last executing test programs: 3m7.291267955s ago: executing program 3 (id=477): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x6}]}, 0x54, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 3m5.439446732s ago: executing program 3 (id=482): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"5e2a161b31f70bf30e1d927bb606f34efd3376aaabd9eb74ecaa3addcc999c36e7427b92d397577e118d163e6d7da212a9d3a242904e4bcfcfda295e1b1c2d43b66f62e46e7a37337a44694c9b7e15af1577e2715956f44aa7b4bae48788da9406c93d5313121fdfc8e83eaa50a17bef676f45cfee619c0cca8e763e89ff9af230242e6b2330d472167638c2cc64d788c1040322ae0e2204cf0632525c469a87c0c39d2160eea082af1cc195db217670b3d588c1c4449207506d6913d9cbfdb57e6984d9514d80b18056bc27f6c747c6de3bd7080fed3e836fbe2b6bf498da0d6dbe829e6c1fab999c3f38f657c7768b8dbbc51f39959a0b0bf7eee0e75473e17e0a0dffe16840151d5d7db9d3ebf0e12500005d961b2006b316e0eb5d55e70c763415d247e8d418be0a7139816f97d80cc733462550eeb41a15f7ddc65be4722ffe62751213d591509868df56995b3b80fb291b78acbee70451828bd0c0419153922a8b122b554266896008adb449b2e2efa1315ef2f4ce2e7cb87994200d259fe021b69923ae13edd59cfdf3f0b15754a58d01409e1588619088fe4ebe552ad9885dd5a5cdf055b5b17b54548e41d68ef7d8435321056a6f6e0588059e99c4c6d92a6e3296320d202aaa4827a383ef6a654b3493c6138346dac1faa634534935a102271b412c44527532ea4c0e347e9f414d075ac46d393f35f8459e1cb5d9935f2c428765b2465c44cd8108f9bcd470ab009a30a93f2fc8e61556b8169957b0d660c2582f8d750cfc336827307c2823490f21f05c5d3d45496ce800f05c266c00656f30a17aaef1eea051c6ea1e3203819ebb4ac4681be21b3e90f38bebb96596165a13839fcd0496cc2191c30f3fc4ca3dd665fe9f41eca1672da249ea30f45e8275c9b570055b45bb26f73732b7f94122b104e4f37dee1634b81a203367c6b68afb7c77d28fcccadd247d636e6aa1bbfab62b9a18980a6f9502dd2e2348a0cc4bec567300ce53ae19562a818d01340ca918d0cfa3fd9b96693448c196b31399d06e65673929f97f9d8e5e7dbc154e39c4b1363d46fc4a85c88f30e795f4423c63adf6fb471d5501cad367148d68af1c20f187196c02b3c558a64d06ae3b3df58551e8b05bc086840e0c1d00dd789288df6fb097b3fd3437682801023eeae6a6e87b419bf6f97c7d40c3af777ce9e2311f9e05caad86a6e0cf88a53acc9d3c118080238bd9867860d4117ce46d11ba66f4ad76348953e3e582298e79d08573d99d84bf39175e4c5ddae89c3922f7f828a4a7c6b7698b1a52228181dbaa61b65bb735c5d976431656f58a52755bb462f0d202a73b5fd6e04e55ade4bef4c1fdcc460ce280dc7e216a7843b726e0063842fea9de4a412f4b0c27ae7638a62ce255c3423c7ee290d338945c24f918ea58a19b100d7aef9ab9827eeb4cb4a795"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000500)=0x1fff) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000540)='.\x00', 0x0, 0x3209864, 0x0) r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount$bind(0x0, &(0x7f0000000580)='.\x00', 0x0, 0x101020, 0x0) alarm(0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1\x00', 0x1ed) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 3m1.584155077s ago: executing program 3 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="00000000010000", 0x7) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, 0x0) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2m59.691246034s ago: executing program 3 (id=491): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d40)={[{@check_relaxed}, {@mode={'mode', 0x3d, 0x5}}, {@map_off}, {@map_acorn}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0xa21, &(0x7f0000000180)="$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") utime(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone3(0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) 2m58.165800662s ago: executing program 3 (id=496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}], 0x4) r5 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m55.262800784s ago: executing program 3 (id=498): syz_clone(0x8c801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r1, &(0x7f0000000340)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000640)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000680)={0x0, 0x0, r5}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000003c0)={r6, r6, 0xc, 0x1, &(0x7f0000000480)='\x00', 0xb, 0x1, 0xb57, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000007809a2a42e000000180100002020692500000000002020225a00000000000000bfa100000000000007010000f8ffffffb785000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$dupfd(r7, 0x0, r7) 2m39.324995009s ago: executing program 32 (id=498): syz_clone(0x8c801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r1, &(0x7f0000000340)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000640)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000680)={0x0, 0x0, r5}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000003c0)={r6, r6, 0xc, 0x1, &(0x7f0000000480)='\x00', 0xb, 0x1, 0xb57, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000007809a2a42e000000180100002020692500000000002020225a00000000000000bfa100000000000007010000f8ffffffb785000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$dupfd(r7, 0x0, r7) 5.775550457s ago: executing program 5 (id=871): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi1\x00', 0x2, 0x0) ioctl(r0, 0x40946400, &(0x7f0000000340)) 2.875631019s ago: executing program 5 (id=887): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000005500), &(0x7f0000005540)=0x4) 2.741504963s ago: executing program 5 (id=892): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x5, {0x4, 0x80000000, 0xa, 0xfffffffe}}) 2.591607776s ago: executing program 4 (id=894): syslog(0x4, &(0x7f0000000040)=""/77, 0x4d) syslog(0x3, &(0x7f0000000500)=""/133, 0x85) 2.591335236s ago: executing program 2 (id=896): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x204, 0x181802) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x0, &(0x7f0000000000)={0x1, 0x6, 0xd, 0x3}, 0x8, 0x4, 0x107f, 0x0, 0x1, 0x101, 0x0}) 2.591257806s ago: executing program 5 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x58, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) 2.497525549s ago: executing program 5 (id=898): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.479817578s ago: executing program 2 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000500)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='map_files\x00') getdents64(r3, &(0x7f00000006c0)=""/75, 0x4b) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x23}], 0x1, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000800), 0x8) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000880)='0\x00', 0x2) mount(&(0x7f0000000400)=@filename='./dev/mtdblock0\x00', &(0x7f0000000440)='./dev/mtdblock0\x00', &(0x7f0000000480)='adfs\x00', 0x2008000, 0x0) 2.41950255s ago: executing program 4 (id=900): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r1 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000c300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.007531421s ago: executing program 1 (id=905): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$packet(0x11, 0xa, 0x300) r0 = socket(0x1e, 0x4, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)="a91adc3429eac11168baf3b6c28ea84628f1551dcd7b3d59e97e17c5387dc53f66720d686748192a7ccb27b502f36a9a320fb0ef63709d08046f8218d57e5a00ac82dabd84b952205d47f604a64b7dfc6dd8c29669749c93f2fde602553f7ea384bdd1", 0x63}], 0x2}, 0x20000015) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000500)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', r1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) 1.694333078s ago: executing program 1 (id=908): r0 = syz_open_dev$vbi(&(0x7f0000022ac0), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000022b00)={0x0, @bt={0x12, 0x7c5, 0x1, 0x1, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x2800, 0x722, 0xe72, 0x7, 0x9, 0x1, 0x0, {0xffff945a, 0x1}, 0x5, 0xed}}) 1.693303209s ago: executing program 0 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="640000000b06010800000000000000000600000505000100070000003c000780180014801400024000000000000000000000ffffe00000021800018014000240ff01000000000000000000000000000105000300f3ffffff0900020073797a31"], 0x64}}, 0x4800) 1.572160541s ago: executing program 0 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='map_files\x00') getdents64(r3, &(0x7f00000006c0)=""/75, 0x4b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x8a000, 0x0) ppoll(&(0x7f0000000780)=[{r4, 0x23}], 0x1, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000800), 0x8) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000880)='0\x00', 0x2) mount(&(0x7f0000000400)=@filename='./dev/mtdblock0\x00', &(0x7f0000000440)='./dev/mtdblock0\x00', &(0x7f0000000480)='adfs\x00', 0x2008000, 0x0) 1.515582262s ago: executing program 1 (id=911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.507382773s ago: executing program 2 (id=912): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f00000000c0)) 1.439867455s ago: executing program 0 (id=913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c00018008000140ac1414bb0c000280080001400000800008000a"], 0x4c}}, 0x0) 1.271093189s ago: executing program 0 (id=914): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB='c *:', @ANYRESDEC], 0xa) 1.269362599s ago: executing program 4 (id=915): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 1.23959687s ago: executing program 1 (id=916): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000440), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c80)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000d00), 0x2, 0x141102) writev(r2, &(0x7f0000000d40)=[{0x0}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000dc0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000e00)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0xfffffffffffffffc, 0x1, 0x9}, 0x0, 0x0) 1.179400351s ago: executing program 2 (id=917): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000340)=0x4) 1.111473003s ago: executing program 0 (id=918): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$packet(0x11, 0xa, 0x300) r0 = socket(0x1e, 0x4, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)="a91adc3429eac11168baf3b6c28ea84628f1551dcd7b3d59e97e17c5387dc53f66720d686748192a7ccb27b502f36a9a320fb0ef63709d08046f8218d57e5a00ac82dabd84b952205d47f604a64b7dfc6dd8c29669749c93f2fde602553f7ea384bdd1", 0x63}], 0x2}, 0x20000015) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000500)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', r1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) 1.105103763s ago: executing program 4 (id=919): r0 = syz_open_dev$video(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, 0x0) 1.076885344s ago: executing program 1 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xa053}, 0x20800) 1.007245115s ago: executing program 2 (id=921): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xa257, 0x2013, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x40}}, {{0x9, 0x5, 0x81, 0x2, 0x40}}]}}]}}]}}, 0x0) 1.006857535s ago: executing program 4 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000500)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='map_files\x00') getdents64(r3, &(0x7f00000006c0)=""/75, 0x4b) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x23}], 0x1, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000800), 0x8) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000880)='0\x00', 0x2) mount(&(0x7f0000000400)=@filename='./dev/mtdblock0\x00', &(0x7f0000000440)='./dev/mtdblock0\x00', &(0x7f0000000480)='adfs\x00', 0x2008000, 0x0) 934.855037ms ago: executing program 1 (id=923): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='map_files\x00') getdents64(r3, &(0x7f00000006c0)=""/75, 0x4b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x8a000, 0x0) ppoll(&(0x7f0000000780)=[{r4, 0x23}], 0x1, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000800), 0x8) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000880)='0\x00', 0x2) mount(&(0x7f0000000400)=@filename='./dev/mtdblock0\x00', &(0x7f0000000440)='./dev/mtdblock0\x00', &(0x7f0000000480)='adfs\x00', 0x2008000, 0x0) 64.700989ms ago: executing program 5 (id=924): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001480)="2d76b41cfadba8", 0x7) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 43.300069ms ago: executing program 2 (id=925): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0701081400c8"], 0xa) 8.85931ms ago: executing program 0 (id=926): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x3, 0x10, &(0x7f00000019c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 0s ago: executing program 4 (id=927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100110000"], 0x9c}}, 0x0) kernel console output (not intermixed with test programs): 6.875297][ T4753] simple: /dev/video#_0 [ 116.879589][ T4753] simple: /dev/video#_0 [ 116.883847][ T4753] simple: /dev/video#_0 [ 116.887997][ T4753] simple: /dev/video#_0 [ 116.892257][ T4753] simple: /dev/video#_0 [ 116.896441][ T4753] simple: /dev/video#_0 [ 116.900595][ T4753] simple: /dev/video#_0 [ 116.904784][ T4753] simple: /dev/video#_0 [ 116.908923][ T4753] simple: /dev/video#_0 [ 116.913114][ T4753] simple: /dev/video#_0 [ 116.917476][ T4753] simple: /dev/video#_0 [ 116.921763][ T4753] TC_ACT_REPEAT abuse ? [ 117.101359][ T4755] device syzkaller0 entered promiscuous mode [ 118.434441][ T4758] device lo entered promiscuous mode [ 118.494922][ T4758] device tunl0 entered promiscuous mode [ 118.536903][ T4758] device gre0 entered promiscuous mode [ 118.633563][ T4758] device gretap0 entered promiscuous mode [ 118.677727][ T4758] device erspan0 entered promiscuous mode [ 118.709588][ T4758] device ip_vti0 entered promiscuous mode [ 118.743791][ T4758] device ip6_vti0 entered promiscuous mode [ 118.783609][ T4758] device sit0 entered promiscuous mode [ 118.822655][ T4758] device ip6tnl0 entered promiscuous mode [ 118.850693][ T4758] device ip6gre0 entered promiscuous mode [ 118.891403][ T4758] device syz_tun entered promiscuous mode [ 118.922829][ T4758] device ip6gretap0 entered promiscuous mode [ 118.931451][ T4765] loop1: detected capacity change from 0 to 764 [ 118.960110][ T4758] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.969201][ T4758] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.019319][ T4758] device bridge0 entered promiscuous mode [ 119.088986][ T4758] device vcan0 entered promiscuous mode [ 119.117527][ T4758] device bond0 entered promiscuous mode [ 119.132119][ T4758] device bond_slave_0 entered promiscuous mode [ 119.153538][ T4758] device bond_slave_1 entered promiscuous mode [ 119.203780][ T4758] device team0 entered promiscuous mode [ 119.209951][ T4758] device team_slave_0 entered promiscuous mode [ 119.220266][ T4767] loop0: detected capacity change from 0 to 736 [ 119.229959][ T4758] device team_slave_1 entered promiscuous mode [ 119.253416][ T4758] device dummy0 entered promiscuous mode [ 119.290187][ T4758] device nlmon0 entered promiscuous mode [ 119.300334][ T4758] device caif0 entered promiscuous mode [ 119.333416][ T4758] device batadv0 entered promiscuous mode [ 119.372147][ T4758] device vxcan1 entered promiscuous mode [ 119.390598][ T4758] device veth0 entered promiscuous mode [ 119.419035][ T4758] device veth1 entered promiscuous mode [ 119.482046][ T4758] device wg0 entered promiscuous mode [ 119.512431][ T4758] device wg1 entered promiscuous mode [ 119.553484][ T4758] device wg2 entered promiscuous mode [ 119.576669][ T4758] device veth0_to_bridge entered promiscuous mode [ 119.633554][ T4758] device veth1_to_bridge entered promiscuous mode [ 119.684381][ T4758] device veth0_to_bond entered promiscuous mode [ 119.703981][ T4758] device veth1_to_bond entered promiscuous mode [ 119.747914][ T4758] device veth0_to_team entered promiscuous mode [ 119.799935][ T4758] device veth1_to_team entered promiscuous mode [ 119.835883][ T4758] device veth0_to_batadv entered promiscuous mode [ 119.858370][ T4758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.877638][ T4758] device batadv_slave_0 entered promiscuous mode [ 119.902886][ T4758] device veth1_to_batadv entered promiscuous mode [ 119.919040][ T4758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.937242][ T4758] device batadv_slave_1 entered promiscuous mode [ 119.962626][ T4758] device xfrm0 entered promiscuous mode [ 119.993565][ T4758] device veth0_to_hsr entered promiscuous mode [ 120.027025][ T4758] device veth1_to_hsr entered promiscuous mode [ 120.063359][ T4758] device hsr0 entered promiscuous mode [ 120.086986][ T4758] device veth1_virt_wifi entered promiscuous mode [ 120.111210][ T4758] device veth0_virt_wifi entered promiscuous mode [ 120.128194][ T4758] device virt_wifi0 entered promiscuous mode [ 120.191664][ T4758] device vlan0 entered promiscuous mode [ 120.207037][ T4758] device vlan1 entered promiscuous mode [ 120.231975][ T4758] device macvlan0 entered promiscuous mode [ 120.255521][ T4758] device macvlan1 entered promiscuous mode [ 120.268362][ T4758] device ipvlan0 entered promiscuous mode [ 120.282607][ T4758] device ipvlan1 entered promiscuous mode [ 120.324656][ T4758] device macvtap0 entered promiscuous mode [ 120.351531][ T4758] device macsec0 entered promiscuous mode [ 120.375648][ T4758] device geneve0 entered promiscuous mode [ 120.410903][ T4758] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.431508][ T4758] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.440885][ T4758] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.460474][ T4758] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.469967][ T4758] device geneve1 entered promiscuous mode [ 120.529812][ T4758] device netdevsim0 entered promiscuous mode [ 120.553790][ T4758] device netdevsim1 entered promiscuous mode [ 120.581459][ T4758] device netdevsim2 entered promiscuous mode [ 120.607885][ T4758] device netdevsim3 entered promiscuous mode [ 120.687941][ T4758] device wlan0 entered promiscuous mode [ 120.766304][ T4758] device wlan1 entered promiscuous mode [ 120.862970][ T4777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.859833][ T27] audit: type=1326 audit(1792442706.503:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.1.75" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x0 [ 123.369224][ T4802] loop3: detected capacity change from 0 to 32768 [ 123.416945][ T4802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.81 (4802) [ 123.444718][ T4802] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.455327][ T4802] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 123.464101][ T4802] BTRFS info (device loop3): use zlib compression, level 3 [ 123.471334][ T4802] BTRFS info (device loop3): turning on sync discard [ 123.478112][ T4802] BTRFS info (device loop3): using free space tree [ 123.937536][ T4824] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4824] [ 124.182612][ T4802] BTRFS info (device loop3): enabling ssd optimizations [ 125.080712][ T27] audit: type=1800 audit(1792442709.533:4): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.81" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 126.111615][ T4286] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.613546][ T4844] loop1: detected capacity change from 0 to 128 [ 131.931051][ T4885] loop3: detected capacity change from 0 to 164 [ 132.099201][ T27] audit: type=1326 audit(1792442716.743:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.3.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604ad9e559 code=0x7fc00000 [ 132.178615][ T27] audit: type=1326 audit(1792442716.773:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.3.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f604ad9e559 code=0x7fc00000 [ 132.298321][ T27] audit: type=1326 audit(1792442716.773:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.3.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604ad9e559 code=0x7fc00000 [ 132.380894][ T4893] loop2: detected capacity change from 0 to 512 [ 132.467294][ T4893] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 132.548349][ T4893] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.98: invalid indirect mapped block 256 (level 1) [ 132.669860][ T4893] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.98: invalid indirect mapped block 2683928664 (level 1) [ 132.772958][ T4893] EXT4-fs (loop2): 1 truncate cleaned up [ 132.809690][ T4893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.917606][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932491][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.536242][ T4905] loop0: detected capacity change from 0 to 512 [ 134.774961][ T27] audit: type=1326 audit(1792442719.403:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.3.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604ad9e559 code=0x0 [ 135.263854][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 135.283245][ T4897] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 135.364102][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 135.382045][ T4924] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.391341][ T4924] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.400799][ T4924] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.410106][ T4924] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.521880][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 139.310988][ T4964] loop3: detected capacity change from 0 to 2048 [ 139.345646][ T4964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.930303][ T4967] loop2: detected capacity change from 0 to 512 [ 141.209950][ T4261] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.032359][ T4980] loop7: detected capacity change from 0 to 16384 [ 145.360728][ T27] audit: type=1800 audit(1792442730.003:9): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.105" name="protocol" dev="configfs" ino=37079 res=0 errno=0 [ 145.477483][ T27] audit: type=1800 audit(1792442730.013:10): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.105" name="report_length" dev="configfs" ino=37080 res=0 errno=0 [ 145.735342][ T4993] loop1: detected capacity change from 0 to 128 [ 145.940005][ T4995] tc action pedit offset must be on 32 bit boundaries [ 147.029822][ T5000] loop0: detected capacity change from 0 to 512 [ 147.277425][ T5000] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 147.298078][ T5000] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.115: invalid indirect mapped block 256 (level 1) [ 147.936763][ T5000] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.115: invalid indirect mapped block 2683928664 (level 1) [ 147.980107][ T5000] EXT4-fs (loop0): 1 truncate cleaned up [ 148.018744][ T5000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 148.090271][ T5016] loop3: detected capacity change from 0 to 512 [ 148.149015][ T5016] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 148.180342][ T5016] EXT4-fs (loop3): 1 truncate cleaned up [ 148.193892][ T5016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.219949][ T27] audit: type=1800 audit(1792442733.663:11): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.126" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 150.843678][ T5031] syz.1.128 (5031) used greatest stack depth: 19152 bytes left [ 150.851822][ T5009] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 150.937235][ T27] audit: type=1326 audit(1792442735.583:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.4.120" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa64e99e559 code=0x0 [ 151.003160][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 152.056392][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 155.342480][ T5058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.138'. [ 155.460771][ T5060] loop4: detected capacity change from 0 to 512 [ 156.317737][ T5070] loop1: detected capacity change from 0 to 128 [ 156.327737][ T5066] jffs2: notice: (5066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.371563][ T5070] EXT4-fs (loop1): Test dummy encryption mode enabled [ 156.542342][ T5073] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.591733][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 156.650626][ T5070] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.366249][ T5067] rxe_eth0 speed is unknown, defaulting to 1000 [ 157.837716][ T5070] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 159.386252][ T5101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.144'. [ 159.386367][ T5101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.144'. [ 159.386397][ T5101] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 159.525416][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 159.532595][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 159.551295][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 159.559137][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 159.567354][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 159.575217][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 159.583221][ T5100] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 159.947443][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 160.805268][ T5109] loop3: detected capacity change from 0 to 128 [ 160.852173][ T5109] FAT-fs (loop3): Unrecognized mount option "net/hci" or missing value [ 160.999273][ T5113] loop1: detected capacity change from 0 to 2048 [ 161.468159][ T5113] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 161.846721][ T5125] loop1: detected capacity change from 0 to 128 [ 161.921862][ T5125] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 164.113133][ T4389] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 164.458426][ T4389] usb 1-1: config 0 has no interfaces? [ 164.831672][ T4389] usb 1-1: string descriptor 0 read error: -71 [ 164.845233][ T4389] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 164.945566][ T4389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.114643][ T4389] usb 1-1: config 0 descriptor?? [ 165.169939][ T4389] usb 1-1: can't set config #0, error -71 [ 165.311527][ T4389] usb 1-1: USB disconnect, device number 2 [ 166.589841][ T5191] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 166.609349][ T5191] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 166.972185][ T5209] loop1: detected capacity change from 0 to 128 [ 168.384659][ T5217] device syzkaller0 entered promiscuous mode [ 169.346677][ T5231] nvmet: adding nsid 1 to subsystem testsubsys [ 170.319087][ T5231] nvmet: transport type 0 not supported [ 172.953498][ T5265] loop2: detected capacity change from 0 to 512 [ 175.379912][ T5294] TCP: TCP_TX_DELAY enabled [ 176.691530][ T5306] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 176.775676][ T5289] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222. [ 176.835935][ T5309] loop0: detected capacity change from 0 to 128 [ 177.792602][ T5313] loop4: detected capacity change from 0 to 512 [ 177.803771][ T5309] EXT4-fs (loop0): Test dummy encryption mode enabled [ 177.857389][ T5313] EXT4-fs: Ignoring removed nobh option [ 177.905064][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 177.938077][ T5313] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.182: invalid indirect mapped block 256 (level 2) [ 177.965109][ T5309] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.008393][ T5313] EXT4-fs (loop4): 2 truncates cleaned up [ 178.016683][ T5313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.439336][ T5321] loop2: detected capacity change from 0 to 4096 [ 179.510116][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 179.518599][ T5321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.943173][ T5328] binder: 5326:5328 ioctl c0306201 2000000005c0 returned -14 [ 182.065987][ T5339] device-mapper: table: 248:0: multipath: error getting device (-EBUSY) [ 182.074843][ T5339] device-mapper: ioctl: error adding target to table [ 182.295589][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 182.438346][ T5328] binder_alloc: 5326: pid 5326 spamming oneway? 2 buffers allocated for a total size of 5120 [ 182.623738][ T5336] binder_alloc: 5326: pid 5326 spamming oneway? 3 buffers allocated for a total size of 5128 [ 182.863116][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 183.704019][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 183.704768][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 183.704828][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 183.704898][ T5348] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 183.853125][ T5348] netlink: 64 bytes leftover after parsing attributes in process `syz.2.189'. [ 183.853141][ T5348] netlink: 64 bytes leftover after parsing attributes in process `syz.2.189'. [ 183.853147][ T5348] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 185.602440][ T5351] loop2: detected capacity change from 0 to 4096 [ 185.632098][ T5351] ext4: Unknown parameter 'noacl' [ 186.763165][ T2171] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 187.150278][ T2171] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.193165][ T2171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 187.235024][ T2171] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 187.303180][ T2171] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 187.358056][ T2171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.534115][ T5370] XFS (loop0): Invalid device [./loop0], error=-16 [ 188.639998][ T5379] CIFS mount error: No usable UNC path provided in device string! [ 188.639998][ T5379] [ 188.650691][ T5379] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 188.672066][ T5357] fuse: Bad value for 'user_id' [ 188.992530][ T2171] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 189.001513][ T2171] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 189.012676][ T2171] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 189.019353][ T2171] ATM dev 0: poll status: error -71 [ 189.024962][ T2171] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 189.049947][ T2171] ATM dev 0: usbatm_submit_urb: urb 0xffff8880274a4500 submission failed (-8)! [ 189.073670][ T2171] ATM dev 0: usbatm_submit_urb: urb 0xffff88802989d900 submission failed (-8)! [ 189.102072][ T2171] ATM dev 0: usbatm_submit_urb: urb 0xffff88802989df00 submission failed (-8)! [ 189.126097][ T2171] ATM dev 0: usbatm_submit_urb: urb 0xffff8880297fa600 submission failed (-8)! [ 189.233407][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff88802989df00 submission failed (-8)! [ 189.353122][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff8880297fa600 submission failed (-8)! [ 189.475832][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff8880297fa600 submission failed (-8)! [ 189.582958][ T2171] usb 1-1: USB disconnect, device number 3 [ 189.593415][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff8880297fa600 submission failed (-19)! [ 190.407144][ T5394] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 190.435232][ T5394] CIFS: Attempting to mount \\127.0.0.1\share [ 190.816261][ T5394] CIFS: VFS: Error connecting to socket. Aborting operation. [ 190.824149][ T5394] CIFS: VFS: cifs_mount failed w/return code = -4 [ 192.239809][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 194.046295][ T5400] loop3: detected capacity change from 0 to 8192 [ 194.322836][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329714][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.453513][ T5400] REISERFS warning (device loop3): reiserfs_fill_super: Cannot allocate commit workqueue [ 194.643523][ T5417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.209'. [ 194.852089][ T5417] device veth0_to_bond entered promiscuous mode [ 194.956418][ T5419] loop1: detected capacity change from 0 to 512 [ 195.175693][ T5419] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 195.240821][ T5419] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.208: invalid indirect mapped block 256 (level 1) [ 195.295360][ T4773] syz.1.72 (4773) used greatest stack depth: 17712 bytes left [ 195.334643][ T5419] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.208: invalid indirect mapped block 2683928664 (level 1) [ 195.380113][ T5419] EXT4-fs (loop1): 1 truncate cleaned up [ 195.402251][ T5419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.633633][ T5423] CIFS mount error: No usable UNC path provided in device string! [ 195.633633][ T5423] [ 195.643893][ T5423] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.401256][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 196.416091][ T5449] syz.4.207 uses obsolete (PF_INET,SOCK_PACKET) [ 196.475983][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.487037][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 196.500200][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 196.508407][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 196.516572][ T5451] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 196.580626][ T5451] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'. [ 196.590113][ T5451] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'. [ 196.599068][ T5451] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 196.663295][ T5449] overlayfs: failed to resolve './file0': -2 [ 197.049370][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 197.055650][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 197.061687][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 198.973066][ T5430] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 200.496740][ T5464] loop2: detected capacity change from 0 to 2048 [ 200.516827][ T5464] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 200.534960][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 202.208080][ T5478] loop1: detected capacity change from 0 to 256 [ 203.274795][ T5484] netlink: 76 bytes leftover after parsing attributes in process `syz.2.221'. [ 205.793284][ T4855] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 205.877165][ T5503] atomic_op ffff88807e68a198 conn xmit_atomic 0000000000000000 [ 207.386806][ T5510] loop2: detected capacity change from 0 to 512 [ 207.456539][ T5497] event trace: Could not enable event p1 [ 207.586880][ T5512] batman_adv: batadv0: Adding interface: dummy0 [ 207.597538][ T5512] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.627318][ T5512] batman_adv: batadv0: Interface activated: dummy0 [ 207.663871][ T5510] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 207.733479][ T5510] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.226: invalid indirect mapped block 256 (level 1) [ 207.985099][ T5510] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.226: invalid indirect mapped block 2683928664 (level 1) [ 208.080680][ T5510] EXT4-fs (loop2): 1 truncate cleaned up [ 208.120177][ T4855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.183269][ T4855] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 208.191024][ T5510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.201218][ T4855] usb 5-1: can't read configurations, error -71 [ 208.360251][ T5517] batadv0: mtu less than device minimum [ 208.732310][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.745193][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.756688][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.769090][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.781429][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.793652][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.805184][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.816877][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.828717][ T5517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.896849][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 210.406624][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 210.406636][ T27] audit: type=1800 audit(1792442795.053:13): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.228" name="attr_allow_any_host" dev="configfs" ino=36714 res=0 errno=0 [ 210.502395][ T5531] loop4: detected capacity change from 0 to 1024 [ 210.535635][ T5531] hfsplus: unable to parse mount options [ 210.777035][ T5545] loop0: detected capacity change from 0 to 128 [ 210.950460][ T5553] Bluetooth: MGMT ver 1.22 [ 212.745646][ T5565] loop4: detected capacity change from 0 to 8 [ 212.916758][ T5565] unable to read inode lookup table [ 214.452025][ T5580] loop1: detected capacity change from 0 to 736 [ 215.527593][ T5576] kernel profiling enabled (shift: 23) [ 215.970237][ T5467] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.649013][ T5607] loop0: detected capacity change from 0 to 128 [ 220.763574][ T5621] loop1: detected capacity change from 0 to 2048 [ 221.096264][ T5621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.784367][ T4328] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 224.848132][ T5648] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 226.129317][ T5651] CIFS: Witness protocol support is experimental [ 226.137103][ T5651] CIFS: Attempting to mount \\127.0.0.1\share [ 226.864363][ T5651] CIFS: VFS: Error connecting to socket. Aborting operation. [ 226.871795][ T5651] CIFS: VFS: cifs_mount failed w/return code = -4 [ 230.557219][ T5685] loop3: detected capacity change from 0 to 2048 [ 230.579184][ T5685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.163543][ T5680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.364324][ T5687] netlink: 14 bytes leftover after parsing attributes in process `syz.4.252'. [ 232.860676][ T5687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.899935][ T5711] loop2: detected capacity change from 0 to 512 [ 233.024343][ T5687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.066099][ T5711] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 233.210409][ T5687] bond0 (unregistering): Released all slaves [ 233.391521][ T5711] EXT4-fs (loop2): 1 truncate cleaned up [ 233.504213][ T5711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.823128][ T27] audit: type=1800 audit(1792442819.213:14): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.265" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 235.701419][ T5732] loop0: detected capacity change from 0 to 1024 [ 235.720863][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 235.731483][ T5732] EXT4-fs: Ignoring removed bh option [ 235.771696][ T5732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 235.944552][ T5741] loop3: detected capacity change from 0 to 512 [ 235.975380][ T5741] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 235.988662][ T5741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.113834][ T5741] EXT4-fs error (device loop3): ext4_init_orphan_info:623: comm syz.3.268: orphan file block 0: bad magic [ 236.137951][ T5741] EXT4-fs (loop3): mount failed [ 236.694187][ T5747] process 'syz.1.271' launched '/dev/fd/7' with NULL argv: empty string added [ 236.829986][ T5743] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.188423][ T5745] sctp: [Deprecated]: syz.2.269 (pid 5745) Use of int in max_burst socket option. [ 237.188423][ T5745] Use struct sctp_assoc_value instead [ 237.369983][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 237.541840][ T5724] loop4: detected capacity change from 0 to 4096 [ 238.014087][ T5724] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 238.188694][ T5724] UDF-fs: Scanning with blocksize 512 failed [ 238.456059][ T5724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.550113][ T5770] Bluetooth: MGMT ver 1.22 [ 239.343380][ T5784] loop0: detected capacity change from 0 to 164 [ 241.480831][ T5808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.534532][ T5811] device bond_slave_0 entered promiscuous mode [ 242.541017][ T5811] device bond_slave_1 entered promiscuous mode [ 242.630044][ T5811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.640163][ T5811] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 242.641224][ T5823] loop2: detected capacity change from 0 to 1024 [ 242.653605][ T5814] netlink: 14 bytes leftover after parsing attributes in process `syz.0.278'. [ 242.676151][ T5814] device bond_slave_0 left promiscuous mode [ 242.684134][ T5814] device bond_slave_1 left promiscuous mode [ 244.044877][ T5823] EXT4-fs: Ignoring removed bh option [ 244.123631][ T5832] loop4: detected capacity change from 0 to 512 [ 245.205830][ T5832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.221857][ T5823] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 245.253864][ T5814] bond1: (slave macvlan2): Removing an active aggregator [ 245.278993][ T5814] bond1: (slave macvlan2): Releasing backup interface [ 245.279704][ T5832] EXT4-fs error (device loop4): ext4_init_orphan_info:623: comm syz.4.284: orphan file block 0: bad magic [ 245.304224][ T5832] EXT4-fs (loop4): mount failed [ 245.426256][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.560665][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.623675][ T5814] bond0 (unregistering): Released all slaves [ 247.147462][ T5858] PKCS7: Unknown OID: [4] (bad) [ 247.152932][ T5858] PKCS7: Only support pkcs7_signedData type [ 249.113919][ T5856] loop0: detected capacity change from 0 to 4096 [ 249.277065][ T5872] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 249.342579][ T5856] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 249.482219][ T5856] UDF-fs: Scanning with blocksize 512 failed [ 249.891004][ T5856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.389246][ T5887] loop1: detected capacity change from 0 to 512 [ 251.453269][ T5887] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 251.709000][ T5887] EXT4-fs (loop1): 1 truncate cleaned up [ 251.748071][ T5887] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 252.380799][ T5890] loop0: detected capacity change from 0 to 65536 [ 252.433206][ T27] audit: type=1800 audit(1792442838.046:15): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.297" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 252.558139][ T5900] loop3: detected capacity change from 0 to 128 [ 252.659319][ T5890] XFS (loop0): Mounting V5 Filesystem [ 252.664233][ T5900] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 252.719868][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 252.808344][ T5900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.904747][ T5890] XFS (loop0): Ending clean mount [ 252.928474][ T5890] XFS (loop0): Quotacheck needed: Please wait. [ 252.979571][ T5255] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2d4/0x1120, inode 0x25 dinode [ 253.046462][ T5255] XFS (loop0): Unmount and run xfs_repair [ 253.083046][ T5255] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 253.093692][ T5255] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 253.102679][ T5255] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.167290][ T5255] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 253.219110][ T5255] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 253.287525][ T5255] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.307761][ T5255] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 253.452035][ T5255] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 253.642481][ T5255] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 254.148833][ T5890] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 254.929041][ T4277] XFS (loop0): Unmounting Filesystem [ 255.222422][ T5933] sctp: [Deprecated]: syz.3.304 (pid 5933) Use of int in max_burst socket option. [ 255.222422][ T5933] Use struct sctp_assoc_value instead [ 255.765619][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.772077][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.246820][ T5943] loop3: detected capacity change from 0 to 4096 [ 258.648435][ T5948] syz.1.306 (5948) used greatest stack depth: 17552 bytes left [ 258.764603][ T5943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.749302][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 261.098665][ T5980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.313'. [ 261.121205][ T5980] sctp: [Deprecated]: syz.2.313 (pid 5980) Use of int in max_burst socket option. [ 261.121205][ T5980] Use struct sctp_assoc_value instead [ 262.589402][ T5990] Invalid option length (0) for dns_resolver key [ 262.799433][ T6002] loop2: detected capacity change from 0 to 128 [ 262.832502][ T5999] loop4: detected capacity change from 0 to 1024 [ 263.696203][ T6004] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 263.788721][ T5988] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 266.468960][ T6029] netlink: 104 bytes leftover after parsing attributes in process `syz.0.322'. [ 266.655342][ T6043] loop2: detected capacity change from 0 to 128 [ 266.745098][ T6045] PKCS7: Unknown OID: [4] (bad) [ 266.750052][ T6045] PKCS7: Only support pkcs7_signedData type [ 268.595410][ T6056] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.325' sets config #0 [ 268.610502][ T6056] loop0: detected capacity change from 0 to 256 [ 268.617741][ T6056] exfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 268.887655][ T5960] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.033048][ T4283] Bluetooth: hci4: command 0x0405 tx timeout [ 275.113042][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 275.210481][ T6114] loop0: detected capacity change from 0 to 2048 [ 275.489192][ T6114] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 275.514322][ T6121] loop1: detected capacity change from 0 to 512 [ 275.528247][ T6114] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.656057][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 277.971209][ T6144] loop0: detected capacity change from 0 to 256 [ 277.978603][ T6144] exfat: Deprecated parameter 'namecase' [ 277.984710][ T6144] exfat: Deprecated parameter 'namecase' [ 278.109224][ T6144] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5b357923, utbl_chksum : 0xe619d30d) [ 278.883933][ T6144] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 3377699720527874) [ 280.310948][ T6159] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 280.700143][ T6165] loop2: detected capacity change from 0 to 128 [ 282.212066][ T6161] net_ratelimit: 10 callbacks suppressed [ 282.212082][ T6161] sctp: failed to load transform for md5: -2 [ 282.341634][ T6175] syz.2.348: attempt to access beyond end of device [ 282.341634][ T6175] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 282.509107][ T6188] loop3: detected capacity change from 0 to 256 [ 283.603651][ T6190] loop0: detected capacity change from 0 to 512 [ 283.624445][ T6190] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 283.770260][ T6190] EXT4-fs (loop0): 1 truncate cleaned up [ 283.805476][ T6190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.477620][ T27] audit: type=1800 audit(1792442870.096:16): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 285.372355][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 285.386932][ T6200] loop1: detected capacity change from 0 to 2048 [ 285.413459][ T6200] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 285.533892][ T5960] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.642577][ T6220] kvm: emulating exchange as write [ 287.325611][ T6249] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 287.409574][ T6253] loop0: detected capacity change from 0 to 128 [ 288.661139][ T6239] netlink: 'syz.4.362': attribute type 4 has an invalid length. [ 288.829020][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'. [ 288.845025][ T4353] bond0: (slave bond_slave_0): interface is now down [ 288.867885][ T4353] bond0: (slave bond_slave_1): interface is now down [ 289.154946][ T5253] bond0: (slave bond_slave_0): interface is now down [ 289.807455][ T6269] gadgetfs: bound to dummy_udc driver [ 290.125464][ T5253] bond0: (slave bond_slave_1): interface is now down [ 290.162641][ T6258] syz.0.367: attempt to access beyond end of device [ 290.162641][ T6258] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 290.290511][ T5253] bond0: now running without any active interface! [ 291.442782][ T6280] loop1: detected capacity change from 0 to 512 [ 291.511765][ T6280] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 292.411855][ T6280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.374: invalid indirect mapped block 256 (level 1) [ 292.428135][ T6280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.374: invalid indirect mapped block 2683928664 (level 1) [ 292.443741][ T6280] EXT4-fs (loop1): 1 truncate cleaned up [ 292.450601][ T6280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.554113][ T6297] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 295.353563][ T6285] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 295.471848][ T6313] xt_policy: output policy not valid in PREROUTING and INPUT [ 298.166177][ T6317] futex_wake_op: syz.2.382 tries to shift op by 144; fix this program [ 298.668483][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 300.015091][ T6327] loop1: detected capacity change from 0 to 512 [ 300.286183][ T6327] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 300.296762][ T6327] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.384: invalid indirect mapped block 256 (level 1) [ 300.315998][ T6327] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.384: invalid indirect mapped block 2683928664 (level 1) [ 300.521358][ T6327] EXT4-fs (loop1): 1 truncate cleaned up [ 300.664019][ T6327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 300.930584][ T6342] loop4: detected capacity change from 0 to 1024 [ 300.973545][ T6342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 301.936760][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 301.964626][ T6354] loop3: detected capacity change from 0 to 512 [ 302.281922][ T4358] kernel write not supported for file /snd/pcmC1D0p (pid: 4358 comm: kworker/1:7) [ 303.174972][ T6354] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 303.193957][ T6354] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.391: invalid indirect mapped block 256 (level 1) [ 303.242059][ T6367] loop4: detected capacity change from 0 to 1024 [ 303.256356][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 303.303115][ T6354] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.391: invalid indirect mapped block 2683928664 (level 1) [ 303.361357][ T6354] EXT4-fs (loop3): 1 truncate cleaned up [ 303.388779][ T6354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 303.677828][ T6374] netlink: 168 bytes leftover after parsing attributes in process `syz.4.394'. [ 304.292308][ T4711] hfsplus: bad catalog file entry [ 304.614910][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 304.736847][ T6387] loop1: detected capacity change from 0 to 256 [ 304.844547][ T6335] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 304.919388][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 305.077741][ T6368] loop2: detected capacity change from 0 to 2048 [ 306.365257][ T6368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.790438][ T6382] loop4: detected capacity change from 0 to 512 [ 306.815586][ T6382] EXT4-fs: Ignoring removed oldalloc option [ 306.834707][ T6382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 306.914275][ T6382] EXT4-fs (loop4): 1 truncate cleaned up [ 307.116009][ T6382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 307.187540][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 307.468934][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.989682][ T6402] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 308.076157][ T6401] device bridge_slave_1 left promiscuous mode [ 308.082577][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.083898][ T6407] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 308.527342][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 308.738961][ T6411] loop4: detected capacity change from 0 to 128 [ 308.771199][ T6411] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 309.674159][ T6421] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 309.682387][ T6421] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 309.691245][ T6421] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 309.701218][ T6421] Error parsing options; rc = [-22] [ 311.467132][ T6431] loop2: detected capacity change from 0 to 1024 [ 311.550506][ T6431] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 314.868834][ T6458] capability: warning: `syz.2.409' uses 32-bit capabilities (legacy support in use) [ 315.568834][ T6465] loop3: detected capacity change from 0 to 512 [ 315.613370][ T127] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 316.173538][ T6470] loop4: detected capacity change from 0 to 1024 [ 316.181768][ T6470] EXT4-fs: Ignoring removed bh option [ 316.470246][ T127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.499826][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.557337][ T6465] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 316.583525][ T6465] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.415: invalid indirect mapped block 256 (level 1) [ 316.597417][ T127] usb 2-1: Product: syz [ 316.601607][ T127] usb 2-1: Manufacturer: syz [ 316.637817][ T127] usb 2-1: SerialNumber: syz [ 316.677232][ T6465] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.415: invalid indirect mapped block 2683928664 (level 1) [ 316.700976][ T6470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 316.734144][ T6466] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 316.741222][ T6466] xt_connbytes: Forcing CT accounting to be enabled [ 316.748316][ T6466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 316.750721][ T127] usb 2-1: config 0 descriptor?? [ 316.791001][ T6465] EXT4-fs (loop3): 1 truncate cleaned up [ 316.806302][ T6465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 317.027420][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 317.100748][ T127] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.195728][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.202077][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.805749][ T6482] loop4: detected capacity change from 0 to 512 [ 318.959731][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 319.363752][ T6499] loop4: detected capacity change from 0 to 512 [ 319.894892][ T6499] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.421: inode #1: comm syz.4.421: iget: illegal inode # [ 319.912507][ T6499] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.421: error while reading EA inode 1 err=-117 [ 319.927249][ T6499] EXT4-fs (loop4): 1 orphan inode deleted [ 319.933413][ T6499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.192026][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 320.753586][ T127] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 321.204513][ T127] usb 2-1: USB disconnect, device number 3 [ 321.446327][ T6512] netlink: 72 bytes leftover after parsing attributes in process `syz.4.423'. [ 322.165178][ T6501] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 323.028424][ T4328] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 323.514891][ T4328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.528819][ T6517] loop0: detected capacity change from 0 to 2048 [ 323.708289][ T4328] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x82 is Bulk; changing to Interrupt [ 323.775722][ T6530] loop1: detected capacity change from 0 to 1024 [ 323.782675][ T4328] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x3 is Bulk; changing to Interrupt [ 324.213125][ T6532] sctp: failed to load transform for md5: -2 [ 324.249165][ T4328] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.267912][ T4328] usb 3-1: config 1 interface 0 has no altsetting 0 [ 324.319770][ T6517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.332330][ T4328] usb 3-1: string descriptor 0 read error: -22 [ 324.346406][ T4328] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.358472][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.379600][ T6520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 324.401732][ T6530] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 1: comm syz.1.428: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.427864][ T6520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 324.589049][ T6530] Quota error (device loop1): write_blk: dquota write failed [ 324.599790][ T4328] usb 3-1: bad CDC descriptors [ 324.636551][ T6530] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 324.826265][ T6530] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.428: Failed to acquire dquot type 0 [ 325.374200][ T6530] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.428: Freeing blocks not in datazone - block = 0, count = 4096 [ 325.594639][ T6549] loop4: detected capacity change from 0 to 2048 [ 325.607969][ T6530] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.428: Invalid inode bitmap blk 0 in block_group 0 [ 325.641547][ T5254] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.650816][ T6530] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 325.665685][ T6549] EXT4-fs: Ignoring removed nobh option [ 325.689324][ T6530] EXT4-fs (loop1): 1 orphan inode deleted [ 325.701193][ T6530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 325.963615][ T6555] Mass Storage Function, version: 2009/09/11 [ 325.970132][ T6555] LUN: removable file: (no medium) [ 326.441345][ T5254] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 326.503749][ T5254] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:37: Failed to release dquot type 0 [ 326.956740][ T6549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 327.014797][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.426'. [ 327.131028][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 327.522067][ T6567] autofs4:pid:6567:autofs_fill_super: called with bogus options [ 327.865932][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 328.009377][ T6569] loop1: detected capacity change from 0 to 256 [ 328.079864][ T6569] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 328.123902][ T6571] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.435'. [ 328.197353][ T6573] netlink: 'syz.0.436': attribute type 21 has an invalid length. [ 328.201090][ T4855] usb 3-1: USB disconnect, device number 2 [ 328.213273][ T6573] netlink: 156 bytes leftover after parsing attributes in process `syz.0.436'. [ 328.514819][ T27] audit: type=1326 audit(1792442914.166:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.434" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x0 [ 329.330398][ T127] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 329.533159][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 329.940609][ T127] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 329.951662][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.960676][ T127] usb 1-1: Product: syz [ 329.964907][ T127] usb 1-1: Manufacturer: syz [ 329.969763][ T127] usb 1-1: SerialNumber: syz [ 330.007150][ T127] usb 1-1: config 0 descriptor?? [ 330.034096][ T127] gspca_main: se401-2.14.0 probing 047d:5003 [ 330.053544][ T6591] loop4: detected capacity change from 0 to 512 [ 330.905762][ T127] gspca_se401: Wrong descriptor type [ 330.968849][ T6591] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 331.045057][ T6591] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.441: invalid indirect mapped block 256 (level 1) [ 331.251710][ T6591] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.441: invalid indirect mapped block 2683928664 (level 1) [ 331.944854][ T6591] EXT4-fs (loop4): 1 truncate cleaned up [ 331.950576][ T6591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 332.295694][ T6608] loop2: detected capacity change from 0 to 128 [ 332.378665][ T6608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 332.447223][ T6608] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.547762][ T6612] loop1: detected capacity change from 0 to 512 [ 333.657341][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 334.040711][ T6622] loop1: detected capacity change from 0 to 512 [ 334.055354][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 334.453411][ T6622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.447: missing EA_INODE flag [ 334.537041][ T6622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.447: error while reading EA inode 2 err=-117 [ 334.565150][ T4856] usb 1-1: USB disconnect, device number 5 [ 334.590278][ T6622] EXT4-fs (loop1): 1 orphan inode deleted [ 334.601927][ T6622] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 335.288996][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 336.248361][ T6629] block device autoloading is deprecated and will be removed. [ 336.613043][ T6629] syz.4.448: attempt to access beyond end of device [ 336.613043][ T6629] md35: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.906445][ T6653] loop2: detected capacity change from 0 to 256 [ 340.713452][ T6663] loop0: detected capacity change from 0 to 128 [ 340.753460][ T6663] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 341.400901][ T6670] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 341.409003][ T6670] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 341.418323][ T6670] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 341.428633][ T6670] Error parsing options; rc = [-22] [ 341.513703][ T27] audit: type=1326 audit(1792442927.166:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 341.831240][ T6680] loop0: detected capacity change from 0 to 512 [ 341.962383][ T27] audit: type=1326 audit(1792442927.216:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 342.470821][ T6360] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.524476][ T27] audit: type=1326 audit(1792442927.216:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 343.537661][ T27] audit: type=1326 audit(1792442927.216:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 343.641429][ T27] audit: type=1326 audit(1792442927.216:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 343.665545][ T27] audit: type=1326 audit(1792442927.216:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 343.833319][ T27] audit: type=1326 audit(1792442927.276:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 344.043166][ T27] audit: type=1326 audit(1792442927.276:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 344.135455][ T6691] loop2: detected capacity change from 0 to 512 [ 344.752071][ T6693] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 344.968641][ T6691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.461: inode #1: comm syz.2.461: iget: illegal inode # [ 344.982026][ T6691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.461: error while reading EA inode 1 err=-117 [ 344.995315][ T6691] EXT4-fs (loop2): 1 orphan inode deleted [ 345.001092][ T6691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 345.023469][ T27] audit: type=1326 audit(1792442927.276:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 345.280389][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 345.533018][ T27] audit: type=1326 audit(1792442927.276:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 345.562303][ T6693] device bond1 entered promiscuous mode [ 345.629209][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.920709][ T6703] bond1: (slave bridge1): making interface the new active one [ 345.935184][ T6703] device bridge1 entered promiscuous mode [ 346.336425][ T6713] loop2: detected capacity change from 0 to 128 [ 346.753479][ T6713] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 346.892760][ T6703] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 346.923363][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 350.176845][ T6737] UDC core: g1: couldn't find an available UDC or it's busy [ 351.641692][ T6749] autofs4:pid:6749:autofs_fill_super: called with bogus options [ 352.296788][ T6751] loop4: detected capacity change from 0 to 1764 [ 352.307645][ T6753] loop1: detected capacity change from 0 to 256 [ 352.450529][ T6753] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 352.471406][ T6755] loop3: detected capacity change from 0 to 512 [ 353.167486][ T6755] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.477: missing EA_INODE flag [ 353.203766][ T6755] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.477: error while reading EA inode 2 err=-117 [ 353.227107][ T6763] loop2: detected capacity change from 0 to 256 [ 353.283612][ T6755] EXT4-fs (loop3): 1 orphan inode deleted [ 353.289459][ T6755] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 353.980684][ T6775] loop1: detected capacity change from 0 to 128 [ 354.085470][ T6775] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 354.797793][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 357.275585][ T6792] netlink: 108 bytes leftover after parsing attributes in process `syz.0.471'. [ 357.950758][ T6796] loop2: detected capacity change from 0 to 512 [ 358.036391][ T6798] loop4: detected capacity change from 0 to 4096 [ 358.214496][ T6796] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.486: missing EA_INODE flag [ 358.721221][ T6796] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.486: error while reading EA inode 2 err=-117 [ 358.997065][ T6796] EXT4-fs (loop2): 1 orphan inode deleted [ 359.002877][ T6796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 359.195346][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 359.743383][ T4358] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.830427][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 359.948280][ T4358] usb 1-1: Using ep0 maxpacket: 8 [ 360.084004][ T6820] loop3: detected capacity change from 0 to 1764 [ 360.589987][ T6824] netlink: 'syz.4.492': attribute type 2 has an invalid length. [ 360.598311][ T6824] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 360.627310][ T6825] netlink: 'syz.1.493': attribute type 21 has an invalid length. [ 360.647363][ T6360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 362.533091][ T4358] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.622843][ T6841] loop1: detected capacity change from 0 to 512 [ 363.008665][ T4358] usb 1-1: no configurations [ 363.008685][ T4358] usb 1-1: can't read configurations, error -22 [ 363.011160][ T6841] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 364.317003][ T6841] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.495: bg 0: block 255: padding at end of block bitmap is not set [ 364.336824][ T6841] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 364.353398][ T6841] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.495: invalid indirect mapped block 1 (level 1) [ 364.370215][ T6841] EXT4-fs (loop1): 1 truncate cleaned up [ 364.376150][ T6841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 364.831151][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 367.028051][ T6877] mmap: syz.1.501 (6877) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 367.050965][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 367.051206][ T27] audit: type=1326 audit(1792442952.626:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 367.482273][ T6882] netlink: 32 bytes leftover after parsing attributes in process `syz.2.503'. [ 367.810030][ T27] audit: type=1326 audit(1792442952.626:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 367.943027][ T27] audit: type=1326 audit(1792442952.636:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 367.968470][ T27] audit: type=1326 audit(1792442952.636:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd80bb5ed8e code=0x7ffc0000 [ 368.031172][ T6888] loop1: detected capacity change from 0 to 512 [ 368.038556][ T6870] sctp: failed to load transform for md5: -2 [ 368.097451][ T27] audit: type=1326 audit(1792442952.636:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 368.149557][ T6868] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 368.180890][ T6888] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 368.233991][ T6888] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.505: invalid indirect mapped block 256 (level 1) [ 368.318684][ T27] audit: type=1326 audit(1792442952.636:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 368.414567][ T6888] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.505: invalid indirect mapped block 2683928664 (level 1) [ 368.421534][ T27] audit: type=1326 audit(1792442952.646:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 368.608630][ T27] audit: type=1326 audit(1792442952.646:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 368.665478][ T6888] EXT4-fs (loop1): 1 truncate cleaned up [ 368.673202][ T6888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 369.135232][ T27] audit: type=1326 audit(1792442952.646:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x7ffc0000 [ 369.365042][ T6902] ceph: No mds server is up or the cluster is laggy [ 369.375424][ T4856] libceph: connect (1)127.0.0.1:6789 error -101 [ 369.382847][ T4856] libceph: mon0 (1)127.0.0.1:6789 connect error [ 369.515736][ T27] audit: type=1326 audit(1792442952.646:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.1.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd80bb9fdc7 code=0x7ffc0000 [ 371.347743][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 372.786108][ T6922] loop1: detected capacity change from 0 to 512 [ 374.039086][ T6925] loop4: detected capacity change from 0 to 512 [ 374.060924][ T6925] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 374.110880][ T6922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 374.120403][ T6925] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.511: bg 0: block 255: padding at end of block bitmap is not set [ 374.143400][ T6925] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 374.152720][ T6925] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.511: invalid indirect mapped block 1 (level 1) [ 374.169897][ T6925] EXT4-fs (loop4): 1 truncate cleaned up [ 374.174592][ T6922] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.175686][ T6925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 375.148358][ T6934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.234533][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 375.331579][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 377.258579][ T6951] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 378.541259][ T6951] device bond0 entered promiscuous mode [ 378.569801][ T6951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.594175][ T6966] loop2: detected capacity change from 0 to 512 [ 378.619660][ T6955] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.270035][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.276538][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.376887][ T6360] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.415788][ T6969] bond0: (slave bridge1): making interface the new active one [ 380.173629][ T6969] device bridge1 entered promiscuous mode [ 380.181051][ T6969] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 380.199435][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 381.878075][ T6980] loop0: detected capacity change from 0 to 256 [ 381.943937][ T6980] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 382.007351][ T6983] loop4: detected capacity change from 0 to 1024 [ 382.019110][ T6983] EXT4-fs (loop4): filesystem is read-only [ 382.025356][ T6983] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 1280 [ 384.257172][ T6996] loop4: detected capacity change from 0 to 512 [ 384.313272][ T6996] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 384.454461][ T7002] 9pnet_fd: Insufficient options for proto=fd [ 385.241419][ T6996] EXT4-fs (loop4): 1 truncate cleaned up [ 385.249982][ T6996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 386.201336][ T7017] loop0: detected capacity change from 0 to 128 [ 386.258400][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.270984][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 386.281346][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.290205][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.303637][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.335764][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 386.345187][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.469977][ T7008] rxe_eth0 speed is unknown, defaulting to 1000 [ 386.772625][ T7022] loop4: detected capacity change from 0 to 2048 [ 386.878536][ T7022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.819865][ T7024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.834782][ T7026] device bond_slave_0 entered promiscuous mode [ 387.841061][ T7026] device bond_slave_1 entered promiscuous mode [ 387.847809][ T7026] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.856985][ T7026] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 387.871254][ T7029] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 387.898831][ T7030] netlink: 14 bytes leftover after parsing attributes in process `syz.2.528'. [ 387.908949][ T7030] device bond_slave_0 left promiscuous mode [ 387.917015][ T7030] device bond_slave_1 left promiscuous mode [ 387.978543][ T7030] bond1: (slave macvlan2): Removing an active aggregator [ 387.985654][ T7030] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 388.000653][ T7030] bond1: (slave macvlan2): Releasing backup interface [ 388.007548][ T7030] bond1: (slave macvlan2): the permanent HWaddr of slave - 12:71:56:7f:9d:85 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 388.031186][ T7030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.039893][ T5182] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 388.058976][ T7030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.072839][ T7030] bond0 (unregistering): Released all slaves [ 388.085623][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 388.374075][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.406993][ T7008] chnl_net:caif_netlink_parms(): no params data found [ 388.473218][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 388.478819][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.531967][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.539446][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.548175][ T7008] device bridge_slave_0 entered promiscuous mode [ 388.557915][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.565147][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.578933][ T7008] device bridge_slave_1 entered promiscuous mode [ 388.619272][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.650074][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.669367][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.722789][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.744726][ T7008] team0: Port device team_slave_0 added [ 388.755346][ T7008] team0: Port device team_slave_1 added [ 388.782307][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.790660][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.817225][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.830180][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.837603][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.863663][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.072285][ T7008] device hsr_slave_0 entered promiscuous mode [ 389.079709][ T7008] device hsr_slave_1 entered promiscuous mode [ 389.091632][ T7008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.106645][ T7008] Cannot create hsr debugfs directory [ 389.702074][ T7008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 389.736893][ T7008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 389.751371][ T7008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 389.765235][ T7008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 389.908490][ T7008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.926751][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.936713][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.974884][ T7008] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.996597][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 390.013935][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.022496][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.029653][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.084947][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 390.101354][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 390.111656][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.126456][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.135109][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.149275][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 390.203318][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 390.212146][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 390.226712][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 390.236450][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 390.245371][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 390.280856][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 390.297158][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 390.305873][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.315400][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 390.325276][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.335961][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.563303][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 390.851838][ T7008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.867708][ T11] device hsr_slave_0 left promiscuous mode [ 390.883701][ T11] device hsr_slave_1 left promiscuous mode [ 390.897766][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.909332][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.922151][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.937071][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.947361][ T11] device bridge_slave_1 left promiscuous mode [ 390.975692][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.994293][ T11] device bridge_slave_0 left promiscuous mode [ 391.000626][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.052919][ T11] device veth1_macvtap left promiscuous mode [ 391.066540][ T11] device veth0_macvtap left promiscuous mode [ 391.077941][ T11] device veth1_vlan left promiscuous mode [ 391.087411][ T11] device veth0_vlan left promiscuous mode [ 391.778649][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.823536][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.116929][ T11] bond0 (unregistering): Released all slaves [ 392.180464][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 392.188238][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 392.552579][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.568990][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.593354][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.602296][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.620466][ T7008] device veth0_vlan entered promiscuous mode [ 392.631112][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.643096][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 392.645450][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.670235][ T7008] device veth1_vlan entered promiscuous mode [ 392.711339][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 392.725713][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 392.735732][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.749752][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.765382][ T7008] device veth0_macvtap entered promiscuous mode [ 392.786103][ T7008] device veth1_macvtap entered promiscuous mode [ 392.819572][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.831217][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.841417][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.852619][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.862805][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.880468][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.892488][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.908769][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 392.917788][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.932863][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.947519][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.958510][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.969664][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.981948][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.996065][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.006113][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.016670][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.028383][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.039867][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 393.051017][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 393.063678][ T7008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.072409][ T7008] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.083277][ T7008] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.092003][ T7008] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.202452][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.216369][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.225405][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.252072][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.261004][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.270593][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 394.717522][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 395.605729][ T7137] sctp: failed to load transform for md5: -2 [ 395.915082][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 395.915097][ T27] audit: type=1326 audit(1792442981.566:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 395.994784][ T7160] loop2: detected capacity change from 0 to 512 [ 396.035193][ T7164] loop5: detected capacity change from 0 to 512 [ 396.051948][ T27] audit: type=1326 audit(1792442981.606:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 396.098937][ T27] audit: type=1326 audit(1792442981.606:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 396.731634][ T6360] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 396.794524][ T7160] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 8: comm syz.2.535: lblock 0 mapped to illegal pblock 8 (length 1) [ 397.364932][ T27] audit: type=1326 audit(1792442981.606:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 397.389065][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 397.431431][ T7160] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.535: error -117 reading directory block [ 397.483207][ T7174] netlink: 'syz.4.536': attribute type 30 has an invalid length. [ 397.502609][ T27] audit: type=1326 audit(1792442981.606:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 397.529393][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 397.538351][ T7160] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 397.549204][ T7160] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 8: comm syz.2.535: lblock 0 mapped to illegal pblock 8 (length 1) [ 397.628323][ T7174] bond0: option arp_missed_max: invalid value (0) [ 397.670267][ T7174] bond0: option arp_missed_max: allowed values 1 - 255 [ 397.730533][ T27] audit: type=1326 audit(1792442981.606:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 397.755335][ T27] audit: type=1326 audit(1792442981.606:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 397.773072][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 397.945753][ T27] audit: type=1326 audit(1792442981.606:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 398.196941][ T7160] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.535: error -117 reading directory block [ 398.210025][ T7160] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 398.273558][ T27] audit: type=1326 audit(1792442981.606:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 398.276222][ T7160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 398.325324][ T27] audit: type=1326 audit(1792442981.616:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.2.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab31f9e559 code=0x7ffc0000 [ 399.261594][ T7192] UDC core: g1: couldn't find an available UDC or it's busy [ 399.837805][ T7168] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 400.068446][ T7198] loop0: detected capacity change from 0 to 512 [ 400.553154][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 401.152250][ T7198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 401.161338][ T7198] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.222535][ T7168] EXT4-fs (loop2): Remounting filesystem read-only [ 401.243995][ T7207] loop5: detected capacity change from 0 to 1024 [ 401.371263][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 401.614497][ T7210] loop4: detected capacity change from 0 to 1024 [ 401.702566][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 401.724935][ T7213] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 402.590139][ T7207] hfsplus: unknown catalog record type 0 [ 402.596552][ T7207] hfsplus: unknown catalog record type 0 [ 402.620561][ T7222] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.718410][ T7207] hfsplus: xattr search failed [ 404.839003][ T4692] hfsplus: unknown catalog record type 0 [ 404.863601][ T22] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 404.891219][ T4692] hfsplus: unknown catalog record type 0 [ 404.929496][ T7234] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 404.939085][ T7234] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 405.147200][ T22] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 405.248904][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.347868][ T7238] IPVS: set_ctl: invalid protocol: 103 172.30.0.2:21 [ 405.394397][ T22] usb 3-1: Product: syz [ 405.454398][ T22] usb 3-1: Manufacturer: syz [ 406.400276][ T22] usb 3-1: SerialNumber: syz [ 406.558664][ T22] usb 3-1: config 0 descriptor?? [ 406.868362][ T22] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 407.016956][ T7255] syz.0.557 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 407.034468][ T4358] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 407.694398][ T4358] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 407.724457][ T7260] loop4: detected capacity change from 0 to 512 [ 407.735099][ T4358] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 407.780889][ T4358] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 407.784408][ T7260] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 407.801180][ T7260] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.559: invalid indirect mapped block 256 (level 1) [ 407.828972][ T7238] infiniband syz1: set down [ 407.844117][ T7263] netlink: 72 bytes leftover after parsing attributes in process `syz.0.558'. [ 407.853291][ T4358] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 407.861802][ T4358] usb 6-1: Product: syz [ 407.907479][ T7238] infiniband syz1: added syz_tun [ 407.917104][ T4358] usb 6-1: Manufacturer: syz [ 407.931970][ T7260] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.559: invalid indirect mapped block 2683928664 (level 1) [ 407.955482][ T7238] rdma_rxe: unable to create cq [ 407.960524][ T7238] infiniband syz1: Couldn't create ib_mad CQ [ 407.977824][ T4328] infiniband syz1: ib_query_port failed (-19) [ 407.985972][ T7238] infiniband syz1: Couldn't open port 1 [ 408.013818][ T7260] EXT4-fs (loop4): 1 truncate cleaned up [ 408.026636][ T7260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 408.093457][ T7238] RDS/IB: syz1: added [ 408.109066][ T7238] smc: adding ib device syz1 with port count 1 [ 408.125818][ T7238] smc: ib device syz1 port 1 has pnetid [ 408.167468][ T7238] smc: removing ib device syz1 [ 408.383945][ T7275] netlink: 'syz.0.560': attribute type 10 has an invalid length. [ 408.491702][ T7275] team0: Port device netdevsim0 added [ 408.833036][ T7238] rdma_rxe: rxe_register_device failed with error -19 [ 408.850873][ T7238] rdma_rxe: failed to add syz_tun [ 409.178830][ T22] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 409.192555][ T22] usb 3-1: USB disconnect, device number 3 [ 409.810869][ T4856] usb 6-1: USB disconnect, device number 2 [ 410.051905][ T7262] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 411.129636][ T7305] sctp: failed to load transform for md5: -2 [ 411.785038][ T7329] rxe_eth0 speed is unknown, defaulting to 1000 [ 413.754105][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 414.481759][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 415.359009][ T7364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.371201][ T7371] sctp: failed to load transform for md5: -2 [ 416.452306][ T7370] sctp: failed to load transform for md5: -2 [ 418.730212][ T7413] loop4: detected capacity change from 0 to 512 [ 419.674456][ T7413] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 419.917603][ T7413] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.584: invalid indirect mapped block 256 (level 1) [ 420.111954][ T7413] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.584: invalid indirect mapped block 2683928664 (level 1) [ 420.170882][ T7413] EXT4-fs (loop4): 1 truncate cleaned up [ 420.211939][ T7413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 420.561022][ T7433] SET target dimension over the limit! [ 421.080999][ T7433] sctp: failed to load transform for md5: -2 [ 421.150426][ T7428] device veth1_macvtap left promiscuous mode [ 422.071419][ T7444] sctp: failed to load transform for md5: -2 [ 422.145341][ T7431] loop5: detected capacity change from 0 to 4096 [ 422.849752][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.588'. [ 423.154390][ T7469] sctp: [Deprecated]: syz.2.592 (pid 7469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.154390][ T7469] Use struct sctp_sack_info instead [ 423.582186][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 424.827778][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'. [ 425.310217][ T4280] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 429.230326][ T7518] sctp: failed to load transform for md5: -2 [ 430.129133][ T7540] loop4: detected capacity change from 0 to 512 [ 430.184831][ T7541] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 430.193876][ T7541] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 430.325548][ T7540] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 430.334900][ T7540] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.606: invalid indirect mapped block 256 (level 1) [ 430.520999][ T7540] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.606: invalid indirect mapped block 2683928664 (level 1) [ 430.551102][ T7540] EXT4-fs (loop4): 1 truncate cleaned up [ 430.651707][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.611'. [ 431.186940][ T7540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 432.420357][ T7550] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 433.014835][ T7577] loop5: detected capacity change from 0 to 16 [ 433.249862][ T7577] erofs: (device loop5): mounted with root inode @ nid 36. [ 433.331704][ T7577] syz.5.614: attempt to access beyond end of device [ 433.331704][ T7577] loop5: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 433.345744][ T7577] syz.5.614: attempt to access beyond end of device [ 433.345744][ T7577] loop5: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 433.681657][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 433.773199][ T7590] loop4: detected capacity change from 0 to 512 [ 433.780859][ T7590] EXT4-fs: inline encryption not supported [ 433.808357][ T7590] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 433.809215][ T7594] netlink: 'syz.1.617': attribute type 12 has an invalid length. [ 433.827614][ T7590] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.616: invalid indirect mapped block 2683928664 (level 1) [ 433.850022][ T7590] EXT4-fs (loop4): 1 truncate cleaned up [ 433.877965][ T7590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 435.054238][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 435.449619][ T7604] SET target dimension over the limit! [ 435.750182][ T7604] sctp: failed to load transform for md5: -2 [ 436.030130][ T7608] sctp: failed to load transform for md5: -2 [ 438.271757][ T4843] libceph: connect (1)[c::]:6789 error -101 [ 438.288089][ T4843] libceph: mon0 (1)[c::]:6789 connect error [ 438.535808][ T7642] ceph: No mds server is up or the cluster is laggy [ 438.623282][ T7660] syz.5.626 (7660): /proc/7656/oom_adj is deprecated, please use /proc/7656/oom_score_adj instead. [ 438.652916][ T7660] loop5: detected capacity change from 0 to 256 [ 439.188351][ T4843] libceph: connect (1)[c::]:6789 error -101 [ 439.244529][ T4843] libceph: mon0 (1)[c::]:6789 connect error [ 439.441554][ T7664] loop4: detected capacity change from 0 to 512 [ 441.144041][ T7664] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 441.183598][ T7664] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.627: invalid indirect mapped block 256 (level 1) [ 441.188254][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.203827][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.297362][ T7664] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.627: invalid indirect mapped block 2683928664 (level 1) [ 441.440429][ T7664] EXT4-fs (loop4): 1 truncate cleaned up [ 441.475224][ T7664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 442.524520][ T7693] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 443.764655][ T7672] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 445.405006][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 446.416573][ T7726] loop5: detected capacity change from 0 to 256 [ 446.454120][ T7726] exfat: Deprecated parameter 'namecase' [ 446.469008][ T7726] exfat: Deprecated parameter 'utf8' [ 446.544676][ T7726] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 447.189400][ T7740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.205283][ T7740] fuse: Bad value for 'fd' [ 448.669427][ T7759] loop4: detected capacity change from 0 to 1024 [ 448.743526][ T7760] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 449.309872][ T7767] hfsplus: unknown catalog record type 0 [ 449.315951][ T7767] hfsplus: unknown catalog record type 0 [ 449.729382][ T7767] hfsplus: xattr search failed [ 449.866784][ T7760] team0: Port device netdevsim0 added [ 450.069414][ T4713] hfsplus: unknown catalog record type 0 [ 450.105479][ T4713] hfsplus: unknown catalog record type 0 [ 452.172170][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'. [ 452.186338][ T7789] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 452.196284][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.652'. [ 453.059847][ T7803] FAULT_INJECTION: forcing a failure. [ 453.059847][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 453.072628][ T7803] CPU: 0 PID: 7803 Comm: syz.5.654 Not tainted syzkaller #0 [ 453.079932][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.090042][ T7803] Call Trace: [ 453.093475][ T7803] [ 453.096463][ T7803] dump_stack_lvl+0x188/0x24e [ 453.101231][ T7803] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 453.106884][ T7803] ? show_regs_print_info+0x12/0x12 [ 453.112096][ T7803] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 453.117756][ T7803] should_fail_ex+0x390/0x4c0 [ 453.122455][ T7803] should_failslab+0x5/0x20 [ 453.126972][ T7803] slab_pre_alloc_hook+0x59/0x300 [ 453.132105][ T7803] kmem_cache_alloc_node+0x5a/0x310 [ 453.137316][ T7803] ? __alloc_skb+0xf9/0x7d0 [ 453.141832][ T7803] __alloc_skb+0xf9/0x7d0 [ 453.146186][ T7803] __ip_append_data+0x26d7/0x38d0 [ 453.151246][ T7803] ? ip_skb_dst_mtu+0x870/0x870 [ 453.156112][ T7803] ? ip_setup_cork+0x850/0x850 [ 453.160886][ T7803] ? ip_setup_cork+0x528/0x850 [ 453.165661][ T7803] ip_make_skb+0x227/0x440 [ 453.170097][ T7803] ? ip_skb_dst_mtu+0x870/0x870 [ 453.174966][ T7803] ? ip_flush_pending_frames+0x250/0x250 [ 453.180606][ T7803] ? lockdep_hardirqs_on+0x94/0x140 [ 453.185836][ T7803] udp_sendmsg+0x1b04/0x23d0 [ 453.190462][ T7803] ? ip_skb_dst_mtu+0x870/0x870 [ 453.195334][ T7803] ? udp_cmsg_send+0x350/0x350 [ 453.200124][ T7803] ? read_lock_is_recursive+0x10/0x10 [ 453.205624][ T7803] ? finish_task_switch+0x262/0x8e0 [ 453.210985][ T7803] ? __schedule+0x1087/0x4030 [ 453.215712][ T7803] udpv6_sendmsg+0x7df/0x22c0 [ 453.220424][ T7803] ? release_firmware_map_entry+0x187/0x187 [ 453.226388][ T7803] ? udp_v6_early_demux+0xf00/0xf00 [ 453.231624][ T7803] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 453.237645][ T7803] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 453.243387][ T7803] ? sock_rps_record_flow+0x19/0x3f0 [ 453.248699][ T7803] ? inet_send_prepare+0x57/0x250 [ 453.253745][ T7803] ? inet6_sendmsg+0x5b/0xd0 [ 453.258363][ T7803] sock_write_iter+0x2d5/0x3e0 [ 453.263143][ T7803] ? sock_read_iter+0x3a0/0x3a0 [ 453.268029][ T7803] vfs_write+0x482/0x9a0 [ 453.272308][ T7803] ? file_end_write+0x250/0x250 [ 453.277187][ T7803] ? __fget_files+0x3fc/0x460 [ 453.281976][ T7803] ? __fdget_pos+0x1d4/0x360 [ 453.286581][ T7803] ? ksys_write+0x70/0x260 [ 453.291011][ T7803] ksys_write+0x14d/0x260 [ 453.295350][ T7803] ? __ia32_sys_read+0x80/0x80 [ 453.300103][ T7803] ? lockdep_hardirqs_on+0x94/0x140 [ 453.305305][ T7803] do_syscall_64+0x4c/0xa0 [ 453.309752][ T7803] ? clear_bhb_loop+0x60/0xb0 [ 453.314453][ T7803] ? clear_bhb_loop+0x60/0xb0 [ 453.319145][ T7803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.325047][ T7803] RIP: 0033:0x7fce43d9e559 [ 453.329626][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.349296][ T7803] RSP: 002b:00007fce44c41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.357782][ T7803] RAX: ffffffffffffffda RBX: 00007fce44026180 RCX: 00007fce43d9e559 [ 453.365750][ T7803] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 453.373717][ T7803] RBP: 00007fce43e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 453.381688][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.389667][ T7803] R13: 00007fce44026218 R14: 00007fce44026180 R15: 00007ffff1197258 [ 453.397661][ T7803] [ 454.061143][ T7811] loop4: detected capacity change from 0 to 512 [ 454.221211][ T7811] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 454.560740][ T7811] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.658: invalid indirect mapped block 256 (level 1) [ 455.239043][ T7811] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.658: invalid indirect mapped block 2683928664 (level 1) [ 455.502041][ T7811] EXT4-fs (loop4): 1 truncate cleaned up [ 455.677177][ T7811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 455.979772][ T7820] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 460.054141][ T7855] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 460.066291][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 462.305328][ T7882] loop5: detected capacity change from 0 to 512 [ 462.835263][ T7882] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 462.903471][ T7882] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.673: invalid indirect mapped block 256 (level 1) [ 462.943635][ T7882] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.673: invalid indirect mapped block 2683928664 (level 1) [ 463.170473][ T7882] EXT4-fs (loop5): 1 truncate cleaned up [ 463.236247][ T7882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 464.296827][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 466.294960][ T7008] EXT4-fs (loop5): unmounting filesystem. [ 467.173829][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.671'. [ 467.686425][ T7935] loop5: detected capacity change from 0 to 2048 [ 467.718001][ T7935] EXT4-fs: Ignoring removed nobh option [ 469.237975][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.684'. [ 469.247308][ T7948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.684'. [ 469.478618][ T7951] netlink: 52 bytes leftover after parsing attributes in process `syz.4.685'. [ 469.528303][ T7935] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 470.971806][ T7008] EXT4-fs (loop5): unmounting filesystem. [ 473.196792][ T7998] loop5: detected capacity change from 0 to 512 [ 473.265180][ T8002] loop4: detected capacity change from 0 to 16 [ 473.287220][ T8002] erofs: (device loop4): mounted with root inode @ nid 36. [ 473.298296][ T8002] syz.4.690: attempt to access beyond end of device [ 473.298296][ T8002] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 473.312037][ T8002] syz.4.690: attempt to access beyond end of device [ 473.312037][ T8002] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 473.593754][ T7998] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.719039][ T7998] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.693: invalid indirect mapped block 32768 (level 2) [ 473.823226][ T7998] EXT4-fs (loop5): 1 orphan inode deleted [ 473.840984][ T7998] EXT4-fs (loop5): 1 truncate cleaned up [ 473.900702][ T7998] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 474.231001][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 477.009942][ T8021] loop4: detected capacity change from 0 to 256 [ 477.408032][ T7008] EXT4-fs (loop5): unmounting filesystem. [ 477.562388][ T8021] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 478.361635][ T8021] exFAT-fs (loop4): hint_cluster is invalid (17) [ 479.645946][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 480.286069][ T8036] No buffer was provided with the request [ 487.867503][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 487.892458][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 488.876092][ T8106] ceph: No mds server is up or the cluster is laggy [ 488.969748][ T8120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.713'. [ 493.136441][ T8158] overlayfs: failed to clone upperpath [ 493.443607][ T8163] block device autoloading is deprecated and will be removed. [ 493.451436][ T8163] syz.5.723: attempt to access beyond end of device [ 493.451436][ T8163] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 493.790647][ T8177] netlink: 52 bytes leftover after parsing attributes in process `syz.2.724'. [ 495.131240][ T8168] syz.4.726: attempt to access beyond end of device [ 495.131240][ T8168] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 496.789668][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 496.798688][ T8192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.729'. [ 497.700637][ T8211] loop4: detected capacity change from 0 to 1024 [ 498.506774][ T8227] SET target dimension over the limit! [ 501.528626][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535223][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.487532][ T8276] SET target dimension over the limit! [ 502.729223][ T8278] overlayfs: failed to clone upperpath [ 503.016523][ T8276] sctp: failed to load transform for md5: -2 [ 503.543599][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.743'. [ 503.552680][ T8293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.743'. [ 505.895995][ T8308] loop4: detected capacity change from 0 to 512 [ 506.199242][ T8308] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 506.883524][ T8308] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.748: invalid indirect mapped block 256 (level 1) [ 506.913018][ T8308] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.748: invalid indirect mapped block 2683928664 (level 1) [ 507.018057][ T8308] EXT4-fs (loop4): 1 truncate cleaned up [ 507.040088][ T8308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 507.064294][ T8328] netlink: 128 bytes leftover after parsing attributes in process `syz.0.751'. [ 507.466390][ T8333] tipc: Started in network mode [ 507.471825][ T8333] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 507.479885][ T8333] tipc: Enabled bearer , priority 1 [ 508.373716][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 508.596672][ T4843] tipc: Node number set to 43690 [ 509.659208][ T8366] loop5: detected capacity change from 0 to 512 [ 509.761098][ T8366] EXT4-fs: inline encryption not supported [ 510.178413][ T8366] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 510.443486][ T8366] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.757: invalid indirect mapped block 2683928664 (level 1) [ 510.484784][ T8366] EXT4-fs (loop5): 1 truncate cleaned up [ 510.528344][ T8366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 510.589537][ T8386] loop4: detected capacity change from 0 to 512 [ 510.636391][ T8386] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 510.685629][ T8386] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 511.460193][ T7008] EXT4-fs (loop5): unmounting filesystem. [ 512.643278][ T4850] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 512.847314][ T4850] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 512.856754][ T4850] usb 6-1: config 255 has an invalid interface descriptor of length 2, skipping [ 512.865958][ T4850] usb 6-1: config 255 has no interface number 0 [ 512.878723][ T4850] usb 6-1: config 255 interface 97 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 512.906628][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 512.906642][ T27] audit: type=1326 audit(1792443098.556:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.1.772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80bb9e559 code=0x0 [ 512.906772][ T4850] usb 6-1: config 255 interface 97 has no altsetting 0 [ 512.954070][ T4850] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 512.963383][ T4850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.971529][ T4850] usb 6-1: Product: syz [ 512.976281][ T4850] usb 6-1: Manufacturer: syz [ 512.981043][ T4850] usb 6-1: SerialNumber: syz [ 513.224008][ T4850] usb 6-1: bad CDC descriptors [ 513.383009][ T4850] usb 6-1: bad CDC descriptors [ 513.860785][ T4850] usb 6-1: USB disconnect, device number 3 [ 515.058456][ T8452] Invalid ELF header magic: != ELF [ 515.127994][ T8452] overlayfs: unrecognized mount option "/" or missing value [ 516.243328][ T4358] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 516.488523][ T4358] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 516.632656][ T4358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.712158][ T4358] usb 6-1: config 0 descriptor?? [ 516.732182][ T4358] cp210x 6-1:0.0: cp210x converter detected [ 516.999199][ T4358] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 517.053975][ T4358] cp210x 6-1:0.0: querying part number failed [ 518.126403][ T4358] usb 6-1: cp210x converter now attached to ttyUSB0 [ 519.213369][ T4328] usb 6-1: USB disconnect, device number 4 [ 519.267839][ T4328] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 519.313731][ T4328] cp210x 6-1:0.0: device disconnected [ 519.440906][ T4280] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 521.301428][ T8540] Device name cannot be null; rc = [-22] [ 521.610517][ T8556] loop5: detected capacity change from 0 to 128 [ 521.647308][ T8556] qnx6: wrong signature (magic) in superblock #1. [ 522.586132][ T8568] loop5: detected capacity change from 0 to 128 [ 522.610818][ T8568] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 522.630253][ T8568] hpfs: filesystem error: improperly stopped [ 522.640302][ T8568] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 522.698888][ T8568] hpfs: You really don't want any checks? You are crazy... [ 522.793201][ T8568] hpfs: hpfs_map_sector(): read error [ 522.812268][ T8568] hpfs: code page support is disabled [ 522.830053][ T8568] hpfs: hpfs_map_sector(): read error [ 522.856201][ T8568] hpfs: hpfs_map_sector(): read error [ 522.861914][ T8568] hpfs: filesystem error: unable to find root dir [ 524.649824][ T4280] Bluetooth: hci2: hcon ffff888078212000 sent 2 < count 256 [ 524.671286][ T8595] Device name cannot be null; rc = [-22] [ 524.711580][ T8595] loop5: detected capacity change from 0 to 1024 [ 526.007837][ T8620] loop4: detected capacity change from 0 to 512 [ 526.314262][ T8620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 526.605466][ T8620] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.833: invalid indirect mapped block 32768 (level 2) [ 527.029892][ T8620] EXT4-fs (loop4): 1 orphan inode deleted [ 527.083220][ T8620] EXT4-fs (loop4): 1 truncate cleaned up [ 527.097514][ T8620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 527.606661][ T4358] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 527.694646][ T8654] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 528.277077][ T4358] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 528.302923][ T4358] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.367737][ T4358] usb 6-1: config 0 has no interface number 0 [ 528.395778][ T4358] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.452626][ T4358] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 528.525576][ T8656] Device name cannot be null; rc = [-22] [ 528.564971][ T4358] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 528.622966][ T4358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.636312][ T4280] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 528.645048][ T4280] Bluetooth: hci3: Injecting HCI hardware error event [ 528.654914][ T4280] Bluetooth: hci3: hardware error 0x00 [ 528.702890][ T4358] usb 6-1: Product: syz [ 528.707098][ T4358] usb 6-1: Manufacturer: syz [ 528.711695][ T4358] usb 6-1: SerialNumber: syz [ 529.450949][ T4358] usb 6-1: config 0 descriptor?? [ 529.687849][ T8648] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 529.727682][ T4358] vmk80xx 6-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 529.779016][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 529.789257][ T4358] vmk80xx: probe of 6-1:0.6 failed with error -22 [ 529.941487][ T4358] usb 6-1: USB disconnect, device number 5 [ 531.753224][ T4280] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 533.732028][ T8734] Device name cannot be null; rc = [-22] [ 533.734502][ T8736] comedi: valid board names for 8255 driver are: [ 533.744953][ T8736] 8255 [ 533.748051][ T8736] comedi: valid board names for vmk80xx driver are: [ 533.755845][ T8736] vmk80xx [ 533.758900][ T8736] comedi: valid board names for usbduxsigma driver are: [ 533.765978][ T8736] usbduxsigma [ 533.769435][ T8736] comedi: valid board names for usbduxfast driver are: [ 533.776596][ T8736] usbduxfast [ 533.779904][ T8736] comedi: valid board names for usbdux driver are: [ 533.786735][ T8736] usbdux [ 533.789762][ T8736] comedi: valid board names for ni6501 driver are: [ 533.795105][ T8734] loop4: detected capacity change from 0 to 1024 [ 533.796428][ T8736] ni6501 [ 533.818415][ T8736] comedi: valid board names for dt9812 driver are: [ 533.838308][ T8736] dt9812 [ 533.846042][ T8736] comedi: valid board names for ni_labpc_cs driver are: [ 533.976043][ T8736] ni_labpc_cs [ 533.993727][ T8736] comedi: valid board names for ni_daq_700 driver are: [ 534.003903][ T8736] ni_daq_700 [ 534.007441][ T8736] comedi: valid board names for labpc_pci driver are: [ 534.019774][ T8736] labpc_pci [ 534.023525][ T8736] comedi: valid board names for adl_pci9118 driver are: [ 534.081776][ T8736] pci9118dg [ 535.252619][ T8736] pci9118hg [ 535.257067][ T8736] pci9118hr [ 535.270994][ T8736] comedi: valid board names for 8255_pci driver are: [ 535.282976][ T8736] 8255_pci [ 535.291245][ T8736] comedi: valid board names for s526 driver are: [ 535.343257][ T8736] s526 [ 535.346069][ T8736] comedi: valid board names for multiq3 driver are: [ 535.403633][ T8736] multiq3 [ 535.406704][ T8736] comedi: valid board names for pcmuio driver are: [ 535.433207][ T8736] pcmuio48 [ 535.452980][ T8736] pcmuio96 [ 535.456153][ T8736] comedi: valid board names for pcmmio driver are: [ 535.481898][ T8736] pcmmio [ 535.490186][ T8736] comedi: valid board names for pcmda12 driver are: [ 535.497488][ T8736] pcmda12 [ 535.500543][ T8736] comedi: valid board names for pcmad driver are: [ 535.513532][ T8736] pcmad12 [ 535.516592][ T8736] pcmad16 [ 535.519621][ T8736] comedi: valid board names for ni_labpc driver are: [ 535.531736][ T8736] lab-pc-1200 [ 535.535820][ T8736] lab-pc-1200ai [ 535.539390][ T8736] lab-pc+ [ 535.547287][ T8736] comedi: valid board names for atmio16 driver are: [ 535.554650][ T8736] atmio16 [ 535.557701][ T8736] atmio16d [ 535.560820][ T8736] comedi: valid board names for ni_at_ao driver are: [ 535.572685][ T8736] at-ao-6 [ 535.576859][ T8736] at-ao-10 [ 535.580006][ T8736] comedi: valid board names for ni_at_a2150 driver are: [ 535.591895][ T8736] ni_at_a2150 [ 535.595483][ T8736] comedi: valid board names for adq12b driver are: [ 535.602692][ T8736] adq12b [ 535.606673][ T8736] comedi: valid board names for mpc624 driver are: [ 535.613282][ T8736] mpc624 [ 535.619241][ T8736] comedi: valid board names for c6xdigio driver are: [ 535.636919][ T8736] c6xdigio [ 535.640164][ T8736] comedi: valid board names for aio_iiro_16 driver are: [ 535.664564][ T8736] aio_iiro_16 [ 535.667995][ T8736] comedi: valid board names for aio_aio12_8 driver are: [ 535.697432][ T8736] aio_aio12_8 [ 535.701522][ T8736] aio_ai12_8 [ 535.717112][ T8736] aio_ao12_4 [ 535.720451][ T8736] comedi: valid board names for fl512 driver are: [ 535.737093][ T8736] fl512 [ 535.740009][ T8736] comedi: valid board names for dmm32at driver are: [ 535.751712][ T8736] dmm32at [ 535.760934][ T8736] comedi: valid board names for dt282x driver are: [ 535.770026][ T8736] dt2821 [ 535.789503][ T8736] dt2821-f [ 535.792662][ T8736] dt2821-g [ 535.801253][ T8736] dt2823 [ 535.805334][ T8736] dt2824-pgh [ 535.809960][ T8736] dt2824-pgl [ 535.818839][ T8736] dt2825 [ 535.838137][ T8736] dt2827 [ 535.841122][ T8736] dt2828 [ 535.844125][ T8736] dt2829 [ 535.847069][ T8736] dt21-ez [ 535.850099][ T8736] dt23-ez [ 535.940315][ T8736] dt24-ez [ 535.947389][ T8736] dt24-ez-pgl [ 535.951340][ T8736] comedi: valid board names for dt2817 driver are: [ 535.962521][ T8736] dt2817 [ 535.966984][ T8736] comedi: valid board names for dt2815 driver are: [ 535.973787][ T8736] dt2815 [ 535.976830][ T8736] comedi: valid board names for dt2814 driver are: [ 535.983575][ T8736] dt2814 [ 535.987163][ T8736] comedi: valid board names for dt2811 driver are: [ 535.994186][ T8736] dt2811-pgh [ 535.997490][ T8736] dt2811-pgl [ 536.001029][ T8736] comedi: valid board names for dt2801 driver are: [ 536.008084][ T8736] dt2801 [ 536.011266][ T8736] comedi: valid board names for das6402 driver are: [ 536.018780][ T8736] das6402-12 [ 536.022174][ T8736] das6402-16 [ 536.025796][ T8736] comedi: valid board names for das1800 driver are: [ 536.041885][ T8736] das-1701st [ 536.046475][ T8736] das-1701st-da [ 536.050363][ T8736] das-1702st [ 536.053904][ T8736] das-1702st-da [ 536.057668][ T8736] das-1702hr [ 536.061032][ T8736] das-1702hr-da [ 536.064717][ T8736] das-1701ao [ 536.068192][ T8736] das-1702ao [ 536.071556][ T8736] das-1801st [ 536.075133][ T8736] das-1801st-da [ 536.078765][ T8736] das-1802st [ 536.082092][ T8736] das-1802st-da [ 536.086518][ T8736] das-1802hr [ 536.090026][ T8736] das-1802hr-da [ 536.094224][ T8736] das-1801hc [ 536.097524][ T8736] das-1802hc [ 536.100977][ T8736] das-1801ao [ 536.104494][ T8736] das-1802ao [ 536.107895][ T8736] comedi: valid board names for das800 driver are: [ 536.115314][ T8736] das-800 [ 536.118354][ T8736] cio-das800 [ 536.121633][ T8736] das-801 [ 536.125331][ T8736] cio-das801 [ 536.128747][ T8736] das-802 [ 536.131763][ T8736] cio-das802 [ 536.135480][ T8736] cio-das802/16 [ 536.139051][ T8736] comedi: valid board names for isa-das08 driver are: [ 536.146155][ T8736] isa-das08 [ 536.149378][ T8736] das08-pgm [ 536.152590][ T8736] das08-pgh [ 536.156267][ T8736] das08-pgl [ 536.159489][ T8736] das08-aoh [ 536.162685][ T8736] das08-aol [ 536.169567][ T8736] das08-aom [ 536.172786][ T8736] das08/jr-ao [ 536.176451][ T8736] das08jr-16-ao [ 536.180103][ T8736] pc104-das08 [ 536.191909][ T8736] das08jr/16 [ 536.197694][ T8736] comedi: valid board names for das16m1 driver are: [ 536.204629][ T8736] das16m1 [ 536.207681][ T8736] comedi: valid board names for dac02 driver are: [ 536.214913][ T8736] dac02 [ 536.217802][ T8736] comedi: valid board names for rti802 driver are: [ 536.229442][ T8736] rti802 [ 536.236264][ T8736] comedi: valid board names for rti800 driver are: [ 536.242798][ T8736] rti800 [ 536.245887][ T8736] rti815 [ 536.248836][ T8736] comedi: valid board names for pcm3724 driver are: [ 536.255571][ T8736] pcm3724 [ 536.258607][ T8736] comedi: valid board names for pcl818 driver are: [ 536.267060][ T8736] pcl818l [ 536.270091][ T8736] pcl818h [ 536.273325][ T8736] pcl818hd [ 536.276446][ T8736] pcl818hg [ 536.279562][ T8736] pcl818 [ 536.282496][ T8736] pcl718 [ 536.285670][ T8736] pcm3718 [ 536.288717][ T8736] comedi: valid board names for pcl816 driver are: [ 536.295892][ T8736] pcl816 [ 536.298850][ T8736] pcl814b [ 536.301861][ T8736] comedi: valid board names for pcl812 driver are: [ 536.308391][ T8736] pcl812 [ 536.311340][ T8736] pcl812pg [ 536.322254][ T8736] acl8112pg [ 536.325566][ T8736] acl8112dg [ 536.331329][ T8736] acl8112hg [ 536.334624][ T8736] a821pgl [ 536.337730][ T8736] a821pglnda [ 536.341632][ T8736] a821pgh [ 536.346887][ T8736] a822pgl [ 536.350222][ T8736] a822pgh [ 536.353318][ T8736] a823pgl [ 536.356725][ T8736] a823pgh [ 536.359798][ T8736] pcl813 [ 536.362725][ T8736] pcl813b [ 536.365841][ T8736] acl8113 [ 536.368869][ T8736] iso813 [ 536.371832][ T8736] acl8216 [ 536.375014][ T8736] a826pg [ 536.377962][ T8736] comedi: valid board names for pcl730 driver are: [ 536.384672][ T8736] pcl730 [ 536.387697][ T8736] iso730 [ 536.390658][ T8736] acl7130 [ 536.394402][ T8736] pcm3730 [ 536.397499][ T8736] pcl725 [ 536.400433][ T8736] p8r8dio [ 536.403531][ T8736] acl7225b [ 536.406659][ T8736] p16r16dio [ 536.409882][ T8736] pcl733 [ 536.412872][ T8736] pcl734 [ 536.415898][ T8736] opmm-1616-xt [ 536.419786][ T8736] pearl-mm-p [ 536.423185][ T8736] ir104-pbf [ 536.426426][ T8736] comedi: valid board names for pcl726 driver are: [ 536.433029][ T8736] pcl726 [ 536.436021][ T8736] pcl727 [ 536.438981][ T8736] pcl728 [ 536.441921][ T8736] acl6126 [ 536.444998][ T8736] acl6128 [ 536.448042][ T8736] comedi: valid board names for pcl724 driver are: [ 536.454856][ T8736] pcl724 [ 536.457806][ T8736] pcl722 [ 536.460765][ T8736] pcl731 [ 536.463768][ T8736] acl7122 [ 536.466811][ T8736] acl7124 [ 536.469839][ T8736] pet48dio [ 536.473020][ T8736] pcmio48 [ 536.476063][ T8736] onyx-mm-dio [ 536.479446][ T8736] comedi: valid board names for pcl711 driver are: [ 536.486013][ T8736] pcl711 [ 536.489029][ T8736] pcl711b [ 536.492152][ T8736] acl8112hg [ 536.495538][ T8736] acl8112dg [ 536.499138][ T8736] comedi: valid board names for amplc_pc263 driver are: [ 536.506141][ T8736] pc263 [ 536.509101][ T8736] comedi: valid board names for amplc_pc236 driver are: [ 536.516110][ T8736] pc36at [ 536.519059][ T8736] comedi: valid board names for amplc_dio200 driver are: [ 536.526678][ T8736] pc212e [ 536.529643][ T8736] pc214e [ 536.532624][ T8736] pc215e [ 536.535624][ T8736] pc218e [ 536.538575][ T8736] pc272e [ 536.541508][ T8736] comedi: valid board names for comedi_parport driver are: [ 536.548751][ T8736] comedi_parport [ 536.552419][ T8736] comedi: valid board names for comedi_test driver are: [ 536.559537][ T8736] comedi_test [ 536.563142][ T8736] comedi: valid board names for comedi_bond driver are: [ 536.570143][ T8736] comedi_bond [ 536.830397][ T8787] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 536.839221][ T8788] netlink: 52 bytes leftover after parsing attributes in process `syz.2.891'. [ 536.848170][ T8787] Error parsing options; rc = [-22] [ 537.317771][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 537.362977][ T4358] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 537.566993][ T4358] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 537.584021][ T4358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.607206][ T4358] usb 6-1: Product: syz [ 537.624768][ T4358] usb 6-1: Manufacturer: syz [ 537.638058][ T4358] usb 6-1: SerialNumber: syz [ 537.660603][ T4358] usb 6-1: config 0 descriptor?? [ 537.889147][ T4358] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 538.097742][ T4358] usb write operation failed. (-71) [ 538.180268][ T4358] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 538.244952][ T4358] usb write operation failed. (-71) [ 538.303670][ T4358] usb 6-1: USB disconnect, device number 6 [ 539.556502][ T8864] netlink: 84 bytes leftover after parsing attributes in process `syz.4.927'. [ 539.565601][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.927'. [ 539.575327][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.927'. [ 539.628842][ T4280] [ 539.631186][ T4280] ====================================================== [ 539.638197][ T4280] WARNING: possible circular locking dependency detected [ 539.645253][ T4280] syzkaller #0 Not tainted [ 539.649652][ T4280] ------------------------------------------------------ [ 539.656657][ T4280] kworker/u5:3/4280 is trying to acquire lock: [ 539.662794][ T4280] ffffffff8ecd7e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 539.672029][ T4280] [ 539.672029][ T4280] but task is already holding lock: [ 539.679385][ T4280] ffffffff8ecb5728 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 539.688810][ T4280] [ 539.688810][ T4280] which lock already depends on the new lock. [ 539.688810][ T4280] [ 539.699351][ T4280] [ 539.699351][ T4280] the existing dependency chain (in reverse order) is: [ 539.708360][ T4280] [ 539.708360][ T4280] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 539.716077][ T4280] __mutex_lock+0x12d/0xae0 [ 539.721395][ T4280] hci_remote_features_evt+0x464/0xa10 [ 539.727397][ T4280] hci_event_packet+0x806/0x1290 [ 539.732853][ T4280] hci_rx_work+0x3eb/0xd40 [ 539.737790][ T4280] process_one_work+0x8ab/0x1160 [ 539.743243][ T4280] worker_thread+0xaf5/0x12a0 [ 539.748468][ T4280] kthread+0x29d/0x330 [ 539.753041][ T4280] ret_from_fork+0x1f/0x30 [ 539.757965][ T4280] [ 539.757965][ T4280] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 539.765245][ T4280] __mutex_lock+0x12d/0xae0 [ 539.770260][ T4280] l2cap_chan_connect+0xfb/0xe20 [ 539.775744][ T4280] l2cap_sock_connect+0x576/0x750 [ 539.781302][ T4280] kernel_connect+0x13e/0x1c0 [ 539.786483][ T4280] rfcomm_dlc_open+0x600/0x10c0 [ 539.791843][ T4280] rfcomm_sock_connect+0x2e9/0x600 [ 539.797467][ T4280] __sys_connect+0x3cb/0x450 [ 539.802567][ T4280] __x64_sys_connect+0x76/0x80 [ 539.807851][ T4280] do_syscall_64+0x4c/0xa0 [ 539.812801][ T4280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.819244][ T4280] [ 539.819244][ T4280] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 539.826620][ T4280] __lock_acquire+0x3a03/0x7ea0 [ 539.831992][ T4280] lock_acquire+0x1bc/0x4a0 [ 539.837025][ T4280] __mutex_lock+0x12d/0xae0 [ 539.842045][ T4280] rfcomm_security_cfm+0x95/0x780 [ 539.847586][ T4280] hci_encrypt_cfm+0x363/0x4d0 [ 539.852916][ T4280] hci_cc_read_enc_key_size+0x218/0x380 [ 539.858996][ T4280] hci_cmd_complete_evt+0x4e3/0xa40 [ 539.864727][ T4280] hci_event_packet+0x7b3/0x1290 [ 539.870183][ T4280] hci_rx_work+0x3eb/0xd40 [ 539.875204][ T4280] process_one_work+0x8ab/0x1160 [ 539.880845][ T4280] worker_thread+0xaf5/0x12a0 [ 539.886051][ T4280] kthread+0x29d/0x330 [ 539.890627][ T4280] ret_from_fork+0x1f/0x30 [ 539.895733][ T4280] [ 539.895733][ T4280] other info that might help us debug this: [ 539.895733][ T4280] [ 539.906107][ T4280] Chain exists of: [ 539.906107][ T4280] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 539.906107][ T4280] [ 539.918694][ T4280] Possible unsafe locking scenario: [ 539.918694][ T4280] [ 539.926129][ T4280] CPU0 CPU1 [ 539.931480][ T4280] ---- ---- [ 539.936844][ T4280] lock(hci_cb_list_lock); [ 539.941344][ T4280] lock(&hdev->lock); [ 539.947957][ T4280] lock(hci_cb_list_lock); [ 539.954967][ T4280] lock(rfcomm_mutex); [ 539.959110][ T4280] [ 539.959110][ T4280] *** DEADLOCK *** [ 539.959110][ T4280] [ 539.967238][ T4280] 4 locks held by kworker/u5:3/4280: [ 539.972619][ T4280] #0: ffff88801d3c6938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 539.983078][ T4280] #1: ffffc90003e87d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 539.994548][ T4280] #2: ffff888078990428 (&hdev->lock){+.+.}-{3:3}, at: hci_cc_read_enc_key_size+0x9b/0x380 [ 540.004544][ T4280] #3: ffffffff8ecb5728 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 540.014280][ T4280] [ 540.014280][ T4280] stack backtrace: [ 540.020212][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 540.027770][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 540.037816][ T4280] Workqueue: hci2 hci_rx_work [ 540.042483][ T4280] Call Trace: [ 540.045751][ T4280] [ 540.048672][ T4280] dump_stack_lvl+0x188/0x24e [ 540.053356][ T4280] ? load_image+0x410/0x410 [ 540.057845][ T4280] ? show_regs_print_info+0x12/0x12 [ 540.063032][ T4280] ? print_circular_bug+0x12b/0x1a0 [ 540.068234][ T4280] check_noncircular+0x2f8/0x400 [ 540.073205][ T4280] ? print_deadlock_bug+0x5d0/0x5d0 [ 540.078575][ T4280] ? lockdep_lock+0xf1/0x1f0 [ 540.083177][ T4280] ? _find_first_zero_bit+0xd2/0x100 [ 540.088456][ T4280] __lock_acquire+0x3a03/0x7ea0 [ 540.093317][ T4280] ? verify_lock_unused+0x140/0x140 [ 540.098523][ T4280] lock_acquire+0x1bc/0x4a0 [ 540.103031][ T4280] ? rfcomm_security_cfm+0x95/0x780 [ 540.108253][ T4280] ? trace_contention_end+0x5f/0x170 [ 540.113571][ T4280] ? __mutex_lock+0x1ab/0xae0 [ 540.118268][ T4280] ? __might_sleep+0xd0/0xd0 [ 540.122893][ T4280] ? read_lock_is_recursive+0x10/0x10 [ 540.128260][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 540.133888][ T4280] ? mutex_unlock+0x10/0x10 [ 540.138425][ T4280] __mutex_lock+0x12d/0xae0 [ 540.142929][ T4280] ? rfcomm_security_cfm+0x95/0x780 [ 540.148163][ T4280] ? rfcomm_security_cfm+0x95/0x780 [ 540.153360][ T4280] ? mutex_lock_nested+0x10/0x10 [ 540.158461][ T4280] ? trace_contention_end+0x5f/0x170 [ 540.163735][ T4280] ? __mutex_lock+0x1ab/0xae0 [ 540.168409][ T4280] ? l2cap_disconn_cfm+0xc0/0xc0 [ 540.173341][ T4280] rfcomm_security_cfm+0x95/0x780 [ 540.178362][ T4280] ? mutex_lock_nested+0x10/0x10 [ 540.183294][ T4280] ? rfcomm_send_msc+0x350/0x350 [ 540.188222][ T4280] ? __lock_acquire+0x7ea0/0x7ea0 [ 540.193239][ T4280] ? trace_contention_end+0x5f/0x170 [ 540.198529][ T4280] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 540.204450][ T4280] ? rfcomm_send_msc+0x350/0x350 [ 540.209380][ T4280] hci_encrypt_cfm+0x363/0x4d0 [ 540.214241][ T4280] ? hci_cc_read_enc_key_size+0x111/0x380 [ 540.219975][ T4280] hci_cc_read_enc_key_size+0x218/0x380 [ 540.225552][ T4280] hci_cmd_complete_evt+0x4e3/0xa40 [ 540.230750][ T4280] ? hci_remote_features_evt+0xa10/0xa10 [ 540.236375][ T4280] hci_event_packet+0x7b3/0x1290 [ 540.241315][ T4280] ? lock_chain_count+0x20/0x20 [ 540.246161][ T4280] ? bis_list+0x280/0x280 [ 540.250474][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 540.256359][ T4280] ? kcov_remote_start+0x50f/0x810 [ 540.261457][ T4280] ? lockdep_hardirqs_on+0x94/0x140 [ 540.266666][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 540.271881][ T4280] hci_rx_work+0x3eb/0xd40 [ 540.276283][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 540.281128][ T4280] ? process_one_work+0x7b4/0x1160 [ 540.286317][ T4280] process_one_work+0x8ab/0x1160 [ 540.291272][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 540.296897][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 540.301908][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 540.307454][ T4280] ? wq_worker_running+0x97/0x190 [ 540.312514][ T4280] worker_thread+0xaf5/0x12a0 [ 540.317190][ T4280] kthread+0x29d/0x330 [ 540.321260][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 540.326274][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 540.330844][ T4280] ret_from_fork+0x1f/0x30 [ 540.335254][ T4280]