last executing test programs: 2m49.379111786s ago: executing program 0 (id=107): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 2m49.154257166s ago: executing program 0 (id=110): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x800000002, 0x35, 0xffffffffffff936a, 0x40, 0x0, 0xb, 0x35b, 0x1, 0x6, 0xb000, 0x562a, 0xee00, 0xffffffffffffffff, 0x8b7ffffd, 0x223b8fb9}}}, 0x78) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x23}], 0x1) 2m48.858101222s ago: executing program 0 (id=113): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090) 2m48.523428382s ago: executing program 0 (id=119): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5b6, &(0x7f0000000940)="$eJzs3U1oG1ceAPD/jKw4H951FnZhd8kh7C5kIUS287Gb3VNyLQ0Ecij00hpZMcGyFSy5jY0hzj2U5lDakkt6aw89tvTQQ+mlx1576ce5EBrTQuxCqyJLchRHTmXXklLr94OR3psZ6f9/Gr0nzTDDBDCwjtce0oi/RcTlJGK0ZdlQNBYer6+3trqcX19dzidRrV75LokkIh6uLueb6yeN5yMRsRIRf42IT7MRJ9PNtzzQLJQXl2Ymi8XCfKM+Vpm9PlZeXDp1bXZyujBdmDvz3/+dO3/23MTpidZ016uttezO2nr7qzuv3f78uXt33nv/2Er+jckkLsRIY1lrO/ZS/TPJxoUt8892I1gfJf1OgF3JNPp5rSv9JUYj0+j17VRbB4fhnqQHdFF1OKK6qaUIDIBEp4cB1fwfUNv/bU69/P9x/2J9B6QWd211OX8zmvGH6scm4uDGvsnh75PH9kxq+5tHe5ko+9LKrYgYHxp68vufNL5/uze+FwnSVZ9crG+oJ7d/ujn+RJvxZ6R57PQ3ao5/a43xb61N/Mw249/lDmP89OI3b28b/9Zw/L1t/GQzftImfhoRL3cY/+4LH53fbln1nYgT0T5+U/L048NjV68VC+P1x7YxPj5x7P/btz/i8Dbx68dsD24k0tr+A42c0g7b/+FnH/xj5Snx//3Pzfg3Hy1Jn/r5H4qI1zuM/6eH7z7fUv2x9af//q3kQa240+2fRDbudRj/PxeOf9koOmoIAAAAAAAAAAB7KN04ly1Jc5vlNM3l6tfw/jkOp8VSuXLyamlhbqp+ztvRyKbNM61G6/WkVp9onI/brJ/eUj+TaQTMHNqo5/Kl4lSf2w4AAAAAAAAAAAAAAAAAAADPiiNbrv//IbNx/f/W21UD+9X2t/wG9jv9HwbX4/0/6VseQO/5/YeBVdX/YXDp/zC49H8YXPo/DK62/f9Q7/MAem+b3/9Mr/MAes//fwAAAAAAAAAAAAAAAAAAAAAAAAAA6IrLly7Vpur66nK+Vp8aWlyYKb1yaqpQnsnNLuRz+dL89dx0qTRdLOTypdlfe7+kVLo+HnMLN8YqhXJlrLy49NJsaWGueU/RQrbrLQIAAAAAAAAAAAAAAAAAAIDfn5GNKUlzEdl6PU1zuYg/RMTRJJKr14qF8Yj4Y0R8kckO1+oT/U4aAAAAAAAAAAAAAAAAAAAA9pny4tLMZLFYmO9eYagRar683sGrvq50NZ+hnawcESt7m0btHXf8qmzjA+zuZhqQQiaeiTSe/UIfByUAAAAAAAAAAAAAAAAAABhQjy767fQVP3c3IQAAAAAAAAAAAAAAAAAAABhI6bdJRNSmE6P/Gtm69ECyltl4johX715588ZkpTI/UZv/YHN+5a3G/NP9yB/oVLOfphFR68cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+XFpZnJYrEwv8vCcAfr9LuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvxSwAAAP//LpHUhA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 2m48.034122498s ago: executing program 0 (id=126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 2m46.241913864s ago: executing program 0 (id=138): setuid(0xee00) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1) 2m45.736070675s ago: executing program 32 (id=138): setuid(0xee00) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1) 2m29.250521563s ago: executing program 1 (id=290): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x470}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00000c1000/0x2000)=nil, 0x2000}) 2m28.944590689s ago: executing program 1 (id=295): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) 2m28.746072524s ago: executing program 1 (id=297): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) 2m28.380641769s ago: executing program 1 (id=302): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5b6, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 2m27.955785714s ago: executing program 1 (id=309): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x41059}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x12345, 0x2, {0x1}, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m26.248205009s ago: executing program 1 (id=323): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) 2m25.634629171s ago: executing program 33 (id=323): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) 21.254054262s ago: executing program 2 (id=1771): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="1528b8616b642e302e202e2e", 0xc) 21.033047564s ago: executing program 2 (id=1773): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ca8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 20.795709359s ago: executing program 2 (id=1776): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffd, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0xc4, 0x7fff, 0x0, 0x1, 0xfffffffe00000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9295, 0x200000000]}) 20.511835167s ago: executing program 2 (id=1780): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) 20.140671005s ago: executing program 2 (id=1786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x65, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2f, 0x3a, 0xfd, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [{0x1, 0x0, "9595f429ae"}]}}}}}}, 0x0) 19.740131237s ago: executing program 2 (id=1790): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 19.270461554s ago: executing program 34 (id=1790): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2.874897706s ago: executing program 6 (id=1966): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3"], 0xffdd) 2.51196698s ago: executing program 4 (id=1971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1001}], 0x1, 0x0, 0x0, 0x0) 2.474743522s ago: executing program 6 (id=1972): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r0, r1, 0x0, 0x1) 2.308481029s ago: executing program 5 (id=1976): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) 2.151940691s ago: executing program 7 (id=1977): prlimit64(0x0, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) socket(0x8, 0x1, 0x5) 2.151443931s ago: executing program 3 (id=1979): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/safesetid/gid_allowlist_policy\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 1.904208733s ago: executing program 5 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010"], 0x48}}, 0x0) 1.880544087s ago: executing program 6 (id=1981): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0x2000, 0x10000, 0x3, 0x2e6}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x44, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 1.82033116s ago: executing program 8 (id=1982): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) syz_emit_ethernet(0xdc, &(0x7f0000000fc0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @esp={{0x20, 0x4, 0x3, 0x39, 0xca, 0x65, 0x0, 0x8, 0x32, 0x0, @remote, @multicast1, {[@generic={0x89, 0xe, "b418fbc71bf345eeafff002a"}, @timestamp_addr={0x44, 0x4c, 0x2d, 0x1, 0x8, [{@loopback, 0x7}, {@multicast1, 0x81}, {@multicast2, 0x8}, {@remote, 0x6}, {@local, 0xb}, {@multicast1, 0xc}, {@empty, 0xd3ce067}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xcaa}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x7e, [@remote]}, @ra={0x94, 0x4, 0x1}]}}, {0x4d6, 0x7, @basic={0x0, 0x0, 0x2, [@ipv6=@tcp={0xe, 0x6, "468cfe", 0x14, 0x6, 0x0, @private2, @private0, {[], {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x0, 0x5}}}}]}}}}}}, 0x0) 1.819982755s ago: executing program 7 (id=1983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x2, 0x2, 0x6, 0xf}, 0x20) 1.800258761s ago: executing program 3 (id=1984): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 1.572594052s ago: executing program 3 (id=1985): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{0x0, 0x500}, {&(0x7f00000003c0)="489cbf228c4364d8ad8f93c2cc", 0xd}, {0x0}], 0x3}, 0x44) 1.501340322s ago: executing program 6 (id=1986): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="0100e1f9"]) 1.439879934s ago: executing program 7 (id=1987): mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x2442, 0x1) readv(r0, &(0x7f0000001d00)=[{&(0x7f0000000800)=""/198, 0xc6}, {0x0}], 0x2) 1.43968815s ago: executing program 4 (id=1988): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0', 0x1}], 0x1) 1.293106611s ago: executing program 5 (id=1989): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x5}) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x2, 0x2, 0xc, 0xf05}) 1.267821753s ago: executing program 8 (id=1990): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 1.180473657s ago: executing program 7 (id=1991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c"], 0x50, 0x40800}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x8841) 1.180194629s ago: executing program 3 (id=1992): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x83}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.172431566s ago: executing program 4 (id=1993): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x20000, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 1.088587086s ago: executing program 6 (id=1994): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0x1000000000de}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4}, {0x0, 0x0, 0x28, 0xd, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x1], 0x1, 0x8, 0x98f}}) 1.023629733s ago: executing program 8 (id=1995): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)={0x40000009, 0x44, 0x0, 0x1}) 1.023376014s ago: executing program 5 (id=1996): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}, 0x840) 951.595405ms ago: executing program 7 (id=1997): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 919.740965ms ago: executing program 3 (id=1998): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b34ac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca0151ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf02e5256ff74be5e07a5f8d6ec2fa867b2a353bf6ea1b533377803804a49a499d51f1cb71e1cea551598939afe8ff8e8472352e2d5193bc866c000"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) 847.843416ms ago: executing program 4 (id=1999): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 699.615173ms ago: executing program 4 (id=2000): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x80, 0x3e, 0x9}, 'syz0\x00', 0x2d}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 674.07752ms ago: executing program 5 (id=2001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="171c000020230000140012800b0001006970366772650000040002"], 0x3c}}, 0x40004) 547.158763ms ago: executing program 8 (id=2002): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}, @generic={0x94, 0x4, "d483"}]}}}], 0x18}}], 0x1, 0x50008000) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 545.01754ms ago: executing program 4 (id=2003): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x2, @remote, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 446.931025ms ago: executing program 7 (id=2004): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f00000006c0), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 247.806499ms ago: executing program 3 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x20004800) 247.540673ms ago: executing program 8 (id=2006): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e1d, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x3, 0x1, 0x5, 0x5, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 193.838539ms ago: executing program 8 (id=2007): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x40000000, 0x0) 163.633143ms ago: executing program 5 (id=2008): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r0, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) 0s ago: executing program 6 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x4c, r2, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @broadcast, @random="ab230200", {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0x9, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): 183.204615][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.204644][ T5626] ? skb_pull_data+0xf0/0x200 [ 183.204674][ T5626] hci_le_enh_conn_complete_evt+0x189/0x490 [ 183.204712][ T5626] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 183.204752][ T5626] hci_event_packet+0x67a/0xf10 [ 183.204790][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 183.204821][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 183.204860][ T5626] ? replace_chunk+0xb30/0xb80 [ 183.204902][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.204931][ T5626] ? hci_send_to_monitor+0xe2/0x590 [ 183.204973][ T5626] hci_rx_work+0x3ee/0x1020 [ 183.205011][ T5626] ? process_scheduled_works+0x97a/0x1630 [ 183.205047][ T5626] process_scheduled_works+0xc3d/0x1630 [ 183.205081][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.205147][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.205188][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.205217][ T5626] ? assign_work+0x3cf/0x5d0 [ 183.205257][ T5626] worker_thread+0xa47/0xfb0 [ 183.205295][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.205347][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.205377][ T5626] ? __kthread_parkme+0x71/0x1f0 [ 183.205427][ T5626] kthread+0x38b/0x480 [ 183.205452][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 183.205486][ T5626] ? __pfx_kthread+0x10/0x10 [ 183.205514][ T5626] ret_from_fork+0x514/0xb70 [ 183.205542][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 183.205566][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.205595][ T5626] ? __switch_to+0xc89/0x1420 [ 183.205635][ T5626] ? __pfx_kthread+0x10/0x10 [ 183.205662][ T5626] ret_from_fork_asm+0x1a/0x30 [ 183.205721][ T5626] [ 183.205806][ T5626] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.205843][ T5626] Bluetooth: hci1: failed to register connection device [ 183.208440][ T30] audit: type=1326 audit(1790952134.795:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.6.957" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 183.208492][ T30] audit: type=1326 audit(1790952134.805:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.6.957" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 183.237234][ T30] audit: type=1326 audit(1790952134.845:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.6.957" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 183.256642][ T30] audit: type=1326 audit(1790952134.855:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.6.957" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 183.580847][ T8623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.585759][ T8623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.671526][ T8623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.674336][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 183.674354][ T30] audit: type=1800 audit(1790952135.275:90): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.948" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 183.714815][ T30] audit: type=1804 audit(1790952135.295:91): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.948" name="/newroot/152/file1/bus" dev="loop2" ino=17058 res=1 errno=0 [ 183.739726][ T8623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.739839][ T8623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.777031][ T8623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.859878][ T8623] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 183.860059][ T8623] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 183.926883][ T8623] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 184.004541][ T8623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.004656][ T8623] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 184.045740][ T8623] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 184.067020][ T8623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.067146][ T8623] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.070946][ T8623] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.099559][ T5623] ocfs2: Unmounting device (7,2) on (node local) [ 184.115715][ T8623] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.301413][ T8643] loop5: detected capacity change from 0 to 512 [ 184.305131][ T8643] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.339978][ T8643] EXT4-fs (loop5): 1 truncate cleaned up [ 184.376616][ T8643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.037908][ T8669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.038174][ T8669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.038386][ T8669] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 185.038597][ T8669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.038804][ T8669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.469635][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 185.484613][ T8682] loop3: detected capacity change from 0 to 4096 [ 185.514358][ T8682] ntfs3(loop3): Failed to load $Volume (-22). [ 185.523587][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.601171][ T8687] loop7: detected capacity change from 0 to 2048 [ 185.603454][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 185.605349][ T8688] loop6: detected capacity change from 0 to 1024 [ 185.693881][ T8688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.693982][ T8688] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.718122][ T8687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.786985][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.5.985'. [ 185.947731][ T1277] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 185.967494][ T1277] EXT4-fs (loop6): Remounting filesystem read-only [ 185.986596][ T1277] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5172: inode #15: block 7: len 1: ext4_map_blocks returned -30 [ 186.245422][ T6177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.592342][ T5723] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 186.737665][ T8720] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.751413][ T5723] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 186.753602][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.753636][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.753677][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.812567][ T5723] usb 4-1: config 0 descriptor?? [ 187.081438][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.081468][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.081509][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 187.081514][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.081544][ T5626] Bluetooth: hci2: command 0x2016 tx timeout [ 187.162859][ T64] rpcbind: server 127.0.0.1 not responding, timed out [ 187.244822][ T5723] hid_parser_main: 30 callbacks suppressed [ 187.244849][ T5723] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 187.244876][ T5723] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 187.244900][ T5723] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 187.244922][ T5723] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 187.244944][ T5723] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 187.244966][ T5723] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 187.244989][ T5723] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 187.265068][ T5723] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 187.680968][ T5758] usb 4-1: USB disconnect, device number 7 [ 187.791880][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 187.893086][ T8752] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1013'. [ 188.290653][ T30] audit: type=1400 audit(1790952139.885:92): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=8772 comm="syz.2.1022" name=223A6F offset=61 [ 188.663836][ T8787] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 188.663883][ T8787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.801663][ T5846] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 188.961575][ T5846] usb 8-1: Using ep0 maxpacket: 8 [ 188.963035][ T5846] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.964455][ T5846] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 188.964506][ T5846] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.964532][ T5846] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.964560][ T5846] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.964588][ T5846] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.964633][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.251999][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 189.252173][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.252204][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.252271][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.252519][ T5626] Bluetooth: hci2: command 0x2016 tx timeout [ 189.363890][ T5846] usb 8-1: GET_CAPABILITIES returned 0 [ 189.363945][ T5846] usbtmc 8-1:16.0: can't read capabilities [ 189.478871][ T8781] loop5: detected capacity change from 0 to 131072 [ 189.533588][ T8781] F2FS-fs (loop5): Test dummy encryption mode enabled [ 189.580488][ T5846] usb 8-1: USB disconnect, device number 5 [ 189.628153][ T8781] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 189.640410][ T8781] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 189.985583][ T8812] jffs2: notice: (8812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 190.182748][ T8794] loop2: detected capacity change from 0 to 32768 [ 190.437962][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1042'. [ 190.512659][ T8823] loop3: detected capacity change from 0 to 4096 [ 190.520274][ T8823] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 190.678529][ T8823] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 191.321750][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.321794][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.321824][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.321853][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 191.321970][ T5626] Bluetooth: hci2: command 0x2016 tx timeout [ 191.600561][ T30] audit: type=1400 audit(1790952143.195:93): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=8859 comm="syz.3.1060" [ 192.141342][ T8876] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1065'. [ 192.369247][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1069'. [ 192.686456][ T8857] loop2: detected capacity change from 0 to 32768 [ 192.743522][ T8857] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 192.743546][ T8857] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 192.930893][ T8857] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 192.955216][ T5847] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 192.955237][ T5847] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 193.034241][ T8899] loop6: detected capacity change from 0 to 4096 [ 193.193833][ T8902] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.401651][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.483666][ T5847] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 528ms [ 193.517575][ T5847] gfs2: fsid=syz:syz.0: jid=0: Done [ 193.520032][ T8857] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 193.564451][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.564515][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.623449][ T8897] loop7: detected capacity change from 0 to 32768 [ 193.652559][ T8897] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.715872][ T8897] XFS (loop7): Ending clean mount [ 193.909674][ T6776] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.928274][ T8930] ip_tables: iptables: counters copy to user failed while replacing table [ 194.504625][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 194.622062][ T8925] loop6: detected capacity change from 0 to 32768 [ 194.706199][ T8925] JBD2: Ignoring recovery information on journal [ 194.857466][ T8925] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 195.000885][ T8955] xt_hashlimit: size too large, truncated to 1048576 [ 195.198295][ T6177] ocfs2: Unmounting device (7,6) on (node local) [ 195.297117][ T30] audit: type=1400 audit(1790952146.895:94): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=8962 comm="syz.7.1101" name="p" offset=33 [ 195.836197][ T8973] loop7: detected capacity change from 0 to 8 [ 196.177900][ T8961] loop5: detected capacity change from 0 to 32768 [ 196.227890][ T8981] loop6: detected capacity change from 0 to 1024 [ 196.517676][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1123'. [ 196.517708][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1123'. [ 196.517907][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1123'. [ 196.872447][ T8999] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 197.159235][ T5744] kernel write not supported for file /sequencer2 (pid: 5744 comm: kworker/1:5) [ 197.845100][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 197.991361][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 197.992443][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.996477][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.996510][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.996536][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.996581][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.065569][ T25] usb 6-1: config 0 descriptor?? [ 198.516013][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1132'. [ 198.546965][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.546996][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547019][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547042][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547065][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547088][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547110][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547137][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547160][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.547183][ T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 198.688547][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input8 [ 198.817385][ T25] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 198.852022][ T25] usb 6-1: USB disconnect, device number 7 [ 199.108782][ T9032] fido_id[9032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 199.385538][ T9043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.385809][ T9043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.386948][ T9043] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 199.387186][ T9043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.389039][ T9043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.494325][ T9049] loop5: detected capacity change from 0 to 256 [ 199.627105][ T30] audit: type=1800 audit(1790952151.225:95): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1141" name="bus" dev="loop5" ino=1048676 res=0 errno=0 [ 200.289723][ T9041] loop6: detected capacity change from 0 to 32768 [ 200.455236][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 200.693192][ T30] audit: type=1326 audit(1790952152.285:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.693258][ T30] audit: type=1326 audit(1790952152.295:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.696276][ T9078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.696562][ T9078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.696806][ T9078] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 200.697064][ T9078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.698600][ T9078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.707176][ T30] audit: type=1326 audit(1790952152.305:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.709574][ T30] audit: type=1326 audit(1790952152.305:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.713213][ T30] audit: type=1326 audit(1790952152.305:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.713268][ T30] audit: type=1326 audit(1790952152.305:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.713319][ T30] audit: type=1326 audit(1790952152.305:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.719761][ T30] audit: type=1326 audit(1790952152.305:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 200.719816][ T30] audit: type=1326 audit(1790952152.305:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.6.1156" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x7ffc0000 [ 201.053516][ T9072] loop7: detected capacity change from 0 to 40427 [ 201.054599][ T9072] F2FS-fs: heap/no_heap options were deprecated [ 201.067779][ T9072] F2FS-fs (loop7): build fault injection rate: 19 [ 201.067803][ T9072] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 201.110716][ T9072] F2FS-fs (loop7): invalid crc value [ 201.200425][ T9072] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 201.217556][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1158'. [ 201.522548][ T9072] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 201.530410][ T9072] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 201.592920][ T9072] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 201.619247][ T9072] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 201.645622][ T9072] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 201.648660][ T9072] F2FS-fs (loop7): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xdc0 [ 201.728438][ T6776] syz-executor: attempt to access beyond end of device [ 201.728438][ T6776] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.759803][ T6776] CPU: 1 UID: 0 PID: 6776 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 201.759844][ T6776] Tainted: [L]=SOFTLOCKUP [ 201.759854][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 201.759870][ T6776] Call Trace: [ 201.759880][ T6776] [ 201.759899][ T6776] dump_stack_lvl+0xe8/0x150 [ 201.759944][ T6776] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 201.759990][ T6776] f2fs_write_end_bio+0x1211/0x16e0 [ 201.760024][ T6776] ? blkg_put+0x22/0x240 [ 201.760079][ T6776] __submit_merged_bio+0x258/0x6a0 [ 201.760158][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.760192][ T6776] ? rcu_is_watching+0x16/0xb0 [ 201.760240][ T6776] __submit_merged_write_cond+0x3c9/0x4e0 [ 201.760302][ T6776] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 201.760359][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.760399][ T6776] f2fs_write_data_pages+0x2a27/0x36f0 [ 201.760468][ T6776] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.760493][ T6776] ? is_bpf_text_address+0x26/0x2b0 [ 201.760543][ T6776] ? arch_stack_walk+0xfb/0x150 [ 201.760609][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.760638][ T6776] ? add_lock_to_list+0xc7/0x100 [ 201.760675][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.760704][ T6776] ? __lock_acquire+0x1511/0x2de0 [ 201.760764][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.760795][ T6776] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.760839][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.760873][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.760909][ T6776] ? do_raw_spin_unlock+0xf5/0x200 [ 201.760948][ T6776] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.760977][ T6776] do_writepages+0x338/0x560 [ 201.761012][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761045][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761079][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761108][ T6776] ? do_raw_spin_unlock+0xf5/0x200 [ 201.761152][ T6776] filemap_fdatawrite+0x1e9/0x2f0 [ 201.761186][ T6776] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 201.761259][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761291][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761326][ T6776] ? do_raw_spin_unlock+0xf5/0x200 [ 201.761368][ T6776] f2fs_sync_dirty_inodes+0x30e/0x830 [ 201.761416][ T6776] f2fs_write_checkpoint+0xa3d/0x2710 [ 201.761444][ T6776] ? __lock_acquire+0x747/0x2de0 [ 201.761520][ T6776] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 201.761549][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761644][ T6776] kill_f2fs_super+0x2dd/0x700 [ 201.761683][ T6776] ? __pfx_kill_f2fs_super+0x10/0x10 [ 201.761725][ T6776] ? call_rcu+0x64d/0x8b0 [ 201.761756][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761785][ T6776] ? lockdep_hardirqs_on+0x7b/0x110 [ 201.761820][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.761866][ T6776] deactivate_locked_super+0xbe/0x110 [ 201.761911][ T6776] cleanup_mnt+0x3d3/0x460 [ 201.761945][ T6776] task_work_run+0x1d9/0x270 [ 201.761978][ T6776] ? __pfx_task_work_run+0x10/0x10 [ 201.762018][ T6776] exit_to_user_mode_loop+0x204/0x770 [ 201.762046][ T6776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.762075][ T6776] ? rcu_is_watching+0x16/0xb0 [ 201.762112][ T6776] do_syscall_64+0x328/0x520 [ 201.762147][ T6776] ? trace_irq_disable+0x3b/0x140 [ 201.762174][ T6776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.762207][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.762233][ T6776] RIP: 0033:0x7f10fc19f397 [ 201.762257][ T6776] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 201.762279][ T6776] RSP: 002b:00007ffdcfe21d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 201.762306][ T6776] RAX: 0000000000000000 RBX: 00007f10fc2344bb RCX: 00007f10fc19f397 [ 201.762325][ T6776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcfe21de0 [ 201.762341][ T6776] RBP: 00007ffdcfe21de0 R08: 00007ffdcfe22de0 R09: 00000000ffffffff [ 201.762359][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdcfe22e70 [ 201.762377][ T6776] R13: 00007f10fc2344bb R14: 000000000003139d R15: 00007ffdcfe22eb0 [ 201.762417][ T6776] [ 201.854871][ T6776] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 202.021776][ T5847] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.193748][ T5847] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 202.197105][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.197135][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.197195][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.197222][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.203635][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.203663][ T5847] usb 3-1: Product: syz [ 202.203680][ T5847] usb 3-1: Manufacturer: syz [ 202.203697][ T5847] usb 3-1: SerialNumber: syz [ 202.421037][ T5626] Bluetooth: hci6: urb ffff88803224bc00 submission failed (90) [ 202.537943][ T5847] usb 3-1: USB disconnect, device number 10 [ 202.761367][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.761388][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.761421][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 202.761425][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.761453][ T5626] Bluetooth: hci2: command 0x2016 tx timeout [ 203.107166][ T9124] pimreg: entered allmulticast mode [ 203.133969][ T9124] pimreg: left allmulticast mode [ 203.923928][ T9144] loop7: detected capacity change from 0 to 4096 [ 203.939211][ T9144] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 204.114835][ T9144] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 204.120742][ T9144] ntfs3(loop7): ino=1a, mi_enum_attr [ 204.120924][ T9144] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 204.223597][ T9144] ntfs3(loop7): ino=5, "/" ntfs_readdir [ 204.413819][ T9156] input: syz1 as /devices/virtual/input/input9 [ 204.772883][ T5751] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 204.867630][ T9172] loop7: detected capacity change from 0 to 512 [ 204.886322][ T9172] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 204.907835][ T9172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 204.907979][ T9172] System zones: 1-12 [ 204.912854][ T9172] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.1189: bad orphan inode 16 [ 204.912889][ T9172] loop7: lost filesystem error report for type 5 error -117 [ 204.920061][ T9172] ext4_test_bit(bit=15, block=4) = 0 [ 204.920093][ T9172] EXT4-fs (loop7): 1 orphan inode deleted [ 204.926515][ T9172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.959673][ T5751] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 204.987558][ T5751] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 204.987614][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29625, setting to 64 [ 204.991303][ T5751] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 204.991332][ T5751] usb 4-1: Manufacturer: syz [ 205.035376][ T5751] usb 4-1: config 0 descriptor?? [ 205.036206][ T9161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.087529][ T5751] igorplugusb 4-1:0.0: endpoint incorrect [ 205.088881][ T6776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.119756][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1198'. [ 205.162485][ T9181] netlink: 'syz.5.1198': attribute type 10 has an invalid length. [ 205.222641][ T9181] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 205.243574][ T9181] team0: Port device wlan0 added [ 205.248403][ T9185] loop2: detected capacity change from 0 to 512 [ 205.278555][ T9180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.298055][ T9161] loop3: detected capacity change from 0 to 64 [ 205.328775][ T5751] usb 4-1: USB disconnect, device number 8 [ 205.418426][ T9188] kAFS: bad VL server IP address [ 205.746767][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.747721][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.750391][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.880435][ T9210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.880718][ T9210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.880955][ T9210] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 205.900359][ T9210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.900618][ T9210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.917481][ T9215] loop7: detected capacity change from 0 to 512 [ 205.939455][ T9215] EXT4-fs (loop7): orphan cleanup on readonly fs [ 205.949021][ T9215] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.1211: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 205.949058][ T9215] loop7: lost filesystem error report for type 5 error -117 [ 205.951190][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 205.951212][ C1] EXT4-fs (loop7): initial error at time 1790952157: ext4_xattr_inode_iget:473 [ 205.951239][ C1] EXT4-fs (loop7): last error at time 1790952157: ext4_xattr_inode_iget:473 [ 205.964923][ T9215] EXT4-fs (loop7): Remounting filesystem read-only [ 205.965016][ T9215] EXT4-fs (loop7): 1 orphan inode deleted [ 205.995931][ T9215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 206.183091][ T6776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.233998][ T9226] loop5: detected capacity change from 0 to 2048 [ 206.253870][ T9226] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 206.260075][ T9226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.703810][ T5751] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 206.851209][ T5751] usb 7-1: Using ep0 maxpacket: 32 [ 206.852219][ T5751] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 206.854136][ T5751] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 206.854162][ T5751] usb 7-1: config 0 has no interface number 0 [ 206.860999][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.861027][ T5751] usb 7-1: Product: syz [ 206.861044][ T5751] usb 7-1: Manufacturer: syz [ 206.861061][ T5751] usb 7-1: SerialNumber: syz [ 206.923161][ T5751] usb 7-1: config 0 descriptor?? [ 206.936881][ T5751] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.142166][ T5751] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 207.150885][ T5751] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 207.545224][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 207.545779][ T5847] usb 7-1: USB disconnect, device number 5 [ 207.578947][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 207.632571][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 207.637254][ T5847] quatech2 7-1:0.51: device disconnected [ 207.815057][ T9262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.819735][ T9262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.819924][ T9262] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 207.820086][ T9262] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.820251][ T9262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.882171][ T9272] jffs2: notice: (9272) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 208.012915][ T9280] loop2: detected capacity change from 0 to 1024 [ 208.018629][ T9280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.067953][ T9280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.068056][ T9280] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.105332][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 208.105352][ T30] audit: type=1800 audit(1790952159.705:118): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1235" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 208.119968][ T9280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1235: bg 0: block 112: padding at end of block bitmap is not set [ 208.125178][ T9280] EXT4-fs (loop2): Remounting filesystem read-only [ 208.210424][ T9288] loop3: detected capacity change from 0 to 512 [ 208.289970][ T9288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.290079][ T9288] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.354177][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 208.366743][ T9288] EXT4-fs (loop3): shut down requested (1) [ 208.417941][ T9294] netlink: 480 bytes leftover after parsing attributes in process `syz.7.1240'. [ 208.418027][ T9294] netlink: 480 bytes leftover after parsing attributes in process `syz.7.1240'. [ 208.550081][ T9302] loop5: detected capacity change from 0 to 1024 [ 208.558291][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.681940][ T9302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.682068][ T9302] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.807752][ T49] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 208.839045][ T49] EXT4-fs (loop5): Remounting filesystem read-only [ 208.839433][ T49] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5172: inode #15: block 7: len 1: ext4_map_blocks returned -30 [ 208.930537][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.931351][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.941000][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.089170][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.614498][ T9323] loop6: detected capacity change from 0 to 32768 [ 209.673783][ T5847] Process accounting resumed [ 209.678682][ T9323] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 209.834791][ T9342] Process accounting resumed [ 209.881471][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.881511][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.881542][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 209.881571][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.881601][ T5626] Bluetooth: hci2: command 0x2016 tx timeout [ 209.960725][ T9326] loop3: detected capacity change from 0 to 32768 [ 210.033548][ T9326] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 210.051673][ T9326] JBD2: Ignoring recovery information on journal [ 210.087762][ T9356] loop5: detected capacity change from 0 to 512 [ 210.096632][ T9356] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.140131][ T6177] ocfs2: Unmounting device (7,6) on (node local) [ 210.148013][ T9356] EXT4-fs (loop5): 1 truncate cleaned up [ 210.175759][ T9356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.205199][ T9354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.205309][ T9354] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 210.218496][ T9326] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 210.283051][ T9354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.283254][ T9354] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 210.283455][ T9354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.284602][ T9354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.466573][ T9366] loop6: detected capacity change from 0 to 128 [ 210.468006][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.487831][ T30] audit: type=1800 audit(1790952170.063:119): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1256" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 210.660153][ T5625] ocfs2: Unmounting device (7,3) on (node local) [ 211.428370][ T9400] loop3: detected capacity change from 0 to 512 [ 211.478637][ T9400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.478735][ T9400] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.496844][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.497507][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.509000][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.647210][ T9412] jffs2: notice: (9412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 211.729892][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.803722][ T9421] openvswitch: netlink: IP tunnel dst address not specified [ 211.803760][ T9421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.074713][ T9433] netlink: 'syz.5.1298': attribute type 21 has an invalid length. [ 212.074800][ T9433] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1298'. [ 212.085491][ T9433] netlink: 'syz.5.1298': attribute type 21 has an invalid length. [ 212.085543][ T9433] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1298'. [ 212.281526][ T5626] Bluetooth: hci2: command 0x2016 tx timeout [ 212.346971][ T9446] loop2: detected capacity change from 0 to 512 [ 212.361401][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.361431][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.361439][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 212.361461][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.364525][ T9446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.396887][ T9446] EXT4-fs (loop2): 1 truncate cleaned up [ 212.406427][ T9446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.521863][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.632164][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.765036][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.766651][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.785570][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.786947][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.263722][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 213.505508][ T9493] Failed to get privilege flags for destination (handle=0x2:0x0) [ 213.832078][ T9503] ip6tnl1: entered allmulticast mode [ 214.361602][ T4927] Bluetooth: hci2: command 0x2016 tx timeout [ 214.405749][ T9533] MTRR 2 not used [ 214.694680][ T9545] loop3: detected capacity change from 0 to 256 [ 214.729099][ T30] audit: type=1800 audit(1790952174.323:120): pid=9545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1348" name="bus" dev="loop3" ino=1048677 res=0 errno=0 [ 214.789806][ T9547] syz.3.1348: attempt to access beyond end of device [ 214.789806][ T9547] loop3: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 215.017523][ T42] kworker/u8:2: attempt to access beyond end of device [ 215.017523][ T42] loop3: rw=1, sector=1808, nr_sectors = 2044 limit=256 [ 216.110941][ T9594] loop6: detected capacity change from 0 to 256 [ 216.181195][ T30] audit: type=1800 audit(1790952175.773:121): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1369" name="bus" dev="loop6" ino=1048691 res=0 errno=0 [ 216.258221][ T9596] syz.6.1369: attempt to access beyond end of device [ 216.258221][ T9596] loop6: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 216.617976][ T49] kworker/u8:3: attempt to access beyond end of device [ 216.617976][ T49] loop6: rw=1, sector=1808, nr_sectors = 2044 limit=256 [ 216.682419][ T25] net_ratelimit: 4 callbacks suppressed [ 216.682443][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.684954][ T5847] Process accounting resumed [ 216.728506][ T9603] Process accounting resumed [ 216.855998][ T9589] loop3: detected capacity change from 0 to 32768 [ 216.918607][ T9607] loop5: detected capacity change from 0 to 4096 [ 216.960716][ T9611] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.060774][ T9610] loop6: detected capacity change from 0 to 8 [ 217.104121][ T9589] UFO tlock:0xffffc900029a2048 [ 217.386417][ T9561] overlayfs: failed to resolve './file0': -2 [ 217.645870][ T9627] loop3: detected capacity change from 0 to 1764 [ 217.660008][ T9627] iso9660: Bad value for 'session' [ 217.721636][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.722730][ T30] audit: type=1326 audit(1790952177.323:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.722995][ T30] audit: type=1326 audit(1790952177.323:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.725439][ T30] audit: type=1326 audit(1790952177.323:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.725493][ T30] audit: type=1326 audit(1790952177.323:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.725542][ T30] audit: type=1326 audit(1790952177.323:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.725590][ T30] audit: type=1326 audit(1790952177.323:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.726967][ T30] audit: type=1326 audit(1790952177.323:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.732963][ T30] audit: type=1326 audit(1790952177.323:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc97059e159 code=0x7ffc0000 [ 217.818675][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.034742][ T5847] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 218.050476][ T5847] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 218.050506][ T5847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.050531][ T5847] usb 3-1: config 0 has no interface number 0 [ 218.050579][ T5847] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 218.050609][ T5847] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 218.050640][ T5847] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.114545][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.114577][ T5847] usb 3-1: Product: syz [ 218.114595][ T5847] usb 3-1: Manufacturer: syz [ 218.114612][ T5847] usb 3-1: SerialNumber: syz [ 218.140393][ T5847] usb 3-1: config 0 descriptor?? [ 218.169156][ T9641] loop7: detected capacity change from 0 to 256 [ 218.213914][ T1213] Process accounting resumed [ 218.307182][ T9643] Process accounting resumed [ 218.336936][ T9646] syz.7.1387: attempt to access beyond end of device [ 218.336936][ T9646] loop7: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 218.522246][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.523789][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.524320][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.527135][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.527861][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.529143][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.613220][ T5847] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 218.644900][ T5847] usb 3-1: USB disconnect, device number 11 [ 218.761520][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.772803][ T162] kworker/u8:5: attempt to access beyond end of device [ 218.772803][ T162] loop7: rw=1, sector=1808, nr_sectors = 2044 limit=256 [ 218.853918][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 219.005072][ T25] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 219.006712][ T25] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 219.006737][ T25] usb 6-1: config 0 has no interface number 0 [ 219.006780][ T25] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.009746][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.009772][ T25] usb 6-1: Product: syz [ 219.009789][ T25] usb 6-1: Manufacturer: syz [ 219.009807][ T25] usb 6-1: SerialNumber: syz [ 219.027717][ T25] usb 6-1: config 0 descriptor?? [ 219.089256][ T25] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 219.166178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.211294][ T5847] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.372383][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 219.374259][ T5847] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 219.378129][ T5847] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 219.378173][ T5847] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.378204][ T5847] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 219.378236][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.378271][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.448400][ T9666] pimreg: entered allmulticast mode [ 219.463215][ T5847] usb 4-1: config 0 descriptor?? [ 219.490208][ T9666] pimreg: left allmulticast mode [ 219.698789][ T9669] loop2: detected capacity change from 0 to 64 [ 219.948104][ T5847] bigben 0003:146B:0902.000B: unexpected rdesc, please submit for review [ 219.949770][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1402'. [ 219.949795][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1402'. [ 219.984794][ T5847] bigben 0003:146B:0902.000B: missing HID_OUTPUT_REPORT 0 [ 219.986753][ T5847] bigben 0003:146B:0902.000B: no output report found [ 220.006749][ T5847] bigben 0003:146B:0902.000B: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 220.118457][ T4927] Bluetooth: hci1: SCO packet too small [ 220.213929][ T25] usb 4-1: USB disconnect, device number 9 [ 220.507245][ T9677] fido_id[9677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 220.627790][ T9694] loop2: detected capacity change from 0 to 256 [ 220.710037][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 220.710059][ T30] audit: type=1800 audit(1790952180.303:132): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1411" name="bus" dev="loop2" ino=1048693 res=0 errno=0 [ 220.786832][ T9697] syz.2.1411: attempt to access beyond end of device [ 220.786832][ T9697] loop2: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 220.931337][ T5723] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 221.091438][ T5723] usb 7-1: Using ep0 maxpacket: 32 [ 221.094110][ T5723] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 221.095472][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.095504][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.095544][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.148571][ T5723] usb 7-1: config 0 descriptor?? [ 221.160744][ T5723] hub 7-1:0.0: USB hub found [ 221.327441][ T1413] kworker/u8:10: attempt to access beyond end of device [ 221.327441][ T1413] loop2: rw=1, sector=1808, nr_sectors = 2044 limit=256 [ 221.380775][ T5723] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 221.412107][ T1213] usb 6-1: USB disconnect, device number 8 [ 221.444682][ T1213] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 221.481927][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.631472][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 221.632283][ T5847] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.634333][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.634366][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.634392][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.634436][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.705329][ T5847] usb 4-1: config 0 descriptor?? [ 221.864237][ T5723] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 221.881574][ T1213] net_ratelimit: 3 callbacks suppressed [ 221.881591][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.121862][ T5758] usb 7-1: USB disconnect, device number 6 [ 222.165910][ T5847] hid_parser_main: 5 callbacks suppressed [ 222.165936][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.165962][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.165985][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.169510][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.169535][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.169559][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.169582][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.169605][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.169628][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.169652][ T5847] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 222.211643][ T5847] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input12 [ 222.357094][ T5847] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 222.401310][ T5847] usb 4-1: USB disconnect, device number 10 [ 222.595484][ T9723] fido_id[9723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 222.715687][ T9718] loop5: detected capacity change from 0 to 32768 [ 222.759249][ T9718] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 222.871269][ T9718] XFS (loop5): Ending clean mount [ 222.909637][ T9739] tap0: tun_chr_ioctl cmd 1074025677 [ 222.909728][ T9739] tap0: linktype set to 823 [ 222.922001][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.974766][ T5614] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 223.266281][ T9746] [ 223.327621][ T9748] loop2: detected capacity change from 0 to 128 [ 223.344589][ T9748] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.370329][ T9748] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.486156][ T9751] sctp: [Deprecated]: syz.4.1434 (pid 9751) Use of int in max_burst socket option deprecated. [ 223.486156][ T9751] Use struct sctp_assoc_value instead [ 223.600212][ T162] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.961420][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.291547][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.680539][ T9788] loop5: detected capacity change from 0 to 4096 [ 224.944579][ T9788] ntfs3(loop5): failed to convert "0080" to koi8-ru [ 224.996642][ T9788] ntfs3(loop5): failed to convert name for inode 1e. [ 225.005093][ T9788] ntfs3(loop5): ino=1f, mi_enum_attr [ 225.005491][ T9788] ntfs3(loop5): failed to convert "256c" to koi8-ru [ 225.008373][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.054091][ T9803] loop3: detected capacity change from 0 to 512 [ 225.085357][ T9803] syz.3.1457: attempt to access beyond end of device [ 225.085357][ T9803] loop3: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 225.087896][ T9803] syz.3.1457: attempt to access beyond end of device [ 225.087896][ T9803] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 225.088124][ T30] audit: type=1800 audit(1790952184.683:133): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1457" name="file2" dev="loop3" ino=1048694 res=0 errno=0 [ 225.148414][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.148443][ T9803] FAT-fs (loop3): Filesystem has been set read-only [ 225.148774][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.149382][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.149910][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.150456][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.201288][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.211571][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.212194][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.218252][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.218834][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.224331][ T9803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 225.351576][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 225.352591][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.355607][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.355637][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.355665][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.355692][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.355737][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.662559][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 225.662612][ T25] usbtmc 3-1:16.0: can't read capabilities [ 225.754687][ T9823] loop7: detected capacity change from 0 to 256 [ 225.797182][ T9823] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 225.907620][ T25] usb 3-1: USB disconnect, device number 12 [ 226.041583][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.422225][ T9838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.422584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.700926][ T9845] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1473'. [ 226.980538][ T9847] loop6: detected capacity change from 0 to 4096 [ 226.988704][ T9847] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 227.083428][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.100887][ T9847] ntfs3(loop6): Failed to load $Extend (-22). [ 227.100918][ T9847] ntfs3(loop6): Failed to initialize $Extend. [ 227.253008][ T9841] loop3: detected capacity change from 0 to 32768 [ 227.307708][ T9841] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.321480][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.448695][ T9841] XFS (loop3): Ending clean mount [ 227.624469][ T9876] batman_adv: batadv0: Adding interface: dummy0 [ 227.624490][ T9876] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.624524][ T9876] batman_adv: batadv0: Interface activated: dummy0 [ 227.649204][ T5625] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.894688][ T9882] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 228.123800][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.123868][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.383678][ T9898] jffs2: notice: (9898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 228.416631][ T9897] loop5: detected capacity change from 0 to 512 [ 228.436266][ T9897] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 228.461012][ T9897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 228.461310][ T9897] System zones: 1-12 [ 228.488793][ T9897] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1495: bad orphan inode 16 [ 228.488821][ T9897] loop5: lost filesystem error report for type 5 error -117 [ 228.490400][ T9897] ext4_test_bit(bit=15, block=4) = 0 [ 228.490425][ T9897] EXT4-fs (loop5): 1 orphan inode deleted [ 228.536454][ T9897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.751073][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.834774][ T9907] program syz.7.1497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.888344][ T9909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.038439][ T9914] loop7: detected capacity change from 0 to 128 [ 229.163279][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.407100][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.551215][ T5847] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 229.701281][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 229.702224][ T5847] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 229.703857][ T5847] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.703881][ T5847] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.703903][ T5847] usb 7-1: config 0 interface 0 has no altsetting 0 [ 229.710832][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.710858][ T5847] usb 7-1: Product: syz [ 229.710872][ T5847] usb 7-1: Manufacturer: syz [ 229.710887][ T5847] usb 7-1: SerialNumber: syz [ 229.780717][ T5847] usb 7-1: config 0 descriptor?? [ 229.820618][ T9939] loop3: detected capacity change from 0 to 512 [ 229.841323][ T5758] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 229.876500][ T9939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.895526][ T9939] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1510: bad orphan inode 131083 [ 229.895557][ T9939] loop3: lost filesystem error report for type 5 error -117 [ 229.906597][ T9939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.993940][ T5758] usb 8-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 230.005296][ T5758] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.005331][ T5758] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.005361][ T5758] usb 8-1: config 0 interface 0 has no altsetting 0 [ 230.005397][ T5758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.055074][ T5758] usb 8-1: config 0 descriptor?? [ 230.142130][ T9943] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 230.142220][ T9943] netlink: 'syz.2.1511': attribute type 2 has an invalid length. [ 230.145192][ T9943] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 230.145211][ T9943] netlink: 'syz.2.1511': attribute type 2 has an invalid length. [ 230.203200][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.205446][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.361643][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 230.362776][ T25] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 230.363408][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.367318][ T9945] netlink: 'syz.4.1512': attribute type 12 has an invalid length. [ 230.367338][ T9945] netlink: 'syz.4.1512': attribute type 29 has an invalid length. [ 230.367354][ T9945] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1512'. [ 230.367434][ T9945] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 230.378228][ T25] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 230.378366][ T25] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 230.378390][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 230.378419][ T25] usb 4-1: config 1 has no interface number 0 [ 230.378574][ T25] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.378604][ T25] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 230.378761][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.385789][ T5847] gs_usb 7-1:0.0: Configuring for 63 interfaces [ 230.480342][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 230.575680][ T5758] hid_parser_main: 5 callbacks suppressed [ 230.575786][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.575812][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.575836][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.575860][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.575962][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.575985][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.576008][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.576031][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.576139][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.576162][ T5758] playstation 0003:054C:09CC.000E: unknown main item tag 0x0 [ 230.576198][ T5758] playstation 0003:054C:09CC.000E: unbalanced collection at end of report description [ 230.587945][ T5758] playstation 0003:054C:09CC.000E: Parse failed [ 230.588059][ T5758] playstation 0003:054C:09CC.000E: probe with driver playstation failed with error -22 [ 230.705259][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 230.777070][ T25] usb 8-1: USB disconnect, device number 6 [ 230.840213][ T5847] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 230.991041][ T9948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.017750][ T9948] team0: Port device bond1 added [ 231.067378][ T5847] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 231.151672][ T5847] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 231.169928][ T5847] usb 7-1: USB disconnect, device number 7 [ 231.204783][ T25] usb 4-1: USB disconnect, device number 11 [ 231.212471][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 231.263840][ T9954] loop5: detected capacity change from 0 to 2048 [ 231.294927][ T9954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.815423][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.917685][ T9974] netlink: 'syz.6.1539': attribute type 2 has an invalid length. [ 232.030678][ T9978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.100440][ T12] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.259186][ T9974] ´: entered promiscuous mode [ 232.289105][ T5751] net_ratelimit: 1 callbacks suppressed [ 232.289126][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.603575][ T162] rpcbind: server 127.0.0.1 not responding, timed out [ 232.609320][ T9997] loop6: detected capacity change from 0 to 256 [ 232.610544][ T9997] exfat: Deprecated parameter 'utf8' [ 232.700182][ T9997] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 232.991671][T10003] loop2: detected capacity change from 0 to 1024 [ 233.049751][T10003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.049862][T10003] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.247192][T10003] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.1541: lblock 3 mapped to illegal pblock 3 (length 3) [ 233.250954][T10003] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 233.250986][T10003] EXT4-fs (loop2): This should not happen!! Data will be lost [ 233.250986][T10003] [ 233.325187][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.401806][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.446376][T10018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.472796][ T12] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 233.474401][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 233.474440][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 233.474440][ T12] [ 233.481373][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 233.526708][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 233.652512][ T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 233.654158][ T10] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 233.654208][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29625, setting to 64 [ 233.655893][ T10] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 233.655920][ T10] usb 6-1: Manufacturer: syz [ 233.712881][ T10] usb 6-1: config 0 descriptor?? [ 233.720274][T10012] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.737406][ T10] igorplugusb 6-1:0.0: endpoint incorrect [ 233.755953][T10021] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 233.977817][T10012] loop5: detected capacity change from 0 to 64 [ 233.992565][ T5723] usb 6-1: USB disconnect, device number 9 [ 234.361661][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.525324][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.573769][T10050] loop3: detected capacity change from 0 to 1024 [ 234.660078][T10050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 234.660185][T10050] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.798157][T10062] loop5: detected capacity change from 0 to 128 [ 234.907015][T10064] loop7: detected capacity change from 0 to 512 [ 234.921859][T10062] syz.5.1565: attempt to access beyond end of device [ 234.921859][T10062] loop5: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 234.989680][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.269867][T10074] loop5: detected capacity change from 0 to 8 [ 235.322192][T10075] tmpfs: Using encoding : utf8-12.1.0 [ 235.342740][T10069] loop6: detected capacity change from 0 to 2048 [ 235.401564][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.469445][T10080] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.567863][ T30] audit: type=1326 audit(1790952195.163:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.568120][ T30] audit: type=1326 audit(1790952195.163:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.570920][ T30] audit: type=1326 audit(1790952195.163:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.571788][ T30] audit: type=1326 audit(1790952195.163:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.571835][ T30] audit: type=1326 audit(1790952195.173:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.571877][ T30] audit: type=1326 audit(1790952195.173:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.726754][ T30] audit: type=1326 audit(1790952195.323:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.766667][ T30] audit: type=1326 audit(1790952195.363:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.766851][ T30] audit: type=1326 audit(1790952195.363:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 235.796108][ T30] audit: type=1326 audit(1790952195.383:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.2.1576" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec93b9e159 code=0x7ffc0000 [ 236.048976][T10092] jffs2: notice: (10092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 236.083712][T10096] block2mtd: illegal erase size [ 236.102759][ T1213] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 236.233808][T10105] loop5: detected capacity change from 0 to 1024 [ 236.257856][ T1213] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 236.272781][ T1213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 236.272813][ T1213] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 236.272855][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.311957][T10105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.312069][T10105] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.315036][ T1213] usb 4-1: probing VID:PID(0424:012C) [ 236.322286][ T1213] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 236.322314][ T1213] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 236.322336][ T1213] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 236.322357][ T1213] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 236.322378][ T1213] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 236.444941][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.661348][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.723418][ T1213] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 236.937339][ T1213] vub300 4-1:1.0: probe with driver vub300 failed with error -22 [ 237.133359][ T5847] usb 4-1: USB disconnect, device number 12 [ 237.481856][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.571585][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.730130][T10149] jffs2: notice: (10149) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 238.013733][T10162] loop7: detected capacity change from 0 to 1024 [ 238.014888][T10162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.019366][T10164] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 238.072844][T10162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.072955][T10162] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.140484][T10162] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1607: bg 0: block 112: padding at end of block bitmap is not set [ 238.161843][T10162] EXT4-fs (loop7): Remounting filesystem read-only [ 238.309341][T10175] netlink: 'syz.2.1611': attribute type 7 has an invalid length. [ 238.347685][ T6776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.524205][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.526510][T10178] loop2: detected capacity change from 0 to 128 [ 238.555278][T10178] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.556362][T10178] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.918405][ T5623] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.001905][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.497420][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 239.543202][T10203] ovs-dp0: entered promiscuous mode [ 239.543435][T10204] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1624'. [ 239.561431][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.864937][T10215] loop3: detected capacity change from 0 to 1024 [ 239.870915][T10215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.933271][T10215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.933398][T10215] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.963665][T10057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 239.986951][T10057] EXT4-fs (loop3): Remounting filesystem read-only [ 240.046472][ T5847] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.000F/input/input13 [ 240.211798][ T5847] hid-generic 0005:0576:0306.000F: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 240.234265][ T5723] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 240.238533][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 240.285162][T10222] loop7: detected capacity change from 0 to 1024 [ 240.314731][T10226] 9p: Bad value for 'rfdno' [ 240.372292][T10222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 240.372410][T10222] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.381250][ T5723] usb 7-1: Using ep0 maxpacket: 8 [ 240.406508][ T5723] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 240.432942][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.433133][ T5723] usb 7-1: Product: syz [ 240.433149][ T5723] usb 7-1: Manufacturer: syz [ 240.434154][ T5723] usb 7-1: SerialNumber: syz [ 240.489387][T10222] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.1629: lblock 3 mapped to illegal pblock 3 (length 3) [ 240.511308][T10222] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 240.512511][T10222] EXT4-fs (loop7): This should not happen!! Data will be lost [ 240.512511][T10222] [ 240.601505][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.601551][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.662470][T10230] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 240.708784][ T1413] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 240.729310][ T1413] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 240.729355][ T1413] EXT4-fs (loop7): This should not happen!! Data will be lost [ 240.729355][ T1413] [ 240.774908][ T6776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 240.794554][ T5723] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.794610][ T5723] usb 7-1: MIDIStreaming interface descriptor not found [ 240.902343][ T5723] usb 7-1: USB disconnect, device number 8 [ 241.076351][T10244] overlayfs: failed to clone upperpath [ 241.183531][T10247] loop7: detected capacity change from 0 to 1024 [ 241.204136][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.249051][T10247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.249158][T10247] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.350757][T10247] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.1650: lblock 3 mapped to illegal pblock 3 (length 3) [ 241.353560][T10247] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 241.353593][T10247] EXT4-fs (loop7): This should not happen!! Data will be lost [ 241.353593][T10247] [ 241.585121][ T49] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 241.589989][ T49] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 241.590021][ T49] EXT4-fs (loop7): This should not happen!! Data will be lost [ 241.590021][ T49] [ 241.603734][ T6776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.642442][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.223454][T10259] loop2: detected capacity change from 0 to 32768 [ 242.287657][T10259] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 242.382969][T10259] XFS (loop2): Ending clean mount [ 242.485861][T10278] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 242.611407][T10285] loop6: detected capacity change from 0 to 1 [ 242.632713][T10285] Dev loop6: unable to read RDB block 1 [ 242.632749][T10285] loop6: unable to read partition table [ 242.632973][T10285] loop6: partition table beyond EOD, truncated [ 242.633015][T10285] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 242.682517][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.733274][ T5623] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 243.220396][T10301] loop7: detected capacity change from 0 to 128 [ 243.307014][T10301] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.308867][T10301] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.379488][T10301] syz.7.1658 (pid 10301) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 243.513433][T10306] xt_hashlimit: size too large, truncated to 1048576 [ 243.517626][ T6776] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.547987][ T5723] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 243.588759][T10307] xt_hashlimit: size too large, truncated to 1048576 [ 243.642584][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.691916][T10311] loop6: detected capacity change from 0 to 1024 [ 243.693255][T10311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.716584][ T5723] usb 6-1: Using ep0 maxpacket: 16 [ 243.717334][ T5723] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 243.718559][ T5723] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 243.721079][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.721207][ T5723] usb 6-1: Product: syz [ 243.721226][ T5723] usb 6-1: Manufacturer: syz [ 243.721243][ T5723] usb 6-1: SerialNumber: syz [ 243.722568][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.787256][T10311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.787561][T10311] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.810845][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 243.810863][ T30] audit: type=1800 audit(1790952203.403:154): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1662" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 243.822533][T10311] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1662: bg 0: block 112: padding at end of block bitmap is not set [ 243.823269][T10311] EXT4-fs (loop6): Remounting filesystem read-only [ 243.870924][ T5723] usb 6-1: config 0 descriptor?? [ 243.885908][ T5723] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 243.888728][ T5723] usb 6-1: Detected FT232R [ 243.950391][ T6177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.124635][ T5723] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 244.125978][ T5723] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 244.126448][ T5723] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 244.130332][ T5723] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 244.167114][ T5723] usb 6-1: USB disconnect, device number 10 [ 244.182261][ T5723] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 244.182853][ T5723] ftdi_sio 6-1:0.0: device disconnected [ 244.767323][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.973455][T10341] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 245.595456][T10355] loop7: detected capacity change from 0 to 1024 [ 245.626284][T10337] loop3: detected capacity change from 0 to 32768 [ 245.704454][T10337] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 245.803246][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.822197][T10355] UBIFS error (pid: 10355): cannot open "c:::", error -22 [ 245.827067][T10337] XFS (loop3): Ending clean mount [ 246.139439][ T5625] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 246.408987][T10380] batman_adv: Routing algorithm 'B' is not supported [ 246.516528][T10385] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.695174][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.844913][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.868815][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 247.882378][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.261276][ T5723] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 248.335212][T10454] loop7: detected capacity change from 0 to 512 [ 248.339854][T10454] EXT4-fs: Ignoring removed bh option [ 248.376861][T10454] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.1714: corrupted in-inode xattr: e_value size too large [ 248.376896][T10454] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.377390][T10454] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1714: couldn't read orphan inode 15 (err -117) [ 248.377423][T10454] loop7: lost filesystem error report for type 5 error -117 [ 248.381176][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 248.381198][ C0] EXT4-fs (loop7): initial error at time 1790952207: ext4_iget_extra_inode:5210: inode 15 [ 248.381233][ C0] EXT4-fs (loop7): last error at time 1790952207: ext4_orphan_get:1408 [ 248.410977][T10454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.432201][ T5723] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 248.478555][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.478582][ T5723] usb 6-1: Product: syz [ 248.478599][ T5723] usb 6-1: Manufacturer: syz [ 248.478616][ T5723] usb 6-1: SerialNumber: syz [ 248.501238][T10458] sctp: [Deprecated]: syz.4.1715 (pid 10458) Use of int in max_burst socket option deprecated. [ 248.501238][T10458] Use struct sctp_assoc_value instead [ 248.521621][ T5847] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 248.572799][ T6776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.610416][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.697357][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 248.706443][ T5847] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 248.708929][ T5847] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 248.708961][ T5847] usb 7-1: config 0 has no interface number 0 [ 248.741837][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.741866][ T5847] usb 7-1: Product: syz [ 248.741883][ T5847] usb 7-1: Manufacturer: syz [ 248.741900][ T5847] usb 7-1: SerialNumber: syz [ 248.747524][ T5847] usb 7-1: config 0 descriptor?? [ 248.820827][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 248.917128][ T5723] rtl8150 6-1:1.0: couldn't reset the device [ 248.918017][ T5723] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 248.921534][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.958040][ T5723] usb 6-1: USB disconnect, device number 11 [ 248.996594][ T5847] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 249.012482][ T5847] usb 7-1: USB disconnect, device number 9 [ 249.121632][T10468] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100] [ 249.121666][T10468] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 249.121685][T10468] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 249.121699][T10468] One or more global auth toks could not properly register; rc = [-22] [ 249.121744][T10468] Error validating options; rc = [-22] [ 249.208833][T10471] loop7: detected capacity change from 0 to 256 [ 249.758808][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.822827][ T5847] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 249.907912][ T5615] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 249.907954][ T5615] Bluetooth: hci1: Dropping invalid advertising data [ 249.908015][ T5615] Bluetooth: hci1: Malformed LE Event: 0x02 [ 249.963180][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.981491][ T5847] usb 6-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 249.983060][ T5847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.983085][ T5847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.983109][ T5847] usb 6-1: config 1 has no interface number 0 [ 249.987534][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.987561][ T5847] usb 6-1: Product: syz [ 249.987578][ T5847] usb 6-1: Manufacturer: syz [ 249.987595][ T5847] usb 6-1: SerialNumber: syz [ 250.294156][ T5847] usb 6-1: 1:0 : does not exist [ 250.294237][ T5847] usb 6-1: BAAD HEADSET c_chmask mismatch [ 250.360634][T10495] loop3: detected capacity change from 0 to 16 [ 250.373017][T10495] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 250.408144][ T5847] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 250.410396][ T5847] usb 6-1: USB disconnect, device number 12 [ 250.467016][ T7108] udevd[7108]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.599272][T10482] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 250.897397][T10518] sctp: Trying to GSO but underlying device doesn't support it. [ 251.002440][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.556516][T10544] program syz.5.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.675106][T10529] loop7: detected capacity change from 0 to 32768 [ 251.728720][T10529] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.817535][T10529] XFS (loop7): Ending clean mount [ 251.909876][ T6776] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.042537][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.762356][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.082422][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.142012][ T30] audit: type=1400 audit(1790952212.743:155): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=10599 comm="syz.7.1779" name="/" offset=59 [ 253.184033][T10606] loop2: detected capacity change from 0 to 164 [ 253.200007][T10606] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 253.448764][ T5623] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 253.466179][ T5623] ISOFS: unable to read i-node block [ 253.466651][ T5623] ISOFS: unable to read i-node block [ 253.642522][T10618] nvme_fcloop: unknown parameter or missing value 'ww' [ 253.733915][T10604] loop6: detected capacity change from 0 to 32768 [ 253.784494][T10604] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 253.873136][T10604] XFS (loop6): Ending clean mount [ 254.030940][ T6177] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 254.077535][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.125102][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.262202][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.346356][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.508412][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.762491][ T64] bridge_slave_1: left allmulticast mode [ 254.762520][ T64] bridge_slave_1: left promiscuous mode [ 254.762728][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.795843][ T64] bridge_slave_0: left allmulticast mode [ 254.795867][ T64] bridge_slave_0: left promiscuous mode [ 254.796844][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.822088][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.831531][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.834681][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.838156][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.843067][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.013185][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.013250][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.161978][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.259571][T10636] loop5: detected capacity change from 0 to 32768 [ 255.296642][T10636] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 255.373779][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.394818][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.397662][ T64] bond0 (unregistering): Released all slaves [ 255.421040][T10636] XFS (loop5): Ending clean mount [ 255.447584][ T64] team0: Port device bond1 removed [ 255.457527][ T64] bond1 (unregistering): Released all slaves [ 255.638162][ T5614] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 255.802759][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.206223][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.247420][ T64] hsr_slave_0: left promiscuous mode [ 256.248145][ T64] hsr_slave_1: left promiscuous mode [ 256.249076][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.249098][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.249957][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.249976][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.263343][ T64] veth1_macvtap: left promiscuous mode [ 256.263378][ T64] veth0_macvtap: left promiscuous mode [ 256.263657][ T64] veth1_vlan: left promiscuous mode [ 256.263730][ T64] veth0_vlan: left promiscuous mode [ 256.577504][ T64] team0 (unregistering): Port device team_slave_1 removed [ 256.596375][ T64] team0 (unregistering): Port device team_slave_0 removed [ 256.754883][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 256.925344][ T4927] Bluetooth: hci2: command tx timeout [ 257.178806][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.178991][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.179123][T10641] bridge_slave_0: entered allmulticast mode [ 257.181808][T10641] bridge_slave_0: entered promiscuous mode [ 257.188600][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.188708][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.188838][T10641] bridge_slave_1: entered allmulticast mode [ 257.190744][T10641] bridge_slave_1: entered promiscuous mode [ 257.230172][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.235710][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.243107][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.288463][T10641] team0: Port device team_slave_0 added [ 257.293249][T10641] team0: Port device team_slave_1 added [ 257.325300][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.325317][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.325348][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.327551][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.327566][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.327597][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.413741][T10641] hsr_slave_0: entered promiscuous mode [ 257.416368][T10641] hsr_slave_1: entered promiscuous mode [ 257.417189][T10641] debugfs: 'hsr0' already exists in 'hsr' [ 257.417209][T10641] Cannot create hsr debugfs directory [ 257.661885][T10641] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 257.666576][T10641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.667724][T10641] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 257.688136][T10641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.688976][T10641] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 257.706789][T10641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.711872][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 257.716367][T10641] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 257.727743][T10641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.764223][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.765555][T10641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.765845][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.765972][T10641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.839389][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.872919][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.873940][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.880508][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.905770][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.905875][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.910239][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.910339][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.209170][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.281993][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.517567][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 258.535089][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.841722][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.882709][T10641] veth0_vlan: entered promiscuous mode [ 258.902529][T10641] veth1_vlan: entered promiscuous mode [ 258.950845][T10641] veth0_macvtap: entered promiscuous mode [ 258.965120][T10641] veth1_macvtap: entered promiscuous mode [ 258.992341][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.001706][ T4927] Bluetooth: hci2: command tx timeout [ 259.017269][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.132275][ T162] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.162436][ T162] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.162482][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.162497][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.224254][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.224277][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.242494][ T64] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.242944][ T64] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.325527][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.498178][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'. [ 259.520740][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 259.913165][ T5723] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 260.082527][ T5723] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 260.085843][ T5723] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.086008][ T5723] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.113217][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.113246][ T5723] usb 7-1: Product: syz [ 260.113263][ T5723] usb 7-1: Manufacturer: syz [ 260.113281][ T5723] usb 7-1: SerialNumber: syz [ 260.165820][ T5723] symbolserial 7-1:1.0: symbol converter detected [ 260.187215][ T5723] usb 7-1: symbol converter now attached to ttyUSB0 [ 260.362207][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.432701][T10763] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 260.436080][ T5723] usb 7-1: USB disconnect, device number 10 [ 260.464509][ T5723] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 260.465790][ T5723] symbolserial 7-1:1.0: device disconnected [ 261.082811][ T4927] Bluetooth: hci2: command tx timeout [ 261.267691][T10796] loop3: detected capacity change from 0 to 128 [ 261.362445][T10796] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 261.362632][T10796] hpfs: filesystem error: improperly stopped [ 261.362650][T10796] hpfs: You really don't want any checks? You are crazy... [ 261.363139][T10796] hpfs: hpfs_map_sector(): read error [ 261.363153][T10796] hpfs: code page support is disabled [ 261.371847][T10796] hpfs: hpfs_map_4sectors(): unaligned read [ 261.376205][T10796] hpfs: hpfs_map_4sectors(): unaligned read [ 261.376219][T10796] hpfs: filesystem error: unable to find root dir [ 261.401792][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.644704][T10803] Line length is too long: Should be less than 4094 [ 261.834917][T10805] loop5: detected capacity change from 0 to 32768 [ 261.835918][T10805] xfs: Deprecated parameter 'ikeep' [ 261.835937][T10805] XFS: ikeep mount option is deprecated. [ 261.884357][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.898330][T10805] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 261.952480][T10805] XFS (loop5): Ending clean mount [ 261.959989][T10805] XFS (loop5): Quotacheck needed: Please wait. [ 262.009666][ T30] audit: type=1326 audit(1790952221.603:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.011007][ T30] audit: type=1326 audit(1790952221.603:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.053614][T10805] XFS (loop5): Quotacheck: Done. [ 262.080317][ T30] audit: type=1326 audit(1790952221.673:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.080373][ T30] audit: type=1326 audit(1790952221.673:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.080639][ T30] audit: type=1326 audit(1790952221.673:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.088686][ T30] audit: type=1326 audit(1790952221.683:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.088740][ T30] audit: type=1326 audit(1790952221.683:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.088791][ T30] audit: type=1326 audit(1790952221.683:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.091008][ T30] audit: type=1326 audit(1790952221.683:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.091060][ T30] audit: type=1326 audit(1790952221.683:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.7.1819" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fc19e159 code=0x7ffc0000 [ 262.348173][ T5614] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 262.443144][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.708067][T10840] loop8: detected capacity change from 0 to 256 [ 262.873340][T10842] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 263.125793][T10856] netlink: 'syz.4.1837': attribute type 2 has an invalid length. [ 263.125819][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1837'. [ 263.148056][T10854] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 263.163883][ T4927] Bluetooth: hci2: command tx timeout [ 263.290315][T10863] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 263.301454][T10849] loop7: detected capacity change from 0 to 8192 [ 263.442946][T10870] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.484977][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.567889][T10849] NILFS error (device loop7): nilfs_readdir: zero-length directory entry [ 263.591932][T10849] Remounting filesystem read-only [ 263.597393][T10876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.597539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.137205][T10900] loop3: detected capacity change from 0 to 128 [ 264.375184][T10907] netlink: ct_mark mask cannot be 0 [ 264.375219][T10907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.379129][T10907] netlink: ct_mark mask cannot be 0 [ 264.379159][T10907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.514396][T10915] overlayfs: failed to clone upperpath [ 264.522330][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.646568][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.884558][T10938] netlink: 'syz.8.1873': attribute type 2 has an invalid length. [ 264.922243][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.050846][T10946] tun0: tun_chr_ioctl cmd 2147767511 [ 265.585091][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.655631][T10972] loop7: detected capacity change from 0 to 64 [ 266.310872][T10993] loop3: detected capacity change from 0 to 512 [ 266.390107][T10993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.390203][T10993] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.439367][T10966] loop8: detected capacity change from 0 to 32768 [ 266.504701][T10966] [ 266.504701][T10966] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.504701][T10966] [ 266.512845][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1900'. [ 266.609409][T10966] [ 266.609409][T10966] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.609409][T10966] [ 266.609435][T10966] [ 266.609435][T10966] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.609435][T10966] [ 266.639046][ T118] [ 266.639046][ T118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.639046][ T118] [ 266.655543][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.803815][T10641] [ 266.803815][T10641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.803815][T10641] [ 266.804254][T10641] [ 266.804254][T10641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.804254][T10641] [ 267.141672][T11021] 9p: Bad value for 'rfdno' [ 267.179387][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1910'. [ 267.361267][ T5847] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 267.502666][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 267.525730][ T5847] usb 8-1: Using ep0 maxpacket: 16 [ 267.527330][ T5847] usb 8-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 267.547236][ T5847] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 267.547271][ T5847] usb 8-1: config 0 interface 0 has no altsetting 0 [ 267.547307][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.578124][T11043] loop5: detected capacity change from 0 to 6 [ 267.587348][T11043] Dev loop5: unable to read RDB block 6 [ 267.587376][T11043] loop5: AHDI p1 p2 [ 267.587399][T11043] loop5: partition table partially beyond EOD, truncated [ 267.587942][T11043] loop5: p1 start 1702059890 is beyond EOD, truncated [ 267.622642][ T5847] usb 8-1: config 0 descriptor?? [ 267.663057][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 267.668911][ T10] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 267.669060][ T10] usb 4-1: config 1 has no interface number 0 [ 267.705718][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.705748][ T10] usb 4-1: Product: syz [ 267.705765][ T10] usb 4-1: Manufacturer: syz [ 267.705782][ T10] usb 4-1: SerialNumber: syz [ 267.782957][ T10] usb 4-1: 3:1 : does not exist [ 267.783063][ T10] usb 4-1: 3:2 : does not exist [ 267.850622][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.853865][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.914431][ T5751] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 268.036747][ T1213] usb 4-1: USB disconnect, device number 13 [ 268.062986][ T5751] usb 9-1: Using ep0 maxpacket: 32 [ 268.065588][ T5751] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 268.067109][ T5751] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.098020][ T5847] hid_parser_main: 3 callbacks suppressed [ 268.098048][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098074][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098097][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098119][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098143][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098166][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098189][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098212][ T5847] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 268.098236][ T5847] holtek_mouse 0003:04D9:A067.0010: unbalanced collection at end of report description [ 268.103839][ T5847] holtek_mouse 0003:04D9:A067.0010: hid parse failed: -22 [ 268.103914][ T5847] holtek_mouse 0003:04D9:A067.0010: probe with driver holtek_mouse failed with error -22 [ 268.168564][ T5751] usb 9-1: config 0 descriptor?? [ 268.221712][ T5751] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 268.291988][ T7108] udevd[7108]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.298541][ T5758] usb 8-1: USB disconnect, device number 7 [ 268.326955][T11060] 9p: Bad value for 'rfdno' [ 268.625900][T11070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1931'. [ 268.630273][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1931'. [ 268.630315][T11070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1931'. [ 268.651404][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 268.651421][ T30] audit: type=1326 audit(1790952228.243:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3359f9e159 code=0x0 [ 268.701577][ T5758] net_ratelimit: 5 callbacks suppressed [ 268.701594][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.864091][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'. [ 269.023961][ T5751] gspca_vc032x: reg_w err -71 [ 269.023980][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.023993][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024005][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024015][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024026][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024038][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024048][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024059][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024070][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024080][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024091][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024102][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024112][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024123][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024134][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024144][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024155][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024166][ T5751] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.024176][ T5751] gspca_vc032x: Unknown sensor... [ 269.024251][ T5751] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 269.150301][ T5751] usb 9-1: USB disconnect, device number 2 [ 269.184348][T11083] program syz.7.1937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.550424][T11095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1943'. [ 269.665896][T11102] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1949'. [ 269.665927][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 269.774042][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.861845][ T30] audit: type=1326 audit(1790952229.463:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.4.1954" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc97059e159 code=0x0 [ 269.983927][T11111] loop8: detected capacity change from 0 to 8192 [ 269.997904][T11111] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.433140][T11130] loop8: detected capacity change from 0 to 2048 [ 270.510452][T11130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.539744][T11130] EXT4-fs error (device loop8): ext4_ext_precache:631: inode #2: comm syz.8.1959: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 270.573149][T11130] EXT4-fs (loop8): Remounting filesystem read-only [ 270.584400][T11143] loop5: detected capacity change from 0 to 1024 [ 270.645313][T10641] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.652752][T11143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 270.652859][T11143] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.743497][ T30] audit: type=1800 audit(1790952230.343:171): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1962" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 270.750830][ T30] audit: type=1800 audit(1790952230.343:172): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1962" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 270.843037][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.940395][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 271.002519][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.347504][T11166] loop6: detected capacity change from 0 to 4096 [ 271.417757][ T30] audit: type=1326 audit(1790952231.013:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.5.1976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140479e159 code=0x7ffc0000 [ 271.418034][ T30] audit: type=1326 audit(1790952231.013:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.5.1976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140479e159 code=0x7ffc0000 [ 271.432648][T11175] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.481704][ T30] audit: type=1326 audit(1790952231.053:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.5.1976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f140479e159 code=0x7ffc0000 [ 271.481764][ T30] audit: type=1326 audit(1790952231.053:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.5.1976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140479e159 code=0x7ffc0000 [ 271.481814][ T30] audit: type=1326 audit(1790952231.053:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.5.1976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140479e159 code=0x7ffc0000 [ 271.491038][ T30] audit: type=1326 audit(1790952231.083:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.5.1976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f140479e159 code=0x7ffc0000 [ 271.881850][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.948588][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1982'. [ 272.023738][T11195] ipvlan2: entered allmulticast mode [ 272.023763][T11195] syz_tun: entered allmulticast mode [ 272.673951][T11228] loop8: detected capacity change from 0 to 512 [ 272.685575][T11225] loop6: detected capacity change from 0 to 2048 [ 272.708031][T11228] EXT4-fs (loop8): Test dummy encryption mode enabled [ 272.758897][T11225] NILFS (loop6): invalid segment: Magic number mismatch [ 272.758927][T11225] NILFS (loop6): trying rollback from an earlier position [ 272.797009][T11228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.840660][T11225] NILFS (loop6): recovery complete [ 272.869691][T11228] EXT4-fs (loop8): shut down requested (1) [ 272.899927][T11241] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.913818][T11242] loop3: detected capacity change from 0 to 64 [ 272.937782][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.987219][T10641] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.224120][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2001'. [ 273.322571][T11258] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2006'. [ 273.382837][T11246] NILFS (loop6): nilfs_dat_move: invalid vblocknr = 9, [0, 0) [ 273.383365][T11246] NILFS error (device loop6): nilfs_bmap_assign: broken bmap (inode number=3) [ 273.457866][T11246] Remounting filesystem read-only [ 273.457918][T11246] NILFS (loop6): error -5 cleaning segments [ 273.469493][T11246] NILFS (loop6): error -30 cleaning segments [ 273.484517][T11256] loop7: detected capacity change from 0 to 4096 [ 273.530540][T11256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.580853][ T6177] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 273.600249][ T6177] VFS: Busy inodes after unmount of loop6 (nilfs2) [ 273.603178][ T6177] ------------[ cut here ]------------ [ 273.603191][ T6177] kernel BUG at fs/super.c:761! [ 273.603214][ T6177] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 273.604554][T11256] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 273.634314][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 273.645335][ T6177] Tainted: [L]=SOFTLOCKUP [ 273.649643][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 273.659692][ T6177] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0 [ 273.665862][ T6177] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 83 1a ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 a8 1f 8c 48 89 de e8 3a c8 db fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.685464][ T6177] RSP: 0018:ffffc90006007d10 EFLAGS: 00010246 [ 273.691534][ T6177] RAX: 0000000000000030 RBX: ffff88807a1c26a8 RCX: 06874258b9486a00 [ 273.699493][ T6177] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 273.707449][ T6177] RBP: 1ffff1100f4384f7 R08: ffffc90006007a87 R09: 1ffff92000c00f50 [ 273.715410][ T6177] R10: dffffc0000000000 R11: fffff52000c00f51 R12: 0000000000000000 [ 273.723371][ T6177] R13: dffffc0000000000 R14: ffffffff8f316f80 R15: ffff88807a1c27b8 [ 273.731333][ T6177] FS: 000055555af49500(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 273.740247][ T6177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.746813][ T6177] CR2: 000000110c39beee CR3: 0000000060265000 CR4: 0000000000350ef0 [ 273.754774][ T6177] Call Trace: [ 273.758036][ T6177] [ 273.760950][ T6177] kill_block_super+0x44/0xa0 [ 273.765618][ T6177] deactivate_locked_super+0xbe/0x110 [ 273.770988][ T6177] cleanup_mnt+0x3d3/0x460 [ 273.775394][ T6177] task_work_run+0x1d9/0x270 [ 273.779974][ T6177] ? __pfx_task_work_run+0x10/0x10 [ 273.785078][ T6177] exit_to_user_mode_loop+0x204/0x770 [ 273.790436][ T6177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.796059][ T6177] ? rcu_is_watching+0x16/0xb0 [ 273.800817][ T6177] do_syscall_64+0x328/0x520 [ 273.805402][ T6177] ? trace_irq_disable+0x3b/0x140 [ 273.810412][ T6177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.816481][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.822367][ T6177] RIP: 0033:0x7f3359f9f397 [ 273.826771][ T6177] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 273.846359][ T6177] RSP: 002b:00007ffea6679058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 273.854762][ T6177] RAX: 0000000000000000 RBX: 00007f335a0344bb RCX: 00007f3359f9f397 [ 273.862718][ T6177] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea6679110 [ 273.870675][ T6177] RBP: 00007ffea6679110 R08: 00007ffea667a110 R09: 00000000ffffffff [ 273.878631][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea667a1a0 [ 273.886583][ T6177] R13: 00007f335a0344bb R14: 0000000000042c01 R15: 00007ffea667a1e0 [ 273.894553][ T6177] [ 273.897555][ T6177] Modules linked in: [ 273.902740][ T6177] ---[ end trace 0000000000000000 ]--- [ 273.948008][ T6177] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0 [ 273.948058][ T6177] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 83 1a ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 a8 1f 8c 48 89 de e8 3a c8 db fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.948079][ T6177] RSP: 0018:ffffc90006007d10 EFLAGS: 00010246 [ 273.948103][ T6177] RAX: 0000000000000030 RBX: ffff88807a1c26a8 RCX: 06874258b9486a00 [ 273.948121][ T6177] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 273.948136][ T6177] RBP: 1ffff1100f4384f7 R08: ffffc90006007a87 R09: 1ffff92000c00f50 [ 273.948155][ T6177] R10: dffffc0000000000 R11: fffff52000c00f51 R12: 0000000000000000 [ 273.948172][ T6177] R13: dffffc0000000000 R14: ffffffff8f316f80 R15: ffff88807a1c27b8 [ 273.948197][ T6177] FS: 000055555af49500(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 273.948219][ T6177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.948236][ T6177] CR2: 000000110c3067bc CR3: 0000000060265000 CR4: 0000000000350ef0 [ 273.948258][ T6177] Kernel panic - not syncing: Fatal exception [ 274.049238][ T6177] Kernel Offset: disabled [ 274.053544][ T6177] Rebooting in 86400 seconds..