last executing test programs: 5m1.496697291s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000001500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) 5m1.088345109s ago: executing program 1 (id=7): syz_usb_connect$uac2(0x0, 0x9f, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000101e04003040000102030109028d000301008000080b0002410320050904000000010120000924010200011500030c2403020404fc02030700f7090401000001022000090401010101022000082402e20703090310240102f1010300000003e20700000409050109000206ff2f08250180330403000904020000"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 4m58.871175119s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m58.47283623s ago: executing program 32 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m9.252331851s ago: executing program 0 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x470bd27, 0x25dfd400, {0x0, 0x0, 0x0, r2, 0x64e18}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4a080}, 0x200088c2) 3m8.901648075s ago: executing program 0 (id=724): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000100), 0x1) 3m8.6459377s ago: executing program 0 (id=728): write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x100) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x31bf2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket(0x400000000010, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m7.460495616s ago: executing program 0 (id=732): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x4e9, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x51e2426, &(0x7f00000000c0)={[{}, {@gid}]}) 3m6.699712355s ago: executing program 0 (id=737): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 3m5.642780887s ago: executing program 0 (id=745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3m5.2098411s ago: executing program 33 (id=745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 15.807670609s ago: executing program 4 (id=2156): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 15.554121743s ago: executing program 4 (id=2159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x110}}, 0x0) 15.290233564s ago: executing program 4 (id=2165): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x1f, 0x3, &(0x7f0000000400)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 14.356751s ago: executing program 4 (id=2167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000800)="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", 0x500, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 6.314631584s ago: executing program 7 (id=2231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x1, [@m_mpls={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x6c}}, 0x0) 5.566778916s ago: executing program 3 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = syz_open_dev$vcsa(0x0, 0x1, 0x109402) r1 = openat(r0, 0x0, 0x18101, 0x0) write(r1, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x100) getpgrp(0xffffffffffffffff) semctl$GETNCNT(0x0, 0x2, 0xe, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/102, 0x41}], 0x2}, 0x18}], 0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.134959013s ago: executing program 4 (id=2241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14, 0x2}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x22, 0x1f, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x4, 0x5b, 0x0, 0x1}]}}, "14f3305280f125"}}, 0x2d) 4.971114667s ago: executing program 6 (id=2242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) ppoll(&(0x7f0000001480)=[{r0, 0x9b}], 0x1, 0x0, 0x0, 0x0) 4.87356016s ago: executing program 7 (id=2243): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000c80), &(0x7f0000000000)=0x8) 4.691698817s ago: executing program 7 (id=2244): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket$inet6(0xa, 0x80803, 0x84) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.591930812s ago: executing program 4 (id=2245): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 4.265228722s ago: executing program 5 (id=2247): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8010) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.167760465s ago: executing program 3 (id=2248): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) writev(r0, 0x0, 0x0) 4.158269003s ago: executing program 2 (id=2249): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 4.092130032s ago: executing program 2 (id=2250): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x0) 3.888633008s ago: executing program 3 (id=2251): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8700135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.888146429s ago: executing program 6 (id=2252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a53f2719efb234644b972a5d2", 0x0, 0xf0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 3.886950577s ago: executing program 5 (id=2253): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 3.788678576s ago: executing program 2 (id=2254): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000440)=@file={0x1}, 0x6e) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) 3.688429668s ago: executing program 7 (id=2255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x1, [@m_mpls={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x6c}}, 0x0) 3.35127229s ago: executing program 5 (id=2256): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0x232, 0x3, 0x12e, [0x0, 0x200000000dc0, 0x0, 0x0, 0x200000000ede, 0x200000001232], 0x0, 0x0, &(0x7f0000000dc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x4c, 0x15, 'wg1\x00', 'ipvlan0\x00', 'wlan1\x00', 'bridge0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="3ffdc471a57a", [0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1a6) 2.891361649s ago: executing program 3 (id=2257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14, 0x2}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x22, 0x1f, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x4, 0x5b, 0x0, 0x1}]}}, "14f3305280f125"}}, 0x2d) 2.769086837s ago: executing program 2 (id=2258): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, 0x0) listen(r0, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) shutdown(r0, 0x0) 2.699463847s ago: executing program 5 (id=2259): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x103602, 0x49) io_setup(0x9, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 2.311936868s ago: executing program 6 (id=2260): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2.235360257s ago: executing program 2 (id=2261): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = syz_open_dev$vcsa(0x0, 0x1, 0x109402) r1 = openat(r0, 0x0, 0x18101, 0x0) write(r1, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x100) getpgrp(0xffffffffffffffff) semctl$GETNCNT(0x0, 0x2, 0xe, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/102, 0x41}], 0x2}, 0x18}], 0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.218895918s ago: executing program 7 (id=2262): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.290538225s ago: executing program 6 (id=2263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0xc040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x200040d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x8, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.241582421s ago: executing program 3 (id=2264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) ppoll(&(0x7f0000001480)=[{r0, 0x9b}], 0x1, 0x0, 0x0, 0x0) 1.23901963s ago: executing program 7 (id=2265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, 0x0, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000080601010000000000000000020000020500010007000000090002007379783100000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000009c0)}, 0x20) writev(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x9}, 0x28) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 638.438179ms ago: executing program 6 (id=2266): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) r1 = syz_open_dev$loop(0x0, 0x18bdb, 0x325967a866143452) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x401, 0x0, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 371.253547ms ago: executing program 6 (id=2267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket$inet6(0xa, 0x80803, 0x84) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 362.539267ms ago: executing program 5 (id=2268): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 219.131256ms ago: executing program 3 (id=2269): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8700135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 129.934755ms ago: executing program 2 (id=2270): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000440)=@file={0x1}, 0x6e) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=2271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000000000), &(0x7f0000001a80)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38) kernel console output (not intermixed with test programs): 124.814565][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.158'. [ 125.536441][ T6459] loop5: detected capacity change from 0 to 512 [ 125.626267][ T6459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.687945][ T6459] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.913794][ T6475] size and base must be multiples of 4 kiB [ 125.975621][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.0.165 Not tainted syzkaller #0 PREEMPT(full) [ 125.975655][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.975670][ T6475] Call Trace: [ 125.975680][ T6475] [ 125.975690][ T6475] dump_stack_lvl+0xe8/0x150 [ 125.975733][ T6475] mtrr_add+0xd5/0x100 [ 125.975771][ T6475] mtrr_ioctl+0xc98/0x13b0 [ 125.975814][ T6475] ? __pfx_mtrr_ioctl+0x10/0x10 [ 125.975868][ T6475] ? __fget_files+0x2a/0x420 [ 125.975904][ T6475] ? __fget_files+0x3a2/0x420 [ 125.975938][ T6475] ? __fget_files+0x2a/0x420 [ 125.975972][ T6475] ? __pfx_mtrr_ioctl+0x10/0x10 [ 125.976008][ T6475] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 125.976036][ T6475] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 125.976062][ T6475] __se_sys_ioctl+0xfc/0x170 [ 125.976089][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.976118][ T6475] do_syscall_64+0x174/0x580 [ 125.976151][ T6475] ? trace_irq_disable+0x3b/0x140 [ 125.976192][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.976217][ T6475] RIP: 0033:0x7f0ee659e0d9 [ 125.976245][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.976265][ T6475] RSP: 002b:00007f0ee753a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.976291][ T6475] RAX: ffffffffffffffda RBX: 00007f0ee6825fa0 RCX: 00007f0ee659e0d9 [ 125.976310][ T6475] RDX: 0000200000000900 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 125.976326][ T6475] RBP: 00007f0ee6635024 R08: 0000000000000000 R09: 0000000000000000 [ 125.976342][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.976356][ T6475] R13: 00007f0ee6826038 R14: 00007f0ee6825fa0 R15: 00007ffcae187208 [ 125.976395][ T6475] [ 126.031351][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.264273][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.6.170'. [ 127.089822][ T6505] loop6: detected capacity change from 0 to 1764 [ 127.437228][ T6516] loop3: detected capacity change from 0 to 512 [ 127.529084][ T5621] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 127.587820][ T6516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.351666][ T6516] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.632316][ T5621] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 128.640876][ T5621] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 128.652889][ T5621] usb 6-1: config 220 has no interface number 2 [ 128.659419][ T5621] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 128.797494][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.552210][ T5621] usb 6-1: config 220 interface 0 has no altsetting 0 [ 129.559291][ T5621] usb 6-1: config 220 interface 76 has no altsetting 0 [ 129.567945][ T5621] usb 6-1: config 220 interface 1 has no altsetting 0 [ 129.583379][ T5621] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.593056][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.601556][ T5621] usb 6-1: Product: syz [ 129.605768][ T5621] usb 6-1: Manufacturer: syz [ 129.649670][ T5621] usb 6-1: SerialNumber: syz [ 129.804519][ T6553] loop2: detected capacity change from 0 to 1024 [ 129.834359][ T6553] EXT4-fs: Ignoring removed bh option [ 129.915285][ T6553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.045160][ T5621] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 130.096823][ T5621] uvcvideo 6-1:220.0: No valid video chain found. [ 130.140865][ T5621] usb 6-1: selecting invalid altsetting 0 [ 130.339722][ T5621] usb 6-1: selecting invalid altsetting 0 [ 130.365447][ T5621] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 130.452392][ T5621] usb 6-1: USB disconnect, device number 3 [ 130.810370][ T6583] 9p: Unknown access argument 18446744073709551615: -34 [ 130.857801][ T6587] loop6: detected capacity change from 0 to 512 [ 131.028489][ T6587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.094913][ T6587] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.164189][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.471548][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.181843][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.206361][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.981255][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 133.190238][ T24] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 133.229002][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.2.214'. [ 133.262623][ T24] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 133.321711][ T24] usb 6-1: config 220 has no interface number 2 [ 133.365643][ T24] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 133.462025][ T24] usb 6-1: config 220 interface 0 has no altsetting 0 [ 133.528101][ T24] usb 6-1: config 220 interface 76 has no altsetting 0 [ 133.611568][ T24] usb 6-1: config 220 interface 1 has no altsetting 0 [ 133.643143][ T6640] 9p: Unknown access argument 18446744073709551615: -34 [ 133.688312][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.777404][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.810880][ T24] usb 6-1: Product: syz [ 133.838022][ T24] usb 6-1: Manufacturer: syz [ 133.873901][ T24] usb 6-1: SerialNumber: syz [ 133.991365][ T6648] loop2: detected capacity change from 0 to 512 [ 134.148139][ T6648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.199521][ T6648] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.206371][ T24] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 134.278987][ T24] uvcvideo 6-1:220.0: No valid video chain found. [ 134.321813][ T24] usb 6-1: selecting invalid altsetting 0 [ 134.404011][ T24] usb 6-1: selecting invalid altsetting 0 [ 134.441289][ T24] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 134.490390][ T24] usb 6-1: USB disconnect, device number 4 [ 134.621847][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.412330][ T6689] capability: warning: `syz.5.228' uses 32-bit capabilities (legacy support in use) [ 137.846151][ T6686] loop4: detected capacity change from 0 to 8192 [ 139.532623][ T803] hid_parser_main: 30 callbacks suppressed [ 139.532650][ T803] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.815842][ T803] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.835094][ T5736] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.066248][ T5736] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 140.108610][ T5736] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 140.159087][ T5736] usb 6-1: config 220 has no interface number 2 [ 140.394214][ T5736] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 140.409917][ T5736] usb 6-1: config 220 interface 0 has no altsetting 0 [ 140.416913][ T5736] usb 6-1: config 220 interface 76 has no altsetting 0 [ 140.417951][ T6725] fido_id[6725]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.425779][ T5736] usb 6-1: config 220 interface 1 has no altsetting 0 [ 141.426830][ T6728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.426960][ T5736] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 141.449915][ T6728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.339886][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.463115][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.477532][ T5736] usb 6-1: Product: syz [ 142.481878][ T5736] usb 6-1: Manufacturer: syz [ 142.486754][ T5736] usb 6-1: SerialNumber: syz [ 142.524413][ T5736] usb 6-1: can't set config #220, error -71 [ 142.629380][ T6728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.645463][ T5736] usb 6-1: USB disconnect, device number 5 [ 142.729645][ T6728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.735693][ T6728] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.792323][ T6745] Set syz1 is full, maxelem 4 reached [ 142.807652][ T6728] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.856149][ T6728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.042867][ T6728] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.126975][ T6728] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.233679][ T6728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.277426][ T6728] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.314645][ T6747] loop3: detected capacity change from 0 to 8192 [ 143.351382][ T6728] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.403543][ T6728] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 143.429086][ T6728] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 143.680567][ T6728] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 143.702957][ T6728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.244895][ T6760] loop0: detected capacity change from 0 to 512 [ 144.252962][ T6760] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.395675][ T6728] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.402007][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.789016][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.009848][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.293581][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.477874][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout [ 145.488765][ T6728] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.730373][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.450183][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.885450][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.929105][ T5621] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.102748][ T6797] loop5: detected capacity change from 0 to 512 [ 147.127770][ T6797] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.199040][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.329372][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.491879][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout [ 147.808996][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.662919][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.663300][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.669086][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.669124][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout [ 149.979345][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.869414][ T5621] usb 5-1: device not accepting address 2, error -71 [ 151.336969][ T6839] loop4: detected capacity change from 0 to 512 [ 151.359139][ T6839] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.398353][ T6927] 9p: Unknown access argument 18446744073709551615: -34 [ 161.387381][ T6964] 9p: Unknown access argument 18446744073709551615: -34 [ 164.037201][ T5779] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.233717][ T5779] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 164.267891][ T5779] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 164.318599][ T5779] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 164.350102][ T5779] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 164.385566][ T5779] usb 7-1: Manufacturer: syz [ 164.415220][ T5779] usb 7-1: config 0 descriptor?? [ 164.470006][ T5779] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 166.662016][ T7038] netlink: 124 bytes leftover after parsing attributes in process `syz.0.353'. [ 166.831653][ T5764] usb 7-1: USB disconnect, device number 2 [ 168.302461][ T7071] netlink: 124 bytes leftover after parsing attributes in process `syz.4.370'. [ 168.529000][ T5779] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.693713][ T5779] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 168.721199][ T5779] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 168.743171][ T7081] 8021q: VLANs not supported on vcan0 [ 168.752852][ T5779] usb 4-1: config 220 has no interface number 2 [ 168.765070][ T5779] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 168.810296][ T5779] usb 4-1: config 220 interface 0 has no altsetting 0 [ 168.842304][ T5779] usb 4-1: config 220 interface 76 has no altsetting 0 [ 168.877253][ T5779] usb 4-1: config 220 interface 1 has no altsetting 0 [ 168.906408][ T5779] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 168.934752][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.974608][ T5779] usb 4-1: Product: syz [ 168.988798][ T5779] usb 4-1: Manufacturer: syz [ 169.005657][ T5779] usb 4-1: SerialNumber: syz [ 169.283701][ T5779] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 169.320983][ T5779] uvcvideo 4-1:220.0: No valid video chain found. [ 169.347345][ T5779] usb 4-1: selecting invalid altsetting 0 [ 169.465909][ T5779] usb 4-1: selecting invalid altsetting 0 [ 169.467114][ T7106] netlink: 124 bytes leftover after parsing attributes in process `syz.4.383'. [ 169.494633][ T5779] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 169.531430][ T5779] usb 4-1: USB disconnect, device number 3 [ 170.713122][ T7123] 8021q: VLANs not supported on vcan0 [ 173.987310][ T7164] 8021q: VLANs not supported on vcan0 [ 174.153976][ T7171] fuse: Unknown parameter 'grou00000000000000000000' [ 174.327153][ T7176] loop6: detected capacity change from 0 to 512 [ 174.359146][ T7176] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 174.448013][ T7176] EXT4-fs (loop6): 1 truncate cleaned up [ 174.461498][ T7177] loop5: detected capacity change from 0 to 736 [ 174.500735][ T7176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.536635][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 175.868298][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.240351][ T7211] fuse: Unknown parameter 'grou00000000000000000000' [ 176.633543][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 178.139072][ T5636] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.295049][ T7263] fuse: Unknown parameter 'grou00000000000000000000' [ 178.340959][ T5636] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 178.371416][ T5636] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 178.413842][ T5636] usb 4-1: config 220 has no interface number 2 [ 178.451038][ T5636] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 178.515691][ T5636] usb 4-1: config 220 interface 0 has no altsetting 0 [ 178.542345][ T5636] usb 4-1: config 220 interface 76 has no altsetting 0 [ 178.568708][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.445'. [ 178.580207][ T5636] usb 4-1: config 220 interface 1 has no altsetting 0 [ 178.632679][ T5636] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 178.656578][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.696487][ T5636] usb 4-1: Product: syz [ 178.732000][ T5636] usb 4-1: Manufacturer: syz [ 178.834910][ T5636] usb 4-1: SerialNumber: syz [ 179.687986][ T7291] 8021q: VLANs not supported on vcan0 [ 179.830443][ T5636] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 179.863705][ T5636] uvcvideo 4-1:220.0: No valid video chain found. [ 179.896555][ T5636] usb 4-1: selecting invalid altsetting 0 [ 180.012984][ T5636] usb 4-1: selecting invalid altsetting 0 [ 180.039343][ T5636] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 180.104752][ T5636] usb 4-1: USB disconnect, device number 4 [ 180.879917][ T7331] loop0: detected capacity change from 0 to 512 [ 180.903540][ T7331] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.107483][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.462'. [ 183.570756][ T7348] 8021q: VLANs not supported on vcan0 [ 184.231356][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.479'. [ 184.467190][ T7393] loop3: detected capacity change from 0 to 128 [ 184.827098][ T7398] loop5: detected capacity change from 0 to 512 [ 184.849010][ T7398] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.474595][ T7393] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.631995][ T7393] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.057577][ T7405] 8021q: VLANs not supported on vcan0 [ 187.462583][ T7420] loop5: detected capacity change from 0 to 512 [ 187.500610][ T5629] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.510347][ T7420] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.569728][ T7420] EXT4-fs (loop5): 1 truncate cleaned up [ 187.585297][ T7420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.113691][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.304072][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.501'. [ 188.811901][ T7472] fuse: Bad value for 'user_id' [ 188.830488][ T7472] fuse: Bad value for 'user_id' [ 189.241708][ T7493] 8021q: VLANs not supported on vcan0 [ 189.694341][ T7510] fuse: Bad value for 'user_id' [ 189.715988][ T7510] fuse: Bad value for 'user_id' [ 190.095547][ T7487] loop3: detected capacity change from 0 to 128 [ 190.133691][ T7487] vfat: Unknown parameter '18446744073709551615' [ 190.180467][ T7487] netlink: 104 bytes leftover after parsing attributes in process `syz.3.520'. [ 190.268974][ T5764] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 190.400531][ T5636] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 190.442405][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.542'. [ 190.473297][ T5764] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 190.512790][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.551371][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.571159][ T5636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.571587][ T5764] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 190.625371][ T5636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.662666][ T5764] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 190.670905][ T5636] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.695520][ T5764] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 190.717245][ T5636] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.736436][ T5764] usb 3-1: Manufacturer: syz [ 190.754676][ T5636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.778698][ T5764] usb 3-1: config 0 descriptor?? [ 190.798752][ T5636] usb 1-1: config 0 descriptor?? [ 190.886095][ T7550] fuse: Bad value for 'user_id' [ 190.900621][ T7550] fuse: Bad value for 'user_id' [ 191.194561][ T7561] loop4: detected capacity change from 0 to 128 [ 191.222993][ T5764] usbhid 3-1:0.0: can't add hid device: -71 [ 191.247481][ T5764] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 191.250541][ T5636] usbhid 1-1:0.0: can't add hid device: -71 [ 191.270525][ T7561] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 191.295423][ T5764] usb 3-1: USB disconnect, device number 2 [ 191.314042][ T7561] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.331940][ T5636] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 191.391604][ T5636] usb 1-1: USB disconnect, device number 3 [ 191.521280][ T5619] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.718084][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 192.020597][ T7589] fuse: Bad value for 'fd' [ 192.272924][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.568'. [ 192.362656][ T7608] loop4: detected capacity change from 0 to 128 [ 192.447484][ T7608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 192.495284][ T7608] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.621143][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 192.701333][ T7622] loop3: detected capacity change from 0 to 512 [ 192.721842][ T7622] ext4: Unknown parameter 'seclabel' [ 192.763028][ T5619] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.958443][ T5764] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.167771][ T5764] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.224868][ T5764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.276504][ T5764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.318352][ T5764] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.347642][ T7643] 9p: Bad value for 'access' [ 193.378233][ T5764] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 193.410779][ T5764] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 193.444829][ T5764] usb 6-1: Manufacturer: syz [ 193.496778][ T5764] usb 6-1: config 0 descriptor?? [ 193.516846][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.587'. [ 193.571779][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.582316][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.739672][ T7656] loop2: detected capacity change from 0 to 128 [ 193.786779][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 193.795311][ T7656] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 193.837820][ T7656] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.868301][ T7664] loop3: detected capacity change from 0 to 136 [ 193.914671][ T7664] Attempt to read inode for relocated directory [ 193.925630][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 193.933901][ T5764] usbhid 6-1:0.0: can't add hid device: -71 [ 193.940199][ T5764] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 193.961903][ T7664] syz.3.594: attempt to access beyond end of device [ 193.961903][ T7664] loop3: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 193.980807][ T5764] usb 6-1: USB disconnect, device number 6 [ 194.021412][ T7664] syz.3.594: attempt to access beyond end of device [ 194.021412][ T7664] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 194.066643][ T30] audit: type=1800 audit(1785986737.521:59): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.594" name="file1" dev="loop3" ino=1487 res=0 errno=0 [ 194.207356][ T5627] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.677912][ T7690] 9p: Bad value for 'access' [ 194.973056][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 195.026511][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.6.609'. [ 195.116034][ T7711] loop5: detected capacity change from 0 to 128 [ 195.256647][ T7711] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 195.351130][ T7711] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.372028][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 195.446522][ T30] audit: type=1800 audit(1785986738.901:60): pid=7711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.610" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 195.519003][ T5749] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 195.677869][ T5626] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.716540][ T5749] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 195.758350][ T5749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.809313][ T5749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.855679][ T5749] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 195.864012][ T7734] 9p: Bad value for 'access' [ 195.898180][ T5749] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 195.933220][ T5749] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 195.957282][ T5749] usb 7-1: Manufacturer: syz [ 195.978228][ T5749] usb 7-1: config 0 descriptor?? [ 196.153422][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.5.624'. [ 196.300885][ T7750] loop2: detected capacity change from 0 to 1024 [ 196.361512][ T7750] EXT4-fs: Ignoring removed orlov option [ 196.424242][ T5749] usbhid 7-1:0.0: can't add hid device: -71 [ 196.462127][ T5749] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 196.982996][ T7750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.078066][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 197.089126][ T5749] usb 7-1: USB disconnect, device number 3 [ 197.397956][ T7772] loop4: detected capacity change from 0 to 128 [ 197.472935][ T7772] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 197.511875][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.524110][ T7772] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.688530][ T30] audit: type=1800 audit(1785986741.101:61): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.632" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 197.714587][ T7777] loop6: detected capacity change from 0 to 512 [ 197.724065][ T7777] /dev/loop6: Can't open blockdev [ 197.818422][ T5619] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.424981][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.641'. [ 198.744503][ T7778] loop0: detected capacity change from 0 to 512 [ 198.752536][ T7778] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.922453][ T7812] loop5: detected capacity change from 0 to 128 [ 199.065272][ T7812] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 199.225589][ T7812] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.403810][ T30] audit: type=1800 audit(1785986742.841:62): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.647" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 199.791742][ T5626] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.894276][ T7825] syzkaller0: entered promiscuous mode [ 199.937051][ T7825] syzkaller0: entered allmulticast mode [ 200.602459][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.658'. [ 201.183621][ T7835] loop5: detected capacity change from 0 to 512 [ 201.211293][ T7835] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.494446][ T7873] loop6: detected capacity change from 0 to 128 [ 201.570752][ T7873] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 201.664721][ T7873] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.755338][ T30] audit: type=1800 audit(1785986745.211:63): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.665" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 201.876772][ T5893] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.041300][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.419831][ T7907] loop4: detected capacity change from 0 to 256 [ 202.457901][ T7910] loop3: detected capacity change from 0 to 1024 [ 202.581006][ T7910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.715618][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.148165][ T7924] loop6: detected capacity change from 0 to 128 [ 203.222936][ T7924] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 203.372732][ T7924] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.156183][ T30] audit: type=1800 audit(1785986747.611:64): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.686" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 204.336940][ T5893] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.427880][ T7942] program syz.2.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.666323][ T7954] loop3: detected capacity change from 0 to 136 [ 205.004660][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.5.702'. [ 205.321479][ T7985] loop0: detected capacity change from 0 to 164 [ 205.351342][ T7985] rock: directory entry would overflow storage [ 205.377342][ T7985] rock: sig=0x5252, size=5, remaining=3 [ 206.752694][ T8010] netlink: 'syz.4.716': attribute type 6 has an invalid length. [ 207.122545][ T8021] loop6: detected capacity change from 0 to 512 [ 208.680836][ T8050] loop0: detected capacity change from 0 to 512 [ 208.767313][ T8050] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.732: bg 0: block 5: invalid block bitmap [ 208.924523][ T8050] loop0: lost filesystem error report for type 5 error -117 [ 208.932446][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 208.946208][ C1] EXT4-fs (loop0): initial error at time 1785986752: ext4_validate_block_bitmap:432 [ 208.955639][ C1] EXT4-fs (loop0): last error at time 1785986752: ext4_validate_block_bitmap:432 [ 208.993734][ T8050] EXT4-fs (loop0): Remounting filesystem read-only [ 209.002546][ T8050] EXT4-fs (loop0): 2 truncates cleaned up [ 209.048481][ T8050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.098636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.105920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.907999][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.240982][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.439126][ T5736] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 210.497839][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.637330][ T5736] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 210.676152][ T5736] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 210.706298][ T5736] usb 6-1: config 220 has no interface number 2 [ 210.713776][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.724941][ T5736] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 210.746564][ T5736] usb 6-1: config 220 interface 0 has no altsetting 0 [ 210.753804][ T5736] usb 6-1: config 220 interface 76 has no altsetting 0 [ 210.761393][ T5736] usb 6-1: config 220 interface 1 has no altsetting 0 [ 210.772165][ T5736] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 210.801926][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.818996][ T5736] usb 6-1: Product: syz [ 210.828179][ T5736] usb 6-1: Manufacturer: syz [ 210.839085][ T5736] usb 6-1: SerialNumber: syz [ 210.867961][ T8085] loop4: detected capacity change from 0 to 256 [ 210.916755][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.119229][ T5736] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 211.147867][ T5736] uvcvideo 6-1:220.0: No valid video chain found. [ 211.163369][ T5736] usb 6-1: selecting invalid altsetting 0 [ 211.247058][ T5736] usb 6-1: selecting invalid altsetting 0 [ 211.267106][ T5736] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 211.292979][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.314058][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.328086][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.334269][ T5736] usb 6-1: USB disconnect, device number 7 [ 211.341546][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.351045][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.358712][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.397971][ T8096] netlink: 'syz.6.753': attribute type 10 has an invalid length. [ 211.457900][ T8092] batman_adv: batadv0: Adding interface: dummy0 [ 211.469911][ T8092] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.507409][ T8092] batman_adv: batadv0: Interface activated: dummy0 [ 211.620545][ T8094] batadv0: mtu less than device minimum [ 211.642322][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.655015][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.667165][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.679078][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.690964][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.702880][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.714758][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.726708][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.738576][ T8094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.919354][ T8096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.932889][ T8096] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 211.965117][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.495289][ T153] bridge_slave_1: left promiscuous mode [ 212.524206][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.560418][ T153] bridge_slave_0: left allmulticast mode [ 212.572100][ T153] bridge_slave_0: left promiscuous mode [ 212.584836][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.684675][ T8131] program syz.2.763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.079821][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.106561][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.124387][ T153] bond0 (unregistering): Released all slaves [ 213.410018][ T5625] Bluetooth: hci0: command tx timeout [ 213.670304][ T8156] syzkaller0: entered promiscuous mode [ 213.706738][ T8156] syzkaller0: entered allmulticast mode [ 213.989380][ T8175] loop3: detected capacity change from 0 to 1024 [ 214.106209][ T8175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.166118][ T153] hsr_slave_0: left promiscuous mode [ 214.194790][ T153] hsr_slave_1: left promiscuous mode [ 214.212332][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.230517][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.244786][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.267129][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.311459][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.408372][ T153] veth1_macvtap: left promiscuous mode [ 214.433108][ T153] veth0_macvtap: left promiscuous mode [ 214.462305][ T153] veth1_vlan: left promiscuous mode [ 214.480472][ T153] veth0_vlan: left promiscuous mode [ 214.985826][ T153] team0 (unregistering): Port device team_slave_1 removed [ 215.011313][ T153] team0 (unregistering): Port device team_slave_0 removed [ 215.193571][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 215.495795][ T5625] Bluetooth: hci0: command tx timeout [ 215.799060][ T8219] loop2: detected capacity change from 0 to 1024 [ 215.911232][ T8219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.266641][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.324710][ T8242] netdevsim netdevsim5: Direct firmware load for X failed with error -2 [ 216.374216][ T8242] netdevsim netdevsim5: Falling back to sysfs fallback for: X [ 216.492475][ T8251] loop2: detected capacity change from 0 to 512 [ 216.521516][ T8251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.567637][ T8251] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.795: bad orphan inode 131083 [ 216.604084][ T8251] loop2: lost filesystem error report for type 5 error -117 [ 216.608935][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 216.622824][ C0] EXT4-fs (loop2): initial error at time 1785986760: ext4_orphan_get:1425 [ 216.631405][ C0] EXT4-fs (loop2): last error at time 1785986760: ext4_orphan_get:1425 [ 216.660645][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.814229][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.163457][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 217.198795][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.241551][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.271587][ T8091] bridge_slave_0: entered allmulticast mode [ 217.303081][ T8091] bridge_slave_0: entered promiscuous mode [ 217.330235][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.337670][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.347347][ T8091] bridge_slave_1: entered allmulticast mode [ 217.356076][ T8091] bridge_slave_1: entered promiscuous mode [ 217.530128][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.543435][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.579093][ T5625] Bluetooth: hci0: command tx timeout [ 218.045114][ T8091] team0: Port device team_slave_0 added [ 218.068505][ T8091] team0: Port device team_slave_1 added [ 218.168062][ T8292] loop6: detected capacity change from 0 to 256 [ 218.295037][ T8292] syz.6.808: attempt to access beyond end of device [ 218.295037][ T8292] loop6: rw=8912896, sector=1768, nr_sectors = 4 limit=256 [ 218.344258][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.362405][ T8292] syz.6.808: attempt to access beyond end of device [ 218.362405][ T8292] loop6: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 218.383478][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.386121][ T8294] loop3: detected capacity change from 0 to 512 [ 218.454715][ T30] audit: type=1800 audit(1785986761.901:65): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.808" name="file1" dev="loop6" ino=1048631 res=0 errno=0 [ 218.470971][ T8292] syz.6.808: attempt to access beyond end of device [ 218.470971][ T8292] loop6: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 218.509451][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 218.518504][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.551521][ T8294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.570272][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.590813][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.813'. [ 218.605478][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.633827][ T8294] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.810: bad orphan inode 131083 [ 218.646862][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.706800][ T8294] loop3: lost filesystem error report for type 5 error -117 [ 218.708876][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 218.722749][ C1] EXT4-fs (loop3): initial error at time 1785986762: ext4_orphan_get:1425 [ 218.731317][ C1] EXT4-fs (loop3): last error at time 1785986762: ext4_orphan_get:1425 [ 218.745108][ T8294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.923033][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.951169][ T8312] 9p: Bad value for 'debug' [ 219.096008][ T8091] hsr_slave_0: entered promiscuous mode [ 219.143571][ T8091] hsr_slave_1: entered promiscuous mode [ 219.183221][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 219.216176][ T8091] Cannot create hsr debugfs directory [ 219.649572][ T5625] Bluetooth: hci0: command tx timeout [ 219.765729][ T8338] ipvlan1: entered promiscuous mode [ 219.776313][ T8337] ipvlan1: left promiscuous mode [ 220.131527][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.6.825'. [ 220.473393][ T8367] 9p: Bad value for 'debug' [ 220.483960][ T8365] loop2: detected capacity change from 0 to 1024 [ 220.583779][ T8365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.851137][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.965202][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 221.086950][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.6.839'. [ 221.302259][ T8395] loop3: detected capacity change from 0 to 128 [ 221.592717][ T8397] net_ratelimit: 11 callbacks suppressed [ 221.592740][ T8397] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 222.227070][ T8421] loop3: detected capacity change from 0 to 1024 [ 222.247431][ T8091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.305630][ T8421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.320381][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.338756][ T8091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.370132][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.407550][ T8091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.430623][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.443416][ T8091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 222.459052][ T5736] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 222.484770][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.589272][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.629374][ T5736] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 222.663497][ T5736] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 222.713266][ T5736] usb 3-1: config 220 has no interface number 2 [ 222.752621][ T5736] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 222.823095][ T5736] usb 3-1: config 220 interface 0 has no altsetting 0 [ 222.861102][ T5736] usb 3-1: config 220 interface 76 has no altsetting 0 [ 222.902616][ T5736] usb 3-1: config 220 interface 1 has no altsetting 0 [ 222.955544][ T5736] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 222.980012][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.994402][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.038150][ T5736] usb 3-1: Product: syz [ 223.048708][ T8452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.854'. [ 223.062885][ T5736] usb 3-1: Manufacturer: syz [ 223.087981][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.094847][ T5736] usb 3-1: SerialNumber: syz [ 223.138820][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.146060][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.274078][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.281354][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.357357][ T5736] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 223.402274][ T5736] uvcvideo 3-1:220.0: No valid video chain found. [ 223.427562][ T5736] usb 3-1: selecting invalid altsetting 0 [ 223.511918][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 223.526358][ T5736] usb 3-1: selecting invalid altsetting 0 [ 223.584600][ T5736] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 223.607251][ T5736] usb 3-1: USB disconnect, device number 3 [ 225.236929][ T8535] macsec1: entered allmulticast mode [ 225.254219][ T8535] gretap0: entered allmulticast mode [ 225.297172][ T8535] gretap0: left allmulticast mode [ 225.658637][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.164774][ T8575] loop2: detected capacity change from 0 to 512 [ 226.198570][ T8575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.262196][ T8575] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.895: bad orphan inode 131083 [ 226.413173][ T8575] loop2: lost filesystem error report for type 5 error -117 [ 226.415656][ T8575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.564522][ T8575] EXT4-fs (loop2): Online defrag not supported for non-extent files [ 226.774111][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.089546][ T8091] veth0_vlan: entered promiscuous mode [ 227.148282][ T8091] veth1_vlan: entered promiscuous mode [ 227.313071][ T8091] veth0_macvtap: entered promiscuous mode [ 227.361951][ T8091] veth1_macvtap: entered promiscuous mode [ 227.445596][ T8624] loop5: detected capacity change from 0 to 256 [ 227.463812][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.518008][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.650276][ T149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.687450][ T149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.960336][ T69] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.999538][ T69] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.245787][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.263178][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.417527][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.441210][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.880921][ T8666] loop4: detected capacity change from 0 to 256 [ 228.950379][ T8668] 8021q: VLANs not supported on vcan0 [ 229.065299][ T5764] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 229.105592][ T5764] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.352604][ T8689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.930'. [ 229.423784][ T8693] netlink: 60 bytes leftover after parsing attributes in process `syz.4.930'. [ 230.232375][ T8721] 8021q: VLANs not supported on vcan0 [ 230.267119][ T8724] loop4: detected capacity change from 0 to 256 [ 230.470412][ T8731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.944'. [ 231.026719][ T8755] loop4: detected capacity change from 0 to 164 [ 231.685828][ T8772] loop7: detected capacity change from 0 to 512 [ 232.360639][ T5621] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 232.541819][ T5621] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 232.564236][ T5621] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 232.593500][ T5621] usb 5-1: config 220 has no interface number 2 [ 232.601802][ T5621] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 232.617886][ T5621] usb 5-1: config 220 interface 0 has no altsetting 0 [ 232.625094][ T5621] usb 5-1: config 220 interface 76 has no altsetting 0 [ 232.632684][ T5621] usb 5-1: config 220 interface 1 has no altsetting 0 [ 232.644158][ T5621] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.659645][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.676705][ T5621] usb 5-1: Product: syz [ 232.689891][ T5621] usb 5-1: Manufacturer: syz [ 232.710183][ T5621] usb 5-1: SerialNumber: syz [ 232.837302][ T8809] 8021q: VLANs not supported on vcan0 [ 232.970572][ T5621] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 232.992689][ T5621] uvcvideo 5-1:220.0: No valid video chain found. [ 233.022464][ T5621] usb 5-1: selecting invalid altsetting 0 [ 233.077679][ T5621] usb 5-1: selecting invalid altsetting 0 [ 233.090515][ T5621] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 233.151798][ T5621] usb 5-1: USB disconnect, device number 4 [ 234.020054][ T8847] 8021q: VLANs not supported on vcan0 [ 234.203902][ T8853] loop3: detected capacity change from 0 to 512 [ 234.229193][ T8853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 234.300529][ T8853] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1000: bad orphan inode 131083 [ 234.337310][ T8853] loop3: lost filesystem error report for type 5 error -117 [ 234.338879][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 234.352945][ C0] EXT4-fs (loop3): initial error at time 1785986777: ext4_orphan_get:1425 [ 234.361813][ C0] EXT4-fs (loop3): last error at time 1785986777: ext4_orphan_get:1425 [ 234.375391][ T8853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.479911][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.666590][ T8868] program syz.7.1005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.908393][ T8875] syzkaller1: entered promiscuous mode [ 234.942674][ T8875] syzkaller1: entered allmulticast mode [ 235.031682][ T5636] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 235.210986][ T5636] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 235.309849][ T5636] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 235.611709][ T5636] usb 4-1: config 220 has no interface number 2 [ 235.833373][ T5636] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 236.043133][ T5636] usb 4-1: config 220 interface 0 has no altsetting 0 [ 236.091930][ T5636] usb 4-1: config 220 interface 76 has no altsetting 0 [ 236.114283][ T5636] usb 4-1: config 220 interface 1 has no altsetting 0 [ 236.135944][ T5636] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 236.161687][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.196891][ T8900] 8021q: VLANs not supported on vcan0 [ 236.206954][ T5636] usb 4-1: Product: syz [ 236.226595][ T5636] usb 4-1: Manufacturer: syz [ 236.255601][ T5636] usb 4-1: SerialNumber: syz [ 236.378419][ T8904] loop7: detected capacity change from 0 to 512 [ 236.441920][ T8904] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.1015: bad orphan inode 15 [ 236.490365][ T8907] loop2: detected capacity change from 0 to 512 [ 236.503402][ T8904] loop7: lost filesystem error report for type 5 error -117 [ 236.504755][ T8904] ext4_test_bit(bit=14, block=5) = 0 [ 236.512144][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 236.512169][ C1] EXT4-fs (loop7): initial error at time 1785986779: ext4_orphan_get:1425 [ 236.512198][ C1] EXT4-fs (loop7): last error at time 1785986779: ext4_orphan_get:1425 [ 236.547167][ T5636] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 236.554613][ T5636] uvcvideo 4-1:220.0: No valid video chain found. [ 236.561190][ T5636] usb 4-1: selecting invalid altsetting 0 [ 236.602782][ T8907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.637530][ T8904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.672978][ T8907] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1016: bad orphan inode 131083 [ 236.719607][ T5636] usb 4-1: selecting invalid altsetting 0 [ 236.723169][ T8907] loop2: lost filesystem error report for type 5 error -117 [ 236.734882][ T5636] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 236.753434][ T5636] usb 4-1: USB disconnect, device number 5 [ 236.837072][ T8907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.940887][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.109271][ T8921] program syz.4.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.155456][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.956754][ T8965] loop7: detected capacity change from 0 to 512 [ 238.993306][ T8965] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 239.061303][ T8965] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.1036: bad orphan inode 131083 [ 239.106944][ T8973] capability: warning: `syz.6.1038' uses deprecated v2 capabilities in a way that may be insecure [ 239.125316][ T8965] loop7: lost filesystem error report for type 5 error -117 [ 239.128873][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 239.142747][ C0] EXT4-fs (loop7): initial error at time 1785986782: ext4_orphan_get:1425 [ 239.151305][ C0] EXT4-fs (loop7): last error at time 1785986782: ext4_orphan_get:1425 [ 239.177341][ T8965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.416829][ T8978] program syz.3.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.451606][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.715849][ T8983] loop7: detected capacity change from 0 to 128 [ 239.783400][ T8983] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 239.882247][ T8983] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.964348][ T8992] ip_tables: iptables: counters copy to user failed while replacing table [ 240.182335][ T8091] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.646249][ T9012] fuse: Bad value for 'fd' [ 241.348328][ T9034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1055'. [ 241.380572][ T9035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1055'. [ 242.633714][ T9058] fuse: Unknown parameter '00000000000000000000003' [ 243.235476][ T9078] program syz.6.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.246865][ T9130] loop5: detected capacity change from 0 to 164 [ 247.026838][ T9167] fuse: Unknown parameter '00000000000000000000003' [ 247.198969][ T5636] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 247.248239][ T9172] loop3: detected capacity change from 0 to 164 [ 247.384897][ T5636] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 247.414873][ T5636] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.455501][ T5636] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.511244][ T5636] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 247.583175][ T5636] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 247.645416][ T5636] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 247.693249][ T5636] usb 8-1: Manufacturer: syz [ 247.722630][ T5636] usb 8-1: config 0 descriptor?? [ 248.035871][ T9193] 8021q: VLANs not supported on vcan0 [ 248.217125][ T5636] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 248.307137][ T5636] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 248.412699][ T5636] usb 8-1: USB disconnect, device number 2 [ 248.638087][ T9201] fido_id[9201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 249.495271][ T9227] 8021q: VLANs not supported on vcan0 [ 249.766039][ T9234] syzkaller0: entered promiscuous mode [ 249.781659][ T9234] syzkaller0: entered allmulticast mode [ 251.412898][ T9268] fuse: Unknown parameter '00000000000000000000003' [ 251.955774][ T9275] 8021q: VLANs not supported on vcan0 [ 252.315636][ T9283] syzkaller0: entered promiscuous mode [ 252.329076][ T9283] syzkaller0: entered allmulticast mode [ 252.826711][ T9300] loop6: detected capacity change from 0 to 1024 [ 252.866979][ T9300] EXT4-fs: Ignoring removed bh option [ 252.945162][ T9300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 253.077098][ T30] audit: type=1800 audit(1785986796.531:66): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1159" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 253.114567][ T9310] loop4: detected capacity change from 0 to 512 [ 253.167904][ T9310] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 253.278441][ T9310] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 253.314498][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 253.455879][ T6761] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 253.910333][ T9332] syzkaller0: entered promiscuous mode [ 253.934081][ T9332] syzkaller0: entered allmulticast mode [ 254.030719][ T9341] fuse: Unknown parameter 'fd00000000000000000000003' [ 254.508717][ T9352] loop2: detected capacity change from 0 to 512 [ 254.568254][ T9352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.642729][ T9352] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1179: bad orphan inode 131083 [ 254.684898][ T9352] loop2: lost filesystem error report for type 5 error -117 [ 254.765351][ T9352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.796406][ T9355] loop3: detected capacity change from 0 to 512 [ 254.924113][ T9355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.013430][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.020869][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.048145][ T9355] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.209478][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.212524][ T9371] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1185'. [ 255.282910][ T30] audit: type=1800 audit(1785986798.741:67): pid=9355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 255.404984][ T30] audit: type=1800 audit(1785986798.821:68): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 255.600823][ T9378] fuse: Unknown parameter 'fd00000000000000000000003' [ 255.690187][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.099609][ T9394] loop3: detected capacity change from 0 to 164 [ 256.140539][ T9393] syzkaller0: entered promiscuous mode [ 256.177033][ T9393] syzkaller0: entered allmulticast mode [ 256.706482][ T9403] loop4: detected capacity change from 0 to 512 [ 256.735544][ T9403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.791886][ T9403] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1200: bad orphan inode 131083 [ 256.896155][ T9403] loop4: lost filesystem error report for type 5 error -117 [ 256.912948][ T9403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.026600][ T9411] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1202'. [ 257.180932][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.397345][ T9433] loop6: detected capacity change from 0 to 512 [ 258.419784][ T9433] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.025498][ T9450] syzkaller0: entered promiscuous mode [ 260.087608][ T9450] syzkaller0: entered allmulticast mode [ 260.509491][ T5636] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 260.608058][ T9465] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1220'. [ 260.712571][ T5636] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 260.737792][ T5636] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 260.794284][ T5636] usb 6-1: config 220 has no interface number 2 [ 260.829413][ T5636] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 260.866010][ T5636] usb 6-1: config 220 interface 0 has no altsetting 0 [ 260.875211][ T5636] usb 6-1: config 220 interface 76 has no altsetting 0 [ 260.926808][ T5636] usb 6-1: config 220 interface 1 has no altsetting 0 [ 260.934062][ T9474] Format for deleting device is "id" (uint). [ 260.988494][ T5636] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 261.024620][ T5636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.080840][ T5636] usb 6-1: Product: syz [ 261.096036][ T5636] usb 6-1: Manufacturer: syz [ 261.112480][ T5636] usb 6-1: SerialNumber: syz [ 261.400998][ T5636] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 261.435523][ T5636] uvcvideo 6-1:220.0: No valid video chain found. [ 261.447699][ T5636] usb 6-1: selecting invalid altsetting 0 [ 261.484933][ T5636] usb 6-1: selecting invalid altsetting 0 [ 261.513969][ T5636] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 261.557713][ T5636] usb 6-1: USB disconnect, device number 8 [ 261.735839][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.736683][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1233'. [ 262.011327][ T30] audit: type=1326 audit(1785986805.461:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.145389][ T30] audit: type=1326 audit(1785986805.471:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.234127][ T9487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.302511][ T9510] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1237'. [ 262.312506][ T30] audit: type=1326 audit(1785986805.471:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.339105][ T9487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.488957][ T30] audit: type=1326 audit(1785986805.481:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.594432][ T30] audit: type=1326 audit(1785986805.481:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.691221][ T30] audit: type=1326 audit(1785986805.481:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.764515][ T30] audit: type=1326 audit(1785986805.471:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.820905][ T30] audit: type=1326 audit(1785986805.481:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.887107][ T30] audit: type=1326 audit(1785986805.481:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 262.937216][ T30] audit: type=1326 audit(1785986805.481:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9499 comm="syz.7.1235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e239e0d9 code=0x7ffc0000 [ 263.059039][ T153] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.078729][ T153] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.097981][ T153] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.152890][ T153] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.561513][ T9548] 8021q: VLANs not supported on vcan0 [ 263.590233][ T9552] loop7: detected capacity change from 0 to 512 [ 263.601978][ T9554] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1253'. [ 263.626102][ T9552] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 263.715310][ T9552] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 263.749223][ T5869] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 263.832112][ T6338] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 263.922831][ T5869] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 263.970661][ T5869] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 264.010215][ T5869] usb 3-1: config 220 has no interface number 2 [ 264.035570][ T5869] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 264.099579][ T5869] usb 3-1: config 220 interface 0 has no altsetting 0 [ 264.130704][ T5869] usb 3-1: config 220 interface 76 has no altsetting 0 [ 264.149541][ T5869] usb 3-1: config 220 interface 1 has no altsetting 0 [ 264.175813][ T5869] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 264.188515][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.206304][ T5869] usb 3-1: Product: syz [ 264.214390][ T5869] usb 3-1: Manufacturer: syz [ 264.219851][ T5869] usb 3-1: SerialNumber: syz [ 264.473450][ T5869] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 264.487236][ T5869] uvcvideo 3-1:220.0: No valid video chain found. [ 264.495174][ T5869] usb 3-1: selecting invalid altsetting 0 [ 264.557150][ T5869] usb 3-1: selecting invalid altsetting 0 [ 264.572886][ T5869] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 264.585161][ T9584] loop3: detected capacity change from 0 to 1024 [ 264.622452][ T5869] usb 3-1: USB disconnect, device number 4 [ 264.651333][ T9584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.710397][ T9589] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1267'. [ 264.792603][ T9595] loop6: detected capacity change from 0 to 512 [ 264.802793][ T9593] 8021q: VLANs not supported on vcan0 [ 264.826901][ T9595] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 264.873421][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.960000][ T9595] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 265.192417][ T6315] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 265.559704][ T9620] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1282'. [ 265.589218][ T9613] loop7: detected capacity change from 0 to 4096 [ 265.623423][ T9613] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 265.669414][ T9613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.861576][ T9613] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 265.901768][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1286'. [ 265.912822][ T9613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.933368][ T9632] netlink: 'syz.4.1286': attribute type 7 has an invalid length. [ 265.958967][ T9632] netlink: 'syz.4.1286': attribute type 8 has an invalid length. [ 265.974860][ T9613] EXT4-fs (loop7): changing journal_checksum during remount not supported; ignoring [ 265.984687][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 265.995869][ T9613] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 266.142938][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.653568][ T9652] loop2: detected capacity change from 0 to 4096 [ 266.673116][ T9652] EXT4-fs: inline encryption not supported [ 266.694195][ T9652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 266.713814][ T9652] EXT4-fs (loop2): Test dummy encryption mode enabled [ 266.737708][ T9652] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 266.833302][ T9652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.189667][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.354094][ T9690] loop3: detected capacity change from 0 to 736 [ 272.419346][ T9756] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 273.047212][ T9763] veth3: entered allmulticast mode [ 273.090294][ T9763] bond1: (slave veth3): Enslaving as an active interface with a down link [ 273.125758][ T9768] macvlan2: entered promiscuous mode [ 273.143553][ T9768] macvlan2: entered allmulticast mode [ 273.158188][ T9768] bond1: entered promiscuous mode [ 273.168717][ T9768] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.181128][ T9768] bond1: left promiscuous mode [ 273.674773][ T9791] loop3: detected capacity change from 0 to 512 [ 273.754424][ T9791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.772628][ T9791] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.803832][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 273.803852][ T30] audit: type=1800 audit(1785986817.261:116): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1345" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 273.874668][ T30] audit: type=1800 audit(1785986817.331:117): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1345" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 273.958737][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.298963][ T9802] syz.4.1348 (9802) used greatest stack depth: 18312 bytes left [ 274.655899][ T9815] loop5: detected capacity change from 0 to 512 [ 274.688901][ T9815] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 274.726886][ T9815] EXT4-fs (loop5): 1 truncate cleaned up [ 274.760202][ T9815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.165081][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.813312][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1367'. [ 275.843072][ T9850] netlink: 'syz.3.1367': attribute type 7 has an invalid length. [ 275.860590][ T9850] netlink: 'syz.3.1367': attribute type 8 has an invalid length. [ 275.874853][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 275.981359][ T9852] loop7: detected capacity change from 0 to 4096 [ 276.006792][ T9852] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 276.042206][ T9852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.185355][ T9852] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 276.373535][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.655479][ T9869] binder: 9867:9869 ioctl c0306201 0 returned -14 [ 277.540078][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 277.714868][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.733283][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.762041][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.791601][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.821622][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.858448][ T24] usb 6-1: config 0 descriptor?? [ 277.884766][ T9906] binder: 9905:9906 ioctl c0306201 0 returned -14 [ 278.503654][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 278.526123][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 278.583154][ T24] usb 6-1: USB disconnect, device number 9 [ 278.860810][ T9931] loop2: detected capacity change from 0 to 512 [ 278.908211][ T9931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 278.974106][ T9931] EXT4-fs (loop2): 1 truncate cleaned up [ 278.999225][ T9931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.161275][ T9933] loop6: detected capacity change from 0 to 512 [ 279.169563][ T9933] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.759533][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.070847][ T9953] binder: 9952:9953 ioctl c0306201 0 returned -14 [ 280.455501][ T9963] loop2: detected capacity change from 0 to 512 [ 280.488685][ T9963] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1409: inode has both inline data and extents flags [ 280.512032][ T9963] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.512886][ T9963] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1409: couldn't read orphan inode 15 (err -117) [ 280.522127][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 280.522151][ C1] EXT4-fs (loop2): initial error at time 1785986823: ext4_orphan_get:1399: inode 15 [ 280.522192][ C1] EXT4-fs (loop2): last error at time 1785986823: ext4_orphan_get:1399: inode 15 [ 280.664678][ T9963] loop2: lost filesystem error report for type 5 error -117 [ 280.673709][ T9963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.182652][ T9978] loop6: detected capacity change from 0 to 512 [ 281.213690][ T9978] /dev/loop6: Can't open blockdev [ 281.532510][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.123269][T10043] loop2: detected capacity change from 0 to 512 [ 283.190493][T10043] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 283.429774][T10050] syzkaller1: entered promiscuous mode [ 283.459196][T10050] syzkaller1: entered allmulticast mode [ 283.515838][T10052] loop7: detected capacity change from 0 to 512 [ 283.543277][T10052] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 283.603393][T10052] EXT4-fs (loop7): 1 truncate cleaned up [ 283.773585][T10052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.234534][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.992410][ T30] audit: type=1326 audit(1785986829.441:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.6.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd32d99e0d9 code=0x0 [ 286.041071][T10102] loop7: detected capacity change from 0 to 1024 [ 286.076445][T10102] EXT4-fs: Ignoring removed bh option [ 286.214418][T10102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 286.255772][ T30] audit: type=1800 audit(1785986829.711:119): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1462" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 286.524681][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 286.915345][T10124] loop7: detected capacity change from 0 to 512 [ 286.957074][T10124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.989751][T10124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.026956][T10124] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 287.092185][T10124] EXT4-fs (loop7): 1 truncate cleaned up [ 287.165437][T10124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.487468][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.150904][T10151] loop4: detected capacity change from 0 to 764 [ 288.178042][T10151] iso9660: Bad value for 'gid' [ 288.202924][T10151] iso9660: Bad value for 'gid' [ 288.434179][T10151] loop4: detected capacity change from 0 to 4096 [ 288.452932][T10151] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.528971][T10151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.557194][T10163] loop3: detected capacity change from 0 to 512 [ 288.618765][T10163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.723204][T10163] EXT4-fs (loop3): 1 truncate cleaned up [ 288.786069][T10163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.972237][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.069771][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.312635][T10169] loop7: detected capacity change from 0 to 256 [ 289.356827][T10169] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 290.804568][T10213] : renamed from bond_slave_0 (while UP) [ 291.740806][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1509'. [ 291.779851][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1509'. [ 291.906761][T10224] gretap0: entered promiscuous mode [ 291.952882][T10224] gretap0: left promiscuous mode [ 292.460745][T10245] loop7: detected capacity change from 0 to 512 [ 292.528486][T10245] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.598163][T10245] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 292.700260][T10245] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 292.784358][T10245] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 292.829050][T10245] System zones: 0-2, 18-18, 34-35 [ 292.910840][T10245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.090756][T10245] fscrypt (loop7, inode 12): Error -61 getting encryption context [ 293.354887][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.421028][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.704633][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.750431][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.071586][T10292] loop3: detected capacity change from 0 to 512 [ 294.097193][ T5281] veth0_macvtap: left promiscuous mode [ 294.113729][T10292] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.291715][ T1118] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.439119][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.480900][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.553873][ T6763] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.642381][T10302] loop6: detected capacity change from 0 to 512 [ 294.684533][T10302] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 294.797665][T10302] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 295.326652][ T6763] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 295.958580][T10339] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1548'. [ 296.333876][T10352] loop5: detected capacity change from 0 to 512 [ 296.377097][T10352] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 296.451890][T10352] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 296.723107][ T1118] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 297.540365][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 297.741899][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.779384][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.798891][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.842806][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.868329][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.889646][ T24] usb 5-1: config 0 descriptor?? [ 298.298505][T10391] loop6: detected capacity change from 0 to 512 [ 298.335047][T10391] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 298.392990][T10391] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 298.416643][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 298.518373][ T24] usb 5-1: USB disconnect, device number 5 [ 298.581826][ T48] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 298.755756][T10394] fido_id[10394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 298.821286][T10401] loop6: detected capacity change from 0 to 512 [ 298.830828][T10401] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 298.911622][T10401] EXT4-fs (loop6): 1 truncate cleaned up [ 298.952035][T10401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.333535][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.593806][T10418] loop6: detected capacity change from 0 to 512 [ 299.736387][T10418] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 299.827840][T10418] EXT4-fs (loop6): 1 truncate cleaned up [ 299.847129][T10418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.992289][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.141999][T10436] loop4: detected capacity change from 0 to 1024 [ 301.153324][T10438] loop7: detected capacity change from 0 to 512 [ 301.218682][T10438] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.247314][T10436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.273896][T10438] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 301.385637][T10436] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 301.923329][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.597244][T10482] loop4: detected capacity change from 0 to 512 [ 303.643329][T10482] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.094023][T10495] ucma_write: process 636 (syz.6.1608) changed security contexts after opening file descriptor, this is not allowed. [ 307.202125][ T5621] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.068548][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 308.111084][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.135303][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.169092][T10568] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 308.192939][ T5621] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.245453][ T5621] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.281375][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.314568][ T5621] usb 6-1: config 0 descriptor?? [ 309.146151][ T5621] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 309.358745][ T5621] usb 6-1: USB disconnect, device number 10 [ 309.664326][T10587] fido_id[10587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 310.663580][ T30] audit: type=1326 audit(1785986854.111:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.2.1656" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f527c39e0d9 code=0x0 [ 311.254114][T10650] loop3: detected capacity change from 0 to 2048 [ 311.338303][T10650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.419411][T10650] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.534236][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.175901][T10683] syzkaller1: entered promiscuous mode [ 312.209389][T10683] syzkaller1: entered allmulticast mode [ 312.491616][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1676'. [ 313.673249][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1692'. [ 314.703644][T10769] loop2: detected capacity change from 0 to 512 [ 314.714316][T10769] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.791790][T10763] batman_adv: batadv0: Interface deactivated: dummy0 [ 315.549690][ T5749] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 315.718983][ T5749] usb 4-1: device descriptor read/64, error -71 [ 315.894992][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'. [ 315.979109][ T5749] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 316.133299][ T5749] usb 4-1: device descriptor read/64, error -71 [ 316.269410][ T5749] usb usb4-port1: attempt power cycle [ 316.290986][T10819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1730'. [ 316.328869][T10819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1730'. [ 316.372787][T10819] gretap0: entered promiscuous mode [ 316.455177][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.463188][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.638998][ T5749] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 316.691348][ T5749] usb 4-1: device descriptor read/8, error -71 [ 316.750325][T10825] loop7: detected capacity change from 0 to 512 [ 316.837013][T10825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.894456][T10825] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.938901][ T5749] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 316.969647][ T5749] usb 4-1: device descriptor read/8, error -71 [ 317.002739][ T30] audit: type=1800 audit(1785986860.461:121): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1732" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 317.081232][ T5749] usb usb4-port1: unable to enumerate USB device [ 317.089802][ T30] audit: type=1800 audit(1785986860.461:122): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1732" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 317.251988][T10819] gretap0: left promiscuous mode [ 317.272454][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.459955][T10860] loop4: detected capacity change from 0 to 512 [ 318.605709][T10860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.676103][ T30] audit: type=1326 audit(1785986862.131:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.3.1747" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff9e0d9 code=0x7ffc0000 [ 318.682117][T10860] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.786233][ T30] audit: type=1326 audit(1785986862.131:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.3.1747" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff9e0d9 code=0x7ffc0000 [ 318.842663][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.897443][ T30] audit: type=1800 audit(1785986862.191:125): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1746" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 318.954200][ T30] audit: type=1800 audit(1785986862.191:126): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1746" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 319.048925][ T5764] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 319.188897][ T5764] usb 4-1: device descriptor read/64, error -71 [ 319.454889][ T5764] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 319.480225][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 319.538995][T10888] vlan2: entered promiscuous mode [ 319.550895][T10888] bond0: entered promiscuous mode [ 319.562509][T10888] bond_slave_0: entered promiscuous mode [ 319.582245][T10888] bond_slave_1: entered promiscuous mode [ 319.609879][ T5764] usb 4-1: device descriptor read/64, error -71 [ 319.731605][ T5764] usb usb4-port1: attempt power cycle [ 319.852245][T10893] loop5: detected capacity change from 0 to 8192 [ 319.879305][T10893] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 320.080154][ T5764] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 320.119030][ T5764] usb 4-1: device descriptor read/8, error -71 [ 320.369113][ T5764] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 320.399669][ T5764] usb 4-1: device descriptor read/8, error -71 [ 320.510223][ T5764] usb usb4-port1: unable to enumerate USB device [ 320.546460][T10912] loop2: detected capacity change from 0 to 512 [ 320.614928][T10912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.716938][T10912] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.825939][ T30] audit: type=1800 audit(1785986864.281:127): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1763" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 320.915729][ T30] audit: type=1800 audit(1785986864.311:128): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1763" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 321.006989][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.484189][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 321.600511][T10944] vlan2: entered promiscuous mode [ 321.712840][T10956] loop5: detected capacity change from 0 to 512 [ 321.721001][T10956] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.564636][T10963] loop3: detected capacity change from 0 to 512 [ 322.679717][T10963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.693043][T10963] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.821784][T10972] random: crng reseeded on system resumption [ 322.837861][ T30] audit: type=1800 audit(1785986866.281:129): pid=10970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1786" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 322.974272][ T30] audit: type=1800 audit(1785986866.321:130): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1786" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 323.065460][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.528264][T11003] loop4: detected capacity change from 0 to 2048 [ 324.600996][T11003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.634266][T11003] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.469840][ T5636] IPVS: starting estimator thread 0... [ 325.679603][T11036] IPVS: using max 23 ests per chain, 55200 per kthread [ 326.126297][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.576252][T11069] loop3: detected capacity change from 0 to 512 [ 327.656462][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 327.722762][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 327.733578][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1827'. [ 327.988127][T11069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.307853][T11069] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.536916][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.816992][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.151941][T11073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.214688][T11073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.188558][T11073] veth3: left allmulticast mode [ 330.413322][ T69] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.479669][ T6764] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.507892][ T6764] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.538750][ T6764] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.363443][T11132] loop4: detected capacity change from 0 to 1024 [ 331.431863][T11132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 331.523888][T11132] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.595487][ T30] audit: type=1800 audit(1785986875.051:131): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1844" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 331.705064][T11132] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1844: lblock 0 mapped to illegal pblock 0 (length 1) [ 331.723281][ T30] audit: type=1800 audit(1785986875.091:132): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1844" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 331.785677][ T30] audit: type=1800 audit(1785986875.161:133): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1844" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 331.839224][T11132] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 331.897444][T11132] EXT4-fs (loop4): This should not happen!! Data will be lost [ 331.897444][T11132] [ 331.964115][T11132] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 1: comm syz.4.1844: lblock 1 mapped to illegal pblock 1 (length 3) [ 332.042757][T11132] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 332.091210][T11132] EXT4-fs (loop4): This should not happen!! Data will be lost [ 332.091210][T11132] [ 332.273210][ T5619] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 332.329817][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 332.630098][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1858'. [ 333.360564][T11185] loop3: detected capacity change from 0 to 2048 [ 333.421799][T11185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.462777][T11185] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.650917][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.890199][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 335.819777][ T5749] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 336.000978][ T5749] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 336.034171][ T5749] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 336.091548][ T5749] usb 8-1: config 220 has no interface number 2 [ 336.110097][ T5749] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 336.162208][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1892'. [ 336.172279][ T5749] usb 8-1: config 220 interface 0 has no altsetting 0 [ 336.193630][ T5749] usb 8-1: config 220 interface 76 has no altsetting 0 [ 336.216231][ T5749] usb 8-1: config 220 interface 1 has no altsetting 0 [ 336.234354][ T5749] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 336.262089][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.280617][ T5749] usb 8-1: Product: syz [ 336.285541][T11263] vlan2: entered promiscuous mode [ 336.299266][ T5749] usb 8-1: Manufacturer: syz [ 336.306993][T11263] bond0: entered promiscuous mode [ 336.312424][ T5749] usb 8-1: SerialNumber: syz [ 336.327787][T11263] bond_slave_0: entered promiscuous mode [ 336.358380][T11263] bond_slave_1: entered promiscuous mode [ 336.365289][T11263] batadv0: entered promiscuous mode [ 336.574019][ T5749] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 336.603838][ T5749] uvcvideo 8-1:220.0: No valid video chain found. [ 336.637032][ T5749] usb 8-1: selecting invalid altsetting 0 [ 336.708638][ T5749] usb 8-1: selecting invalid altsetting 0 [ 336.725237][ T5749] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 336.759468][ T5749] usb 8-1: USB disconnect, device number 3 [ 337.974424][T11314] loop3: detected capacity change from 0 to 2048 [ 338.065643][T11314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.079167][T11314] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.213007][T11314] EXT4-fs (loop3): shut down requested (2) [ 338.265599][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.771704][ T5869] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 338.961154][ T5869] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 338.988370][ T5869] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 339.013227][ T5869] usb 7-1: config 220 has no interface number 2 [ 339.034747][ T5869] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 339.067608][ T5869] usb 7-1: config 220 interface 0 has no altsetting 0 [ 339.108090][ T5869] usb 7-1: config 220 interface 76 has no altsetting 0 [ 339.135030][ T5869] usb 7-1: config 220 interface 1 has no altsetting 0 [ 339.160671][ T5869] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 339.175816][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.194495][ T5869] usb 7-1: Product: syz [ 339.204948][ T5869] usb 7-1: Manufacturer: syz [ 339.215147][ T5869] usb 7-1: SerialNumber: syz [ 339.370396][T11356] loop3: detected capacity change from 0 to 512 [ 339.395724][T11356] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 339.442637][T11356] EXT4-fs (loop3): 1 truncate cleaned up [ 339.470580][ T5869] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 339.480797][T11356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.517182][ T5869] uvcvideo 7-1:220.0: No valid video chain found. [ 339.571422][ T5869] usb 7-1: selecting invalid altsetting 0 [ 339.690607][ T5869] usb 7-1: selecting invalid altsetting 0 [ 339.696417][ T5869] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 339.740390][ T5869] usb 7-1: USB disconnect, device number 4 [ 339.958470][ T30] audit: type=1326 audit(1785986883.411:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.060536][ T30] audit: type=1326 audit(1785986883.411:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.140859][ T30] audit: type=1326 audit(1785986883.451:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.195094][ T30] audit: type=1326 audit(1785986883.451:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.220856][ T30] audit: type=1326 audit(1785986883.451:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.247990][ T30] audit: type=1326 audit(1785986883.451:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.340861][ T30] audit: type=1326 audit(1785986883.451:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.455294][ T30] audit: type=1326 audit(1785986883.451:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1928" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b439e0d9 code=0x7ffc0000 [ 340.542822][T11371] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1930'. [ 341.010589][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.881748][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1947'. [ 342.424451][T11433] loop4: detected capacity change from 0 to 512 [ 342.477700][T11433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.503660][T11433] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.578869][ T30] audit: type=1800 audit(1785986886.021:142): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1954" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 342.734325][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.743666][ T30] audit: type=1800 audit(1785986886.061:143): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1954" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 342.785281][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1952'. [ 343.281348][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 343.307574][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 343.391181][T11456] gretap0: entered promiscuous mode [ 343.414438][T11456] gretap0: left promiscuous mode [ 343.694277][T11470] loop5: detected capacity change from 0 to 512 [ 343.832658][T11470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.909357][T11470] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.278662][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.317915][T11515] loop7: detected capacity change from 0 to 512 [ 345.346207][T11515] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 345.372108][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 345.531921][T11515] EXT4-fs (loop7): 1 truncate cleaned up [ 345.585969][T11515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.748695][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'. [ 347.265074][T11537] vlan2: entered promiscuous mode [ 347.291330][T11537] bond0: entered promiscuous mode [ 347.309289][T11537] bond_slave_0: entered promiscuous mode [ 347.328380][T11537] bond_slave_1: entered promiscuous mode [ 348.243792][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.386676][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2001'. [ 348.753184][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2006'. [ 348.862642][T11576] vlan2: entered promiscuous mode [ 348.884976][T11573] loop6: detected capacity change from 0 to 4096 [ 348.897933][T11576] bond0: entered promiscuous mode [ 348.925199][T11576] : entered promiscuous mode [ 348.931495][T11573] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.964665][T11576] bond_slave_1: entered promiscuous mode [ 349.309714][T11573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.165018][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.163952][T11602] loop7: detected capacity change from 0 to 512 [ 351.220330][T11602] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 351.347238][T11602] EXT4-fs (loop7): 1 truncate cleaned up [ 351.411181][T11602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.494055][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2017'. [ 351.955051][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2021'. [ 352.056448][T11624] vlan2: entered promiscuous mode [ 352.232509][T11631] loop5: detected capacity change from 0 to 512 [ 352.317304][T11631] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 352.568030][T11640] loop4: detected capacity change from 0 to 4096 [ 352.601694][T11640] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.652560][T11640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.983264][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.087994][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.401665][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2034'. [ 355.072291][T11698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2043'. [ 355.429515][T11707] loop3: detected capacity change from 0 to 2048 [ 355.537192][T11707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.628961][T11707] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.916359][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.008420][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 356.340504][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 356.403876][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 356.441098][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 356.971310][T11736] loop7: detected capacity change from 0 to 512 [ 356.991488][T11736] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 358.059414][T11742] loop6: detected capacity change from 0 to 512 [ 358.867358][T11742] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 359.647061][T11742] EXT4-fs (loop6): 1 truncate cleaned up [ 359.723499][T11742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.036467][T11761] syzkaller0: entered promiscuous mode [ 361.067087][T11761] syzkaller0: entered allmulticast mode [ 361.621358][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.625844][T11781] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2075'. [ 361.753328][T11782] loop2: detected capacity change from 0 to 512 [ 361.771619][T11782] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 364.862748][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'. [ 366.566867][T11813] loop6: detected capacity change from 0 to 512 [ 366.582787][T11813] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 366.603624][T11813] EXT4-fs (loop6): 1 truncate cleaned up [ 366.611529][T11813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.903864][ T5893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.324664][T11828] loop4: detected capacity change from 0 to 512 [ 367.332623][T11828] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.015949][T11827] loop3: detected capacity change from 0 to 2048 [ 369.953546][T11827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.994688][T11830] loop5: detected capacity change from 0 to 512 [ 370.093617][T11827] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.209552][T11830] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.414112][ T5736] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 370.495679][ T5736] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 370.551698][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.091681][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 371.092466][T11856] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2101'. [ 372.613047][T11877] batman_adv: batadv0: Interface activated: dummy0 [ 372.619699][T11877] batadv0: mtu less than device minimum [ 372.626711][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.638563][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.650707][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.663127][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.675003][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.686952][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.698827][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.710685][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.723177][T11877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.821108][T11877] vlan2: left promiscuous mode [ 372.825934][T11877] bond0: left promiscuous mode [ 372.831066][T11877] bond_slave_0: left promiscuous mode [ 372.836752][T11877] bond_slave_1: left promiscuous mode [ 372.843249][T11877] batadv0: left promiscuous mode [ 372.859511][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.867075][ T6840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.521170][T11892] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2116'. [ 374.936692][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2117'. [ 375.631188][T11909] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2122'. [ 376.410376][T11934] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2129'. [ 376.721751][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 377.892770][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.899420][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.955433][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 378.032003][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 378.068594][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2138'. [ 378.100811][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 379.451224][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 379.765540][T11993] syzkaller1: entered promiscuous mode [ 379.778958][T11993] syzkaller1: entered allmulticast mode [ 379.894398][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 379.949319][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 379.980107][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 381.613457][T12035] syzkaller1: entered promiscuous mode [ 381.683532][T12035] syzkaller1: entered allmulticast mode [ 381.902479][T12041] __nla_validate_parse: 2 callbacks suppressed [ 381.902503][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2169'. [ 382.697160][T12063] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2179'. [ 382.933423][T12071] loop4: detected capacity change from 0 to 512 [ 382.941398][T12071] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.875078][T12079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2184'. [ 384.112997][T12086] syzkaller1: entered promiscuous mode [ 384.142252][T12086] syzkaller1: entered allmulticast mode [ 385.846291][T12119] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2199'. [ 386.218434][T12129] syzkaller1: entered promiscuous mode [ 386.237334][T12129] syzkaller1: entered allmulticast mode [ 386.772991][T12140] loop5: detected capacity change from 0 to 256 [ 387.568297][T12140] syz.5.2210: attempt to access beyond end of device [ 387.568297][T12140] loop5: rw=8912896, sector=1768, nr_sectors = 4 limit=256 [ 387.740772][T12140] syz.5.2210: attempt to access beyond end of device [ 387.740772][T12140] loop5: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 387.789328][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 387.789348][ T30] audit: type=1800 audit(1785986931.251:146): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2210" name="file1" dev="loop5" ino=1048679 res=0 errno=0 [ 388.097289][T12161] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2216'. [ 388.446942][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 388.495839][T12173] syzkaller1: entered promiscuous mode [ 388.525019][T12173] syzkaller1: entered allmulticast mode [ 389.944404][T12201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2233'. [ 390.678580][T12216] loop5: detected capacity change from 0 to 512 [ 390.723460][T12216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.761121][T12216] EXT4-fs (loop5): 1 truncate cleaned up [ 390.804218][T12216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.128952][T12226] syzkaller1: entered promiscuous mode [ 391.150123][T12226] syzkaller1: entered allmulticast mode [ 391.735661][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.031891][T12252] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2250'. [ 392.284160][T12258] loop5: detected capacity change from 0 to 1024 [ 392.346731][T12258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 392.409295][T12258] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.471507][T12258] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2253: Freeing blocks not in datazone - block = 0, count = 16 [ 392.508398][T12258] EXT4-fs (loop5): Remounting filesystem read-only [ 393.056447][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 393.371880][T12275] loop5: detected capacity change from 0 to 512 [ 393.402243][T12275] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 393.474769][T12275] EXT4-fs (loop5): 1 truncate cleaned up [ 393.527092][T12275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.690163][T12270] syzkaller1: entered promiscuous mode [ 393.716621][T12270] syzkaller1: entered allmulticast mode [ 395.690047][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.125828][T12313] BUG: using smp_processor_id() in preemptible [00000000] code: syz.5.2271/12313 [ 396.135668][T12313] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 396.141876][T12313] CPU: 1 UID: 0 PID: 12313 Comm: syz.5.2271 Not tainted syzkaller #0 PREEMPT(full) [ 396.141907][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 396.141923][T12313] Call Trace: [ 396.141932][T12313] [ 396.141941][T12313] dump_stack_lvl+0xe8/0x150 [ 396.141991][T12313] check_preemption_disabled+0xd3/0xe0 [ 396.142033][T12313] bpf_mem_cache_free_rcu+0x48/0xc0 [ 396.142066][T12313] rhtab_delete_elem+0x185a/0x1b30 [ 396.142102][T12313] ? rhtab_delete_elem+0x15c/0x1b30 [ 396.142129][T12313] ? check_and_init_map_value+0x57/0x410 [ 396.142167][T12313] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 396.142222][T12313] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 396.142266][T12313] bpf_map_do_batch+0x445/0x630 [ 396.142313][T12313] __sys_bpf+0x906/0xd90 [ 396.142355][T12313] ? __entry_text_end+0x1020b5/0x1020b9 [ 396.142386][T12313] ? __pfx___sys_bpf+0x10/0x10 [ 396.142424][T12313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.142453][T12313] ? do_futex+0x3e7/0x4e0 [ 396.142513][T12313] ? rcu_is_watching+0x15/0xb0 [ 396.142537][T12313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.142574][T12313] __x64_sys_bpf+0xba/0xd0 [ 396.142626][T12313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.142654][T12313] do_syscall_64+0x174/0x580 [ 396.142689][T12313] ? trace_irq_disable+0x3b/0x140 [ 396.142731][T12313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.142756][T12313] RIP: 0033:0x7fb9b439e0d9 [ 396.142779][T12313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.142800][T12313] RSP: 002b:00007fb9b526a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.142825][T12313] RAX: ffffffffffffffda RBX: 00007fb9b4625fa0 RCX: 00007fb9b439e0d9 [ 396.142844][T12313] RDX: 0000000000000038 RSI: 00002000000018c0 RDI: 0000000000000019 [ 396.142861][T12313] RBP: 00007fb9b4435024 R08: 0000000000000000 R09: 0000000000000000 [ 396.142877][T12313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.142892][T12313] R13: 00007fb9b4626038 R14: 00007fb9b4625fa0 R15: 00007ffe518ec0f8 [ 396.142931][T12313]