][ T5309] program syz.1.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.865223][ T5309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 149.288106][ T5297] SQUASHFS error: Unable to read inode 0x11f [ 149.505039][ T5314] loop4: detected capacity change from 0 to 128 [ 149.599083][ T5314] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 149.609439][ T4176] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.725643][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 149.725656][ T26] audit: type=1800 audit(1786178318.103:52): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.246" name="file2" dev="loop4" ino=95 res=0 errno=0 [ 150.014520][ T4176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.111277][ T4176] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.121645][ T4176] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 150.144613][ T5300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.152185][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 150.294431][ T4176] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 150.324049][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.342684][ T4176] usb 4-1: Product: syz [ 150.347663][ T4176] usb 4-1: Manufacturer: syz [ 150.352273][ T4176] usb 4-1: SerialNumber: syz [ 150.424486][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 150.554882][ T7] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 150.564328][ T7] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 150.585880][ T7] usb 3-1: config 0 has no interface number 1 [ 150.606506][ T7] usb 3-1: config 0 has no interface number 2 [ 150.732965][ T7] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 150.748546][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.766476][ T7] usb 3-1: config 0 descriptor?? [ 150.807718][ T5300] usb 2-1: New USB device found, idVendor=0499, idProduct=100a, bcdDevice= 0.40 [ 150.835174][ T4904] Bluetooth: hci4: command 0x0405 tx timeout [ 151.444494][ T7] usb 3-1: Could not set interface, error -71 [ 151.495928][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.499545][ T4176] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 151.535897][ T5300] usb 2-1: Product: syz [ 151.540114][ T5300] usb 2-1: Manufacturer: syz [ 151.568561][ T7] usb 3-1: USB disconnect, device number 2 [ 151.578068][ T5300] usb 2-1: SerialNumber: syz [ 151.652330][ T4176] usb 4-1: USB disconnect, device number 2 [ 151.992455][ T5339] device syzkaller0 entered promiscuous mode [ 152.519484][ T4338] udevd[4338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.574669][ T5300] usb 2-1: MIDIStreaming interface descriptor not found [ 152.584721][ T5300] usb 2-1: too many endpoints [ 152.730484][ T5360] loop3: detected capacity change from 0 to 1024 [ 152.750512][ T5300] usb 2-1: USB disconnect, device number 2 [ 152.844509][ T5360] hfsplus: invalid extent btree flag [ 152.850020][ T5360] hfsplus: failed to load extents file [ 153.072639][ T5373] device syzkaller0 entered promiscuous mode [ 153.173199][ T5378] loop1: detected capacity change from 0 to 1024 [ 153.182521][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.193129][ T5379] loop3: detected capacity change from 0 to 512 [ 153.359557][ T5379] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 153.375471][ T5379] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.450832][ T5391] loop4: detected capacity change from 0 to 8 [ 153.476836][ T5391] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 153.539302][ T5391] cramfs: unsupported filesystem features [ 153.547242][ T5396] loop1: detected capacity change from 0 to 8 [ 153.626365][ T5396] SQUASHFS error: zlib decompression failed, data probably corrupt [ 153.647363][ T5396] SQUASHFS error: Failed to read block 0x9b: -5 [ 153.653653][ T5396] SQUASHFS error: Unable to read metadata cache entry [99] [ 153.708588][ T5396] SQUASHFS error: Unable to read inode 0x127 [ 153.809745][ T5403] loop3: detected capacity change from 0 to 4096 [ 153.902763][ T5403] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 153.960903][ T5403] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 154.006216][ T5412] device syzkaller0 entered promiscuous mode [ 154.017877][ T5403] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 154.064349][ T5403] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 154.099207][ T5403] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 154.126080][ T5423] loop1: detected capacity change from 0 to 64 [ 154.126211][ T5403] ntfs: volume version 3.1. [ 154.195667][ T5403] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 154.255913][ T5403] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 154.312886][ T5403] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 154.332571][ T5433] loop4: detected capacity change from 0 to 256 [ 154.340065][ T5403] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 154.352252][ T5434] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 154.369047][ T5434] netlink: 'syz.1.291': attribute type 3 has an invalid length. [ 154.381362][ T5434] netlink: 224 bytes leftover after parsing attributes in process `syz.1.291'. [ 154.393012][ T5434] NCSI netlink: No device for ifindex 2986344450 [ 154.495501][ T5437] loop1: detected capacity change from 0 to 64 [ 154.584472][ T4904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.964990][ T4904] usb 3-1: config 3 has an invalid interface number: 138 but max is 0 [ 154.975578][ T4904] usb 3-1: config 3 has no interface number 0 [ 154.981925][ T4904] usb 3-1: config 3 interface 138 has no altsetting 0 [ 155.146435][ T4904] usb 3-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=fc.f7 [ 155.161209][ T4904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.172753][ T4904] usb 3-1: Product: syz [ 155.183123][ T4904] usb 3-1: Manufacturer: syz [ 155.190792][ T4904] usb 3-1: SerialNumber: syz [ 155.464640][ T5450] loop3: detected capacity change from 0 to 256 [ 155.481145][ T4904] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 155.521510][ T4904] usb 3-1: USB disconnect, device number 3 [ 155.530854][ T5468] loop4: detected capacity change from 0 to 8 [ 155.545223][ T5450] exfat: Deprecated parameter 'namecase' [ 155.550927][ T5450] exfat: Deprecated parameter 'namecase' [ 155.654343][ T5450] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 156.071631][ T5497] loop2: detected capacity change from 0 to 8 [ 156.165308][ T5500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'. [ 156.174403][ T5492] loop3: detected capacity change from 0 to 4096 [ 156.414164][ T5510] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 156.429277][ T5510] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 156.447687][ T5510] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 156.482739][ T5510] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 156.536949][ T5492] EXT4-fs (loop3): Test dummy encryption mode enabled [ 156.589682][ T5492] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 156.721392][ T5475] loop4: detected capacity change from 0 to 32768 [ 156.885143][ T5475] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.311 (5475) [ 156.949084][ T5475] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 156.984631][ T5475] BTRFS info (device loop4): enabling auto defrag [ 157.025235][ T5475] BTRFS info (device loop4): force clearing of disk cache [ 157.049548][ T5530] loop2: detected capacity change from 0 to 512 [ 157.053349][ T5475] BTRFS info (device loop4): max_inline at 485 [ 157.067629][ T5475] BTRFS info (device loop4): disabling free space tree [ 157.094268][ T5475] BTRFS info (device loop4): has skinny extents [ 157.140688][ T5530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.225101][ T5530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.238293][ T5532] device syzkaller0 entered promiscuous mode [ 157.275483][ T5530] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 157.283895][ T5524] loop1: detected capacity change from 0 to 32768 [ 157.331123][ T5530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 157.349529][ T5524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.332 (5524) [ 157.387527][ T5530] System zones: 1-12 [ 157.397909][ T5530] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.430379][ T5524] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 157.455358][ T5524] BTRFS info (device loop1): using free space tree [ 157.461898][ T5524] BTRFS info (device loop1): has skinny extents [ 157.469495][ T5475] BTRFS info (device loop4): enabling ssd optimizations [ 157.473686][ T5530] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.334: Block bitmap for bg 0 marked uninitialized [ 157.485692][ T5475] BTRFS info (device loop4): clearing free space tree [ 157.545700][ T5558] loop3: detected capacity change from 0 to 1024 [ 157.588997][ T5475] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.598889][ T5558] hfsplus: invalid length 32517 has been corrected to 255 [ 157.621028][ T5558] hfsplus: invalid length 32517 has been corrected to 255 [ 157.664915][ T5530] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.334: Block bitmap for bg 0 marked uninitialized [ 157.700298][ T5558] hfsplus: invalid length 32517 has been corrected to 255 [ 157.748452][ T5558] hfsplus: invalid length 32517 has been corrected to 255 [ 157.756459][ T5475] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.777273][ T5530] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.334: Block bitmap for bg 0 marked uninitialized [ 157.791540][ T5524] BTRFS info (device loop1): enabling ssd optimizations [ 157.800407][ T5530] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 157.816292][ T5530] EXT4-fs (loop2): 1 truncate cleaned up [ 157.830940][ T5524] BTRFS warning (device loop1): can't clear the compat:1 feature bit while mounted [ 157.856402][ T5530] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,data=journal,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 158.032903][ T4305] hfsplus: b-tree write err: -5, ino 4 [ 158.075363][ T4305] hfsplus: b-tree write err: -5, ino 2 [ 158.258834][ T4343] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (4343) [ 158.301878][ T5592] loop2: detected capacity change from 0 to 64 [ 158.391977][ T5592] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 158.551589][ T5606] device syzkaller0 entered promiscuous mode [ 158.872915][ T5631] loop2: detected capacity change from 0 to 8 [ 158.974636][ T5633] EXT4-fs (loop4): Ignoring removed oldalloc option [ 158.990104][ T5637] device syzkaller0 entered promiscuous mode [ 159.051393][ T5635] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 159.099019][ T5635] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.104649][ T5633] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 159.441284][ T5657] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 159.595443][ T5667] device syzkaller0 entered promiscuous mode [ 159.714669][ T5628] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 159.786683][ T5679] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 160.123231][ T5705] device vlan2 entered promiscuous mode [ 160.129245][ T5040] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.142883][ T5705] device wlan1 entered promiscuous mode [ 160.144748][ T5628] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 160.168155][ T5628] usb 5-1: config 0 has no interface number 0 [ 160.184408][ T5628] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 160.190177][ T5708] device syzkaller0 entered promiscuous mode [ 160.260348][ T5712] netlink: 'syz.3.387': attribute type 15 has an invalid length. [ 160.278907][ T5712] netlink: 'syz.3.387': attribute type 7 has an invalid length. [ 160.287804][ T5712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.387'. [ 160.377707][ T5628] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 160.391032][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 160.405989][ T5628] usb 5-1: Product: syz [ 160.410186][ T5628] usb 5-1: SerialNumber: syz [ 160.425653][ T5628] usb 5-1: config 0 descriptor?? [ 160.478866][ T5628] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 160.494744][ T5040] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 160.518215][ T5040] usb 3-1: config 0 has no interface number 0 [ 160.533862][ T5040] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 160.554989][ T5040] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.683806][ T5628] usb 5-1: USB disconnect, device number 2 [ 160.699714][ T5743] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 160.734492][ T5040] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 160.768076][ T5040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.780026][ T5040] usb 3-1: Product: syz [ 160.784905][ T5040] usb 3-1: Manufacturer: syz [ 160.789746][ T5040] usb 3-1: SerialNumber: syz [ 160.810220][ T5040] usb 3-1: config 0 descriptor?? [ 160.835219][ T5684] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.855572][ T5040] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 160.884099][ T5040] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 160.908308][ T5739] set_capacity_and_notify: 3 callbacks suppressed [ 160.908323][ T5739] loop1: detected capacity change from 0 to 32768 [ 160.967540][ T5739] XFS (loop1): Mounting V5 Filesystem [ 161.008100][ T5739] XFS (loop1): Ending clean mount [ 161.052959][ T4196] XFS (loop1): Unmounting Filesystem [ 161.088247][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 161.099042][ T5040] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.282820][ T4639] usb 3-1: USB disconnect, device number 4 [ 161.369984][ T4639] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 161.411129][ T4639] cyberjack 3-1:0.69: device disconnected [ 161.467866][ T5040] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 161.487849][ T5766] tipc: Enabling of bearer rejected, failed to enable media [ 161.494355][ T5040] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 161.534415][ T5040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.596124][ T5760] kvm [5759]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x4cbfd1 [ 161.596442][ T5040] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 161.624124][ T5760] kvm [5759]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 161.641464][ T5760] kvm [5759]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4cd0 [ 161.652525][ T5760] kvm [5759]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 161.697526][ T5760] kvm [5759]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd500 [ 161.704886][ T5775] bond0: (slave bond_slave_1): Releasing backup interface [ 161.714098][ T5760] kvm [5759]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 161.730591][ T5760] kvm [5759]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xdd00 [ 161.740723][ T5760] kvm [5759]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 161.763729][ T5777] tipc: Started in network mode [ 161.770879][ T5777] tipc: Node identity 3abb5688a8d9, cluster identity 4711 [ 161.782198][ T5760] kvm [5759]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xbd00 [ 161.794023][ T5777] tipc: Enabled bearer , priority 0 [ 161.804942][ T5760] kvm [5759]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 161.822873][ T5777] tipc: Resetting bearer [ 161.835556][ T5776] tipc: Disabling bearer [ 163.069329][ T5040] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 163.373653][ T5040] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 163.595830][ T5040] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 163.623059][ T5628] usb 4-1: USB disconnect, device number 3 [ 164.476355][ T5808] tipc: Enabled bearer , priority 0 [ 164.503953][ T5808] tipc: Resetting bearer [ 164.518251][ T5805] tipc: Disabling bearer [ 164.684098][ T5818] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 164.691140][ T5818] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.747830][ T5818] vhci_hcd vhci_hcd.0: Device attached [ 164.823962][ T5835] loop1: detected capacity change from 0 to 128 [ 165.025162][ T5793] loop4: detected capacity change from 0 to 40427 [ 165.087664][ T5628] usb 38-1: SetAddress Request (2) to port 0 [ 165.107177][ T5628] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 165.139193][ T5793] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.298259][ T5793] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.368878][ T5835] loop1: detected capacity change from 0 to 32768 [ 165.461902][ T4188] attempt to access beyond end of device [ 165.461902][ T4188] loop4: rw=2049, want=45104, limit=40427 [ 165.475645][ T5820] vhci_hcd: connection reset by peer [ 165.500552][ T144] vhci_hcd: stop threads [ 165.505678][ T5835] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.422 (5835) [ 165.523179][ T144] vhci_hcd: release socket [ 165.539733][ T144] vhci_hcd: disconnect device [ 165.541458][ T5854] tipc: Started in network mode [ 165.554873][ T5835] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.571466][ T5854] tipc: Node identity d2faafa6a0f8, cluster identity 4711 [ 165.576348][ T5835] BTRFS info (device loop1): force clearing of disk cache [ 165.587961][ T5835] BTRFS info (device loop1): force zlib compression, level 3 [ 165.589774][ T5854] tipc: Enabled bearer , priority 0 [ 165.597199][ T5835] BTRFS info (device loop1): disabling free space tree [ 165.611095][ T5835] BTRFS info (device loop1): max_inline at 0 [ 165.618142][ T5835] BTRFS info (device loop1): enabling free space tree [ 165.627467][ T5835] BTRFS info (device loop1): using free space tree [ 165.630740][ T5854] tipc: Resetting bearer [ 165.635097][ T5835] BTRFS info (device loop1): has skinny extents [ 165.667487][ T5853] tipc: Disabling bearer [ 165.861563][ T5835] BTRFS info (device loop1): enabling ssd optimizations [ 166.314506][ T5627] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 166.564696][ T5908] loop1: detected capacity change from 0 to 1024 [ 166.627255][ T5912] usb0: HOST MAC 6a:4a:d0:66:ee:e3 [ 166.633710][ T5912] usb0: MAC 2a:4a:52:b9:c2:d8 [ 166.681869][ T5908] EXT4-fs (loop1): Ignoring removed bh option [ 166.796701][ T5908] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 166.864856][ T5627] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 167.068294][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 167.348987][ T5627] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 167.554134][ T5627] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 167.563801][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.582275][ T5627] usb 4-1: config 0 descriptor?? [ 167.605446][ T5876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.022158][ T5951] loop1: detected capacity change from 0 to 512 [ 168.068722][ T5627] hid-multitouch 0003:1FD2:6007.0001: ignoring exceeding usage max [ 168.083243][ T5951] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.448: inode #1: comm syz.1.448: iget: illegal inode # [ 168.101835][ T5951] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.448: error while reading EA inode 1 err=-117 [ 168.118604][ T5627] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x2 [ 168.127256][ T5951] EXT4-fs (loop1): 1 orphan inode deleted [ 168.133135][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.195028][ T5952] device syzkaller0 entered promiscuous mode [ 168.202450][ T5627] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 168.268975][ T5627] usb 4-1: USB disconnect, device number 4 [ 168.332405][ T5958] fido_id[5958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 168.424549][ T4904] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 168.784506][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.804608][ T4904] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 168.833918][ T4904] usb 2-1: config 0 has no interface number 0 [ 168.850561][ T4904] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 55794, setting to 64 [ 168.879482][ T4904] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 168.896134][ T4904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.952816][ T4904] usb 2-1: config 0 descriptor?? [ 168.984809][ T5951] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 169.024153][ T4904] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input8 [ 169.065757][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 169.146650][ T6001] device syzkaller0 entered promiscuous mode [ 169.184727][ T23] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 169.260564][ T4904] usb 2-1: USB disconnect, device number 3 [ 169.337030][ T6009] Restarting kernel threads ... done. [ 169.387192][ T23] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 169.414674][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.417114][ T6013] netlink: 'syz.4.465': attribute type 153 has an invalid length. [ 169.450594][ T23] usb 3-1: Product: syz [ 169.469688][ T23] usb 3-1: Manufacturer: syz [ 169.475523][ T23] usb 3-1: SerialNumber: syz [ 169.844376][ T23] usb 3-1: USB disconnect, device number 5 [ 170.466074][ T5628] usb 38-1: device descriptor read/8, error -110 [ 171.670169][ T6040] loop1: detected capacity change from 0 to 128 [ 171.758733][ T5628] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 171.775343][ T5628] usb usb38-port1: attempt power cycle [ 172.591302][ T6047] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6047] [ 172.616605][ T6047] netlink: 260 bytes leftover after parsing attributes in process `syz.1.470'. [ 172.625965][ T6047] netlink: 104 bytes leftover after parsing attributes in process `syz.1.470'. [ 172.634987][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 172.705741][ T4194] Bluetooth: Wrong link type (-22) [ 172.899915][ T6045] device syzkaller0 entered promiscuous mode [ 172.964995][ T5628] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 173.647772][ T6069] 9pnet: Insufficient options for proto=fd [ 173.675771][ T5628] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 173.686002][ T5628] usb usb38-port1: unable to enumerate USB device [ 175.052692][ T6094] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 175.060686][ T6094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.489'. [ 177.009221][ T6094] team0: Port device geneve0 added [ 177.106393][ T6106] ip_tables: iptables: counters copy to user failed while replacing table [ 177.243929][ T6107] device syzkaller0 entered promiscuous mode [ 177.433020][ T6116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.489061][ T6116] loop3: detected capacity change from 0 to 1024 [ 177.556235][ T6116] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 178.102095][ T6118] device syzkaller0 entered promiscuous mode [ 178.296829][ T4232] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 178.323027][ T6121] lo speed is unknown, defaulting to 1000 [ 178.464713][ T5618] ODEBUG: Out of memory. ODEBUG disabled [ 178.515513][ T6131] loop3: detected capacity change from 0 to 128 [ 178.928631][ T6132] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 178.940886][ T6132] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.973734][ T6131] FAT-fs (loop3): Directory bread(block 162) failed [ 178.998263][ T6131] FAT-fs (loop3): Directory bread(block 163) failed [ 179.005835][ T6131] FAT-fs (loop3): Directory bread(block 164) failed [ 179.012576][ T6131] FAT-fs (loop3): Directory bread(block 165) failed [ 179.021493][ T6131] FAT-fs (loop3): Directory bread(block 166) failed [ 179.028832][ T6131] FAT-fs (loop3): Directory bread(block 167) failed [ 179.041890][ T6131] FAT-fs (loop3): Directory bread(block 168) failed [ 179.049035][ T6131] FAT-fs (loop3): Directory bread(block 169) failed [ 179.062786][ T6131] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.082934][ T6131] FAT-fs (loop3): Directory bread(block 162) failed [ 179.096946][ T6131] FAT-fs (loop3): Directory bread(block 163) failed [ 179.144600][ T4232] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 179.161843][ T4232] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.169166][ T4232] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 179.184506][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.229201][ T4232] usb 5-1: config 0 descriptor?? [ 179.396935][ T6115] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.255827][ T6147] overlayfs: missing 'lowerdir' [ 180.316588][ T6154] 9pnet: Insufficient options for proto=fd [ 180.456901][ T4232] petalynx 0003:18B1:0037.0002: ignoring exceeding usage max [ 180.489667][ T4232] petalynx 0003:18B1:0037.0002: hidraw0: USB HID v0.c1 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 180.537567][ T6162] device syzkaller0 entered promiscuous mode [ 181.374702][ T5616] usb 5-1: USB disconnect, device number 3 [ 181.511988][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 181.551326][ T6168] fido_id[6168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 181.679905][ T6182] device syzkaller0 entered promiscuous mode [ 182.817379][ T6207] loop1: detected capacity change from 0 to 1024 [ 183.094416][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.214349][ T5627] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.474408][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 183.624673][ T4232] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 183.695010][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.715037][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.730861][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 183.779876][ T4232] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 183.794411][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.819580][ T4232] usb 5-1: config 0 descriptor?? [ 183.844474][ T5627] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.869575][ T5627] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.971033][ T5627] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.987510][ T5627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.001613][ T5627] usb 3-1: SerialNumber: syz [ 184.287568][ T5627] usb 3-1: 0:2 : does not exist [ 184.309281][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.320748][ T5627] usb 3-1: USB disconnect, device number 6 [ 184.330297][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.344761][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.365663][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.372933][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.383926][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.393818][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.405099][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.412394][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.425691][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.433334][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.480920][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.489430][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.496546][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.503605][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.511198][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.518396][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.525511][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.532567][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.539668][ T4232] uclogic 0003:5543:0005.0003: unknown main item tag 0x0 [ 184.547298][ T4232] uclogic 0003:5543:0005.0003: No inputs registered, leaving [ 184.556990][ T4232] uclogic 0003:5543:0005.0003: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 184.583191][ T4232] usb 5-1: USB disconnect, device number 4 [ 184.591525][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.636513][ T6257] fido_id[6257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 185.044527][ T6261] tipc: Enabling of bearer rejected, failed to enable media [ 186.034419][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 186.046686][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 186.059804][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 186.099535][ T6292] loop4: detected capacity change from 0 to 128 [ 186.116662][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 186.794921][ T6293] netlink: 188 bytes leftover after parsing attributes in process `syz.3.546'. [ 186.837868][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 186.887681][ T6292] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.933502][ T6292] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.959153][ T6288] device syzkaller0 entered promiscuous mode [ 187.944633][ T6306] binder_alloc: 6304: binder_alloc_buf, no vma [ 188.056894][ T4232] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 188.107975][ T6307] loop4: detected capacity change from 0 to 64 [ 188.171797][ T6312] siw: device registration error -23 [ 188.214178][ T6307] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 188.473306][ T6326] tipc: Enabling of bearer rejected, failed to enable media [ 188.500306][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 188.534487][ T4232] usb 3-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 188.596896][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.652963][ T4232] usb 3-1: config 0 descriptor?? [ 188.878422][ T6352] loop1: detected capacity change from 0 to 256 [ 188.890714][ T6351] device syzkaller0 entered promiscuous mode [ 188.923389][ T6352] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.942470][ T6352] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 188.967340][ T6352] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 189.700075][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 189.700372][ T26] audit: type=1800 audit(1786178357.813:53): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.561" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 190.254669][ T4232] lenovo 0003:04B3:3100.0004: hidraw0: USB HID v0.9a Device [HID 04b3:3100] on usb-dummy_hcd.2-1/input0 [ 190.379576][ T4232] usb 3-1: USB disconnect, device number 7 [ 191.387551][ T6372] fido_id[6372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 191.537895][ T6389] loop4: detected capacity change from 0 to 256 [ 191.649675][ T6394] tipc: Enabling of bearer rejected, failed to enable media [ 192.252851][ T6418] loop2: detected capacity change from 0 to 128 [ 192.445332][ T6418] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 192.523098][ T26] audit: type=1800 audit(1786178360.893:54): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.577" name="file2" dev="loop2" ino=95 res=0 errno=0 [ 193.376467][ T6441] loop4: detected capacity change from 0 to 128 [ 193.478554][ T6441] FAT-fs (loop4): Directory bread(block 524322) failed [ 193.498201][ T6441] FAT-fs (loop4): Directory bread(block 524323) failed [ 193.682479][ T6445] loop2: detected capacity change from 0 to 32768 [ 193.714613][ T6441] FAT-fs (loop4): Directory bread(block 524324) failed [ 193.721604][ T6441] FAT-fs (loop4): Directory bread(block 524325) failed [ 193.737649][ T6441] FAT-fs (loop4): Directory bread(block 524326) failed [ 193.753072][ T6445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.586 (6445) [ 193.971498][ T6441] FAT-fs (loop4): Directory bread(block 524327) failed [ 194.138459][ T6441] FAT-fs (loop4): Directory bread(block 524328) failed [ 194.172389][ T6450] tipc: Enabling of bearer rejected, failed to enable media [ 194.214547][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.323778][ T6441] FAT-fs (loop4): Directory bread(block 524329) failed [ 194.378052][ T6445] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 194.386917][ T6445] BTRFS info (device loop2): use zlib compression, level 3 [ 194.394141][ T6445] BTRFS info (device loop2): turning on sync discard [ 194.401408][ T6445] BTRFS info (device loop2): using free space tree [ 194.408119][ T6445] BTRFS info (device loop2): has skinny extents [ 194.513596][ T6441] FAT-fs (loop4): Directory bread(block 524322) failed [ 194.562703][ T6441] FAT-fs (loop4): Directory bread(block 524323) failed [ 194.667359][ T6421] loop1: detected capacity change from 0 to 32768 [ 194.684747][ T6445] BTRFS info (device loop2): enabling ssd optimizations [ 194.765628][ T6421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.578 (6421) [ 194.917200][ T6421] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 194.975740][ T6421] BTRFS info (device loop1): setting nodatasum [ 194.982527][ T6421] BTRFS info (device loop1): force zlib compression, level 3 [ 195.519937][ T6421] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 195.634364][ T6421] BTRFS info (device loop1): use lzo compression, level 0 [ 195.651763][ T6421] BTRFS info (device loop1): turning on flush-on-commit [ 195.667133][ T6421] BTRFS info (device loop1): enabling auto defrag [ 195.693108][ T6421] BTRFS info (device loop1): max_inline at 4096 [ 195.744413][ T6421] BTRFS info (device loop1): using free space tree [ 195.766538][ T6421] BTRFS info (device loop1): has skinny extents [ 196.274479][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 196.784668][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.804315][ T4230] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 196.813434][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.877176][ T4230] usb 5-1: config 0 descriptor?? [ 197.005198][ T6421] BTRFS error (device loop1): open_ctree failed: -12 [ 197.475568][ T6535] device syzkaller0 entered promiscuous mode [ 197.521320][ T6541] tipc: Enabling of bearer rejected, failed to enable media [ 197.624606][ T4230] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 197.635933][ T4230] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input9 [ 197.810610][ T4230] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 197.992440][ T6563] loop1: detected capacity change from 0 to 128 [ 198.091119][ T6559] loop2: detected capacity change from 0 to 8192 [ 198.091177][ T6563] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 198.204336][ T26] audit: type=1800 audit(1786178366.573:55): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.610" name="file2" dev="loop1" ino=95 res=0 errno=0 [ 198.499907][ T6572] program syz.2.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.515926][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.611'. [ 199.104698][ T4639] usb 5-1: USB disconnect, device number 5 [ 199.227083][ T6580] loop4: detected capacity change from 0 to 256 [ 199.388461][ T6587] loop1: detected capacity change from 0 to 512 [ 199.481232][ T6587] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 199.481232][ T6587] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 199.481232][ T6587] [ 199.532641][ T6587] EXT4-fs (loop1): Unrecognized mount option "fsuuid=443m4faa-032d-4d61-d787-3d75kaf4" or missing value [ 199.616291][ T6591] loop4: detected capacity change from 0 to 512 [ 199.710960][ T6598] tipc: Enabling of bearer rejected, failed to enable media [ 199.792680][ T6591] EXT4-fs (loop4): 1 orphan inode deleted [ 199.863523][ T6591] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 199.952700][ T6591] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.011054][ T26] audit: type=1800 audit(1786178368.383:56): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.627" name="idVendor" dev="configfs" ino=39510 res=0 errno=0 [ 200.171423][ T6628] loop1: detected capacity change from 0 to 164 [ 200.211869][ T6591] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 200.261292][ T6632] overlayfs: failed to clone upperpath [ 200.297141][ T6637] loop2: detected capacity change from 0 to 256 [ 201.657271][ T6668] tipc: Enabling of bearer rejected, failed to enable media [ 202.294450][ T4639] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 202.724829][ T4639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.823659][ T4639] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 202.924906][ T4639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.939231][ T4639] usb 3-1: config 0 descriptor?? [ 203.032658][ T6710] loop4: detected capacity change from 0 to 4096 [ 203.090124][ T6710] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 203.142860][ T6710] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 203.204364][ T4639] ath6kl: Failed to submit usb control message: -71 [ 203.210210][ T6710] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 203.211013][ T4639] ath6kl: unable to send the bmi data to the device: -71 [ 203.236589][ T6717] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 203.244971][ T6717] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 203.253505][ T6717] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 203.283402][ T6710] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 203.297423][ T4639] ath6kl: Unable to send get target info: -71 [ 203.339565][ T6710] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 203.356799][ T4639] ath6kl: Failed to init ath6kl core: -71 [ 203.384330][ T6710] ntfs: volume version 3.1. [ 203.392423][ T4639] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 203.406044][ T6710] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 203.423649][ T4639] usb 3-1: USB disconnect, device number 8 [ 203.443473][ T6710] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 203.470834][ T6704] loop1: detected capacity change from 0 to 32768 [ 203.477823][ T6710] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 203.499069][ T6710] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 203.533779][ T6710] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 203.569131][ T6704] XFS (loop1): Mounting V5 Filesystem [ 203.577214][ T6710] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 203.592119][ T6710] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 203.606362][ T6710] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 203.681457][ T6704] XFS (loop1): Ending clean mount [ 203.890743][ T4196] XFS (loop1): Unmounting Filesystem [ 204.154305][ T5618] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 204.155563][ T4639] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.204930][ T6741] loop1: detected capacity change from 0 to 512 [ 204.251991][ T6741] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.665: inode has both inline data and extents flags [ 204.265945][ T6741] EXT4-fs (loop1): Remounting filesystem read-only [ 204.272712][ T6741] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.665: couldn't read orphan inode 15 (err -117) [ 204.291658][ T6741] EXT4-fs (loop1): Remounting filesystem read-only [ 204.298726][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,usrquota,errors=remount-ro,grpid,. Quota mode: writeback. [ 204.334458][ T6741] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.665: Directory hole found for htree leaf block 0 [ 204.411387][ T6741] EXT4-fs (loop1): Remounting filesystem read-only [ 204.422447][ T6744] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.665: Directory hole found for htree leaf block 0 [ 204.440320][ T5618] usb 5-1: Using ep0 maxpacket: 16 [ 204.452924][ T4639] usb 3-1: Using ep0 maxpacket: 16 [ 204.472655][ T6748] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 204.483167][ T6748] tipc: Enabled bearer , priority 10 [ 204.529094][ T6744] EXT4-fs (loop1): Remounting filesystem read-only [ 204.684462][ T5618] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 204.692580][ T5618] usb 5-1: config 0 has no interface number 0 [ 204.699527][ T5618] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 204.712262][ T5618] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 204.766347][ T4639] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 204.812206][ T4639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.839220][ T4639] usb 3-1: Product: syz [ 204.844917][ T4639] usb 3-1: Manufacturer: syz [ 204.851584][ T4639] usb 3-1: SerialNumber: syz [ 204.875860][ T4639] usb 3-1: config 0 descriptor?? [ 204.879571][ T5618] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 204.890008][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.903836][ T5618] usb 5-1: Product: syz [ 204.908401][ T5618] usb 5-1: Manufacturer: syz [ 204.913306][ T5618] usb 5-1: SerialNumber: syz [ 204.926577][ T5618] usb 5-1: config 0 descriptor?? [ 204.947807][ T6735] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.955143][ T6735] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.956337][ T4639] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 205.189726][ T6735] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 205.199920][ T6735] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 205.214353][ T4232] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 205.386889][ T6774] capability: warning: `syz.0.677' uses deprecated v2 capabilities in a way that may be insecure [ 205.444462][ T5618] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 205.487423][ T5901] tipc: Node number set to 1836472286 [ 205.628651][ T4639] ssu100: probe of 3-1:0.0 failed with error -71 [ 205.652916][ T4639] usb 3-1: USB disconnect, device number 9 [ 205.664389][ T4232] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.691375][ T4232] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 205.749073][ T4232] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.783874][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.797562][ T4232] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 205.807285][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.839592][ T4232] usb 2-1: config 0 descriptor?? [ 205.865881][ T6763] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 205.885723][ T5618] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 205.907252][ T5618] asix: probe of 5-1:0.34 failed with error -71 [ 205.939991][ T5618] usb 5-1: USB disconnect, device number 6 [ 206.326111][ T4232] elecom 0003:056E:00FB.0006: unknown main item tag 0x2 [ 206.333109][ T4232] elecom 0003:056E:00FB.0006: item fetching failed at offset 6/40 [ 206.352060][ T4232] elecom: probe of 0003:056E:00FB.0006 failed with error -22 [ 206.495618][ T6841] nvme nvme0: rdma connection establishment failed (-104) [ 206.528249][ T4232] usb 2-1: USB disconnect, device number 4 [ 207.165059][ T6868] ubi0: attaching mtd0 [ 207.180898][ T6868] ubi0: scanning is finished [ 207.185812][ T6868] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 207.758898][ T6868] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 208.092910][ T6881] comedi comedi3: pcl711: I/O port conflict (0x100,16) [ 208.222078][ T6891] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 208.235200][ T6891] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 208.902625][ T6897] process 'syz.4.715' launched './file2' with NULL argv: empty string added [ 209.238769][ T6907] autofs4:pid:6907:autofs_fill_super: called with bogus options [ 209.272286][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.288508][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.296873][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.722183][ T6908] fuse: Unknown parameter '0x0000000000000004' [ 209.795935][ T5618] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 209.943705][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 210.057671][ T5618] usb 2-1: Using ep0 maxpacket: 8 [ 210.149841][ T4232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 210.184462][ T5618] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 210.193699][ T5618] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 210.350728][ T5618] usb 2-1: config 6 has no interface number 0 [ 210.356961][ T5618] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.764452][ T5618] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 211.764689][ T4232] usb 3-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice= 1.00 [ 211.773554][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.773579][ T5618] usb 2-1: Product: syz [ 211.804481][ T5618] usb 2-1: can't set config #6, error -71 [ 211.828408][ T5618] usb 2-1: USB disconnect, device number 5 [ 211.840079][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.858664][ T4232] usb 3-1: Product: syz [ 211.862880][ T4232] usb 3-1: Manufacturer: syz [ 211.883630][ T4232] usb 3-1: SerialNumber: syz [ 211.966797][ T4232] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (2040:6500, interface 0, class 0) [ 211.981439][ T4232] em28xx 3-1:1.0: DVB interface 0 found: bulk [ 212.064524][ T1107] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 212.079058][ T6982] loop1: detected capacity change from 0 to 1024 [ 212.118518][ T6982] hfsplus: invalid length 32517 has been corrected to 255 [ 212.147896][ T6982] hfsplus: invalid length 32517 has been corrected to 255 [ 212.162798][ T6982] hfsplus: invalid length 32517 has been corrected to 255 [ 212.181122][ T6982] hfsplus: invalid length 32517 has been corrected to 255 [ 212.240754][ T5151] hfsplus: b-tree write err: -5, ino 4 [ 212.246824][ T5151] hfsplus: b-tree write err: -5, ino 2 [ 212.434505][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.449032][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.476441][ T1107] usb 5-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 212.485844][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.501853][ T1107] usb 5-1: config 0 descriptor?? [ 212.524605][ T6962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.553863][ T7013] syz.3.755 uses obsolete (PF_INET,SOCK_PACKET) [ 212.588830][ T7015] device syzkaller0 entered promiscuous mode [ 212.765389][ T6962] udc-core: couldn't find an available UDC or it's busy [ 212.776860][ T6962] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 212.877498][ T7033] loop1: detected capacity change from 0 to 512 [ 212.934094][ T7033] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 213.008236][ T7033] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.761: Unimplemented hash flags: 0x0001 [ 213.022100][ T7033] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.761: Corrupt directory, running e2fsck is recommended [ 213.038816][ T1107] wacom 0003:056A:00EC.0007: unknown main item tag 0xd [ 213.046351][ T7033] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.761: path /138/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 213.069854][ T1107] wacom 0003:056A:00EC.0007: unknown main item tag 0x4 [ 213.080899][ T1107] wacom 0003:056A:00EC.0007: hidraw0: USB HID v0.09 Device [HID 056a:00ec] on usb-dummy_hcd.4-1/input0 [ 213.159129][ T7052] 9pnet: Insufficient options for proto=fd [ 213.239361][ T1107] usb 5-1: USB disconnect, device number 7 [ 213.344508][ T4232] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 214.191291][ T7071] netlink: 188 bytes leftover after parsing attributes in process `syz.1.770'. [ 214.394724][ T4232] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 214.415467][ T4232] em28xx 3-1:1.0: board has no eeprom [ 214.544297][ T4232] em28xx 3-1:1.0: Identified as Hauppauge WinTV HVR 900 (card=10) [ 214.581001][ T4232] em28xx 3-1:1.0: dvb set to bulk mode. [ 214.622915][ T4232] usb 3-1: USB disconnect, device number 10 [ 214.640430][ T4232] em28xx 3-1:1.0: Disconnecting em28xx [ 214.647099][ T4639] em28xx 3-1:1.0: Binding DVB extension [ 214.677779][ T4639] zl10353_read_register: readreg error (reg=127, ret==-19) [ 214.742136][ T7099] overlayfs: missing 'lowerdir' [ 215.017947][ T4639] em28xx 3-1:1.0: dvb frontend not attached. Can't attach xc3028 [ 215.026027][ T4639] em28xx 3-1:1.0: Registering input extension [ 215.032940][ T4232] em28xx 3-1:1.0: Closing input extension [ 215.068944][ T4232] em28xx 3-1:1.0: Freeing device [ 216.856849][ T7158] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 216.954324][ T5610] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.191762][ T7153] loop2: detected capacity change from 0 to 32768 [ 217.249077][ T7153] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.791 (7153) [ 217.272236][ T7153] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 217.338684][ T7169] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7169] [ 217.361240][ T7169] netlink: 260 bytes leftover after parsing attributes in process `syz.3.798'. [ 217.370560][ T7169] netlink: 104 bytes leftover after parsing attributes in process `syz.3.798'. [ 217.379591][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 217.393354][ T4198] Bluetooth: Wrong link type (-22) [ 217.671047][ T7153] BTRFS info (device loop2): setting nodatacow, compression disabled [ 217.815529][ T7153] BTRFS info (device loop2): turning on flush-on-commit [ 217.878678][ T7153] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 217.888025][ T7153] BTRFS info (device loop2): use lzo compression, level 0 [ 217.895192][ T7153] BTRFS info (device loop2): setting nodatasum [ 217.901413][ T7153] BTRFS info (device loop2): use no compression [ 217.924284][ T7153] BTRFS info (device loop2): trying to use backup root at mount time [ 217.953637][ T7153] BTRFS info (device loop2): max_inline at 0 [ 217.973980][ T7153] BTRFS info (device loop2): using free space tree [ 218.009457][ T7153] BTRFS info (device loop2): has skinny extents [ 218.044494][ T5610] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 218.061580][ T7176] overlayfs: failed to clone upperpath [ 218.084009][ T5610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.184473][ T5610] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 218.203915][ T5610] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 218.212100][ T5610] usb 5-1: Manufacturer: syz [ 218.235775][ T5610] usb 5-1: config 0 descriptor?? [ 218.674115][ T4553] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 218.860006][ T7153] BTRFS warning (device loop2): couldn't read tree root [ 218.987231][ T4553] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 219.040773][ T7153] BTRFS warning (device loop2): couldn't read tree root [ 219.064319][ T5610] rc_core: IR keymap rc-hauppauge not found [ 219.070681][ T5610] Registered IR keymap rc-empty [ 219.077967][ T7153] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 219.119529][ T5610] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 219.185338][ T7153] BTRFS warning (device loop2): couldn't read tree root [ 219.190602][ T7215] loop4: detected capacity change from 0 to 256 [ 219.224967][ T5610] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 219.252979][ T7153] BTRFS info (device loop2): enabling ssd optimizations [ 219.266274][ T7153] BTRFS info (device loop2): clearing free space tree [ 219.280876][ T7153] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 219.285377][ T7215] exfat: Deprecated parameter 'utf8' [ 219.296089][ T7153] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 219.314546][ T7215] exfat: Deprecated parameter 'namecase' [ 219.314654][ T5610] usb 5-1: USB disconnect, device number 8 [ 219.320217][ T7215] exfat: Deprecated parameter 'utf8' [ 219.355666][ T7153] BTRFS info (device loop2): creating free space tree [ 219.368142][ T7153] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 219.390410][ T7215] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 219.413159][ T7153] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 219.469168][ T7215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 219.688510][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 219.835092][ T7234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.465541][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 220.605778][ T4230] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 220.614093][ T4230] usb 2-1: config 179 has no interface number 0 [ 220.654427][ T4230] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 220.674909][ T4230] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 220.686934][ T4230] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.718782][ T4230] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 220.751306][ T4230] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 220.771309][ T4230] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 220.783829][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 221.553666][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.591471][ T7213] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 222.051509][ T2303] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15 [ 222.824472][ T4176] usb 2-1: USB disconnect, device number 6 [ 222.844385][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 222.852725][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 222.861633][ T4176] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 223.056859][ T7267] loop4: detected capacity change from 0 to 1024 [ 223.143785][ T7267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.178167][ T7273] loop2: detected capacity change from 0 to 512 [ 223.827629][ T7273] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 224.110367][ T7273] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,barrier=0x000000000000000d,delalloc,stripe=0x0000000000000b75,data_err=ignore,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 224.529559][ T7273] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.693864][ T7288] sctp: failed to load transform for md5: -2 [ 226.860861][ T7310] loop4: detected capacity change from 0 to 128 [ 227.656792][ T7317] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7317] [ 227.692921][ T7317] netlink: 260 bytes leftover after parsing attributes in process `syz.4.830'. [ 227.702184][ T7317] netlink: 104 bytes leftover after parsing attributes in process `syz.4.830'. [ 227.711210][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 227.786002][ T4194] Bluetooth: Wrong link type (-22) [ 229.903930][ T7357] loop1: detected capacity change from 0 to 8192 [ 229.919099][ T7368] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 231.630978][ T7402] device syzkaller0 entered promiscuous mode [ 231.661191][ T7401] loop4: detected capacity change from 0 to 4096 [ 231.711632][ T7401] __ntfs_error: 3 callbacks suppressed [ 231.711650][ T7401] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 231.738121][ T7401] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 231.800090][ T7401] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 231.849027][ T7411] device syzkaller0 entered promiscuous mode [ 231.868241][ T7401] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 231.899382][ T7401] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 231.926239][ T7401] ntfs: volume version 3.1. [ 231.945974][ T7401] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 232.171143][ T7401] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 232.192625][ T7401] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 232.204113][ T7401] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 232.460079][ T7401] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 232.694385][ T7403] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7403] [ 232.741591][ T7423] loop2: detected capacity change from 0 to 8192 [ 232.761599][ T4198] Bluetooth: Wrong link type (-22) [ 232.768609][ T7403] netlink: 260 bytes leftover after parsing attributes in process `syz.0.854'. [ 232.777690][ T7403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.854'. [ 232.786711][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 233.490191][ T7434] device syzkaller0 entered promiscuous mode [ 234.969526][ T7457] device syzkaller0 entered promiscuous mode [ 236.091536][ T7479] Bluetooth: hci0: unsupported parameter 255 [ 236.164845][ T7479] Bluetooth: hci0: unsupported parameter 255 [ 236.300271][ T7488] loop2: detected capacity change from 0 to 8192 [ 236.300658][ T7485] loop4: detected capacity change from 0 to 8192 [ 237.271669][ T7502] program syz.4.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.760815][ T7512] device syzkaller0 entered promiscuous mode [ 237.779919][ T7504] loop1: detected capacity change from 0 to 8192 [ 238.672781][ T7530] device syzkaller0 entered promiscuous mode [ 239.578850][ T7561] lo speed is unknown, defaulting to 1000 [ 239.584973][ T7561] lo speed is unknown, defaulting to 1000 [ 239.602652][ T7561] lo speed is unknown, defaulting to 1000 [ 240.243013][ T7561] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.309218][ T7561] lo speed is unknown, defaulting to 1000 [ 240.325298][ T7561] lo speed is unknown, defaulting to 1000 [ 240.336792][ T7561] lo speed is unknown, defaulting to 1000 [ 240.389257][ T7561] lo speed is unknown, defaulting to 1000 [ 240.397255][ T7561] lo speed is unknown, defaulting to 1000 [ 242.610013][ T7593] loop4: detected capacity change from 0 to 8192 [ 242.913538][ T7622] device syzkaller0 entered promiscuous mode [ 244.809302][ T7680] device syzkaller0 entered promiscuous mode [ 246.570369][ T7700] device syzkaller0 entered promiscuous mode [ 246.890099][ T7716] loop1: detected capacity change from 0 to 128 [ 247.198533][ T7730] loop2: detected capacity change from 0 to 64 [ 247.257637][ T7731] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7731] [ 247.291906][ T7731] netlink: 260 bytes leftover after parsing attributes in process `syz.1.938'. [ 247.301152][ T7731] netlink: 104 bytes leftover after parsing attributes in process `syz.1.938'. [ 247.310221][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 247.334451][ T4194] Bluetooth: Wrong link type (-22) [ 248.056604][ T5616] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 249.300762][ T7745] device syzkaller0 entered promiscuous mode [ 250.314432][ T5616] usb 5-1: device descriptor read/all, error -71 [ 250.704298][ T5616] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 251.724344][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 252.477921][ T5616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.658599][ T5616] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 252.684286][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.706164][ T5616] usb 5-1: config 0 descriptor?? [ 252.805619][ T7792] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7792] [ 252.829235][ T7792] netlink: 260 bytes leftover after parsing attributes in process `syz.3.957'. [ 252.839185][ T7792] netlink: 104 bytes leftover after parsing attributes in process `syz.3.957'. [ 252.848257][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 252.894555][ T4194] Bluetooth: Wrong link type (-22) [ 253.316064][ T7799] 9pnet: Insufficient options for proto=fd [ 253.444553][ T5616] usbhid 5-1:0.0: can't add hid device: -71 [ 253.453517][ T5616] usbhid: probe of 5-1:0.0 failed with error -71 [ 253.945186][ T7815] md: loop0 has zero or unknown size, marking faulty! [ 254.126698][ T5616] usb 5-1: USB disconnect, device number 10 [ 255.470291][ T7844] loop2: detected capacity change from 0 to 256 [ 255.520353][ T7818] loop4: detected capacity change from 0 to 4096 [ 255.650609][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.768698][ T7848] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.540235][ T7855] loop1: detected capacity change from 0 to 512 [ 256.712164][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 256.746084][ T7855] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.976: inode has both inline data and extents flags [ 257.900773][ T7855] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.976: couldn't read orphan inode 15 (err -117) [ 257.921140][ T7855] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 258.536206][ T7910] device syzkaller0 entered promiscuous mode [ 259.148107][ T7927] device syzkaller0 entered promiscuous mode [ 259.313964][ T7936] vxcan1: tx drop: invalid da for name 0x0000100000000000 [ 261.057495][ T7961] device syzkaller0 entered promiscuous mode [ 261.083560][ T7968] device syzkaller0 entered promiscuous mode [ 261.331901][ T7981] loop4: detected capacity change from 0 to 128 [ 261.347237][ T7982] loop1: detected capacity change from 0 to 256 [ 261.405200][ T7976] loop2: detected capacity change from 0 to 8192 [ 261.552657][ T7982] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 261.710763][ T7994] program syz.2.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.799015][ T7982] FAT-fs (loop1): Filesystem has been set read-only [ 261.832200][ T7982] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 261.882166][ T7981] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.071068][ T7981] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.092204][ T7982] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 262.147471][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 262.147499][ T26] audit: type=1800 audit(1786178430.483:57): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1006" name="file1" dev="loop1" ino=1048655 res=0 errno=0 [ 262.757353][ T8010] device syzkaller0 entered promiscuous mode [ 262.956321][ T8025] device syzkaller0 entered promiscuous mode [ 263.010437][ T26] audit: type=1800 audit(1786178431.383:58): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1021" name="streaming_maxpacket" dev="configfs" ino=42618 res=0 errno=0 [ 263.257882][ T8031] loop4: detected capacity change from 0 to 8192 [ 264.461973][ T8048] program syz.4.1023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.453449][ T8106] loop2: detected capacity change from 0 to 8192 [ 266.423742][ T8130] program syz.2.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.438938][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1034'. [ 266.768031][ T8135] loop4: detected capacity change from 0 to 512 [ 266.877249][ T8135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.974668][ T8135] EXT4-fs (loop4): 1 truncate cleaned up [ 266.980352][ T8135] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.054455][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 267.082222][ T26] audit: type=1800 audit(1786178435.453:59): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1044" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 267.415068][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.465801][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 267.745298][ T23] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 267.767357][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.811343][ T23] usb 2-1: Product: syz [ 267.840554][ T23] usb 2-1: Manufacturer: syz [ 267.875046][ T23] usb 2-1: SerialNumber: syz [ 268.247252][ T23] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 268.269151][ T8176] loop2: detected capacity change from 0 to 8192 [ 268.530115][ T8188] program syz.2.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.547077][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'. [ 269.599937][ T5605] usb 2-1: USB disconnect, device number 7 [ 269.636052][ T5605] usblp0: removed [ 270.533988][ T8217] device syzkaller0 entered promiscuous mode [ 270.568609][ T8222] device syzkaller0 entered promiscuous mode [ 270.717412][ T8233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1073'. [ 270.897648][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.910442][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.504461][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 271.766586][ T8267] device syzkaller0 entered promiscuous mode [ 271.924511][ T23] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 271.935307][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.086280][ T8292] Bluetooth: hci0: unsupported parameter 255 [ 272.094119][ T8292] Bluetooth: hci0: unsupported parameter 255 [ 272.126452][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.169213][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.215917][ T23] usb 3-1: Product: syz [ 272.230930][ T23] usb 3-1: Manufacturer: syz [ 272.241496][ T23] usb 3-1: SerialNumber: syz [ 272.265861][ T23] usb 3-1: config 0 descriptor?? [ 272.285251][ T8261] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 272.327608][ T23] usb 3-1: selecting invalid altsetting 0 [ 272.537271][ T8261] usb 3-1: selecting invalid altsetting 0 [ 272.543475][ T8261] usb 3-1: 0:0: usb_set_interface failed (-22) [ 272.557218][ T8261] usb 3-1: selecting invalid altsetting 0 [ 272.563128][ T8261] usb 3-1: 0:0: usb_set_interface failed (-22) [ 272.571847][ T8261] usb 3-1: selecting invalid altsetting 0 [ 272.586986][ T8261] usb 3-1: 0:0: usb_set_interface failed (-22) [ 272.602531][ T8314] device syzkaller0 entered promiscuous mode [ 272.604371][ T8261] usb 3-1: selecting invalid altsetting 0 [ 272.616183][ T8261] usb 3-1: 0:0: usb_set_interface failed (-22) [ 272.634833][ T8258] usb 3-1: selecting invalid altsetting 0 [ 272.646198][ T8258] usb 3-1: 0:0: usb_set_interface failed (-22) [ 272.684303][ T8258] usb 3-1: selecting invalid altsetting 0 [ 272.704288][ T8258] usb 3-1: 0:0: usb_set_interface failed (-22) [ 272.725609][ T8258] usb 3-1: selecting invalid altsetting 0 [ 272.732314][ T8258] usb 3-1: 0:0: usb_set_interface failed (-22) [ 272.765718][ T5605] usb 3-1: USB disconnect, device number 11 [ 272.851286][ T8318] loop1: detected capacity change from 0 to 8192 [ 272.861628][ T8320] device syzkaller0 entered promiscuous mode [ 272.915545][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 273.064112][ T8329] program syz.1.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.077897][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1100'. [ 273.524697][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1104'. [ 273.917305][ T8352] device syzkaller0 entered promiscuous mode [ 274.086953][ T8360] loop4: detected capacity change from 0 to 128 [ 274.158751][ T8360] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.319835][ T8360] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.541810][ T8373] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1118'. [ 274.666792][ T8373] device gretap0 entered promiscuous mode [ 274.728204][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'. [ 274.754698][ T8378] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1118'. [ 274.763674][ T8378] 0ªî{X¹¦: renamed from gretap0 [ 274.926461][ T8378] device 30ªî{X¹¦ left promiscuous mode [ 274.946680][ T8378] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 275.953213][ T8390] loop2: detected capacity change from 0 to 8192 [ 276.206833][ T8408] program syz.2.1122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.223029][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1122'. [ 276.359067][ T8410] loop1: detected capacity change from 0 to 128 [ 276.555279][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1123'. [ 276.722174][ T8415] attempt to access beyond end of device [ 276.722174][ T8415] loop1: rw=2049, want=425, limit=128 [ 277.037904][ T8423] device syzkaller0 entered promiscuous mode [ 277.666785][ T8445] loop2: detected capacity change from 0 to 128 [ 277.891034][ T8445] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 278.002768][ T8445] affs: Error parsing options [ 278.570852][ T4904] libceph: connect (1)[c::]:6789 error -101 [ 278.587007][ T4904] libceph: mon0 (1)[c::]:6789 connect error [ 278.649898][ T8457] loop1: detected capacity change from 0 to 8192 [ 278.689139][ T8445] ceph: No mds server is up or the cluster is laggy [ 278.924111][ T23] libceph: connect (1)[c::]:6789 error -101 [ 278.969232][ T8491] program syz.1.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.984906][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1140'. [ 279.035758][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 279.318455][ T8494] device syzkaller0 entered promiscuous mode [ 279.937500][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 279.981943][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 281.322833][ T8571] loop1: detected capacity change from 0 to 8192 [ 281.565237][ T8589] program syz.1.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.580446][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1165'. [ 281.768893][ T8577] loop4: detected capacity change from 0 to 8192 [ 282.603492][ T8602] program syz.4.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.620360][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'. [ 283.157966][ T8609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.661183][ T8609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.740222][ T8616] overlayfs: failed to resolve './file2': -2 [ 284.195740][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1179'. [ 284.392092][ T8637] device ip6gre1 entered promiscuous mode [ 284.555743][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 284.644958][ T8629] loop4: detected capacity change from 0 to 8192 [ 285.048344][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1180'. [ 285.279605][ T8643] Illegal XDP return value 4294967295, expect packet loss! [ 285.304629][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 285.521804][ T8647] program syz.4.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.544403][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'. [ 285.636288][ T23] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 285.861477][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.894149][ T8640] loop2: detected capacity change from 0 to 8192 [ 285.900720][ T23] usb 2-1: Product: syz [ 285.931872][ T23] usb 2-1: Manufacturer: syz [ 285.954013][ T23] usb 2-1: SerialNumber: syz [ 285.979930][ T23] usb 2-1: config 0 descriptor?? [ 286.185255][ T8633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 286.239884][ T8654] program syz.2.1185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.254042][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1185'. [ 286.255111][ T23] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 286.630923][ T23] usb 2-1: USB disconnect, device number 8 [ 286.669105][ T8658] device syzkaller0 entered promiscuous mode [ 286.681484][ T8660] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 286.740707][ T8662] device bond0 entered promiscuous mode [ 286.753051][ T8662] device bond_slave_0 entered promiscuous mode [ 286.776529][ T8662] device bond_slave_1 entered promiscuous mode [ 286.799958][ T8662] device batadv0 entered promiscuous mode [ 286.819203][ T8665] netlink: 'syz.4.1189': attribute type 10 has an invalid length. [ 286.849788][ T8665] device syz_tun entered promiscuous mode [ 286.917556][ T8665] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 287.015434][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 288.545995][ T8691] overlayfs: failed to clone upperpath [ 288.638135][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1196'. [ 289.317722][ T8689] loop2: detected capacity change from 0 to 8192 [ 290.145924][ T8708] program syz.2.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.170262][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1202'. [ 290.556447][ T8701] loop4: detected capacity change from 0 to 8192 [ 291.361079][ T8726] program syz.4.1207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.595494][ T8731] loop2: detected capacity change from 0 to 256 [ 291.829667][ T8731] FAT-fs (loop2): codepage cp73 not found [ 291.860124][ T8734] loop1: detected capacity change from 0 to 8192 [ 292.098590][ T8742] program syz.1.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.114296][ T5616] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 294.359527][ T5616] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.368545][ T5616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.379170][ T5616] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.388650][ T5616] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.458473][ T8788] loop1: detected capacity change from 0 to 128 [ 294.544494][ T5616] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.554282][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.562264][ T8788] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 294.619203][ T8788] affs: Error parsing options [ 294.665738][ T4639] libceph: connect (1)[c::]:6789 error -101 [ 294.696779][ T4639] libceph: mon0 (1)[c::]:6789 connect error [ 294.704324][ T5616] usb 3-1: Product: syz [ 294.708514][ T5616] usb 3-1: Manufacturer: syz [ 294.765190][ T5616] cdc_wdm 3-1:1.0: skipping garbage [ 294.770445][ T5616] cdc_wdm 3-1:1.0: skipping garbage [ 294.785567][ T5616] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 294.791628][ T5616] cdc_wdm 3-1:1.0: Unknown control protocol [ 294.842317][ T8793] loop4: detected capacity change from 0 to 2048 [ 294.936876][ T8793] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 294.958909][ T4639] libceph: connect (1)[c::]:6789 error -101 [ 294.971476][ T5616] usb 3-1: USB disconnect, device number 12 [ 294.973920][ T8793] UDF-fs: Scanning with blocksize 512 failed [ 295.002807][ T4639] libceph: mon0 (1)[c::]:6789 connect error [ 295.042633][ T8793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.063182][ T8812] device syzkaller0 entered promiscuous mode [ 295.258643][ T8788] ceph: No mds server is up or the cluster is laggy [ 295.747847][ T23] libceph: connect (1)[c::]:6789 error -101 [ 295.770469][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 296.187568][ T8791] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134745186 lbcount: 134747136 extent 0+133856256 [ 296.404734][ T2303] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 296.904551][ T2303] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 297.111997][ T2303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 297.165103][ T2303] usb 3-1: Product: syz [ 297.188318][ T2303] usb 3-1: Manufacturer: syz [ 297.275691][ T2303] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 297.288292][ T5166] attempt to access beyond end of device [ 297.288292][ T5166] loop4: rw=1, want=2050, limit=2048 [ 297.303690][ T5166] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 297.334539][ T2303] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 297.337161][ T8875] device syzkaller0 entered promiscuous mode [ 297.412350][ T5166] attempt to access beyond end of device [ 297.412350][ T5166] loop4: rw=1, want=2050, limit=2048 [ 297.430866][ T5166] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 297.469672][ T5166] attempt to access beyond end of device [ 297.469672][ T5166] loop4: rw=1, want=2050, limit=2048 [ 297.510422][ T5166] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 297.521665][ T5166] attempt to access beyond end of device [ 297.521665][ T5166] loop4: rw=1, want=2050, limit=2048 [ 297.536318][ T5166] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 297.580701][ T5166] attempt to access beyond end of device [ 297.580701][ T5166] loop4: rw=1, want=2052, limit=2048 [ 297.603645][ T5166] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 297.612797][ T5166] attempt to access beyond end of device [ 297.612797][ T5166] loop4: rw=1, want=2052, limit=2048 [ 297.630031][ T5166] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 297.639828][ T5166] attempt to access beyond end of device [ 297.639828][ T5166] loop4: rw=1, want=2052, limit=2048 [ 297.656978][ T5166] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 297.666296][ T5166] attempt to access beyond end of device [ 297.666296][ T5166] loop4: rw=1, want=2052, limit=2048 [ 297.697351][ T5166] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 297.710482][ T5166] attempt to access beyond end of device [ 297.710482][ T5166] loop4: rw=1, want=2054, limit=2048 [ 297.724327][ T5166] Buffer I/O error on dev loop4, logical block 1026, lost async page write [ 297.853548][ T8901] loop4: detected capacity change from 0 to 2048 [ 297.935574][ T8901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.527759][ T8890] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: syzkaller1 is not a unsigned long [ 298.863696][ T5616] usb 3-1: USB disconnect, device number 13 [ 298.883919][ T8915] tipc: Enabling of bearer rejected, failed to enable media [ 298.929998][ T5616] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 298.949420][ T8922] device syzkaller0 entered promiscuous mode [ 298.991205][ T5616] iuu_phoenix 3-1:1.0: device disconnected [ 300.076490][ T8943] device syzkaller0 entered promiscuous mode [ 300.311578][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1261'. [ 301.061200][ T8964] tipc: Enabling of bearer rejected, failed to enable media [ 301.658474][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 301.678761][ T8976] sctp_transport_update_pmtu: 49 callbacks suppressed [ 301.678778][ T8976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 301.722355][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 301.775293][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 301.811745][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 302.023844][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 302.196468][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 302.372098][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 303.029501][ T9009] tipc: Enabled bearer , priority 0 [ 303.200270][ T9012] device syzkaller0 entered promiscuous mode [ 303.277529][ T9013] tipc: Resetting bearer [ 303.393835][ T9008] tipc: Resetting bearer [ 303.560358][ T9008] tipc: Disabling bearer [ 303.685523][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1275'. [ 303.943773][ T9019] tipc: Enabling of bearer rejected, failed to enable media [ 304.706823][ T9022] hub 8-0:1.0: USB hub found [ 304.882923][ T9022] hub 8-0:1.0: 1 port detected [ 305.048677][ T9030] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 305.057768][ T9030] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 307.033018][ T9068] tipc: Enabling of bearer rejected, failed to enable media [ 307.047635][ T9059] loop1: detected capacity change from 0 to 8192 [ 308.045488][ T9088] program syz.1.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.414937][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'. [ 309.084802][ T2303] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 309.484527][ T2303] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.528879][ T2303] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 309.591331][ T2303] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.612928][ T2303] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.621251][ T2303] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 309.636965][ T2303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.688448][ T2303] usb 3-1: config 0 descriptor?? [ 309.745163][ T9104] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 309.816861][ T9138] loop1: detected capacity change from 0 to 256 [ 309.907030][ T9138] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 309.946749][ T9141] loop4: detected capacity change from 0 to 8192 [ 310.213264][ T9153] program syz.4.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.230378][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1310'. [ 310.504439][ T4176] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 310.607045][ T2303] elecom 0003:056E:00FB.0008: unknown main item tag 0x2 [ 310.614459][ T2303] elecom 0003:056E:00FB.0008: item fetching failed at offset 6/40 [ 310.623398][ T2303] elecom: probe of 0003:056E:00FB.0008 failed with error -22 [ 310.707184][ T9157] tipc: Enabling of bearer rejected, failed to enable media [ 310.857773][ T5303] usb 3-1: USB disconnect, device number 14 [ 310.864389][ T4176] usb 2-1: Using ep0 maxpacket: 32 [ 311.004950][ T4176] usb 2-1: config index 0 descriptor too short (expected 16914, got 18) [ 311.016053][ T4176] usb 2-1: config 232 has too many interfaces: 95, using maximum allowed: 32 [ 311.051565][ T4176] usb 2-1: config 232 has an invalid descriptor of length 0, skipping remainder of the config [ 311.074126][ T4176] usb 2-1: config 232 has 0 interfaces, different from the descriptor's value: 95 [ 311.097642][ T4176] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 311.110104][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.490105][ T4176] usb 2-1: string descriptor 0 read error: -71 [ 311.523048][ T4176] usb 2-1: USB disconnect, device number 9 [ 311.603904][ T9200] loop2: detected capacity change from 0 to 8192 [ 311.828177][ T9218] program syz.2.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.842813][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 312.492114][ T9229] tipc: Enabling of bearer rejected, failed to enable media [ 312.514148][ T9229] device syzkaller0 entered promiscuous mode [ 315.639265][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1338'. [ 315.835835][ T9302] binder: 9297:9302 ioctl c0306201 0 returned -14 [ 317.092012][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.305343][ T9364] loop1: detected capacity change from 0 to 1024 [ 321.340266][ T9369] nvmet: adding nsid 1 to subsystem testnqn [ 321.360791][ T9364] EXT4-fs (loop1): Ignoring removed bh option [ 321.381057][ T26] audit: type=1800 audit(1786178489.753:60): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1363" name="enable" dev="configfs" ino=45056 res=0 errno=0 [ 321.403806][ T9373] overlayfs: failed to clone upperpath [ 321.479076][ T9364] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 321.623836][ T26] audit: type=1800 audit(1786178489.993:61): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1360" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 321.655276][ T9364] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 321.793425][ T9394] EXT4-fs (loop1): shut down requested (1) [ 321.837702][ T9364] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 322.699795][ T9398] dlm: Using TCP for communications [ 323.215760][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1369'. [ 323.320255][ T4338] udevd[4338]: setting mode of /dev/ttyGS1 to 020660 failed: No such file or directory [ 323.482751][ T4338] udevd[4338]: setting owner of /dev/ttyGS1 to uid=0, gid=18 failed: No such file or directory [ 324.044129][ T9423] loop4: detected capacity change from 0 to 8192 [ 324.315925][ T9447] program syz.4.1376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.333801][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1376'. [ 324.947406][ T9436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.158278][ T9464] program syz.4.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.183476][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1384'. [ 326.057751][ T9476] loop2: detected capacity change from 0 to 256 [ 326.083776][ T9479] syz.1.1387 sent an empty control message without MSG_MORE. [ 326.118694][ T9476] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 326.180599][ T9476] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 326.223728][ T9476] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 327.060091][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 327.122140][ T9506] loop4: detected capacity change from 0 to 128 [ 327.267868][ T9506] FAT-fs (loop4): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 327.378193][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1394'. [ 328.766621][ T9507] loop1: detected capacity change from 0 to 8192 [ 329.024107][ T9534] program syz.1.1398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.041759][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1398'. [ 329.419643][ T9499] loop2: detected capacity change from 0 to 32768 [ 331.882669][ T9561] loop1: detected capacity change from 0 to 8192 [ 332.347037][ T9578] program syz.1.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.442467][ T9553] loop2: detected capacity change from 0 to 32768 [ 333.455233][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1410'. [ 333.685922][ T4344] udevd[4344]: setting owner of /dev/ttyGS1 to uid=0, gid=18 failed: No such file or directory [ 335.166299][ T9614] loop2: detected capacity change from 0 to 1024 [ 335.553983][ T9614] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.329582][ T9614] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1426: corrupted xattr entries [ 336.716584][ T9661] device syzkaller0 entered promiscuous mode [ 336.747289][ T9663] device syzkaller0 entered promiscuous mode [ 337.509202][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'. [ 337.550167][ T9673] device syzkaller0 entered promiscuous mode [ 337.785332][ T4338] udevd[4338]: setting owner of /dev/ttyGS1 to uid=0, gid=18 failed: No such file or directory [ 340.798827][ T9716] device syzkaller0 entered promiscuous mode [ 340.941633][ T9729] device syzkaller0 entered promiscuous mode [ 341.173560][ T9732] loop4: detected capacity change from 0 to 8192 [ 341.438489][ T9745] program syz.4.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.461156][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1457'. [ 341.814633][ T9746] device sit0 entered promiscuous mode [ 341.862122][ T9746] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 341.905776][ T9746] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1460'. [ 344.844137][ T9775] device syzkaller0 entered promiscuous mode [ 349.223899][ T9811] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 349.461485][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 352.757670][ T9846] device syzkaller0 entered promiscuous mode [ 354.002202][ T9875] device syzkaller0 entered promiscuous mode [ 354.380978][ T9889] loop2: detected capacity change from 0 to 128 [ 354.560872][ T9889] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.628147][ T9889] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.637518][ T9904] loop4: detected capacity change from 0 to 256 [ 354.708543][ T9909] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1492'. [ 354.801364][ T9889] EXT4-fs (loop2): shut down requested (1) [ 354.812289][ T9889] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 355.038373][ T9920] loop4: detected capacity change from 0 to 8 [ 355.131805][ T9920] SQUASHFS error: zlib decompression failed, data probably corrupt [ 355.135605][ T9919] loop2: detected capacity change from 0 to 8192 [ 355.140048][ T9920] SQUASHFS error: Failed to read block 0x9b: -5 [ 355.152530][ T9920] SQUASHFS error: Unable to read metadata cache entry [99] [ 355.159793][ T9920] SQUASHFS error: Unable to read inode 0x127 [ 355.420069][ T9927] program syz.2.1495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.439644][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 355.880574][ T9935] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1498'. [ 355.935626][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.943490][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.289945][ T9958] loop4: detected capacity change from 0 to 512 [ 357.689462][ T9958] EXT4-fs (loop4): Ignoring removed oldalloc option [ 357.872651][ T9958] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.275500][ T9958] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,noinit_itable,,errors=continue. Quota mode: writeback. [ 358.551603][ T9958] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.363280][T10012] loop4: detected capacity change from 0 to 8192 [ 360.788248][T10027] program syz.4.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.801639][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1511'. [ 361.277133][T10034] device syzkaller0 entered promiscuous mode [ 362.437981][T10053] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 362.533240][T10053] pit: kvm: requested 31847 ns i8254 timer period limited to 200000 ns [ 362.559947][T10062] device syzkaller0 entered promiscuous mode [ 362.568313][T10053] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 362.591829][T10053] pit: kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 362.620378][T10053] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 362.643162][T10053] pit: kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 362.666692][T10053] pit: kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 362.700933][T10053] pit: kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 362.725488][T10053] pit: kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 362.753088][T10053] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 362.868391][T10069] loop4: detected capacity change from 0 to 8192 [ 363.661575][T10084] program syz.4.1529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.675467][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1529'. [ 363.891222][T10089] device syzkaller0 entered promiscuous mode [ 364.554471][ T5303] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 364.994651][ T5303] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 365.018839][ T5303] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 365.156946][ T5303] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 365.268194][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.499661][T10105] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 366.025369][T10141] device syzkaller0 entered promiscuous mode [ 366.049832][ T5616] usb 3-1: USB disconnect, device number 15 [ 366.171574][T10151] device syzkaller0 entered promiscuous mode [ 366.437997][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 366.531501][T10168] device wlan0 entered promiscuous mode [ 367.421743][T10178] loop1: detected capacity change from 0 to 8192 [ 367.464963][T10179] device syzkaller0 entered promiscuous mode [ 368.705456][T10204] program syz.1.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.716845][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'. [ 368.906659][T10211] block nbd4: shutting down sockets [ 371.053802][T10253] device syzkaller0 entered promiscuous mode [ 371.068460][T10247] loop1: detected capacity change from 0 to 1024 [ 371.151232][T10247] EXT4-fs (loop1): Ignoring removed bh option [ 371.168870][T10247] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 371.209808][T10260] device syzkaller0 entered promiscuous mode [ 371.700369][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1572'. [ 371.753523][T10247] Bluetooth: hci0: unsupported parameter 255 [ 371.781638][T10247] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 371.813606][T10268] device syzkaller0 entered promiscuous mode [ 372.095987][T10274] loop1: detected capacity change from 0 to 8192 [ 372.612485][T10274] program syz.1.1576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.627364][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 373.499380][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1579'. [ 374.309795][T10312] loop2: detected capacity change from 0 to 8192 [ 374.654538][T10336] program syz.2.1585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.668936][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1585'. [ 374.713855][T10337] device syzkaller0 entered promiscuous mode [ 375.267141][T10353] device syzkaller0 entered promiscuous mode [ 375.298379][T10348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1594'. [ 375.367153][T10354] loop2: detected capacity change from 0 to 256 [ 376.229696][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1592'. [ 376.389373][T10359] device syzkaller0 entered promiscuous mode [ 376.570731][T10365] device syzkaller0 entered promiscuous mode [ 376.757651][T10368] loop2: detected capacity change from 0 to 8192 [ 376.786573][T10374] device syzkaller0 entered promiscuous mode [ 376.822687][T10372] device syzkaller0 entered promiscuous mode [ 376.973577][T10379] program syz.2.1600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.426598][T10379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1600'. [ 377.746400][T10404] loop1: detected capacity change from 0 to 128 [ 377.840361][T10404] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 377.902831][T10405] loop2: detected capacity change from 0 to 8192 [ 377.909854][T10404] ext4 filesystem being mounted at /293/file1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 377.933475][T10413] device syzkaller0 entered promiscuous mode [ 378.170767][T10426] program syz.2.1608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.185985][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1608'. [ 378.525184][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.706052][T10433] device syzkaller0 entered promiscuous mode [ 379.812872][T10456] device syzkaller0 entered promiscuous mode [ 380.042282][T10470] loop2: detected capacity change from 0 to 8192 [ 380.235940][T10476] program syz.2.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.250656][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1625'. [ 380.321185][T10473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1626'. [ 381.095762][T10493] bond0: VLAN not yet supported [ 381.659802][T10524] device syzkaller0 entered promiscuous mode [ 382.808737][T10561] netlink: 'syz.0.1643': attribute type 11 has an invalid length. [ 382.823262][T10548] loop2: detected capacity change from 0 to 8192 [ 382.877343][T10566] device syzkaller0 entered promiscuous mode [ 383.049249][T10570] program syz.2.1640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.061952][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'. [ 488.644251][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 488.651232][ C0] (detected by 0, t=10502 jiffies, g=35041, q=24) [ 488.657736][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294985989-4294975487), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 488.671141][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g35041 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 488.682342][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 488.692312][ C0] rcu: RCU grace-period kthread stack dump: [ 488.698200][ C0] task:rcu_preempt state:R running task stack:26896 pid: 15 ppid: 2 flags:0x00004000 [ 488.709030][ C0] Call Trace: [ 488.712322][ C0] [ 488.715259][ C0] __schedule+0x11c3/0x4350 [ 488.719867][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 488.725386][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 488.730611][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 488.736516][ C0] ? _raw_spin_unlock+0x40/0x40 [ 488.741407][ C0] ? rcu_is_watching+0x11/0xa0 [ 488.746263][ C0] ? release_firmware_map_entry+0x190/0x190 [ 488.752183][ C0] schedule+0x11b/0x1e0 [ 488.756349][ C0] schedule_timeout+0x184/0x2d0 [ 488.761208][ C0] ? console_conditional_schedule+0x40/0x40 [ 488.767207][ C0] ? update_process_times+0x200/0x200 [ 488.772660][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 488.778275][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 488.783137][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 488.788354][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 488.793048][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 488.797841][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 488.803045][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 488.808253][ C0] rcu_gp_kthread+0x9a/0x370 [ 488.812853][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 488.818057][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 488.823982][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 488.829138][ C0] kthread+0x42e/0x520 [ 488.833225][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 488.838347][ C0] ? kthread_blkcg+0xd0/0xd0 [ 488.842951][ C0] ret_from_fork+0x1f/0x30 [ 488.847437][ C0] [ 488.850471][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 488.856815][ C0] NMI backtrace for cpu 0 [ 488.861152][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 488.868190][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.878357][ C0] Call Trace: [ 488.881641][ C0] [ 488.884495][ C0] dump_stack_lvl+0x188/0x250 [ 488.889225][ C0] ? show_regs_print_info+0x20/0x20 [ 488.894432][ C0] ? load_image+0x410/0x410 [ 488.899017][ C0] ? irq_work_queue+0xbf/0x140 [ 488.903869][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 488.908834][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 488.915000][ C0] ? _printk+0xda/0x130 [ 488.919167][ C0] ? cpu_online+0x1d/0x30 [ 488.923498][ C0] ? load_image+0x410/0x410 [ 488.928008][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 488.934165][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 488.940155][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 488.946335][ C0] print_other_cpu_stall+0x1110/0x1270 [ 488.951811][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 488.956756][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 488.962258][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 488.967414][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 488.972633][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 488.977530][ C0] ? hrtimer_run_queues+0x162/0x400 [ 488.982745][ C0] ? account_process_tick+0x22a/0x3a0 [ 488.988325][ C0] update_process_times+0x193/0x200 [ 488.993549][ C0] tick_sched_timer+0x37d/0x560 [ 488.999263][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 489.004818][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 489.010032][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 489.016037][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 489.021161][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 489.027239][ C0] hrtimer_interrupt+0x397/0x8b0 [ 489.032210][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 489.038211][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 489.043858][ C0] [ 489.046800][ C0] [ 489.049735][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 489.055729][ C0] RIP: 0010:default_idle+0xb/0x10 [ 489.060794][ C0] Code: b7 48 89 df e8 36 b7 f4 f7 eb ad e8 df ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d e7 65 5c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 489.080406][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 489.086482][ C0] RAX: 0d1835eb15f94400 RBX: ffffffff8c0bc480 RCX: 0d1835eb15f94400 [ 489.094575][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 489.102660][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 489.110640][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 489.118621][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 489.126622][ C0] default_idle_call+0x81/0xc0 [ 489.131443][ C0] do_idle+0x251/0x650 [ 489.135527][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 489.140732][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 489.146374][ C0] ? schedule_idle+0x57/0x90 [ 489.150979][ C0] cpu_startup_entry+0x14/0x20 [ 489.155754][ C0] ? time_init+0x40/0x40 [ 489.160061][ C0] start_kernel+0x489/0x540 [ 489.164573][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 489.170488][ C0]