last executing test programs: 15m12.775750072s ago: executing program 4 (id=467): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r0, r0, 0x0, 0x2000009) 15m11.435472903s ago: executing program 4 (id=474): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000140)=0x8) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0180000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00b000002000000008000a00", @ANYRES32=r3, @ANYBLOB="42dd5f5275a83b2ca40420a9b5f18ab599bb6e1efe869223ec781e0b7b70876ccc87761b9183dd2662550f7473d66641a23a80eb45712249469fedf32e96b305f29830412f35d80d5b64e6d860fbd0c85e9ae4c152a37308bcb14b25507d5bb02fb617e43bf2be71125f758e22aed776af4974e87c0e7556c1714e0f1475b934b7ef37edb8"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4101, 0x1005) 15m9.445614871s ago: executing program 4 (id=482): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 15m8.573072763s ago: executing program 4 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000100)="bdd73bcb6fbafd381fc17d7ce7836a9325a2feac0cc2655617ee6f3447a413384844ebc10ec0bbbfa38a54f12ec88bcc373ab2f5e09d440b2005166717cda98d3820e39696f15c48a4c920f7b8e3ccbcd425c1e43d1cc6979810b7ff330fec", 0x5f}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) 15m7.806123643s ago: executing program 4 (id=489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$SEG6(0x0, r0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) 15m6.564317622s ago: executing program 4 (id=493): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000140)=0x8) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0180000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00b000002000000008000a00", @ANYRES32=r3, @ANYBLOB="42dd5f5275a83b2ca40420a9b5f18ab599bb6e1efe869223ec781e0b7b70876ccc87761b9183dd2662550f7473d66641a23a80eb45712249469fedf32e96b305f29830412f35d80d5b64e6d860fbd0c85e9ae4c152a37308bcb14b25507d5bb02fb617e43bf2be71125f758e22aed776af4974e87c0e7556c1714e0f1475b934b7ef37edb8"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4101, 0x1005) 14m49.517219354s ago: executing program 32 (id=493): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000140)=0x8) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0180000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00b000002000000008000a00", @ANYRES32=r3, @ANYBLOB="42dd5f5275a83b2ca40420a9b5f18ab599bb6e1efe869223ec781e0b7b70876ccc87761b9183dd2662550f7473d66641a23a80eb45712249469fedf32e96b305f29830412f35d80d5b64e6d860fbd0c85e9ae4c152a37308bcb14b25507d5bb02fb617e43bf2be71125f758e22aed776af4974e87c0e7556c1714e0f1475b934b7ef37edb8"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/4101, 0x1005) 6m35.340625931s ago: executing program 0 (id=2533): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x10000001}]}]}, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x40010, 0xffffffffffffffff, 0x77994000) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x3c, 0x10, 0xc09, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x49}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0) 6m31.721441877s ago: executing program 0 (id=2537): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x10000001}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x3, 0x1) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x40010, 0xffffffffffffffff, 0x77994000) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x3c, 0x10, 0xc09, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x49}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0) 6m25.312780268s ago: executing program 0 (id=2542): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 6m24.878530957s ago: executing program 0 (id=2545): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3a00006, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") r0 = open(0x0, 0x8000, 0x14b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000240)) 6m24.55244543s ago: executing program 0 (id=2547): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xf9, 0x7fffffffffffffff, 0xff, 0x800, 0x8, 0xb81, 0x2, 0x5}, &(0x7f0000000180)={0x0, 0x989680}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 6m22.437865102s ago: executing program 0 (id=2552): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8003, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) 6m21.12378649s ago: executing program 33 (id=2552): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8003, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) 20.376534258s ago: executing program 6 (id=3618): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 20.344501767s ago: executing program 6 (id=3619): syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x7ff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x161001) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000040)={0x8aec, 0x4, [0x7]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xd, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 18.505212357s ago: executing program 6 (id=3627): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r4, 0x34, 0x0, @void}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) write$P9_RSTATu(r3, 0x0, 0x6e) 16.943784307s ago: executing program 6 (id=3630): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5f2, &(0x7f0000000000)="$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") clock_settime(0xfffffffb, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4) landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) 10.858112168s ago: executing program 6 (id=3651): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r4, 0x34, 0x0, @void}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) write$P9_RSTATu(r3, 0x0, 0x6e) 9.509363187s ago: executing program 2 (id=3658): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) 5.840638149s ago: executing program 6 (id=3668): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000440)=@chain={'key_or_keyring:', r3}) 5.583076276s ago: executing program 2 (id=3670): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x28, 0x1, 0x20, "b49e1b6225030000000010005a3cf99eecd400000500", 0x16f66bf97}) 5.403748167s ago: executing program 2 (id=3672): syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x7ff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x161001) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000040)={0x8aec, 0x4, [0x7]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xd, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 4.943477644s ago: executing program 2 (id=3675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mount$tmpfs(0x0, 0x0, 0x0, 0x2000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4.652060084s ago: executing program 1 (id=3677): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x2, 0x1, 0xe, 0x80}) 4.240076103s ago: executing program 3 (id=3678): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r4, 0x34, 0x0, @void}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) write$P9_RSTATu(r3, 0x0, 0x6e) 4.188999834s ago: executing program 1 (id=3679): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x0, 0x70bd26, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 3.480209254s ago: executing program 3 (id=3680): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x100102, 0x40) sendfile(r0, r0, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r1, 0x5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.344155678s ago: executing program 5 (id=3681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.452100933s ago: executing program 5 (id=3682): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xfffffffffffffcaa, 0x408c4, 0x0, 0xffffffffffffff10) 2.449427561s ago: executing program 3 (id=3683): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2.389734345s ago: executing program 1 (id=3684): syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x88}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x9}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000000c0)=""/22, 0x16) 2.18448658s ago: executing program 5 (id=3685): unshare(0x22020600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x38, 0x0, 0x4b) 2.043383326s ago: executing program 3 (id=3686): syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x7ff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x161001) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000040)={0x8aec, 0x4, [0x7]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xd, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 1.452657146s ago: executing program 5 (id=3687): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x8f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x5c, r2, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xfff5}}]}, 0x5c}}, 0x0) 864.513766ms ago: executing program 1 (id=3688): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r0, 0x1000000) 770.486244ms ago: executing program 3 (id=3689): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x2, 0x1, 0xe, 0x80}) 614.296936ms ago: executing program 5 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 476.746053ms ago: executing program 1 (id=3691): r0 = creat(&(0x7f0000000480)='./file0\x00', 0x102) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 441.966018ms ago: executing program 2 (id=3692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 272.970673ms ago: executing program 1 (id=3693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 229.75291ms ago: executing program 3 (id=3694): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x0, 0x70bd26, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 229.077666ms ago: executing program 5 (id=3695): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 0s ago: executing program 2 (id=3696): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x6, 0x7, 0xfff7fff7, 0x8, 0x12, "c63bf9e2f100", 0xef3, 0x3}) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): nd [ 1076.310754][T14655] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1076.379481][ T4930] Bluetooth: hci0: command tx timeout [ 1076.782240][T14655] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 1076.896281][T14655] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1077.726641][T15988] loop2: detected capacity change from 0 to 2048 [ 1077.879444][T15988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.107655][ T1867] usb 4-1: USB disconnect, device number 13 [ 1078.163419][ T12] hsr_slave_0: left promiscuous mode [ 1078.169057][ T12] hsr_slave_1: left promiscuous mode [ 1078.170524][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.170543][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.202897][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.202918][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.228126][ T12] veth1_macvtap: left promiscuous mode [ 1078.228165][ T12] veth0_macvtap: left promiscuous mode [ 1078.228286][ T12] veth1_vlan: left promiscuous mode [ 1078.228347][ T12] veth0_vlan: left promiscuous mode [ 1078.661217][ T4930] Bluetooth: hci0: command tx timeout [ 1078.702020][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.886742][ T4930] Bluetooth: hci0: command tx timeout [ 1081.022279][T16024] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 1081.053579][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1081.068404][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1081.146302][ T33] kauditd_printk_skb: 11 callbacks suppressed [ 1081.146320][ T33] audit: type=1326 audit(1790253259.440:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186370][ T33] audit: type=1326 audit(1790253259.440:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43d675e98e code=0x7ffc0000 [ 1081.186423][ T33] audit: type=1326 audit(1790253259.449:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186461][ T33] audit: type=1326 audit(1790253259.449:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186501][ T33] audit: type=1326 audit(1790253259.449:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186537][ T33] audit: type=1326 audit(1790253259.449:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186576][ T33] audit: type=1326 audit(1790253259.449:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186612][ T33] audit: type=1326 audit(1790253259.449:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186649][ T33] audit: type=1326 audit(1790253259.449:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.186683][ T33] audit: type=1326 audit(1790253259.449:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16025 comm="syz.5.2970" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f43d679e159 code=0x7ffc0000 [ 1081.599205][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1082.774730][ T12] IPVS: stop unused estimator thread 0... [ 1083.130285][ T4930] Bluetooth: hci0: command tx timeout [ 1083.519489][T16063] sctp: [Deprecated]: syz.2.2976 (pid 16063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1083.519489][T16063] Use struct sctp_sack_info instead [ 1084.792369][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.792473][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.792635][T15947] bridge_slave_0: entered allmulticast mode [ 1084.794581][T15947] bridge_slave_0: entered promiscuous mode [ 1084.850916][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.855600][T16072] loop2: detected capacity change from 0 to 256 [ 1084.856992][T16072] exfat: Deprecated parameter 'utf8' [ 1084.860429][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.860601][T15947] bridge_slave_1: entered allmulticast mode [ 1084.888367][T15947] bridge_slave_1: entered promiscuous mode [ 1084.917861][T16072] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1084.986777][T15804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.002540][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.003516][T15804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.036267][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.109713][T15804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.248669][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.264428][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.281157][T15804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.297012][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.324856][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.415723][T15947] team0: Port device team_slave_0 added [ 1085.429848][T15947] team0: Port device team_slave_1 added [ 1085.990026][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.990393][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.990442][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.087894][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.087913][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.087940][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.135347][T15947] hsr_slave_0: entered promiscuous mode [ 1086.136361][T15947] hsr_slave_1: entered promiscuous mode [ 1086.208889][T16091] loop2: detected capacity change from 0 to 128 [ 1086.228604][T16091] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1086.249268][T16091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.793401][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 1086.793438][ T33] audit: type=1326 audit(1790253270.596:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1086.793813][ T33] audit: type=1326 audit(1790253270.605:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1086.794132][ T33] audit: type=1326 audit(1790253270.633:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f096b75e98e code=0x7ffc0000 [ 1086.796386][ T33] audit: type=1326 audit(1790253270.651:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1086.947952][ T33] audit: type=1326 audit(1790253270.661:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1086.948058][ T33] audit: type=1326 audit(1790253270.799:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1086.948788][ T33] audit: type=1326 audit(1790253270.799:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1086.950583][ T33] audit: type=1326 audit(1790253270.799:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1086.983022][ T33] audit: type=1326 audit(1790253270.827:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1087.037131][ T33] audit: type=1326 audit(1790253270.873:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.3.2984" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1087.160621][T15804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.305599][T15804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.339046][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.339148][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.346918][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.347028][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.711632][T16110] sctp: [Deprecated]: syz.5.2987 (pid 16110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1087.711632][T16110] Use struct sctp_sack_info instead [ 1088.045571][T16111] loop2: detected capacity change from 0 to 512 [ 1088.207742][T16111] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1088.207769][T16111] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1088.249322][T16111] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1088.259618][T16111] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1088.259723][T16111] System zones: 0-2, 18-18, 34-35 [ 1088.295391][T16111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.356822][T15947] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.394114][T16111] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1088.491214][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.629558][T16118] loop3: detected capacity change from 0 to 256 [ 1088.630674][T16118] exfat: Deprecated parameter 'utf8' [ 1088.657021][T16118] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1089.758854][T15947] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.365203][T15947] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.202403][T15947] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.519963][T16140] loop2: detected capacity change from 0 to 1024 [ 1091.531450][T16140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1091.531475][T16140] ext4: Unknown parameter 'seclabel' [ 1091.546907][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1092.727063][T15947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1092.753454][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.768964][T15947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1092.805466][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1092.825258][T15804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.829494][T15947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1092.874112][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1092.894180][T15947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1092.901050][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1092.970260][T16163] sctp: [Deprecated]: syz.3.2998 (pid 16163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1092.970260][T16163] Use struct sctp_sack_info instead [ 1093.393383][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 1093.393695][ T33] audit: type=1326 audit(1790253282.736:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.393748][ T33] audit: type=1326 audit(1790253282.736:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.451678][T15804] veth0_vlan: entered promiscuous mode [ 1093.466202][ T33] audit: type=1326 audit(1790253282.810:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd07435e98e code=0x7ffc0000 [ 1093.466618][ T33] audit: type=1326 audit(1790253282.810:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.466858][ T33] audit: type=1326 audit(1790253282.810:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.468062][ T33] audit: type=1326 audit(1790253282.810:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.468308][ T33] audit: type=1326 audit(1790253282.810:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.468604][ T33] audit: type=1326 audit(1790253282.810:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.524578][ T33] audit: type=1326 audit(1790253282.856:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.524628][ T33] audit: type=1326 audit(1790253282.856:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.3000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07439e159 code=0x7ffc0000 [ 1093.711173][T15804] veth1_vlan: entered promiscuous mode [ 1093.843171][T15804] veth0_macvtap: entered promiscuous mode [ 1093.865584][T15804] veth1_macvtap: entered promiscuous mode [ 1093.891121][T15947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.072229][T15947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.174500][T14227] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1094.369426][T14227] usb 4-1: Using ep0 maxpacket: 16 [ 1094.481863][ T4930] Bluetooth: hci5: adv larger than maximum supported [ 1094.481889][ T4930] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1094.487408][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.487513][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.520883][T14227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1094.520934][T14227] usb 4-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=6e.00 [ 1094.520979][T14227] usb 4-1: too many configurations: 216, using maximum allowed: 8 [ 1094.525437][T14227] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1094.525477][T14227] usb 4-1: can't read configurations, error -71 [ 1094.527738][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.527876][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.615188][T15804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.644953][T15804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.759340][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.759397][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.759448][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.759485][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.604071][T16192] loop2: detected capacity change from 0 to 2048 [ 1095.667293][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.667317][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.793842][T16192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.890888][T10155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.890910][T10155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.650809][T16217] sctp: [Deprecated]: syz.5.3012 (pid 16217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1096.650809][T16217] Use struct sctp_sack_info instead [ 1097.419149][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.121837][T15947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.287493][T16255] loop2: detected capacity change from 0 to 1024 [ 1099.300248][ T1867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1099.347923][T16255] hfsplus: failed to load extents file [ 1099.465494][ T1867] usb 2-1: Using ep0 maxpacket: 32 [ 1099.469017][ T1867] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1099.474739][ T1867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.474771][ T1867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.474822][ T1867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.486574][ T1867] usb 2-1: config 0 descriptor?? [ 1099.512465][ T1867] hub 2-1:0.0: USB hub found [ 1099.551911][T15947] veth0_vlan: entered promiscuous mode [ 1099.566972][T15947] veth1_vlan: entered promiscuous mode [ 1099.853992][T15947] veth0_macvtap: entered promiscuous mode [ 1099.859628][T15947] veth1_macvtap: entered promiscuous mode [ 1100.016106][T16268] sctp: [Deprecated]: syz.2.3024 (pid 16268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.016106][T16268] Use struct sctp_sack_info instead [ 1100.880944][ T1867] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1100.926189][T15947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.967253][T15947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.025813][ T154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.028257][T10673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.028418][T10673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.028735][T10673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.689709][ T1867] usbhid 2-1:0.0: can't add hid device: -71 [ 1102.689827][ T1867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1102.737534][ T1867] usb 2-1: USB disconnect, device number 15 [ 1104.427155][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.427176][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.302866][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.302888][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.680538][T16291] loop2: detected capacity change from 0 to 256 [ 1105.688803][T16291] exfat: Invalid uid '0x00000000ffffffff' [ 1105.961072][T14227] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1108.318150][T14227] usb 4-1: Using ep0 maxpacket: 32 [ 1108.320654][T14227] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1108.321749][T14227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.321776][T14227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.321810][T14227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.365583][T14227] usb 4-1: config 0 descriptor?? [ 1108.379824][T14227] hub 4-1:0.0: USB hub found [ 1108.405369][T16308] 9p: Bad value for 'wfdno' [ 1108.420691][T16305] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1108.592659][T14227] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1109.228292][T14227] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 1109.340192][T14227] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1109.643393][T13871] usb 4-1: USB disconnect, device number 16 [ 1110.790066][T16337] loop6: detected capacity change from 0 to 2048 [ 1112.157920][T16337] loop6: p1 < > p4 [ 1112.157920][T16337] p4: [ 1112.165661][T16337] loop6: p4 size 722688 extends beyond EOD, truncated [ 1113.350787][T16349] 9p: Bad value for 'rfdno' [ 1113.399309][T15629] udevd[15629]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1113.425207][T15629] udevd[15629]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1114.040475][ T154] bridge_slave_1: left allmulticast mode [ 1114.040503][ T154] bridge_slave_1: left promiscuous mode [ 1114.040806][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.066659][T14655] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1114.087989][ T154] bridge_slave_0: left allmulticast mode [ 1114.088014][ T154] bridge_slave_0: left promiscuous mode [ 1114.088244][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.312834][T14655] usb 2-1: not running at top speed; connect to a high speed hub [ 1114.312871][T14655] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 1114.316083][T14655] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1114.350326][T14655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.350357][T14655] usb 2-1: Product: syz [ 1114.350371][T14655] usb 2-1: Manufacturer: syz [ 1114.350384][T14655] usb 2-1: SerialNumber: syz [ 1114.398816][T14655] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1114.401570][T14655] keyspan 2-1:1.0: unsupported endpoint type 0 [ 1114.430239][T16358] Bluetooth: MGMT ver 1.23 [ 1114.433733][T14655] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1115.091872][T14655] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1115.127604][T14655] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1115.158583][T14655] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1115.184903][T14655] usb 2-1: USB disconnect, device number 16 [ 1115.277854][T14655] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1115.343608][T14655] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1115.511481][T14655] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1115.527210][T14655] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1115.537728][T14655] keyspan 2-1:1.0: device disconnected [ 1115.652522][T16374] loop1: detected capacity change from 0 to 2048 [ 1115.713453][T16374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.925416][T16385] loop6: detected capacity change from 0 to 2048 [ 1117.136699][T16385] loop6: p1 < > p4 [ 1117.136699][T16385] p4: [ 1117.238117][T16385] loop6: p4 size 722688 extends beyond EOD, truncated [ 1117.482192][T15218] udevd[15218]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1117.483042][T16383] udevd[16383]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1117.794127][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.022125][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.601861][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.156298][ T154] bond0 (unregistering): Released all slaves [ 1121.942010][T16429] loop6: detected capacity change from 0 to 256 [ 1121.950797][T16429] exfat: Deprecated parameter 'namecase' [ 1121.950844][T16429] exfat: Deprecated parameter 'namecase' [ 1121.986744][T16429] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1122.188970][T16430] loop2: detected capacity change from 0 to 2048 [ 1122.278068][T16430] loop2: p1 < > p4 [ 1122.278068][T16430] p4: [ 1122.282541][T16430] loop2: p4 size 722688 extends beyond EOD, truncated [ 1123.087418][ T154] hsr_slave_0: left promiscuous mode [ 1123.099872][ T154] hsr_slave_1: left promiscuous mode [ 1123.100908][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.100929][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.121038][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.121069][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.208297][ T154] veth1_macvtap: left promiscuous mode [ 1123.208324][ T154] veth0_macvtap: left promiscuous mode [ 1123.208384][ T154] veth1_vlan: left promiscuous mode [ 1123.208424][ T154] veth0_vlan: left promiscuous mode [ 1123.264286][T16438] loop6: detected capacity change from 0 to 512 [ 1123.265281][T16438] EXT4-fs: Ignoring removed oldalloc option [ 1123.269191][T16438] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1123.334513][T16438] EXT4-fs (loop6): 1 truncate cleaned up [ 1123.345762][T16438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.416300][T16383] udevd[16383]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1123.428313][T15218] udevd[15218]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1123.481073][T16383] udevd[16383]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1123.505398][T15218] udevd[15218]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1123.539447][ T4930] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 1123.657268][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.044903][ T4930] Bluetooth: Wrong link type (-57) [ 1124.044997][ T4930] Bluetooth: hci1: link tx timeout [ 1124.045176][ T4930] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1124.717638][T16455] loop1: detected capacity change from 0 to 128 [ 1124.885118][T16461] loop6: detected capacity change from 0 to 512 [ 1124.896310][T16461] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1124.916029][T16461] EXT4-fs (loop6): 1 truncate cleaned up [ 1125.143725][T16461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.185122][T16466] loop3: detected capacity change from 0 to 2048 [ 1125.411352][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1125.740965][T16466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.741074][T16466] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.786747][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1126.318821][T16459] Bluetooth: hci1: command 0x0406 tx timeout [ 1126.542855][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.646735][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.089296][ T9650] Bluetooth: hci5: command 0x0406 tx timeout [ 1127.197186][T16494] loop3: detected capacity change from 0 to 16 [ 1127.344847][T16488] tipc: Enabling of bearer rejected, failed to enable media [ 1127.366072][T16494] erofs (device loop3): mounted with root inode @ nid 36. [ 1127.402658][T16494] syz.3.3093: attempt to access beyond end of device [ 1127.402658][T16494] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1127.408765][T16494] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1127.408803][T16494] erofs (device loop3): read error -117 @ 0 of nid 89 [ 1127.409016][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 1127.409029][ T33] audit: type=1800 audit(1790253314.126:1471): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3093" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1127.563582][T16501] loop1: detected capacity change from 0 to 512 [ 1127.574322][T16501] EXT4-fs: Ignoring removed i_version option [ 1127.574350][T16501] EXT4-fs: Ignoring removed oldalloc option [ 1127.586424][T16494] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1127.586461][T16494] erofs (device loop3): read error -117 @ 0 of nid 89 [ 1127.675391][T16501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.731491][T16494] syz.3.3093: attempt to access beyond end of device [ 1127.731491][T16494] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1127.793668][T16494] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1127.795877][T16494] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1127.795912][T16494] erofs (device loop3): read error -117 @ 1 of nid 89 [ 1127.796133][T16494] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1127.796158][T16494] erofs (device loop3): read error -117 @ 1 of nid 89 [ 1127.796218][T16494] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1127.796241][T16494] erofs (device loop3): read error -117 @ 1 of nid 89 [ 1127.796397][T16494] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1127.796421][T16494] erofs (device loop3): read error -117 @ 1 of nid 89 [ 1127.796704][T16504] syz.3.3093: attempt to access beyond end of device [ 1127.796704][T16504] loop3: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1127.796810][T16504] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1127.796836][T16504] erofs (device loop3): read error -5 @ 2 of nid 89 [ 1127.797213][T16504] syz.3.3093: attempt to access beyond end of device [ 1127.797213][T16504] loop3: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1127.797422][T16504] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1127.797450][T16504] erofs (device loop3): read error -5 @ 2 of nid 89 [ 1128.110813][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.112529][T16510] loop3: detected capacity change from 0 to 512 [ 1128.123893][T16510] EXT4-fs: Ignoring removed i_version option [ 1128.123920][T16510] EXT4-fs: Ignoring removed oldalloc option [ 1128.204241][T16510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.518383][ T5747] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1128.681352][ T5747] usb 7-1: Using ep0 maxpacket: 16 [ 1128.708154][ T5747] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1128.708558][ T5747] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 1128.759088][ T5747] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1128.859249][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.859639][ T5747] usb 7-1: Product: syz [ 1128.859748][ T5747] usb 7-1: Manufacturer: syz [ 1128.859852][ T5747] usb 7-1: SerialNumber: syz [ 1129.016914][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.729313][ T5747] usb 7-1: USB disconnect, device number 3 [ 1130.767865][T16534] tipc: Enabling of bearer rejected, failed to enable media [ 1131.079465][T16544] loop2: detected capacity change from 0 to 512 [ 1131.085316][T16544] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1131.085337][T16544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1131.085353][T16544] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 1133.065233][T16551] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.0.0), cmd(10) [ 1133.077235][ T33] audit: type=1326 audit(1790253319.358:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.2.3114" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd07439e159 code=0x0 [ 1133.111727][T16565] tipc: Enabling of bearer rejected, failed to enable media [ 1133.431469][T13871] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1133.497814][ T1867] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1133.601634][T13871] usb 4-1: Using ep0 maxpacket: 16 [ 1133.602461][T13871] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 1133.603486][T13871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.603507][T13871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1133.604641][T13871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1133.604662][T13871] usb 4-1: SerialNumber: syz [ 1133.649721][ T1867] usb 7-1: device descriptor read/64, error -71 [ 1133.692489][T13871] usb 4-1: 0:2 : does not exist [ 1133.882610][T13871] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1133.905355][ T1867] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1133.914680][T13871] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1133.914711][T13871] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1133.914727][T13871] usb 4-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 1134.037078][T16584] loop1: detected capacity change from 0 to 256 [ 1134.052354][ T1867] usb 7-1: device descriptor read/64, error -71 [ 1134.112518][T13871] usb 4-1: USB disconnect, device number 17 [ 1134.167200][ T1867] usb usb7-port1: attempt power cycle [ 1134.799242][T16383] udevd[16383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1135.084719][T16599] tipc: Enabling of bearer rejected, failed to enable media [ 1135.119030][ T1867] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1135.141457][T16601] loop1: detected capacity change from 0 to 128 [ 1135.146561][ T1867] usb 7-1: device descriptor read/8, error -71 [ 1135.148899][T16601] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1135.236582][T16607] loop3: detected capacity change from 0 to 128 [ 1135.237302][ T33] audit: type=1800 audit(1790253321.351:1473): pid=16601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3132" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 1135.257805][T16607] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1135.277446][T16607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1135.331839][T16610] futex_wake_op: syz.2.3134 tries to shift op by 144; fix this program [ 1135.338008][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3134'. [ 1135.832846][T16600] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1135.888436][ T1867] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1135.911289][ T1867] usb 7-1: device descriptor read/8, error -71 [ 1136.030404][ T1867] usb usb7-port1: unable to enumerate USB device [ 1136.109318][ T5805] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1136.257061][ T5805] usb 2-1: device descriptor read/64, error -71 [ 1136.355237][T16624] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3140'. [ 1136.355283][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3140'. [ 1136.453784][T14646] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1136.517070][ T5805] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1136.556301][T16633] F2FS-fs: Conflicting test_dummy_encryption options [ 1136.628670][T14646] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1136.629352][T14646] usb 4-1: not running at top speed; connect to a high speed hub [ 1136.629382][T14646] usb 4-1: New USB device found: idVendor=0b05, idProduct=1743, bcdDevice=0.40 [ 1136.630437][T14646] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1136.633325][T14646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.633348][T14646] usb 4-1: Product: syz [ 1136.633361][T14646] usb 4-1: Manufacturer: syz [ 1136.633374][T14646] usb 4-1: SerialNumber: syz [ 1136.639997][T16635] tipc: Enabling of bearer rejected, failed to enable media [ 1136.661994][ T5805] usb 2-1: device descriptor read/64, error -71 [ 1136.705436][T16637] loop6: detected capacity change from 0 to 128 [ 1136.707621][T16637] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1136.710536][T16637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1136.777317][ T5805] usb usb2-port1: attempt power cycle [ 1136.983973][T14646] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1136.984000][T14646] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1136.984237][T14646] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1136.984256][T14646] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1136.988728][T14646] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1137.096267][T14646] usb 4-1: USB disconnect, device number 18 [ 1137.145730][ T5805] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1137.171427][ T5805] usb 2-1: device descriptor read/8, error -71 [ 1137.202523][T16646] udevd[16646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1137.439786][ T5805] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1137.463456][ T5805] usb 2-1: device descriptor read/8, error -71 [ 1137.511256][T16659] F2FS-fs: Conflicting test_dummy_encryption options [ 1137.581807][ T5805] usb usb2-port1: unable to enumerate USB device [ 1137.639261][T16665] loop6: detected capacity change from 0 to 256 [ 1137.747848][T16665] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1138.325900][T16665] exFAT-fs (loop6): error, data valid size is invalid(-9223372036854774758) [ 1138.325929][T16665] exFAT-fs (loop6): Filesystem has been set read-only [ 1138.360147][T16668] loop3: detected capacity change from 0 to 2048 [ 1138.428098][T16668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1138.428209][T16668] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.624363][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.873250][T16694] loop3: detected capacity change from 0 to 512 [ 1139.885858][T16694] EXT4-fs error (device loop3): ext4_get_journal_inode:5927: comm syz.3.3169: inode #2147418112: comm syz.3.3169: iget: illegal inode # [ 1139.885894][T16694] loop3: lost filesystem error report for type 5 error -117 [ 1139.886156][T16694] EXT4-fs (loop3): no journal found [ 1139.886171][T16694] EXT4-fs (loop3): can't get journal size [ 1139.888908][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1139.888933][ C0] EXT4-fs (loop3): initial error at time 1790253325: ext4_get_journal_inode:5927 [ 1139.888956][ C0] EXT4-fs (loop3): last error at time 1790253325: ext4_get_journal_inode:5927 [ 1139.958579][T16694] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1139.960793][T16694] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1139.986957][T16694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.026937][T16699] loop2: detected capacity change from 0 to 16 [ 1140.041961][T16694] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1140.084796][T16694] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.3169: Invalid inode bitmap blk 4 in block_group 0 [ 1140.092436][T16694] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 1140.107298][T16699] erofs (device loop2): mounted with root inode @ nid 36. [ 1140.201286][T16702] loop1: detected capacity change from 0 to 128 [ 1140.451038][T14227] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1140.628076][T14227] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1140.640902][T14227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.640953][T14227] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1140.642203][T14227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1140.642225][T14227] usb 4-1: SerialNumber: syz [ 1140.651082][T14227] cdc_ether 4-1:1.0: missing cdc ether descriptor [ 1140.705435][T16709] loop6: detected capacity change from 0 to 1024 [ 1140.708655][T16709] EXT4-fs: Ignoring removed oldalloc option [ 1140.708677][T16709] EXT4-fs: Ignoring removed oldalloc option [ 1140.753348][T16709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.890411][T16709] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1140.890433][T16709] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 1140.945403][T16709] EXT4-fs (loop6): can't enable nombcache during remount [ 1141.001768][ T5747] usb 4-1: USB disconnect, device number 19 [ 1142.327973][T16723] F2FS-fs: Conflicting test_dummy_encryption options [ 1142.341694][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.768744][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.803743][ T5747] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1143.864103][T16747] batadv_slave_1: entered promiscuous mode [ 1143.874030][T16745] batadv_slave_1: left promiscuous mode [ 1143.977854][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 1143.981051][ T5747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1143.981114][ T5747] usb 4-1: New USB device found: idVendor=05c6, idProduct=920d, bcdDevice=d2.2f [ 1144.016219][ T5747] usb 4-1: config 8 has an invalid interface number: 19 but max is 1 [ 1144.016253][ T5747] usb 4-1: config 8 has an invalid interface number: 84 but max is 1 [ 1144.016272][ T5747] usb 4-1: config 8 has an invalid interface association descriptor of length 2, skipping [ 1144.016287][ T5747] usb 4-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 1144.016306][ T5747] usb 4-1: config 8 has no interface number 1 [ 1144.016321][ T5747] usb 4-1: config 8 has no interface number 2 [ 1144.016377][ T5747] usb 4-1: config 8 interface 0 altsetting 1 endpoint 0xA has an invalid bInterval 128, changing to 11 [ 1144.016401][ T5747] usb 4-1: config 8 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1144.016418][ T5747] usb 4-1: too many endpoints for config 8 interface 19 altsetting 36: 222, using maximum allowed: 30 [ 1144.016467][ T5747] usb 4-1: config 8 interface 19 altsetting 36 has 0 endpoint descriptors, different from the interface descriptor's value: 222 [ 1144.016510][ T5747] usb 4-1: config 8 interface 0 has no altsetting 0 [ 1144.016525][ T5747] usb 4-1: config 8 interface 19 has no altsetting 0 [ 1144.016541][ T5747] usb 4-1: config 8 interface 84 has no altsetting 0 [ 1144.050107][T16754] netlink: 'syz.5.3189': attribute type 1 has an invalid length. [ 1144.144210][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.144239][ T5747] usb 4-1: Product: syz [ 1144.144252][ T5747] usb 4-1: Manufacturer: syz [ 1144.144265][ T5747] usb 4-1: SerialNumber: syz [ 1144.211228][T16758] loop6: detected capacity change from 0 to 1024 [ 1144.219552][T16758] EXT4-fs: Ignoring removed bh option [ 1144.228580][T16758] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1144.286169][T16758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.451351][ T5747] usb 4-1: selecting invalid altsetting 0 [ 1144.451376][ T5747] usb 4-1: Could not set interface, error -22 [ 1144.478651][ T5747] usb 4-1: USB disconnect, device number 20 [ 1144.528714][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.650205][T16778] loop6: detected capacity change from 0 to 1024 [ 1145.899009][T16796] Bluetooth: MGMT ver 1.23 [ 1146.064206][T16803] loop2: detected capacity change from 0 to 2048 [ 1147.630710][T16803] Dev loop2: unable to read RDB block 8 [ 1147.630914][T16803] loop2: unable to read partition table [ 1147.631121][T16803] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1149.629219][T16837] loop2: detected capacity change from 0 to 16 [ 1149.679276][T16837] erofs (device loop2): invalid ishare xattr prefix id 0 [ 1151.392972][T16863] loop2: detected capacity change from 0 to 128 [ 1152.293445][T14646] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1152.400236][T16869] loop2: detected capacity change from 0 to 128 [ 1152.450050][T14646] usb 4-1: Using ep0 maxpacket: 32 [ 1152.451182][T14646] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1152.452376][T14646] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1152.452399][T14646] usb 4-1: config 0 has no interface number 0 [ 1152.459092][T16869] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1152.484733][T16869] ext4 filesystem being mounted at /590/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.509758][T14646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.509783][T14646] usb 4-1: Product: syz [ 1152.509796][T14646] usb 4-1: Manufacturer: syz [ 1152.509809][T14646] usb 4-1: SerialNumber: syz [ 1152.513189][T14646] usb 4-1: config 0 descriptor?? [ 1152.513854][T16869] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 1152.590273][ T5628] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1152.782405][T16877] loop1: detected capacity change from 0 to 128 [ 1152.807953][T14646] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1152.828032][T16877] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1152.828061][T16877] FAT-fs (loop1): data area starts beyond volume (33 > 0) [ 1152.828075][T16877] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1152.834464][T14646] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1152.875594][T14646] usb 4-1: USB disconnect, device number 21 [ 1153.480958][T16890] loop2: detected capacity change from 0 to 512 [ 1153.500206][T16890] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1153.636531][T16383] udevd[16383]: incorrect ext4 checksum on /dev/loop2 [ 1153.751344][T16893] loop3: detected capacity change from 0 to 128 [ 1154.778573][ T5747] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1154.952124][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 1154.953045][ T5747] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1154.963240][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.963270][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.963306][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.970183][ T5747] usb 3-1: config 0 descriptor?? [ 1154.978536][ T5747] hub 3-1:0.0: USB hub found [ 1155.206255][ T5747] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1156.025897][ T5747] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 1156.049618][ T5747] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1156.099283][T16912] loop3: detected capacity change from 0 to 1024 [ 1156.406559][T14646] usb 3-1: USB disconnect, device number 27 [ 1156.513592][T16921] loop3: detected capacity change from 0 to 128 [ 1156.518492][T16921] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1156.543396][T16921] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1156.544987][T16921] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.781956][T16929] loop6: detected capacity change from 0 to 512 [ 1156.792238][T16929] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1157.534060][T16383] udevd[16383]: incorrect ext4 checksum on /dev/loop6 [ 1157.673170][T15163] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1158.004615][T16942] loop2: detected capacity change from 0 to 1024 [ 1158.260305][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1159.479244][T16942] hfsplus: failed to load extents file [ 1159.802963][T16955] loop2: detected capacity change from 0 to 512 [ 1159.878755][T16960] loop6: detected capacity change from 0 to 512 [ 1159.912218][T16955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.912337][T16955] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.961231][T16961] loop3: detected capacity change from 0 to 512 [ 1159.965914][T16961] EXT4-fs: Ignoring removed oldalloc option [ 1160.000029][T16960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.000164][T16960] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.015120][T16961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.968442][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.971108][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.089742][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.199959][T16978] loop1: detected capacity change from 0 to 256 [ 1163.400829][T16978] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1163.646092][T16981] loop3: detected capacity change from 0 to 512 [ 1163.659856][T16981] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1164.012487][ T991] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1164.061169][T16990] loop6: detected capacity change from 0 to 1024 [ 1164.085684][ T33] audit: type=1800 audit(1790253347.971:1474): pid=16978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3274" name="file1" dev="loop1" ino=16 res=0 errno=0 [ 1164.135412][T16990] hfsplus: failed to load catalog file [ 1164.186857][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 1164.190260][ T991] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1164.191696][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.191725][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.191759][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.195737][ T991] usb 3-1: config 0 descriptor?? [ 1164.211064][ T991] hub 3-1:0.0: USB hub found [ 1164.418831][ T991] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1164.766639][T16999] loop1: detected capacity change from 0 to 2048 [ 1164.787551][T16999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.917606][ T991] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 1164.954706][ T991] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1165.242029][T14646] usb 3-1: USB disconnect, device number 28 [ 1166.332754][ T9650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1166.337120][ T9650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1166.338869][ T9650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1166.351894][ T9650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1166.371390][ T9650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1167.092146][T17040] loop3: detected capacity change from 0 to 512 [ 1167.101154][T17040] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1167.147907][T15629] udevd[15629]: incorrect ext4 checksum on /dev/loop3 [ 1168.148123][T17043] usb usb1: check_ctrlrecip: process 17043 (syz.3.3291) requesting ep 01 but needs 81 [ 1168.148154][T17043] usb usb1: usbfs: process 17043 (syz.3.3291) did not claim interface 0 before use [ 1168.263262][ T33] audit: type=1326 audit(1790253351.828:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.263382][ T33] audit: type=1326 audit(1790253351.828:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.328424][ T33] audit: type=1326 audit(1790253351.837:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f096b75e98e code=0x7ffc0000 [ 1168.328478][ T33] audit: type=1326 audit(1790253351.837:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.328517][ T33] audit: type=1326 audit(1790253351.837:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.328555][ T33] audit: type=1326 audit(1790253351.837:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.328593][ T33] audit: type=1326 audit(1790253351.837:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.328630][ T33] audit: type=1326 audit(1790253351.837:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.328667][ T33] audit: type=1326 audit(1790253351.837:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.3.3292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f096b79e159 code=0x7ffc0000 [ 1168.705484][ T9650] Bluetooth: hci2: command tx timeout [ 1169.200238][T17057] loop6: detected capacity change from 0 to 16 [ 1169.202109][T17057] erofs (device loop6): mounted with root inode @ nid 36. [ 1170.796366][T17082] loop6: detected capacity change from 0 to 512 [ 1170.817737][T17079] loop3: detected capacity change from 0 to 512 [ 1170.960238][ T9650] Bluetooth: hci2: command tx timeout [ 1171.224765][T17079] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1171.233782][T16383] udevd[16383]: incorrect ext4 checksum on /dev/loop3 [ 1172.077894][T17104] pimreg: entered allmulticast mode [ 1173.605458][ T9650] Bluetooth: hci2: command tx timeout [ 1175.815105][ T9650] Bluetooth: hci2: command tx timeout [ 1176.427080][T17033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.429008][T17033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.456809][T17033] bridge_slave_0: entered allmulticast mode [ 1176.567445][T17033] bridge_slave_0: entered promiscuous mode [ 1176.686799][T17033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.689509][T17033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.711057][T17033] bridge_slave_1: entered allmulticast mode [ 1176.767254][T17033] bridge_slave_1: entered promiscuous mode [ 1176.837291][T17126] loop6: detected capacity change from 0 to 1024 [ 1176.936744][T17126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.936852][T17126] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.056342][T17033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.077469][T17033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.128629][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1177.129219][T17137] loop3: detected capacity change from 0 to 512 [ 1177.138240][T17137] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1177.204914][T16383] udevd[16383]: incorrect ext4 checksum on /dev/loop3 [ 1177.406086][T17033] team0: Port device team_slave_0 added [ 1177.409555][T17033] team0: Port device team_slave_1 added [ 1177.468527][T17033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.468545][T17033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.468567][T17033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.470785][T17033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.470798][T17033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.470822][T17033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.090690][ T5805] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1178.142835][T17033] hsr_slave_0: entered promiscuous mode [ 1178.160134][T17033] hsr_slave_1: entered promiscuous mode [ 1178.176871][T17033] debugfs: 'hsr0' already exists in 'hsr' [ 1178.176893][T17033] Cannot create hsr debugfs directory [ 1178.217629][T17158] loop3: detected capacity change from 0 to 128 [ 1178.233667][T17158] vfat: Unknown parameter 'ÿÿ' [ 1178.269986][ T5805] usb 7-1: not running at top speed; connect to a high speed hub [ 1178.270024][ T5805] usb 7-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 1178.274492][ T5805] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.274544][ T5805] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1178.292811][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.292838][ T5805] usb 7-1: Product: syz [ 1178.292851][ T5805] usb 7-1: Manufacturer: syz [ 1178.292864][ T5805] usb 7-1: SerialNumber: syz [ 1178.396382][T17158] cgroup: Unknown subsys name 'cpuset' [ 1178.425187][T17160] loop1: detected capacity change from 0 to 1024 [ 1178.447457][T17160] hfsplus: failed to load extents file [ 1178.457227][ T5805] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 1178.467362][ T5805] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1178.467441][ T5805] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1178.492564][ T5805] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1178.499266][ T5805] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1178.531709][ T5805] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1178.552180][ T5805] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1178.584222][T17163] loop3: detected capacity change from 0 to 128 [ 1178.585067][T17163] vfat: Unknown parameter 'rootcontext' [ 1178.651506][ T1867] usb 7-1: USB disconnect, device number 8 [ 1178.692823][ T1867] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1178.726701][ T1867] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1178.763225][ T1867] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1178.814280][ T1867] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1178.829618][ T1867] keyspan 7-1:1.0: device disconnected [ 1178.903655][ T5805] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1179.031534][T17033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.067183][ T5805] usb 2-1: not running at top speed; connect to a high speed hub [ 1179.067206][ T5805] usb 2-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 1179.068176][ T5805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.068215][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.075640][ T5805] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 1179.243277][T17033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.362977][T17172] loop6: detected capacity change from 0 to 256 [ 1179.368296][T17172] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1179.368315][T17172] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1179.400254][T17172] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1179.400956][T17172] exFAT-fs (loop6): failed to load alloc-bitmap [ 1179.400972][T17172] exFAT-fs (loop6): failed to recognize exfat type [ 1179.516451][ T5805] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1179.562526][T17033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.703374][T17033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.894022][ T5805] videodev: could not get a free minor [ 1179.894044][ T5805] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23). [ 1180.390060][T17033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1180.394556][T17033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.395799][T17033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1180.430399][T17033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1180.450557][T17033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1180.469045][T17033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1180.470371][T17033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1180.474154][T17033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1180.636333][T17033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.676157][T17033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.695932][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.696045][T10673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.728075][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.728184][T10673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.893606][ T991] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1180.927723][T13871] usb 2-1: USB disconnect, device number 21 [ 1180.960821][ T5747] logitech-hidpp-device 0003:046D:C082.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1181.172769][ T991] usb 7-1: not running at top speed; connect to a high speed hub [ 1181.172805][ T991] usb 7-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 1181.173853][ T991] usb 7-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1181.173879][ T991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.173895][ T991] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1181.173950][ T991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.339339][T17193] fido_id[17193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1181.393756][ T991] usb 7-1: config 0 descriptor?? [ 1181.430522][ T991] uvcvideo 7-1:0.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1181.430611][ T991] uvcvideo 7-1:0.0: Found UVC 9.00 device (046d:0825) [ 1181.430669][ T991] uvcvideo 7-1:0.1: No supported video formats found. [ 1181.430682][ T991] uvcvideo 7-1:0.1: Failed to initialize the device (-22). [ 1181.516626][ T991] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -22 [ 1181.722985][T17212] loop3: detected capacity change from 0 to 512 [ 1185.152376][T17033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.162351][ T991] usb 7-1: USB disconnect, device number 9 [ 1185.210092][T17217] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1185.608251][T17033] veth0_vlan: entered promiscuous mode [ 1185.977396][T17223] loop6: detected capacity change from 0 to 128 [ 1185.988025][T17033] veth1_vlan: entered promiscuous mode [ 1186.028833][T17223] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1186.067775][T17223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1186.165503][T17033] veth0_macvtap: entered promiscuous mode [ 1186.195951][T17033] veth1_macvtap: entered promiscuous mode [ 1186.234542][T17033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.263739][T17033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.371905][T17231] loop3: detected capacity change from 0 to 512 [ 1186.391421][T17231] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1186.407112][T10155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.436896][ T5976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.437970][ T5976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.477580][T17233] loop1: detected capacity change from 0 to 512 [ 1186.499634][T16383] udevd[16383]: incorrect ext4 checksum on /dev/loop3 [ 1186.650705][T17233] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1186.650738][T17233] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1186.650752][T17233] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3339: Corrupt directory, running e2fsck is recommended [ 1186.755397][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.755419][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.905091][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.905113][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.929274][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.424902][T17233] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1187.425015][T17233] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.3339: corrupted in-inode xattr: e_name out of bounds [ 1187.425040][T17233] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1187.435805][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1187.435833][ C0] EXT4-fs (loop1): initial error at time 1790253369: ext4_iget_extra_inode:5210: inode 15 [ 1187.435864][ C0] EXT4-fs (loop1): last error at time 1790253369: ext4_iget_extra_inode:5210: inode 15 [ 1187.501263][T17233] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.3339: couldn't read orphan inode 15 (err -117) [ 1187.501297][T17233] loop1: lost filesystem error report for type 5 error -117 [ 1187.542326][T17233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.601554][T17233] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1187.601587][T17233] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1187.601603][T17233] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3339: Corrupt directory, running e2fsck is recommended [ 1187.678465][T17233] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1187.678499][T17233] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1187.678515][T17233] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3339: Corrupt directory, running e2fsck is recommended [ 1187.745361][T17247] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1187.745394][T17247] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1187.745411][T17247] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3339: Corrupt directory, running e2fsck is recommended [ 1187.837519][T17233] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1187.876498][T17250] loop6: detected capacity change from 0 to 512 [ 1191.328762][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.484286][T17260] loop2: detected capacity change from 0 to 512 [ 1191.494321][T17260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1191.558419][T17260] EXT4-fs (loop2): 1 truncate cleaned up [ 1191.574806][T17260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.616980][T17265] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1191.815997][T17270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1192.588144][T16459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1192.605763][T16459] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1192.621070][T16459] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1192.646872][T16459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1192.653644][T16459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1192.873770][T17033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.022139][T17283] loop2: detected capacity change from 0 to 4096 [ 1193.033401][T17283] EXT4-fs: Ignoring removed orlov option [ 1193.042332][T17283] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1193.042908][T17283] EXT4-fs (loop2): stripe (182) is not aligned with cluster size (16), stripe is disabled [ 1193.118977][T17283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.121342][T15771] tipc: Resetting bearer [ 1193.239771][T17283] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1193.281902][T15771] tipc: Disabling bearer [ 1194.483194][T16459] Bluetooth: hci3: command 0x0406 tx timeout [ 1194.672173][T17033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.896451][ T4930] Bluetooth: hci4: command tx timeout [ 1195.174990][T17310] loop6: detected capacity change from 0 to 512 [ 1195.192595][T17310] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1195.235052][T17310] EXT4-fs (loop6): 1 truncate cleaned up [ 1195.250447][T17310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.301167][T17312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1195.399356][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.917053][T17319] 9p: Bad value for 'rfdno' [ 1196.325447][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.327826][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.448154][T17327] loop6: detected capacity change from 0 to 128 [ 1196.457054][T17327] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1197.661101][T16459] Bluetooth: hci4: command tx timeout [ 1197.739024][T17327] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1197.772083][T17327] ext2 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.805437][T17334] loop2: detected capacity change from 0 to 128 [ 1197.830936][T17334] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1197.880627][T17334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1198.135066][T17338] loop2: detected capacity change from 0 to 2048 [ 1198.152331][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.384501][T17342] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1198.440335][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.594788][T17346] loop3: detected capacity change from 0 to 8 [ 1198.719388][T17338] loop2: unable to read partition table [ 1198.719575][T17338] loop2: partition table beyond EOD, truncated [ 1198.719608][T17338] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1198.722664][T17346] SQUASHFS error: Failed to read block 0x26067d: -5 [ 1198.722683][T17346] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 1198.722695][T17346] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1198.995349][T17351] loop3: detected capacity change from 0 to 128 [ 1199.009650][T17351] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1199.081842][T17351] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1199.126195][T17351] ext2 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.131913][T17355] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1199.193652][T15947] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1199.832645][ T4930] Bluetooth: hci4: command tx timeout [ 1200.062885][T17361] loop6: detected capacity change from 0 to 512 [ 1200.092733][T17361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.092855][T17361] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.256189][ T13] bridge_slave_1: left allmulticast mode [ 1200.256217][ T13] bridge_slave_1: left promiscuous mode [ 1200.256906][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.271317][T17367] 9p: Bad value for 'wfdno' [ 1200.364419][T15163] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1200.486317][ T13] bridge_slave_0: left allmulticast mode [ 1200.486344][ T13] bridge_slave_0: left promiscuous mode [ 1200.489821][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.509398][T17361] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.3372: corrupted xattr block 33: bad e_name length [ 1201.845948][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 1201.845967][ T33] audit: type=1800 audit(1790253382.803:1488): pid=17361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3372" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1201.933499][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.099783][ T4930] Bluetooth: hci4: command tx timeout [ 1202.299856][T17391] loop6: detected capacity change from 0 to 512 [ 1206.111629][T17398] loop6: detected capacity change from 0 to 2048 [ 1206.150505][T17398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.251816][ T33] audit: type=1800 audit(1790253386.881:1489): pid=17398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3380" name=D04858 dev="loop6" ino=18 res=0 errno=0 [ 1206.285606][T17403] loop3: detected capacity change from 0 to 1024 [ 1206.313535][T17403] hfsplus: failed to load extents file [ 1206.489663][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.614380][T17409] FAULT_INJECTION: forcing a failure. [ 1206.614380][T17409] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.614411][T17409] CPU: 0 UID: 0 PID: 17409 Comm: syz.1.3383 Not tainted syzkaller #0 PREEMPT(full) [ 1206.614434][T17409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1206.614446][T17409] Call Trace: [ 1206.614454][T17409] [ 1206.614462][T17409] dump_stack_lvl+0xe8/0x150 [ 1206.614526][T17409] should_fail_ex+0x3eb/0x540 [ 1206.614581][T17409] should_failslab+0xa8/0x100 [ 1206.614629][T17409] ? mas_alloc_nodes+0x291/0x350 [ 1206.614678][T17409] kmem_cache_alloc_noprof+0x9c/0x600 [ 1206.614704][T17409] ? mas_alloc_nodes+0x291/0x350 [ 1206.614730][T17409] mas_alloc_nodes+0x291/0x350 [ 1206.614752][T17409] mas_preallocate+0x42a/0x840 [ 1206.614770][T17409] ? rcu_is_watching+0x16/0xb0 [ 1206.614813][T17409] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1206.614834][T17409] ? __pfx_mas_preallocate+0x10/0x10 [ 1206.614867][T17409] ? __mas_set_range+0x11a/0x3a0 [ 1206.614895][T17409] __split_vma+0x2fb/0xa70 [ 1206.614926][T17409] ? mas_next_slot+0xc91/0xd70 [ 1206.614948][T17409] ? __pfx___split_vma+0x10/0x10 [ 1206.614981][T17409] ? mas_find+0x6d6/0xcb0 [ 1206.615099][T17409] vms_gather_munmap_vmas+0x4e3/0x1370 [ 1206.615139][T17409] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1206.615169][T17409] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1206.615213][T17409] do_vmi_align_munmap+0x2b4/0x4b0 [ 1206.615257][T17409] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1206.615301][T17409] ? mas_walk+0x37e/0x490 [ 1206.615322][T17409] ? mas_find+0x642/0xcb0 [ 1206.615345][T17409] do_vmi_munmap+0x252/0x2d0 [ 1206.615375][T17409] __vm_munmap+0x241/0x3e0 [ 1206.615402][T17409] ? __pfx___vm_munmap+0x10/0x10 [ 1206.615423][T17409] ? vm_mmap_pgoff+0x35a/0x4e0 [ 1206.615462][T17409] ? do_user_addr_fault+0xd3f/0x1480 [ 1206.615503][T17409] __x64_sys_munmap+0x60/0x70 [ 1206.615532][T17409] do_syscall_64+0x166/0x520 [ 1206.615559][T17409] ? trace_irq_disable+0x3b/0x140 [ 1206.615584][T17409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.615616][T17409] ? clear_bhb_loop+0x70/0xc0 [ 1206.615639][T17409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.615658][T17409] RIP: 0033:0x7fcc39b9df87 [ 1206.615676][T17409] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.615693][T17409] RSP: 002b:00007fcc3aaa7d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1206.615714][T17409] RAX: ffffffffffffffda RBX: 00007fcc30000000 RCX: 00007fcc39b9df87 [ 1206.615727][T17409] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 00007fcc2fc00000 [ 1206.615740][T17409] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1206.615752][T17409] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1206.615764][T17409] R13: 0000000000001000 R14: 00007fcc34000000 R15: 0000000000400000 [ 1206.615795][T17409] [ 1206.933179][T17411] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1206.964826][ T13] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1206.992739][ T13] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1207.022563][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.069494][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.144313][ T13] bond0 (unregistering): Released all slaves [ 1207.174993][ T13] bond1 (unregistering): Released all slaves [ 1207.190990][T17417] loop2: detected capacity change from 0 to 512 [ 1207.861298][T17417] EXT4-fs error (device loop2): __ext4_iget:5592: inode #11: block 1: comm syz.2.3376: invalid block [ 1207.861321][T17417] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1207.863324][T17417] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3376: couldn't read orphan inode 11 (err -117) [ 1207.863353][T17417] loop2: lost filesystem error report for type 5 error -117 [ 1207.872680][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 1207.872704][ C1] EXT4-fs (loop2): initial error at time 1790253388: __ext4_iget:5592: inode 11: block 1 [ 1207.872738][ C1] EXT4-fs (loop2): last error at time 1790253388: ext4_orphan_get:1408 [ 1207.891908][ T13] bond2 (unregistering): Released all slaves [ 1207.896748][T17417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.231364][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1209.231695][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1209.241717][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1209.272081][T17033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.439106][ T13] tipc: Left network mode [ 1209.495803][T17431] loop2: detected capacity change from 0 to 1024 [ 1209.516170][T17431] hfsplus: failed to load extents file [ 1209.538714][T17271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.538832][T17271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.539054][T17271] bridge_slave_0: entered allmulticast mode [ 1209.553752][T17271] bridge_slave_0: entered promiscuous mode [ 1209.600723][T17271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.600838][T17271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.601006][T17271] bridge_slave_1: entered allmulticast mode [ 1209.624136][T17271] bridge_slave_1: entered promiscuous mode [ 1210.601783][ T13] hsr_slave_0: left promiscuous mode [ 1210.603608][ T13] hsr_slave_1: left promiscuous mode [ 1210.604614][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.604634][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.653059][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.653083][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.743859][ T13] veth1_macvtap: left promiscuous mode [ 1210.743899][ T13] veth0_macvtap: left promiscuous mode [ 1210.744102][ T13] veth1_vlan: left promiscuous mode [ 1210.744171][ T13] veth0_vlan: left promiscuous mode [ 1211.084661][T17457] loop3: detected capacity change from 0 to 512 [ 1211.097806][T17457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1211.143025][T17457] EXT4-fs (loop3): 1 truncate cleaned up [ 1211.171824][T17457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.405153][ T4930] Bluetooth: hci0: command 0x0406 tx timeout [ 1212.760237][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.094568][T17479] loop3: detected capacity change from 0 to 4096 [ 1213.098066][T17479] ext4: Unknown parameter 'euid>00000000000000000000' [ 1213.147334][T17481] loop6: detected capacity change from 0 to 128 [ 1213.186346][T17481] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1213.215581][T17481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1213.545411][T17485] loop3: detected capacity change from 0 to 1024 [ 1213.602367][T17485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.602486][T17485] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.683659][T17491] loop2: detected capacity change from 0 to 256 [ 1213.684788][T17491] exfat: Deprecated parameter 'utf8' [ 1213.712373][T17491] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1213.713884][T17485] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.3400: bg 0: block 112: padding at end of block bitmap is not set [ 1213.836987][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1213.841832][T17485] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 17 with error 28 [ 1213.841868][T17485] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1213.841868][T17485] [ 1213.841883][T17485] EXT4-fs (loop3): Total free blocks count 0 [ 1213.841896][T17485] EXT4-fs (loop3): Free/Dirty block details [ 1213.841943][T17485] EXT4-fs (loop3): free_blocks=0 [ 1213.841975][T17485] EXT4-fs (loop3): dirty_blocks=48 [ 1213.841986][T17485] EXT4-fs (loop3): Block reservation details [ 1213.841997][T17485] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 1213.925220][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1214.025024][ T160] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28 [ 1214.498963][T17271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.502452][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1214.538377][T17271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.911329][T17271] team0: Port device team_slave_0 added [ 1215.933982][T17271] team0: Port device team_slave_1 added [ 1216.095641][T17271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.095659][T17271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.095682][T17271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.102685][T17271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.102701][T17271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.102724][T17271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.331501][T17271] hsr_slave_0: entered promiscuous mode [ 1216.332210][T17271] hsr_slave_1: entered promiscuous mode [ 1216.360055][T17271] debugfs: 'hsr0' already exists in 'hsr' [ 1216.360077][T17271] Cannot create hsr debugfs directory [ 1216.692524][ T13] IPVS: stop unused estimator thread 0... [ 1217.086759][T14227] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1217.203276][T17533] syzkaller0: entered promiscuous mode [ 1217.203304][T17533] syzkaller0: entered allmulticast mode [ 1217.263019][T14227] usb 3-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1217.264176][T14227] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1217.264200][T14227] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1217.264227][T14227] usb 3-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 1217.264244][T14227] usb 3-1: config 220 has no interface number 2 [ 1217.264302][T14227] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1217.264327][T14227] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1217.264343][T14227] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1217.264359][T14227] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1217.272874][T14227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.272900][T14227] usb 3-1: Product: syz [ 1217.272913][T14227] usb 3-1: Manufacturer: syz [ 1217.272924][T14227] usb 3-1: SerialNumber: syz [ 1217.423570][T17542] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1217.459431][T17542] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1217.645185][T14227] usb 3-1: selecting invalid altsetting 0 [ 1217.673353][T14227] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1217.673389][T14227] uvcvideo 3-1:220.0: No valid video chain found. [ 1217.741868][T14227] usb 3-1: selecting invalid altsetting 0 [ 1217.741901][T14227] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1217.744584][T14227] usb 3-1: USB disconnect, device number 29 [ 1217.927441][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1217.993242][T17551] loop3: detected capacity change from 0 to 512 [ 1219.408837][T17551] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 1219.408975][T17551] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1219.409011][T17551] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3415: Failed to acquire dquot type 1 [ 1219.409031][T17551] loop3: lost filesystem error report for type 5 error -117 [ 1219.414924][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1219.414953][ C0] EXT4-fs (loop3): last error at time 1790253399: ext4_acquire_dquot:7069 [ 1219.475631][T17562] loop2: detected capacity change from 0 to 256 [ 1219.476738][T17562] exfat: Deprecated parameter 'utf8' [ 1219.534658][T17551] EXT4-fs (loop3): 1 truncate cleaned up [ 1219.536233][T17562] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1219.538435][T17551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.538549][T17551] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.784426][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.992044][T17567] loop3: detected capacity change from 0 to 512 [ 1220.011377][T17567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1220.049194][T17567] EXT4-fs (loop3): 1 truncate cleaned up [ 1220.050175][T17567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1220.162184][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.472455][T17574] loop3: detected capacity change from 0 to 512 [ 1220.473788][T17574] ext4: Unknown parameter 'smackfstransmute' [ 1222.904808][T17594] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 1224.725745][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1226.546593][T17613] loop3: detected capacity change from 0 to 128 [ 1227.369902][T14227] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1227.565438][T14227] usb 4-1: Using ep0 maxpacket: 16 [ 1227.592498][T14227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1227.592547][T14227] usb 4-1: New USB device found: idVendor=1477, idProduct=1026, bcdDevice=0.40 [ 1227.593414][T14227] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1227.593446][T14227] usb 4-1: can't read configurations, error -71 [ 1228.401112][T17604] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1231.568583][T17643] loop3: detected capacity change from 0 to 256 [ 1231.627774][T17643] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1231.628073][T17643] exFAT-fs (loop3): failed to load alloc-bitmap [ 1231.628086][T17643] exFAT-fs (loop3): failed to recognize exfat type [ 1232.210449][T17658] loop2: detected capacity change from 0 to 512 [ 1232.221227][T17658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1232.235471][T17658] EXT4-fs (loop2): 1 truncate cleaned up [ 1232.242950][T17660] loop6: detected capacity change from 0 to 128 [ 1232.265906][T17658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.300782][T17660] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1232.322540][T17660] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.354969][T17033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.499759][T17655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1233.724392][T15947] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1233.963790][T17674] loop6: detected capacity change from 0 to 1024 [ 1234.053082][T17271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1234.071054][T17271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1234.101532][T17271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1234.123805][T17271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1234.124792][T17271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1234.152710][T17271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1234.164440][T17271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1234.176229][T17271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1234.344023][T17271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.445207][T17271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.484024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.484151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.522174][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.522279][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.703728][T17674] hfsplus: can't free extent: start 2889, count 1 [ 1235.775208][T17708] loop6: detected capacity change from 0 to 512 [ 1235.789092][T17708] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1237.055685][T17708] EXT4-fs (loop6): 1 truncate cleaned up [ 1237.101560][T17708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.319134][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.824350][T17733] loop1: detected capacity change from 0 to 16 [ 1237.853458][T17733] erofs (device loop1): mounted with root inode @ nid 36. [ 1237.866364][T17733] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 1237.866392][T17733] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 1237.866409][T17733] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 1237.866433][T17733] erofs (device loop1): read error -117 @ 0 of nid 89 [ 1237.887732][ T33] audit: type=1800 audit(1790253416.048:1490): pid=17733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3465" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1238.279878][T17271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.131869][T17761] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1239.953413][T17768] loop1: detected capacity change from 0 to 512 [ 1239.976716][T17768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1240.006346][T17768] EXT4-fs (loop1): 1 truncate cleaned up [ 1240.013783][T17768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.245262][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.336967][T17779] loop6: detected capacity change from 0 to 256 [ 1240.342452][T17779] vfat: Unknown parameter '0+d>’ô|þº1ÂÑ26"¬Û' [ 1240.426277][T17271] veth0_vlan: entered promiscuous mode [ 1240.453112][T17271] veth1_vlan: entered promiscuous mode [ 1240.619722][T17271] veth0_macvtap: entered promiscuous mode [ 1240.642624][T17271] veth1_macvtap: entered promiscuous mode [ 1240.772916][T17791] FAULT_INJECTION: forcing a failure. [ 1240.772916][T17791] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.772947][T17791] CPU: 0 UID: 0 PID: 17791 Comm: syz.6.3478 Not tainted syzkaller #0 PREEMPT(full) [ 1240.772969][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1240.772981][T17791] Call Trace: [ 1240.772989][T17791] [ 1240.772997][T17791] dump_stack_lvl+0xe8/0x150 [ 1240.773032][T17791] should_fail_ex+0x3eb/0x540 [ 1240.773065][T17791] should_failslab+0xa8/0x100 [ 1240.773093][T17791] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1240.773115][T17791] ? __d_alloc+0x37/0x6f0 [ 1240.773158][T17791] ? __d_alloc+0x37/0x6f0 [ 1240.773185][T17791] __d_alloc+0x37/0x6f0 [ 1240.773211][T17791] d_alloc_parallel+0xde/0x16b0 [ 1240.773237][T17791] ? lock_acquire+0x115/0x350 [ 1240.773275][T17791] ? __d_lookup+0x66/0x790 [ 1240.773299][T17791] ? __d_lookup+0x66/0x790 [ 1240.773320][T17791] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1240.773343][T17791] ? d_lookup+0x1f/0xa0 [ 1240.773366][T17791] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1240.773395][T17791] lookup_open+0x2c7/0x1a40 [ 1240.773455][T17791] path_openat+0x673/0x1da0 [ 1240.773499][T17791] do_file_open+0x23e/0x4a0 [ 1240.773528][T17791] ? __pfx_do_file_open+0x10/0x10 [ 1240.773592][T17791] ? __pfx_kfree_link+0x10/0x10 [ 1240.773624][T17791] ? _raw_spin_unlock+0x28/0x50 [ 1240.773659][T17791] ? alloc_fd+0x6af/0x760 [ 1240.773689][T17791] do_sys_openat2+0x115/0x200 [ 1240.773717][T17791] ? __se_sys_futex+0x3a8/0x450 [ 1240.773745][T17791] ? __pfx_do_sys_openat2+0x10/0x10 [ 1240.773777][T17791] ? rcu_is_watching+0x16/0xb0 [ 1240.773809][T17791] __x64_sys_openat+0x138/0x170 [ 1240.773841][T17791] do_syscall_64+0x166/0x520 [ 1240.773860][T17791] ? trace_irq_disable+0x3b/0x140 [ 1240.773883][T17791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.773902][T17791] ? clear_bhb_loop+0x70/0xc0 [ 1240.773925][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.773943][T17791] RIP: 0033:0x7fd80d55e98e [ 1240.773962][T17791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1240.773978][T17791] RSP: 002b:00007fd80e405ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1240.773998][T17791] RAX: ffffffffffffffda RBX: 00007fd80e4066c0 RCX: 00007fd80d55e98e [ 1240.774012][T17791] RDX: 0000000000000002 RSI: 00007fd80e405f90 RDI: ffffffffffffff9c [ 1240.774025][T17791] RBP: 00007fd80d63506b R08: 0000000000000000 R09: 0000000000000000 [ 1240.774037][T17791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.774047][T17791] R13: 00007fd80d826038 R14: 00007fd80d825fa0 R15: 00007ffc04677d68 [ 1240.774079][T17791] [ 1241.478787][T17271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.491361][T17795] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1241.537683][T17271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.602343][T16403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.604522][ T160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.604568][ T160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.604599][ T160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.851075][T17807] loop6: detected capacity change from 0 to 2048 [ 1241.881223][T17807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.935378][T17816] EXT4-fs error (device loop6): ext4_find_extent:904: inode #2: comm syz.6.3479: inode has invalid extent depth: 8 [ 1241.967732][T17816] EXT4-fs (loop6): Remounting filesystem read-only [ 1242.609887][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.896733][T17824] loop2: detected capacity change from 0 to 512 [ 1242.915383][T17824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1242.916838][T17822] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.945588][T17824] EXT4-fs (loop2): 1 truncate cleaned up [ 1243.007619][T10673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.007643][T10673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.139421][T17824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.148581][T10673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.148602][T10673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.938174][T17839] loop1: detected capacity change from 0 to 512 [ 1243.978965][T17033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.236635][T17842] loop3: detected capacity change from 0 to 1024 [ 1246.779747][T17842] hfsplus: failed to load extents file [ 1247.796667][T17851] loop2: detected capacity change from 0 to 256 [ 1247.857913][T17851] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 1247.857939][T17851] FAT-fs (loop2): Filesystem has been set read-only [ 1248.927498][ T5726] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1249.217322][ T5726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1249.217372][ T5726] usb 3-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 1249.244005][T17882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1249.247501][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.247524][ T5726] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1249.247565][ T5726] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1249.247597][ T5726] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1249.247631][ T5726] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1249.247654][ T5726] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1249.259776][ T5726] usb 3-1: string descriptor 0 read error: -22 [ 1249.259910][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.108812][T17890] loop1: detected capacity change from 0 to 512 [ 1250.115149][T17890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1250.266293][T17890] EXT4-fs (loop1): 1 truncate cleaned up [ 1250.281592][T17890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.364223][T17896] loop6: detected capacity change from 0 to 512 [ 1250.365230][T17896] EXT4-fs: Ignoring removed nobh option [ 1250.464481][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.503996][T17896] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.3500: corrupted inode contents [ 1250.504031][T17896] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1250.512748][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1250.512772][ C0] EXT4-fs (loop6): initial error at time 1790253427: ext4_do_update_inode:5801: inode 3 [ 1250.512799][ C0] EXT4-fs (loop6): last error at time 1790253427: ext4_do_update_inode:5801: inode 3 [ 1250.517976][T17903] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1250.571926][T17896] EXT4-fs (loop6): Remounting filesystem read-only [ 1250.589309][T17896] Quota error (device loop6): write_blk: dquota write failed [ 1250.589455][T17896] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 1250.608601][T17896] EXT4-fs (loop6): 1 truncate cleaned up [ 1250.628275][T17896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.628392][T17896] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1250.693754][T17906] loop1: detected capacity change from 0 to 1024 [ 1250.753223][ T5726] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 1250.767069][ T5726] usb 3-1: Warning! Unlikely small volume range (=146), linear volume or custom curve? [ 1250.767094][ T5726] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/146/1 [ 1250.846032][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.984760][ T5726] usb 3-1: USB disconnect, device number 30 [ 1252.028956][T17929] loop2: detected capacity change from 0 to 512 [ 1252.032792][T17929] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1252.162385][T17931] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1252.196551][T17929] EXT4-fs (loop2): 1 truncate cleaned up [ 1252.239255][T17929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.316099][T17934] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1253.067309][T17033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.160888][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3519'. [ 1253.197436][T17949] loop1: detected capacity change from 0 to 256 [ 1253.199556][T17949] exfat: Deprecated parameter 'namecase' [ 1253.199597][T17949] exfat: Deprecated parameter 'namecase' [ 1253.245673][T17949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1255.209058][T15804] exFAT-fs (loop1): start_clu is invalid cluster(0xff000008) [ 1255.448302][T17965] loop3: detected capacity change from 0 to 128 [ 1255.633525][T17965] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1255.648713][T17965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1256.224850][T17971] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1256.853122][T17980] loop5: detected capacity change from 0 to 2048 [ 1257.001067][T17984] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1257.178396][T17980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.200744][T17992] EXT4-fs error (device loop5): ext4_find_extent:904: inode #2: comm syz.5.3530: inode has invalid extent depth: 8 [ 1257.224519][T17992] EXT4-fs (loop5): Remounting filesystem read-only [ 1257.423437][T13871] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1257.720946][T13871] usb 3-1: Using ep0 maxpacket: 32 [ 1257.735906][T13871] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1257.758159][T13871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.758191][T13871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.758226][T13871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.790429][T13871] usb 3-1: config 0 descriptor?? [ 1257.802649][T13871] hub 3-1:0.0: USB hub found [ 1257.841814][T17271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.877231][T17997] loop6: detected capacity change from 0 to 512 [ 1257.926742][T17997] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1258.027301][T13871] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1258.073826][T16383] udevd[16383]: incorrect ext4 checksum on /dev/loop6 [ 1258.921677][T18008] loop1: detected capacity change from 0 to 1024 [ 1258.964003][T18008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.964121][T18008] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1258.982599][ T33] audit: type=1800 audit(1790253435.526:1491): pid=18008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3536" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1258.986987][ T33] audit: type=1800 audit(1790253435.535:1492): pid=18008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3536" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1259.085540][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1259.368109][T18017] loop1: detected capacity change from 0 to 1024 [ 1259.369303][T18017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1259.500716][T18017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.545019][ T33] audit: type=1800 audit(1790253436.043:1493): pid=18017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3539" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1259.850162][T13871] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 1259.873251][T13871] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1261.148490][T13871] usb 3-1: USB disconnect, device number 31 [ 1261.537444][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.658014][T18032] fido_id[18032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1262.315001][T18042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1263.343311][T18053] input: syz1 as /devices/virtual/input/input22 [ 1264.915486][T18078] loop5: detected capacity change from 0 to 512 [ 1264.920663][T18078] ext4: Unknown parameter 'smackfstransmute' [ 1265.296658][T18084] ip6t_REJECT: ECHOREPLY is not supported [ 1266.011794][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1266.140828][T18090] loop6: detected capacity change from 0 to 1024 [ 1266.165147][T18090] hfsplus: failed to load extents file [ 1266.170535][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1266.171398][ T10] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1266.173085][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.173112][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.173148][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.179771][ T10] usb 3-1: config 0 descriptor?? [ 1266.190390][ T10] hub 3-1:0.0: USB hub found [ 1266.483494][T18093] xt_TCPMSS: Only works on TCP SYN packets [ 1267.738712][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1267.754718][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1267.754840][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1267.780878][ T10] usb 3-1: USB disconnect, device number 32 [ 1268.154360][T18107] loop3: detected capacity change from 0 to 764 [ 1268.500877][T18111] Symlink component flag not implemented [ 1268.500887][T18111] Symlink component flag not implemented [ 1268.643641][T18116] loop2: detected capacity change from 0 to 512 [ 1269.740750][T18131] loop2: detected capacity change from 0 to 1024 [ 1269.764841][T18131] hfsplus: failed to load extents file [ 1270.043955][T18141] loop1: detected capacity change from 0 to 2048 [ 1270.045089][T18141] EXT4-fs: Ignoring removed i_version option [ 1270.390377][T18141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1270.809927][T18152] loop5: detected capacity change from 0 to 512 [ 1270.816975][T18152] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 1270.887484][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.017232][T18148] loop6: detected capacity change from 0 to 256 [ 1271.018218][T18148] vfat: Unknown parameter '0+d>’ô|þº1ÂÑ26"¬Û' [ 1271.119915][T18160] loop1: detected capacity change from 0 to 128 [ 1271.129024][T18160] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1271.134261][T18160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1271.135260][T18158] loop3: detected capacity change from 0 to 16 [ 1271.154218][T18158] erofs (device loop3): invalid ishare xattr prefix id 0 [ 1271.623511][T18174] loop1: detected capacity change from 0 to 2048 [ 1271.682706][T18174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1272.495785][T18188] loop3: detected capacity change from 0 to 1024 [ 1272.588917][T18191] loop2: detected capacity change from 0 to 512 [ 1272.595835][T18191] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1272.626098][T15804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.687502][T18188] hfsplus: failed to load extents file [ 1273.032041][ T1867] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1273.429956][ T1867] usb 6-1: Using ep0 maxpacket: 32 [ 1273.432922][ T1867] usb 6-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1273.434573][ T1867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.434602][ T1867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.434638][ T1867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.496123][ T1867] usb 6-1: config 0 descriptor?? [ 1273.524298][ T1867] hub 6-1:0.0: USB hub found [ 1273.609395][T18204] loop1: detected capacity change from 0 to 128 [ 1273.635179][T18204] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1273.668100][T18204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1273.730067][ T1867] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1274.119757][T18219] loop3: detected capacity change from 0 to 2048 [ 1274.183096][ T1867] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 1274.211045][T18219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.226682][ T1867] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1274.367972][T18230] hfsplus: failed to load extents file [ 1275.473356][T18228] set_capacity_and_notify: 1 callbacks suppressed [ 1275.473378][T18228] loop6: detected capacity change from 0 to 512 [ 1275.480617][T15163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.189535][ T27] usb 6-1: USB disconnect, device number 6 [ 1276.190686][T14227] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1276.383511][T14227] usb 2-1: New USB device found: idVendor=0a5c, idProduct=21e8, bcdDevice=1.00 [ 1276.386895][T14227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.387054][T14227] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1276.387079][T14227] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1276.387115][T14227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.418102][T18244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1276.418241][T18244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1276.541450][T18255] loop6: detected capacity change from 0 to 128 [ 1276.578958][T18255] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1276.606318][T18255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1277.055598][T18244] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 1277.105614][T18244] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 1279.578332][T16459] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1279.602983][T13871] usb 2-1: USB disconnect, device number 22 [ 1280.047304][T18290] ip6t_REJECT: ECHOREPLY is not supported [ 1280.552862][T13871] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1280.604136][ T1867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1280.702170][T18305] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1280.879004][T13871] usb 2-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 1280.898775][T13871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1280.899023][T13871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1280.899791][T13871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.906865][ T1867] usb 6-1: Using ep0 maxpacket: 16 [ 1280.958967][ T1867] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 1281.335385][ T1867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.335411][ T1867] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1281.353145][ T1867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1281.353172][ T1867] usb 6-1: SerialNumber: syz [ 1281.405443][ T1867] usb 6-1: 0:2 : does not exist [ 1281.433788][T18309] loop2: detected capacity change from 0 to 128 [ 1281.480139][T18309] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1281.525776][T18309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1281.709294][T14227] usb 6-1: USB disconnect, device number 7 [ 1283.422533][T13871] pegasus 2-1:1.0: probe with driver pegasus failed with error -71 [ 1283.456950][T13871] usb 2-1: USB disconnect, device number 23 [ 1283.728379][T18320] loop5: detected capacity change from 0 to 512 [ 1283.743248][T18320] ext4: Unknown parameter 'smackfstransmute' [ 1283.993272][T18325] ip6t_REJECT: ECHOREPLY is not supported [ 1284.758580][T18329] loop6: detected capacity change from 0 to 2048 [ 1286.142178][T18345] loop2: detected capacity change from 0 to 128 [ 1286.163237][T18345] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1286.201804][T18345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1287.422440][T18363] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1287.459917][T18364] loop3: detected capacity change from 0 to 1024 [ 1287.501305][T18364] hfsplus: failed to load extents file [ 1287.769641][T14655] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1287.940009][T14655] usb 3-1: Using ep0 maxpacket: 32 [ 1288.038724][T14655] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1288.221495][T14655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.221516][T14655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.221538][T14655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.886240][T14655] usb 3-1: config 0 descriptor?? [ 1289.013664][T14655] hub 3-1:0.0: USB hub found [ 1289.211891][T14655] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1289.642059][ T5726] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1289.759525][T14655] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 1289.784718][T14655] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1289.807564][ T5726] usb 2-1: New USB device found: idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 1289.817947][ T5726] usb 2-1: config 34 has an invalid interface number: 116 but max is 0 [ 1289.817975][ T5726] usb 2-1: config 34 has no interface number 0 [ 1289.818004][ T5726] usb 2-1: config 34 interface 116 has no altsetting 0 [ 1289.846032][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.846058][ T5726] usb 2-1: Product: syz [ 1289.846071][ T5726] usb 2-1: Manufacturer: syz [ 1289.846083][ T5726] usb 2-1: SerialNumber: syz [ 1290.102208][ T27] usb 3-1: USB disconnect, device number 33 [ 1290.771627][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1290.939614][ T5726] comedi comedi4: could not set alternate setting 3 in high speed [ 1290.939654][ T5726] usbdux 2-1:34.116: driver 'usbdux' failed to auto-configure device. [ 1290.964137][ T5726] usbdux 2-1:34.116: probe with driver usbdux failed with error -71 [ 1290.974940][ T5726] usb 2-1: USB disconnect, device number 24 [ 1291.409987][T18413] loop2: detected capacity change from 0 to 128 [ 1291.427770][T18413] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1291.463554][T18413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1293.353655][T18431] loop6: detected capacity change from 0 to 2048 [ 1293.413513][T18431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.686351][T18438] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1294.873056][T18449] loop1: detected capacity change from 0 to 256 [ 1294.876672][T18449] exfat: Deprecated parameter 'namecase' [ 1294.876698][T18449] exfat: Deprecated parameter 'namecase' [ 1295.003010][T18449] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1295.048173][T18454] loop3: detected capacity change from 0 to 128 [ 1295.214637][T18454] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1295.255375][T18454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1296.701296][T18475] [ 1296.706109][T18475] ============================= [ 1296.711229][T18475] WARNING: suspicious RCU usage [ 1296.716504][T18475] syzkaller #0 Not tainted [ 1296.721134][T18475] ----------------------------- [ 1296.726057][T18475] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1296.734745][T18475] [ 1296.734745][T18475] other info that might help us debug this: [ 1296.734745][T18475] [ 1296.745223][T18475] [ 1296.745223][T18475] rcu_scheduler_active = 2, debug_locks = 1 [ 1296.753679][T18475] locks held by syz.5.3695/18475: 1, last CPU#0: [ 1296.760113][T18475] #0: ffffffff8ed5c458 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 1296.772353][T18475] [ 1296.772353][T18475] stack backtrace: [ 1296.778848][T18475] CPU: 0 UID: 0 PID: 18475 Comm: syz.5.3695 Not tainted syzkaller #0 PREEMPT(full) [ 1296.788354][T18475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1296.798467][T18475] Call Trace: [ 1296.801795][T18475] [ 1296.804742][T18475] dump_stack_lvl+0xe8/0x150 [ 1296.809406][T18475] lockdep_rcu_suspicious+0x140/0x1d0 [ 1296.814821][T18475] get_callchain_entry+0x2b7/0x3c0 [ 1296.819984][T18475] get_perf_callchain+0xd5/0x880 [ 1296.825394][T18475] ? __pfx_get_perf_callchain+0x10/0x10 [ 1296.830983][T18475] ? __lock_acquire+0x747/0x2de0 [ 1296.836402][T18475] __bpf_get_stack+0x375/0xae0 [ 1296.841334][T18475] ? __pfx___bpf_get_stack+0x10/0x10 [ 1296.846829][T18475] ? __lock_acquire+0x747/0x2de0 [ 1296.851893][T18475] ? lock_acquire+0x115/0x350 [ 1296.856601][T18475] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 1296.862266][T18475] bpf_get_stack_raw_tp+0x1a4/0x210 [ 1296.867592][T18475] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 1296.873084][T18475] bpf_prog_run_pin_on_cpu+0x14f/0x4c0 [ 1296.878629][T18475] bpf_prog_test_run_syscall+0x324/0x4c0 [ 1296.884398][T18475] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1296.890775][T18475] ? __fget_files+0x2a/0x420 [ 1296.895451][T18475] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1296.901908][T18475] bpf_prog_test_run+0x2c5/0x340 [ 1296.907011][T18475] __sys_bpf+0xa22/0xd90 [ 1296.911392][T18475] ? __pfx___sys_bpf+0x10/0x10 [ 1296.916293][T18475] ? do_futex+0x3e7/0x4e0 [ 1296.920719][T18475] ? rcu_is_watching+0x16/0xb0 [ 1296.925545][T18475] __x64_sys_bpf+0xba/0xd0 [ 1296.930090][T18475] do_syscall_64+0x166/0x520 [ 1296.934731][T18475] ? trace_irq_disable+0x3b/0x140 [ 1296.939879][T18475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.945974][T18475] ? clear_bhb_loop+0x70/0xc0 [ 1296.950686][T18475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.956787][T18475] RIP: 0033:0x7fbcff99e159 [ 1296.961231][T18475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.980880][T18475] RSP: 002b:00007fbd00850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1296.989394][T18475] RAX: ffffffffffffffda RBX: 00007fbcffc25fa0 RCX: 00007fbcff99e159 [ 1296.997556][T18475] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1297.005546][T18475] RBP: 00007fbcffa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1297.013627][T18475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.021694][T18475] R13: 00007fbcffc26038 R14: 00007fbcffc25fa0 R15: 00007ffd0805dbc8 [ 1297.029868][T18475] [ 1297.061933][T18479] syzkaller0: entered promiscuous mode [ 1297.062030][T18479] syzkaller0: entered allmulticast mode [ 1297.721626][T15947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.564760][ T4930] Bluetooth: hci2: command 0x0406 tx timeout