last executing test programs: 11.701716916s ago: executing program 3 (id=3953): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='ccgx-ucsi 0x08\n', 0xf) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(0xffffffffffffffff, 0x400caed0, &(0x7f0000000800)="0100") write(r0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x84) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000500)={0x5, [[0x200, 0x4a5f, 0x2, 0xb, 0x0, 0x9], [0x1, 0x4, 0x9, 0x5, 0x1, 0x1, 0x2, 0x2], [0x10000, 0xde1, 0x80000000, 0x23, 0x7, 0x1, 0xfffffff9, 0x7]], '\x00', [{0x3, 0x9, 0x1, 0x1}, {0x8000, 0xc81, 0x1, 0x0, 0x0, 0x1}, {0x400, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x7f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x100, 0x101, 0x1, 0x1}, {0x6, 0x1ff, 0x1, 0x0, 0x1}, {0x7, 0xfffffffc, 0x0, 0x1, 0x0, 0x1}, {0x10, 0xdf08, 0x1, 0x1, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x1, 0x1}, {0xf52, 0x800, 0x0, 0x0, 0x0, 0x1}], '\x00', 0xf}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setrlimit(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 9.02498664s ago: executing program 2 (id=3956): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x401, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 8.034332671s ago: executing program 3 (id=3959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0}}, 0x20040040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113100000000000bfa000000000000007000000ee00160e5e03feff00000000140500000000000069163a0000000000bf07000000000000360507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 7.047073552s ago: executing program 4 (id=3962): syz_emit_vhci(0x0, 0x15) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8"], 0x15) 6.821234351s ago: executing program 3 (id=3963): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 6.744604587s ago: executing program 2 (id=3964): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x401, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 6.597456808s ago: executing program 1 (id=3965): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x6, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) 6.4037777s ago: executing program 1 (id=3967): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r4 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x288040, 0x120) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4000080, &(0x7f0000000040)={0xc9, 0x11, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) 6.326602336s ago: executing program 0 (id=3968): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="15", 0x1) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x8004) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./bus\x00', 0x94, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0xdb9, &(0x7f0000000e00)="$eJzs3UuPHMUdAPDq2R2vX8RrvMQbx7EdHILz8C42Vsgti+QcUCQUiU+AHENMFvIwHEBGsjnkGkuIDxDEPYc8fUCyODnikihfAHHKxUFIJLEimYl2t2p29u8ZemZfs7Pz+0k9Nd3/7q6qefT09KMqAWOrsfx44cJsldI7t96+eO/k5H+Xppxsz3Fq+XEyjy2klJrt5VKaDutbmFpJ73967VJn+nlOq3Q+ValqT0/P3m0veyCldD2dSrfTdHruk6M3X/rwmcX3j9w4cvHNM3e2pvYAADBe7v3ovV/+9fEfXjv8v9+dWEhT7ell/3whjx/M+/0L1cp4Ttr/A6qOtOoYL/aE+Sbz0AjzTXSZrzOfZphvskf+e8J6mz3mm6rJf6JjWrd6wyhb/R9fNebWjDcac3Mr/8mXfDSxp5p75criC1eHVFBg0312Mh/iMxgMYze0Dg17CwSwIp43fMD1eGRhY9prm+wv/7tPN7ovD5tguz//8h+t/N+7YYvD5tmtn6ZSr/I9OpjH43mEybDcoN//sr54PqLZZzl7nUcYlfMLvco5sc3lWK9e5Y+fi93qazktr8OJEO/8/sT3dFTeY6C7e47/GwxjO7SGvQECdqx43VwrK/F4XV+MT9XE99bE99XE99fED9TEYZz9/tXfpJvV6v/8+J9+0ONh5TjbQzn90oDliccjB80/Xvc7qI3mH68nhh3tzH+Of/ba7b/F6/8/D9f/n86/pdN5A1GOF8bj6u1r/8ONwY0e8z0civNQl/mXn8+sna+aWV1P6tjOPFCO2bXLHeo13/G1802H+fbnfZG9obxx/2R/WK7sf5Ttanm9JkN9m6Eee0I5yjtzOKd7Q30O96pXOJC9J8zXzMORUK+ZUK9HwnJfDvWqZtfWKx4/L+U5GqbH8yRlvvC2PfC7FN+LeF/Gozl9K6fv5vSDnH7cJd9xVD6Pva7/L5/P2dSsXriyePmJPF4+p3cmmlNL089tc7mBjev3/p/ZtPb+n4Pt6c1G53bh0Or0qnO7MB2mn+8x/ck8Xn7Pfjqxb3n63KWfL/5ksysPY+7q62/87PnFxcu/8sQTT/p9sm9nFGMrnwx7ywRstflXX/7F/NXX3zh75eXnX7z84uVXzj3x/e89+dRTF+aX9+rnO/ftgd1l9Ud/2CUBAAAAAAAAAAAA+lbt6z45p3Xt25b7ycv96fH+eEZDed/Kp6G0Y1Du/+zVrku5f/PwNpSRzbcdtxMNu45Ad//arvZ/rw+/rVPDdg73V1taHHpZdvHw2kyrtYHlWy2t+AM7w7D7/yvtHpb04Nl/HF4aymx3n167vYztF8JG7PT+5+S/u/r/a/d/1ff2L/SYNb2+fP9wb9/fO7JNx/rNP9a/tAM7M1j+f8z5l9o8lvrLv/XbkH9sqLRPfwr57+8z/wfqf3x9+f85519etjOn+81/pcRVY2054nHj0g5gPG5c/CXUv7TtN3D919lR262cP4yzUelnclA7v//PY1/YC0lZb9kO5s1z+zxdaX879ncwaPlLu9/ld+CRsP6q5vdN/5+jra7/z/L5m9f/J+w6H+n/02AY26HVag2165Nx7Xdlpxj26z/sfchh5z/s179O7P8z/l+K/X/GeOz/M8Zj/58xHvvXivHY/2d8PWP/nzF+NKw39g86WxP/Sk38WE38qzXx4zXx+P8txk/VxE/UxE/WxB+uiT9aEz9dE/9GTfyxmvjjNfEzNfHd7us5Hdf6wziL/Ub6/sP4KOd/en3/Z2riwOiK/TrH7/c3a+LA6CrXefh+wxiqurfYEY+3l+O4b+X03Zx+kNOPt6yAbIdv5fTbOf1OTr+b07M5ncvpfE71DTnafv3PYyduVqvX+R0K8X6vJ433A8R2Ys71WZ54fm7Q61mP9pnPVuW/zttBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEZGY/nxwoXZKqV3br198d8zP/jx0pST7TlOLT9O5rGFlFIzpVTl8cmwvutTK+n9T69d6pZW6fzyYxlPz95tL3tgafl0Kt1O0+m5T47efOnDZxbfP3LjyMU3z9zZmtoDAADAePh/AAAA//9evPL9") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40106e8c, &(0x7f0000000280)=0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 6.227101218s ago: executing program 3 (id=3969): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='ccgx-ucsi 0x08\n', 0xf) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(0xffffffffffffffff, 0x400caed0, &(0x7f0000000800)="0100") write(r0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x84) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000500)={0x5, [[0x200, 0x4a5f, 0x2, 0xb, 0x0, 0x9], [0x1, 0x4, 0x9, 0x5, 0x1, 0x1, 0x2, 0x2], [0x10000, 0xde1, 0x80000000, 0x23, 0x7, 0x1, 0xfffffff9, 0x7]], '\x00', [{0x3, 0x9, 0x1, 0x1}, {0x8000, 0xc81, 0x1, 0x0, 0x0, 0x1}, {0x400, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x7f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x100, 0x101, 0x1, 0x1}, {0x6, 0x1ff, 0x1, 0x0, 0x1}, {0x7, 0xfffffffc, 0x0, 0x1, 0x0, 0x1}, {0x10, 0xdf08, 0x1, 0x1, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x1, 0x1}, {0xf52, 0x800, 0x0, 0x0, 0x0, 0x1}], '\x00', 0xf}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setrlimit(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6.094952046s ago: executing program 4 (id=3970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 5.917082384s ago: executing program 0 (id=3971): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x5}) 5.164636685s ago: executing program 1 (id=3972): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000003000000000200000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.105357728s ago: executing program 2 (id=3973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0}}, 0x20040040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}}, 0x3, 0x800, 0xf, 0xffffffff, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.989636323s ago: executing program 4 (id=3974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 4.005398583s ago: executing program 2 (id=3975): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESOCT], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.956454943s ago: executing program 4 (id=3976): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0xf) r1 = syz_open_dev$loop(0x0, 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.861053104s ago: executing program 0 (id=3977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20800, 0x840) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 3.829355421s ago: executing program 1 (id=3978): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x40000, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0xff7d}}, 0x1006) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0xd3b, 0x2, 0x208, 0x0, 0x8, 0x3}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) getgroups(0x0, &(0x7f00000068c0)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 3.713229525s ago: executing program 2 (id=3979): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 2.456545164s ago: executing program 0 (id=3980): syz_emit_vhci(0x0, 0x15) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8"], 0x15) 1.871671399s ago: executing program 3 (id=3981): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x4) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="15", 0x1) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x8004) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./bus\x00', 0x94, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0xdb9, &(0x7f0000000e00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40106e8c, &(0x7f0000000280)=0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1.858697962s ago: executing program 4 (id=3982): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14K3xUbSot1NGtsGkVpB9Kmg1vcYk00I2WRDdlObUDTFDyCIqOCTT74IfgBB+hFEKOi7aFFEW33wQTuysxPbtLtJJGnWu/n94HTOmTM7/3Om2bM7O4eZAE6tixFxOyKGIuJKRJSL9WmRZovU3u7Z0wfz7ZRElt39axJJsW53X+3ycESci4idiBiJiK99OeKbyetxm1vbK3P1em2jKFdbq+vV5tb21eXVuaXaUm1tenrqxszNmeszk1nhSP08HxG3vvjkh9/72Zdu/erT3/r97J8vf7vdrM99tNPuiJg/UoAeOvsu5cdiV/sYbbyJYH0wVPSn1O+GAABwKOMRcSkiPpF//y/HUP5tDgAAABgk2edH419JRAYAAAAMrDQiRiNJK8V839FI00qlM4f3I3E2rTearU8tNjbXFtp1EWNRSheX67XJYq7wWJSSdnkqz78oX3ulPB0R70bED8pn8nJlvlFf6PePHwAAAHBKnLuw9/z/H+U0zwMAAAADZqxnAQAAABgUTvkBAABg8Dn/BwAAgIH2lTt32inbfY73wr2tzZXGvasLteZKZXVzvjLf2FivLDUaS/k9+1YP2l+90Vj/TKxt3q+2as1Wtbm1Pbva2FxrzS7veQQ2AAAAcILevfDod0lE7Hz2TJ6iuA8gwB5/7HcDgOM01O8GAH0z3O8GAH1TOnALIwQMuuSA+p6Td359/G0BAADejImPvX79/62i7uDfBoAPMnN9AOD0cXUPTq+SGYBw6o13Fm/3qj/69f8s+58bBQAAHKvRPCVppbgWOBppWqlEvJM/FqCULC7Xa5MR8aGI+G259Ha7PJW/MjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADAQItI/5Tkd/OPmCiPj776+8BbyT/L8aQo/OTuj+7PtVobU+31fyvn9RHR+nGx/lrmkQAAAADwf6Bznl4sp/rdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzbOnD+Z300nG/csXImKsW/zhGMmXI1GKiLN/T2L4pdclETF0DPF3HkbEe93iJ/E8y7KxohXd4p95w/HH8kPTPX4aEeeOIT6cZo/a48/tbu+/NC7my+7vv+EiHVXv8S/97/g31GP8eeeQMc4//kW1Z/yHEeeHu48/u/GTHvEvHTL+N76+vd2rLvtpxETXz59kT6xqa3W92tzavrq8OrdUW6qtTU9P3Zi5OXN9ZrK6uFyvFf92jfH9j//y+X79P9sj/tgB/R8/ZP///fj+0w93sqVu8S9f6v75+16P+Gnx2ffJIt+un9jN73TyL3v/5795f7/+L/To/0H//5cP2f8rX/3uHw65KQBwAppb2ytz9XptY5/MyCG2kZE5Sib7Tufv8Wj7OeLLX8tk/T4sfcz0e2QCAACO24sv/f1uCQAAAAAAAAAAAAAAAAAAAJxeJ3E7sVdj7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/pPAAAA//+e1d5O") setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r4 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x288040, 0x120) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4000080, &(0x7f0000000040)={0xc9, 0x11, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) 1.627207902s ago: executing program 1 (id=3983): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x401, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 1.189150045s ago: executing program 0 (id=3984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 463.71476ms ago: executing program 4 (id=3985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0}}, 0x20040040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}}, 0x3, 0x800, 0xf, 0xffffffff, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 440.544136ms ago: executing program 3 (id=3986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef6, 0x10, 0x0, 0x3d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863334821ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 306.973864ms ago: executing program 2 (id=3987): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x5}) 264.088143ms ago: executing program 1 (id=3988): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000003000000000200000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 0s ago: executing program 0 (id=3989): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) kernel console output (not intermixed with test programs): v_slave_1 [ 1141.618443][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1141.627432][T12964] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1141.636171][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1141.745906][T16715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.796159][T16715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.817524][T16715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.845197][T12964] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1141.877428][T16715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.883788][T12964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.909253][ T4282] syz-executor: attempt to access beyond end of device [ 1141.909253][ T4282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1141.943298][T12964] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 075 [ 1142.084005][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.145145][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.166014][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1142.201728][T12964] (null): failure setting delay to 10us [ 1142.216455][T12964] i2c-tiny-usb: probe of 1-1:1.0 failed with error -5 [ 1142.241022][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.268285][T12964] usb 1-1: USB disconnect, device number 75 [ 1142.270643][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.317003][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1142.660056][T16831] device syzkaller0 entered promiscuous mode [ 1143.600429][T16842] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 1143.765382][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1143.828108][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1143.830248][T16844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1143.844121][T15154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1143.857574][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1143.865972][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1143.874359][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1143.949117][T16844] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1144.075288][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3262'. [ 1144.155526][T16848] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1144.179464][T16851] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1144.212363][T16851] gadgetfs: bound to dummy_udc driver [ 1144.272706][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1144.517821][T12962] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1144.551233][ C1] gadgetfs: connected [ 1144.565961][T12962] gadgetfs: disconnected [ 1144.817990][ C1] gadgetfs: connected [ 1144.825048][T12962] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1144.935166][T12962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1145.097277][T12962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.352120][ C1] gadgetfs: configuration #1 [ 1145.930398][T16851] gadgetfs: suspended from state 3 [ 1145.937291][T16860] device syzkaller0 entered promiscuous mode [ 1145.946532][T12258] usb 1-1: USB disconnect, device number 76 [ 1145.953776][T16851] gadgetfs: disconnected [ 1146.069176][ T9437] Bluetooth: hci5: command 0x0409 tx timeout [ 1146.222895][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1146.418858][T16846] chnl_net:caif_netlink_parms(): no params data found [ 1146.486683][T16864] loop2: detected capacity change from 0 to 40427 [ 1146.503455][T16864] F2FS-fs (loop2): invalid crc value [ 1146.526499][T16864] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1146.583096][T16864] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1146.871023][T16875] loop4: detected capacity change from 0 to 32768 [ 1146.880170][T16875] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1146.904518][T16846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.912733][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.996263][T16440] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.007847][ T6849] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1147.035739][T16846] device bridge_slave_0 entered promiscuous mode [ 1147.170046][T16364] syz-executor: attempt to access beyond end of device [ 1147.170046][T16364] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1147.219828][T16846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.232676][T16846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.263300][T16846] device bridge_slave_1 entered promiscuous mode [ 1147.293636][ T6849] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1147.416057][ T6849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.557202][ T6849] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 077 [ 1147.629785][T16846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.730926][T16846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.774651][T16846] team0: Port device team_slave_0 added [ 1147.784017][T16846] team0: Port device team_slave_1 added [ 1147.806820][T16846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.814520][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.849577][ T6849] (null): failure setting delay to 10us [ 1147.871088][ T6849] i2c-tiny-usb: probe of 1-1:1.0 failed with error -5 [ 1147.921912][T16846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.923095][ T6849] usb 1-1: USB disconnect, device number 77 [ 1147.952695][T16846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.068788][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.109525][T16846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.147555][ T9437] Bluetooth: hci5: command 0x041b tx timeout [ 1148.365809][T16846] device hsr_slave_0 entered promiscuous mode [ 1148.378135][T16846] device hsr_slave_1 entered promiscuous mode [ 1148.388454][T16846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1148.404406][T16846] Cannot create hsr debugfs directory [ 1148.542137][T16898] loop1: detected capacity change from 0 to 128 [ 1148.641921][T16898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1149.956988][T16924] loop4: detected capacity change from 0 to 128 [ 1149.991241][T16924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1150.227490][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 1151.124334][T16846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1151.140934][T16846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1151.158904][T16846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1151.178525][T16846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1151.459017][T16846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.473195][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1151.489268][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1151.500861][T16846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.514298][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1151.536528][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1151.552173][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.560139][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.598772][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1151.618806][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1151.649669][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1151.689076][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.696331][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.733277][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1151.787503][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1151.921743][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1151.932410][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1151.976674][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1152.021540][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1152.058514][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1152.109662][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1152.132907][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1152.155568][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1152.329328][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 1152.451374][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1152.706076][T16846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1153.107800][T12258] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1153.208079][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1153.226721][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1153.258156][T16846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.329247][T12258] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1153.349607][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1153.362562][T12258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.376394][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1153.440883][T12258] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 078 [ 1153.476501][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1153.496308][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1153.536360][T16846] device veth0_vlan entered promiscuous mode [ 1153.552349][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1153.584621][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1153.629326][T16846] device veth1_vlan entered promiscuous mode [ 1153.698492][T12258] (null): failure setting delay to 10us [ 1153.704589][T12258] i2c-tiny-usb: probe of 1-1:1.0 failed with error -5 [ 1153.718943][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1153.732707][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1153.750306][T12258] usb 1-1: USB disconnect, device number 78 [ 1153.763049][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1153.811033][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1153.825740][T16846] device veth0_macvtap entered promiscuous mode [ 1153.848030][T16846] device veth1_macvtap entered promiscuous mode [ 1153.918433][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.970287][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.982309][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.993828][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.004014][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.015054][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.025188][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.035982][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.052101][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.067440][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.097423][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.116246][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.140640][T16846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.161161][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1154.177820][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1154.199600][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1154.218507][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1154.249377][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.293549][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.327228][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.346976][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.375326][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.406797][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.429663][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.441061][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.460267][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.476547][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.503553][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.538472][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.608603][T16846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.715533][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1154.766392][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1154.918299][T16846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.948720][T16846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.976584][T16846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.131549][T16846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.475879][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.496027][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.520387][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1156.659005][T16982] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1156.671952][T16982] gadgetfs: bound to dummy_udc driver [ 1156.821011][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.997484][ T6849] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1157.080365][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.088450][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1157.104551][ C1] gadgetfs: connected [ 1157.109052][ T6849] gadgetfs: disconnected [ 1157.287625][ C1] gadgetfs: connected [ 1157.293234][ T6849] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1157.304624][ T6849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1157.332026][ T6849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.371154][ C1] gadgetfs: configuration #1 [ 1157.453847][T16993] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1157.851709][T16982] gadgetfs: suspended from state 3 [ 1157.857032][T16982] gadgetfs: disconnected [ 1157.863388][ T6849] usb 1-1: USB disconnect, device number 79 [ 1158.642618][ T6849] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1158.842823][ T6849] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1158.963085][ T6849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.344198][ T6849] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 030 [ 1159.432943][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1159.597948][ T6849] (null): failure setting delay to 10us [ 1159.603808][ T6849] i2c-tiny-usb: probe of 3-1:1.0 failed with error -5 [ 1159.661305][ T6849] usb 3-1: USB disconnect, device number 30 [ 1159.947677][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1160.198699][T17022] loop1: detected capacity change from 0 to 128 [ 1160.571067][T17028] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1160.595047][T17028] gadgetfs: bound to dummy_udc driver [ 1160.868156][ T6526] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1160.905849][ C0] gadgetfs: connected [ 1160.916631][ T6526] gadgetfs: disconnected [ 1161.147986][ C0] gadgetfs: connected [ 1161.162673][ T6526] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1161.219031][ T6526] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1161.327615][ T6526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.522720][ C0] gadgetfs: configuration #1 [ 1162.381110][T17028] gadgetfs: suspended from state 3 [ 1162.386856][T13074] usb 1-1: USB disconnect, device number 80 [ 1162.394026][T17028] gadgetfs: disconnected [ 1162.477119][T17041] loop2: detected capacity change from 0 to 128 [ 1162.609454][T17041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1162.910973][T17050] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1163.073527][T17054] loop1: detected capacity change from 0 to 128 [ 1163.161111][T17054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1165.054890][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1165.055798][T17064] loop3: detected capacity change from 0 to 32768 [ 1165.073054][T17064] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1165.117438][T12258] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1165.235192][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3318'. [ 1165.261662][T17071] loop2: detected capacity change from 0 to 8 [ 1165.329380][T12258] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1165.348336][T12258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.383083][T12258] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 014 [ 1165.400387][T17072] bond9 (unregistering): Released all slaves [ 1165.458011][T16443] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1165.533720][T17071] SQUASHFS error: Failed to read block 0x2fc: -5 [ 1165.547486][T17071] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1165.567614][T17071] SQUASHFS error: Unable to read directory block [247:26] [ 1165.691795][T12258] (null): failure setting delay to 10us [ 1165.698607][T12258] i2c-tiny-usb: probe of 5-1:1.0 failed with error -5 [ 1165.762429][T12258] usb 5-1: USB disconnect, device number 14 [ 1166.254239][T17088] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1166.279185][T17088] gadgetfs: bound to dummy_udc driver [ 1166.557951][T13807] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1166.583238][ C0] gadgetfs: connected [ 1166.593622][T13807] gadgetfs: disconnected [ 1166.828262][ C0] gadgetfs: connected [ 1166.838814][T13807] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1166.891736][T13807] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1167.012062][T13807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.362054][ C0] gadgetfs: configuration #1 [ 1167.404649][T17097] xt_hashlimit: size too large, truncated to 1048576 [ 1167.411913][T17097] xt_hashlimit: max too large, truncated to 1048576 [ 1169.048738][T17088] gadgetfs: suspended from state 3 [ 1169.054451][T12964] usb 1-1: USB disconnect, device number 81 [ 1169.060699][T17088] gadgetfs: disconnected [ 1169.107510][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 1169.256898][T17105] loop2: detected capacity change from 0 to 128 [ 1169.356443][T17105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1169.457624][T17111] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1171.589371][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1172.085233][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1172.769298][T17137] loop3: detected capacity change from 0 to 164 [ 1172.829137][T13074] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1172.943975][T17137] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1173.023125][T13074] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1173.047683][T17141] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1173.071092][T17141] gadgetfs: bound to dummy_udc driver [ 1173.119653][T13074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.205212][T13074] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 031 [ 1173.457760][T12964] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1173.501871][ C1] gadgetfs: connected [ 1173.516080][T12964] gadgetfs: disconnected [ 1175.041652][T13074] (null): failure setting delay to 10us [ 1175.047947][T13074] i2c-tiny-usb: probe of 3-1:1.0 failed with error -5 [ 1175.112152][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3341'. [ 1175.137847][T13074] usb 3-1: USB disconnect, device number 31 [ 1175.307747][T17149] bond1 (unregistering): Released all slaves [ 1175.855384][T17170] loop1: detected capacity change from 0 to 128 [ 1175.866913][T17170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1175.945721][T17174] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1177.277888][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.284248][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.514618][T17184] loop2: detected capacity change from 0 to 40427 [ 1177.535106][T17184] F2FS-fs (loop2): invalid crc value [ 1177.579150][T17184] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1177.633865][T17184] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1179.154360][T16364] syz-executor: attempt to access beyond end of device [ 1179.154360][T16364] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1179.246301][T17200] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1179.269792][T17200] gadgetfs: bound to dummy_udc driver [ 1179.607481][ T6850] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1179.648440][ C1] gadgetfs: connected [ 1179.660805][ T6850] gadgetfs: disconnected [ 1179.917957][ C1] gadgetfs: connected [ 1179.925227][ T6850] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1179.960631][ T6850] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1180.105539][ T6850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.313324][ C1] gadgetfs: configuration #1 [ 1180.988464][T17200] gadgetfs: suspended from state 3 [ 1180.994531][T13807] usb 1-1: USB disconnect, device number 83 [ 1181.007505][T17200] gadgetfs: disconnected [ 1181.306631][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3354'. [ 1181.490356][T17205] bond1 (unregistering): Released all slaves [ 1182.067616][ T6526] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1182.359183][ T6526] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1182.377367][ T6526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.465201][T17225] xt_hashlimit: size too large, truncated to 1048576 [ 1182.472251][T17225] xt_hashlimit: max too large, truncated to 1048576 [ 1182.569500][ T6526] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 015 [ 1183.118144][ T6526] (null): failure setting delay to 10us [ 1183.123871][ T6526] i2c-tiny-usb: probe of 5-1:1.0 failed with error -5 [ 1183.164143][ T6526] usb 5-1: USB disconnect, device number 15 [ 1184.016429][T17239] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1184.042253][T17239] gadgetfs: bound to dummy_udc driver [ 1184.317492][ T6526] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1184.325992][ C0] gadgetfs: connected [ 1184.343566][ T6526] gadgetfs: disconnected [ 1184.567679][ C0] gadgetfs: connected [ 1184.574120][ T6526] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1184.706393][ T6526] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1185.517500][ T6526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.847057][ C0] gadgetfs: configuration #1 [ 1186.085094][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1186.985547][T17239] gadgetfs: suspended from state 3 [ 1186.991054][T17239] gadgetfs: disconnected [ 1186.995788][ T6526] usb 1-1: USB disconnect, device number 84 [ 1187.292636][T17267] loop1: detected capacity change from 0 to 128 [ 1187.317756][T17267] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1187.404410][T17267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1188.619707][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1189.486474][T17298] loop1: detected capacity change from 0 to 512 [ 1189.516459][T17298] EXT4-fs: Ignoring removed mblk_io_submit option [ 1189.536926][T17298] EXT4-fs: Ignoring removed orlov option [ 1189.632520][T17298] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1190.301176][T17302] loop2: detected capacity change from 0 to 128 [ 1190.446668][T17302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1190.615168][T17307] FAULT_INJECTION: forcing a failure. [ 1190.615168][T17307] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.642955][T17307] CPU: 0 PID: 17307 Comm: syz.3.3384 Not tainted syzkaller #0 [ 1190.652928][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1190.664243][T17307] Call Trace: [ 1190.669317][T17307] [ 1190.672825][T17307] dump_stack_lvl+0x188/0x24e [ 1190.678857][T17307] ? show_regs_print_info+0x12/0x12 [ 1190.684528][T17307] ? load_image+0x410/0x410 [ 1190.690465][T17307] ? __might_sleep+0xd0/0xd0 [ 1190.696306][T17307] ? __lock_acquire+0x7c40/0x7c40 [ 1190.702306][T17307] should_fail_ex+0x390/0x4c0 [ 1190.708712][T17307] should_failslab+0x5/0x20 [ 1190.713966][T17307] slab_pre_alloc_hook+0x59/0x300 [ 1190.722221][T17307] ? _raw_spin_unlock+0x40/0x40 [ 1190.727736][T17307] ? rfkill_fop_open+0x18c/0x570 [ 1190.733988][T17307] __kmem_cache_alloc_node+0x4f/0x270 [ 1190.739946][T17307] ? rfkill_fop_open+0x18c/0x570 [ 1190.746012][T17307] kmalloc_trace+0x26/0xe0 [ 1190.750742][T17307] rfkill_fop_open+0x18c/0x570 [ 1190.757139][T17307] ? rfkill_fop_ioctl+0x230/0x230 [ 1190.763632][T17307] misc_open+0x31f/0x390 [ 1190.769607][T17307] chrdev_open+0x585/0x5f0 [ 1190.775001][T17307] ? cd_forget+0x160/0x160 [ 1190.780783][T17307] ? fsnotify_perm+0x39b/0x550 [ 1190.786848][T17307] ? cd_forget+0x160/0x160 [ 1190.791767][T17307] do_dentry_open+0x7dd/0x10b0 [ 1190.798339][T17307] path_openat+0x2674/0x2f10 [ 1190.804016][T17307] ? verify_lock_unused+0x140/0x140 [ 1190.811273][T17307] ? do_sys_openat2+0xdd/0x4f0 [ 1190.817520][T17307] ? do_filp_open+0x420/0x420 [ 1190.823862][T17307] do_filp_open+0x1ee/0x420 [ 1190.831305][T17307] ? vfs_tmpfile+0x470/0x470 [ 1190.837283][T17307] ? _raw_spin_unlock+0x24/0x40 [ 1190.844097][T17307] ? alloc_fd+0x590/0x640 [ 1190.850144][T17307] do_sys_openat2+0x14b/0x4f0 [ 1190.855707][T17307] ? do_sys_open+0xe0/0xe0 [ 1190.863481][T17307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1190.870405][T17307] ? lock_chain_count+0x20/0x20 [ 1190.877313][T17307] __x64_sys_openat+0x135/0x160 [ 1190.883602][T17307] do_syscall_64+0x4c/0xa0 [ 1190.888153][T17307] ? clear_bhb_loop+0x60/0xb0 [ 1190.894343][T17307] ? clear_bhb_loop+0x60/0xb0 [ 1190.901598][T17307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1190.908231][T17307] RIP: 0033:0x7f1b85f9e159 [ 1190.913887][T17307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.936848][T17307] RSP: 002b:00007f1b86e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1190.945910][T17307] RAX: ffffffffffffffda RBX: 00007f1b86225fa0 RCX: 00007f1b85f9e159 [ 1190.953915][T17307] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1190.962003][T17307] RBP: 00007f1b8603506b R08: 0000000000000000 R09: 0000000000000000 [ 1190.970112][T17307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.978116][T17307] R13: 00007f1b86226038 R14: 00007f1b86225fa0 R15: 00007fff01782888 [ 1190.988266][T17307] [ 1191.312304][T17325] loop3: detected capacity change from 0 to 8 [ 1192.153263][T17341] FAULT_INJECTION: forcing a failure. [ 1192.153263][T17341] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.185955][T17341] CPU: 0 PID: 17341 Comm: syz.0.3395 Not tainted syzkaller #0 [ 1192.193754][T17341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.203925][T17341] Call Trace: [ 1192.207719][T17341] [ 1192.211601][T17341] dump_stack_lvl+0x188/0x24e [ 1192.217455][T17341] ? show_regs_print_info+0x12/0x12 [ 1192.222897][T17341] ? load_image+0x410/0x410 [ 1192.227699][T17341] ? __might_sleep+0xd0/0xd0 [ 1192.232315][T17341] ? __lock_acquire+0x7c40/0x7c40 [ 1192.237371][T17341] should_fail_ex+0x390/0x4c0 [ 1192.242103][T17341] should_failslab+0x5/0x20 [ 1192.246734][T17341] slab_pre_alloc_hook+0x59/0x300 [ 1192.251803][T17341] ? bpf_init_fs_context+0x4b/0xe0 [ 1192.257047][T17341] __kmem_cache_alloc_node+0x4f/0x270 [ 1192.262451][T17341] ? bpf_init_fs_context+0x4b/0xe0 [ 1192.267595][T17341] kmalloc_trace+0x26/0xe0 [ 1192.272063][T17341] bpf_init_fs_context+0x4b/0xe0 [ 1192.277203][T17341] alloc_fs_context+0x628/0x7d0 [ 1192.282511][T17341] __se_sys_fsopen+0xa0/0x2c0 [ 1192.287244][T17341] do_syscall_64+0x4c/0xa0 [ 1192.291961][T17341] ? clear_bhb_loop+0x60/0xb0 [ 1192.296649][T17341] ? clear_bhb_loop+0x60/0xb0 [ 1192.301341][T17341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.307248][T17341] RIP: 0033:0x7fc4d1d9e159 [ 1192.311756][T17341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.331552][T17341] RSP: 002b:00007fc4d2be7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1192.340776][T17341] RAX: ffffffffffffffda RBX: 00007fc4d2025fa0 RCX: 00007fc4d1d9e159 [ 1192.348756][T17341] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 1192.356749][T17341] RBP: 00007fc4d1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1192.364741][T17341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.372712][T17341] R13: 00007fc4d2026038 R14: 00007fc4d2025fa0 R15: 00007ffcc5248ed8 [ 1192.381261][T17341] [ 1192.409362][T17330] loop4: detected capacity change from 0 to 32768 [ 1192.426749][T17330] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.3390 (17330) [ 1192.450566][T17330] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1192.527712][T17330] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1192.577659][T17330] BTRFS info (device loop4): turning off barriers [ 1192.589262][T17330] BTRFS info (device loop4): turning on async discard [ 1192.604036][T17330] BTRFS info (device loop4): doing ref verification [ 1192.622007][T17330] BTRFS info (device loop4): using free space tree [ 1192.955946][T17330] BTRFS info (device loop4): enabling ssd optimizations [ 1194.198053][T15617] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1194.844675][T16443] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (16443) [ 1196.123290][T17398] loop4: detected capacity change from 0 to 32768 [ 1196.324807][T17398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3408 (17398) [ 1196.882605][T17398] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1196.937592][T17398] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1196.966711][T17398] BTRFS info (device loop4): using free space tree [ 1197.216877][T17411] loop3: detected capacity change from 0 to 40427 [ 1197.231691][T17411] F2FS-fs (loop3): invalid crc value [ 1197.241166][T17411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1197.288107][T17411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1197.369958][T16846] syz-executor: attempt to access beyond end of device [ 1197.369958][T16846] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1197.414659][T17398] BTRFS info (device loop4): enabling ssd optimizations [ 1197.621562][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1197.806076][T12935] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1198.078268][T15617] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1199.243374][T17460] device syzkaller0 entered promiscuous mode [ 1199.291151][T17460] tipc: Started in network mode [ 1199.296093][T17460] tipc: Node identity d69c0079137a, cluster identity 4711 [ 1199.345054][T17460] tipc: Enabled bearer , priority 0 [ 1199.398475][T17459] tipc: Resetting bearer [ 1199.509126][T17459] tipc: Disabling bearer [ 1199.785038][T17470] loop3: detected capacity change from 0 to 512 [ 1199.842396][T17470] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1199.966718][T17470] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.3424: Allocating blocks 41-42 which overlap fs metadata [ 1199.998802][T17475] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1200.057751][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.088209][T17470] Quota error (device loop3): write_blk: dquota write failed [ 1200.117488][T17470] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1200.165097][T17470] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1200.227688][T17470] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.3424: Failed to acquire dquot type 1 [ 1200.275778][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.301047][T17470] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1200.328252][T17483] loop1: detected capacity change from 0 to 128 [ 1200.400214][T17483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1200.427698][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.436641][T17470] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3424: corrupted inode contents [ 1200.452898][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.465814][T17470] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #12: comm syz.3.3424: mark_inode_dirty error [ 1200.472373][T17488] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1200.491818][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.499461][T17470] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3424: corrupted inode contents [ 1200.513838][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.520960][T17470] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.3424: mark_inode_dirty error [ 1200.533291][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.541181][T17470] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3424: corrupted inode contents [ 1200.612525][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.625295][T17470] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1200.636827][T17494] loop2: detected capacity change from 0 to 128 [ 1200.639601][T17490] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1200.684429][T17494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1200.699451][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.730281][T17470] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3424: corrupted inode contents [ 1200.804849][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.863799][T17470] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.3424: mark_inode_dirty error [ 1200.902927][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.920210][T17470] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1200.952151][T17470] EXT4-fs (loop3): Remounting filesystem read-only [ 1200.976814][T17470] EXT4-fs (loop3): 1 truncate cleaned up [ 1201.004577][T17470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1201.210475][T17502] input: syz1 as /devices/virtual/input/input10 [ 1201.404492][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1201.895669][T17515] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1202.386257][T17509] loop3: detected capacity change from 0 to 32768 [ 1202.415062][T17509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3435 (17509) [ 1202.501078][T17509] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1202.538918][T17509] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1202.572392][T17509] BTRFS info (device loop3): using free space tree [ 1203.087588][T17509] BTRFS info (device loop3): enabling ssd optimizations [ 1203.350064][ T4614] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1203.420544][T16846] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1204.621973][T17549] overlayfs: workdir and upperdir must reside under the same mount [ 1204.842799][T17553] loop3: detected capacity change from 0 to 4096 [ 1204.909200][T17555] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1204.947293][T17553] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1204.965254][T17553] NILFS (loop3): trying rollback from an earlier position [ 1204.975910][T17558] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1205.038131][T17553] NILFS (loop3): recovery complete [ 1205.059787][T17559] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1205.381724][T17564] netlink: 'syz.4.3447': attribute type 1 has an invalid length. [ 1205.432707][T17564] device bond1 entered promiscuous mode [ 1205.447792][T17564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1205.534472][T17564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1205.609065][T17564] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1205.631908][T17564] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1205.668149][T17564] bond1: (slave wireguard0): making interface the new active one [ 1205.685304][T17564] device wireguard0 entered promiscuous mode [ 1205.730511][T17564] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1205.740896][T12434] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1205.796693][T17569] loop3: detected capacity change from 0 to 2048 [ 1205.808767][T17569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1205.943599][T17571] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1206.967915][T17575] loop4: detected capacity change from 0 to 32768 [ 1207.001696][T17575] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.3451 (17575) [ 1207.073665][T17575] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1207.137597][T17575] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1207.165568][T17575] BTRFS info (device loop4): using free space tree [ 1207.391231][T17575] BTRFS info (device loop4): enabling ssd optimizations [ 1207.476283][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1207.596825][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1207.639409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.766757][T17608] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1207.834119][T15617] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1208.163614][T17610] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1209.020608][ T26] audit: type=1800 audit(1208.978:460): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3458" name="power" dev="configfs" ino=107068 res=0 errno=0 [ 1209.086299][T17615] loop1: detected capacity change from 0 to 4096 [ 1209.176288][T17615] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1209.200537][T17619] loop2: detected capacity change from 0 to 256 [ 1209.202642][T17620] netlink: 'syz.4.3460': attribute type 1 has an invalid length. [ 1209.221308][T17615] NILFS (loop1): trying rollback from an earlier position [ 1209.363045][T17615] NILFS (loop1): recovery complete [ 1209.379138][T17620] device bond2 entered promiscuous mode [ 1209.408055][T17620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1209.417552][T17625] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1209.494829][T17621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1209.513598][T17621] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1209.527662][T17621] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1209.599138][T17621] bond2: (slave wireguard1): making interface the new active one [ 1209.639588][T17621] device wireguard1 entered promiscuous mode [ 1209.655847][T17628] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1209.658649][T17621] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 1209.857688][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1210.249803][T17645] loop4: detected capacity change from 0 to 128 [ 1210.334213][T17645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1210.576328][T17652] loop3: detected capacity change from 0 to 128 [ 1210.791934][T17652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1211.021461][T17657] loop2: detected capacity change from 0 to 1024 [ 1211.115363][T17657] hfsplus: xattr searching failed [ 1211.228631][T17657] hfsplus: xattr searching failed [ 1211.301602][T17657] hfsplus: b-tree write err: -5, ino 3 [ 1212.144748][T12935] hfsplus: b-tree write err: -5, ino 3 [ 1212.213499][T17667] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1212.330353][T17672] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1212.385723][T17671] loop2: detected capacity change from 0 to 2048 [ 1212.515560][T17671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1212.849001][ T33] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1212.925269][ T33] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1212.961031][ T33] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1212.961031][ T33] [ 1212.978928][ T33] EXT4-fs (loop2): Total free blocks count 0 [ 1212.986228][ T33] EXT4-fs (loop2): Free/Dirty block details [ 1212.994936][ T33] EXT4-fs (loop2): free_blocks=4096 [ 1213.006625][ T33] EXT4-fs (loop2): dirty_blocks=16 [ 1213.043457][ T33] EXT4-fs (loop2): Block reservation details [ 1213.073811][ T33] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1213.136082][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1213.225262][T17683] loop1: detected capacity change from 0 to 128 [ 1213.325388][T17683] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1213.410297][T17683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1214.368323][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1215.063898][T17702] loop2: detected capacity change from 0 to 256 [ 1215.300468][T17704] device syzkaller0 entered promiscuous mode [ 1216.705130][T17715] loop2: detected capacity change from 0 to 32768 [ 1216.726635][T17715] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1218.176635][T16443] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1218.367345][T17732] tipc: Started in network mode [ 1218.645038][T17732] tipc: Node identity 6ae1d76c1afe, cluster identity 4711 [ 1218.872749][T17732] tipc: Enabled bearer , priority 0 [ 1218.925453][T17730] device syzkaller0 entered promiscuous mode [ 1219.057835][T17729] tipc: Resetting bearer [ 1219.297246][T17729] tipc: Disabling bearer [ 1220.282170][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1220.321095][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 1220.347050][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1220.638601][ T26] audit: type=1800 audit(1220.598:461): pid=17758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3497" name="power" dev="configfs" ino=107258 res=0 errno=0 [ 1220.755080][T17752] loop1: detected capacity change from 0 to 32768 [ 1220.822941][T17752] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1220.834581][T17752] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1220.847043][T17752] BTRFS info (device loop1): setting nodatasum [ 1220.857470][T17752] BTRFS info (device loop1): force zlib compression, level 3 [ 1220.867829][T17752] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1220.880813][T17752] BTRFS info (device loop1): use lzo compression, level 0 [ 1220.890224][T17752] BTRFS info (device loop1): turning on flush-on-commit [ 1220.899611][T17752] BTRFS info (device loop1): enabling auto defrag [ 1220.907803][T17758] loop4: detected capacity change from 0 to 4096 [ 1220.908588][T17752] BTRFS info (device loop1): max_inline at 4096 [ 1220.922826][T17752] BTRFS info (device loop1): using free space tree [ 1220.995594][T17758] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1221.008013][T17758] NILFS (loop4): trying rollback from an earlier position [ 1221.029298][T17758] NILFS (loop4): recovery complete [ 1221.050420][T17767] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1221.751084][T17752] BTRFS info (device loop1): enabling ssd optimizations [ 1221.988675][T16715] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1222.478074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.741934][T17792] loop4: detected capacity change from 0 to 2048 [ 1222.845960][T17792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1223.162364][T17802] loop3: detected capacity change from 0 to 128 [ 1223.230414][T17805] loop1: detected capacity change from 0 to 128 [ 1223.340259][T17805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1223.372690][T17802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1227.531294][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1228.515473][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1228.652272][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1228.815389][T17836] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1228.843887][T17836] gadgetfs: bound to dummy_udc driver [ 1229.127660][T12094] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1229.185541][ C0] gadgetfs: connected [ 1229.198272][T12094] gadgetfs: disconnected [ 1229.508106][ C0] gadgetfs: connected [ 1229.515209][T12094] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1229.541893][T12094] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1229.718520][T12094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.936746][ C0] gadgetfs: configuration #1 [ 1230.563898][T17843] loop2: detected capacity change from 0 to 7 [ 1230.594730][T17843] Dev loop2: unable to read RDB block 7 [ 1230.607467][T17843] loop2: unable to read partition table [ 1230.625371][T17836] gadgetfs: suspended from state 3 [ 1230.634939][T12964] usb 1-1: USB disconnect, device number 85 [ 1230.653662][T17836] gadgetfs: disconnected [ 1230.708846][T17843] loop2: partition table beyond EOD, truncated [ 1230.757675][T17843] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1231.455043][T17860] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1231.508316][T17862] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1232.704298][T17874] loop2: detected capacity change from 0 to 128 [ 1233.154639][T17874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1233.573609][T17887] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1233.601960][T17887] gadgetfs: bound to dummy_udc driver [ 1237.167906][T12962] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1237.188651][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1237.262043][ C1] gadgetfs: connected [ 1237.295955][T12962] gadgetfs: disconnected [ 1237.518065][ C1] gadgetfs: connected [ 1237.525935][T12962] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1237.611008][T12962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1237.824325][T12962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.127140][ C1] gadgetfs: configuration #1 [ 1238.694644][T17896] loop4: detected capacity change from 0 to 128 [ 1238.780262][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.787169][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.824408][T17887] gadgetfs: suspended from state 3 [ 1238.856697][ T6853] usb 1-1: USB disconnect, device number 86 [ 1238.866667][T17896] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1239.049882][T17900] xt_hashlimit: size too large, truncated to 1048576 [ 1239.059448][T17900] xt_hashlimit: max too large, truncated to 1048576 [ 1239.783534][T17887] gadgetfs: disconnected [ 1239.791887][T17896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1241.225298][T17919] jffs2: notice: (17919) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1241.891049][T17923] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1242.066702][T17923] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1242.160869][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1242.564707][T17931] loop2: detected capacity change from 0 to 8192 [ 1242.901093][T17931] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1243.187031][T17931] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1243.214186][T17938] loop1: detected capacity change from 0 to 128 [ 1243.319568][T17938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1243.340306][T17931] REISERFS (device loop2): using ordered data mode [ 1243.357555][T17931] reiserfs: using flush barriers [ 1243.372960][T17931] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1024). FSCK? [ 1243.401899][T17931] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1244.550042][T17931] loop2: detected capacity change from 0 to 131072 [ 1244.560842][T17931] XFS: ikeep mount option is deprecated. [ 1244.634467][T17931] XFS (loop2): Mounting V5 Filesystem [ 1244.736518][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1244.792587][T17931] XFS (loop2): Starting recovery (logdev: internal) [ 1244.819250][T17931] XFS (loop2): Ending recovery (logdev: internal) [ 1245.678827][T16364] XFS (loop2): Unmounting Filesystem [ 1245.826908][T17967] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1245.866522][T17967] gadgetfs: bound to dummy_udc driver [ 1246.140100][T12962] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1246.198376][ C1] gadgetfs: connected [ 1246.212561][T12962] gadgetfs: disconnected [ 1246.447563][ C1] gadgetfs: connected [ 1246.464827][T12962] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1246.535134][T12962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1246.725448][T12962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.004247][ C1] gadgetfs: configuration #1 [ 1248.072047][T17973] loop3: detected capacity change from 0 to 32768 [ 1248.087835][T17967] gadgetfs: suspended from state 3 [ 1248.101993][T17973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3548 (17973) [ 1248.128521][T17973] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1248.140227][T17973] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1248.153401][T17973] BTRFS info (device loop3): setting nodatasum [ 1248.161306][T17973] BTRFS info (device loop3): force zlib compression, level 3 [ 1248.170636][T17973] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1248.183448][T17973] BTRFS info (device loop3): use lzo compression, level 0 [ 1248.192139][T17973] BTRFS info (device loop3): turning on flush-on-commit [ 1248.201631][T17973] BTRFS info (device loop3): enabling auto defrag [ 1248.209001][T17973] BTRFS info (device loop3): max_inline at 4096 [ 1248.217731][T17973] BTRFS info (device loop3): using free space tree [ 1248.232458][T11439] usb 1-1: USB disconnect, device number 87 [ 1248.243741][T17967] gadgetfs: disconnected [ 1248.523801][T17973] BTRFS info (device loop3): enabling ssd optimizations [ 1249.120205][T17998] loop1: detected capacity change from 0 to 128 [ 1249.161311][T17998] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1249.254636][T17998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1250.198914][T18015] loop4: detected capacity change from 0 to 1024 [ 1250.349680][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1250.523551][T18015] hfsplus: xattr searching failed [ 1252.179973][T16846] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1252.666752][T18044] netlink: 'syz.4.3562': attribute type 1 has an invalid length. [ 1252.827020][T18044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1252.980601][T18046] bond3: (slave geneve2): making interface the new active one [ 1253.148870][T18046] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1253.187728][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1253.246042][T18046] syz.4.3562 (18046) used greatest stack depth: 19152 bytes left [ 1255.924806][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 1255.934905][T18061] device bridge_slave_1 left promiscuous mode [ 1255.942749][T18061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.404325][T18061] device bridge_slave_0 left promiscuous mode [ 1256.415476][T18061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.429631][T18060] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1256.473413][T18060] gadgetfs: bound to dummy_udc driver [ 1256.564529][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 1257.343785][T12254] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1257.429011][ C0] gadgetfs: connected [ 1257.441411][T12254] gadgetfs: disconnected [ 1257.727811][ C0] gadgetfs: connected [ 1257.740987][T12254] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1257.835280][T12254] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1257.997954][T12254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.298098][ C0] gadgetfs: configuration #1 [ 1258.317445][T18060] gadgetfs: suspended from state 3 [ 1258.335109][T13075] usb 1-1: USB disconnect, device number 88 [ 1258.344672][T18060] gadgetfs: disconnected [ 1258.600788][T18072] device syzkaller0 entered promiscuous mode [ 1261.739589][T18112] jffs2: notice: (18112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1262.668440][T18117] Set syz1 is full, maxelem 2 reached [ 1266.103377][T18094] netlink: 'syz.4.3575': attribute type 1 has an invalid length. [ 1266.149241][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 1266.447783][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 1266.749929][T18150] jffs2: notice: (18150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1267.406272][T18154] loop2: detected capacity change from 0 to 2048 [ 1267.584539][T18155] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1267.614618][T18145] gadgetfs: bound to dummy_udc driver [ 1267.638771][T18154] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1268.064493][T13075] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1268.073913][ C1] gadgetfs: connected [ 1268.079585][T13075] gadgetfs: disconnected [ 1268.207063][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1268.267913][ C1] gadgetfs: connected [ 1268.276147][T13075] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1268.289104][T13075] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1268.317468][T13075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.344516][ C1] gadgetfs: configuration #1 [ 1268.635809][T18145] gadgetfs: suspended from state 3 [ 1268.663808][T12101] usb 1-1: USB disconnect, device number 89 [ 1268.675824][T18145] gadgetfs: disconnected [ 1268.682122][T18176] netlink: 'syz.2.3591': attribute type 1 has an invalid length. [ 1268.843290][T18179] bond2: (slave gretap1): making interface the new active one [ 1268.915637][T18179] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1268.980425][T18176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1269.057776][T18176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1269.525005][T18183] device syzkaller0 entered promiscuous mode [ 1269.711505][T18187] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 1269.782071][T18187] device bond1 entered promiscuous mode [ 1269.788609][T18187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.798388][ T7089] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1269.865043][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1269.953742][T18187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.998065][T18187] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1270.045357][T18187] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1270.099962][T18187] bond1: (slave wireguard0): making interface the new active one [ 1270.127539][T18187] device wireguard0 entered promiscuous mode [ 1270.159068][T18204] loop3: detected capacity change from 0 to 512 [ 1270.171836][T18187] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1270.219481][ T7089] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1270.291555][T18204] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3599: couldn't read orphan inode 26 (err -116) [ 1270.328212][T18204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1270.379528][T18196] bond3 (unregistering): Released all slaves [ 1270.748578][T18217] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3599: iget: bad i_size value: 360287970189639690 [ 1270.898795][T18218] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3599: iget: bad i_size value: 360287970189639690 [ 1271.327430][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1271.342649][T18224] jffs2: notice: (18224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1272.090555][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1272.134650][T18228] device bridge_slave_1 left promiscuous mode [ 1272.146396][T18228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.243616][T18233] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1272.273378][T18233] gadgetfs: bound to dummy_udc driver [ 1272.326862][T18228] device bridge_slave_0 left promiscuous mode [ 1272.417847][T18228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.548243][ T6849] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1273.448237][ C1] gadgetfs: connected [ 1273.477625][ T6849] gadgetfs: disconnected [ 1273.707948][ C1] gadgetfs: connected [ 1273.716768][ T6849] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1273.826948][ T6849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1274.053325][ T6849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.283463][ C1] gadgetfs: configuration #1 [ 1274.438311][T18233] gadgetfs: suspended from state 3 [ 1274.484992][T12101] usb 1-1: USB disconnect, device number 90 [ 1274.494892][T18233] gadgetfs: disconnected [ 1274.928528][ T26] audit: type=1800 audit(1274.888:462): pid=18264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3609" name="power" dev="configfs" ino=108910 res=0 errno=0 [ 1275.814133][T18271] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1275.833430][T18264] loop4: detected capacity change from 0 to 4096 [ 1275.858482][T18271] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1276.003762][T18264] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1276.064690][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 1276.073009][T18264] NILFS (loop4): trying rollback from an earlier position [ 1276.187394][T18264] NILFS (loop4): recovery complete [ 1276.254782][T18282] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1277.570661][T18291] loop2: detected capacity change from 0 to 2048 [ 1277.764534][T18291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1277.840541][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1278.342929][T18312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1278.717164][T18315] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1278.749606][T18315] gadgetfs: bound to dummy_udc driver [ 1278.864867][T18312] bond1 (unregistering): Released all slaves [ 1279.028601][ T4260] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1279.115860][ C1] gadgetfs: connected [ 1279.120803][ T4260] gadgetfs: disconnected [ 1279.298042][ C1] gadgetfs: connected [ 1279.310211][ T4260] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1279.461929][ T4260] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1279.741407][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.115240][ C1] gadgetfs: configuration #1 [ 1280.690670][T18315] gadgetfs: suspended from state 3 [ 1280.700609][T12344] usb 1-1: USB disconnect, device number 91 [ 1280.709384][T18315] gadgetfs: disconnected [ 1280.743543][T18324] ip_tables: iptables: counters copy to user failed while replacing table [ 1280.839158][T18326] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1280.886294][T18326] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1280.974459][T18331] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 1281.923543][ T26] audit: type=1800 audit(1281.878:463): pid=18341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3627" name="power" dev="configfs" ino=108988 res=0 errno=0 [ 1281.939562][T18333] bond1: (slave gretap1): making interface the new active one [ 1282.038399][T18333] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1282.089176][T18338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3626'. [ 1282.118194][T18348] loop4: detected capacity change from 0 to 2048 [ 1282.158747][T18338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1282.310150][T18348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1282.596982][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1283.785999][T18383] ip_tables: iptables: counters copy to user failed while replacing table [ 1283.834190][T18385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 1283.921571][T18386] bond4 (unregistering): Released all slaves [ 1284.032386][T18389] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1284.077793][T18391] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1285.127972][T18399] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1285.153913][T18399] gadgetfs: bound to dummy_udc driver [ 1285.527421][T12962] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1285.586121][ C1] gadgetfs: connected [ 1285.603829][T12962] gadgetfs: disconnected [ 1285.888888][ C1] gadgetfs: connected [ 1285.899665][T12962] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1286.004662][T12962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1286.288997][T12962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.676416][ C1] gadgetfs: configuration #1 [ 1286.929732][T18403] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 1287.048637][T18399] gadgetfs: suspended from state 3 [ 1287.055693][T12101] usb 1-1: USB disconnect, device number 92 [ 1287.087458][T18399] gadgetfs: disconnected [ 1287.271995][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1287.326021][T18403] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1287.898186][ T26] audit: type=1800 audit(1287.858:464): pid=18415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3643" name="power" dev="configfs" ino=109066 res=0 errno=0 [ 1288.173112][T18411] loop3: detected capacity change from 0 to 4096 [ 1288.257041][T18411] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1288.287771][T18411] NILFS (loop3): trying rollback from an earlier position [ 1288.427199][T18411] NILFS (loop3): recovery complete [ 1288.489077][T18434] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1288.839157][T18439] ip_tables: iptables: counters copy to user failed while replacing table [ 1291.697514][T18452] loop1: detected capacity change from 0 to 2048 [ 1291.729982][T18459] netlink: 'syz.3.3657': attribute type 1 has an invalid length. [ 1291.741241][T18452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1291.770950][T18460] loop4: detected capacity change from 0 to 512 [ 1291.841310][T18459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3657'. [ 1291.856732][T18459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1291.878460][T18460] EXT4-fs: Ignoring removed mblk_io_submit option [ 1291.895499][T18460] EXT4-fs: Ignoring removed orlov option [ 1291.939075][T18460] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 1292.752438][T18470] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1292.786898][T18470] gadgetfs: bound to dummy_udc driver [ 1293.137689][T12962] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1293.296880][ C1] gadgetfs: connected [ 1293.311103][T12962] gadgetfs: disconnected [ 1293.597901][ C1] gadgetfs: connected [ 1293.607066][T12962] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1293.708050][T12962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1293.948096][T12962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.392878][ C1] gadgetfs: configuration #1 [ 1294.603551][T18470] gadgetfs: suspended from state 3 [ 1294.612649][T12101] usb 1-1: USB disconnect, device number 93 [ 1294.620353][T18470] gadgetfs: disconnected [ 1294.718432][ T26] audit: type=1800 audit(1294.678:465): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3661" name="power" dev="configfs" ino=108506 res=0 errno=0 [ 1294.794421][T18480] ip_tables: iptables: counters copy to user failed while replacing table [ 1294.853408][T18478] loop3: detected capacity change from 0 to 4096 [ 1294.964001][T18478] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1295.017447][T18478] NILFS (loop3): trying rollback from an earlier position [ 1295.076125][T18484] loop1: detected capacity change from 0 to 2048 [ 1295.126723][T18478] NILFS (loop3): recovery complete [ 1295.161276][T18488] FAULT_INJECTION: forcing a failure. [ 1295.161276][T18488] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.221599][T18489] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1295.227970][T18488] CPU: 1 PID: 18488 Comm: syz.4.3666 Not tainted syzkaller #0 [ 1295.245178][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1295.249151][T18484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1295.260160][T18488] Call Trace: [ 1295.260178][T18488] [ 1295.260187][T18488] dump_stack_lvl+0x188/0x24e [ 1295.260214][T18488] ? show_regs_print_info+0x12/0x12 [ 1295.260231][T18488] ? load_image+0x410/0x410 [ 1295.260255][T18488] ? __might_sleep+0xd0/0xd0 [ 1295.260272][T18488] ? __lock_acquire+0x7c40/0x7c40 [ 1295.307342][T18488] should_fail_ex+0x390/0x4c0 [ 1295.312543][T18488] should_failslab+0x5/0x20 [ 1295.318855][T18488] slab_pre_alloc_hook+0x59/0x300 [ 1295.325250][T18488] kmem_cache_alloc+0x56/0x2f0 [ 1295.331162][T18488] ? security_file_alloc+0x30/0x110 [ 1295.338030][T18488] security_file_alloc+0x30/0x110 [ 1295.343654][T18488] __alloc_file+0xc2/0x230 [ 1295.348672][T18488] alloc_empty_file+0x90/0x180 [ 1295.355159][T18488] alloc_file+0x5b/0x5f0 [ 1295.361186][T18488] alloc_file_pseudo+0x180/0x200 [ 1295.367552][T18488] ? alloc_empty_file_noaccount+0x80/0x80 [ 1295.374253][T18488] ? do_raw_spin_unlock+0x11d/0x230 [ 1295.380604][T18488] ? put_pid+0xc3/0x120 [ 1295.386961][T18488] sock_alloc_file+0xb3/0x240 [ 1295.393913][T18488] __sys_socketpair+0x372/0x540 [ 1295.400386][T18488] __x64_sys_socketpair+0x97/0xb0 [ 1295.407414][T18488] do_syscall_64+0x4c/0xa0 [ 1295.414374][T18488] ? clear_bhb_loop+0x60/0xb0 [ 1295.419527][T18488] ? clear_bhb_loop+0x60/0xb0 [ 1295.424753][T18488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.431641][T18488] RIP: 0033:0x7fdd9a99e159 [ 1295.436982][T18488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.461821][T18488] RSP: 002b:00007fdd9b8ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1295.471346][T18488] RAX: ffffffffffffffda RBX: 00007fdd9ac25fa0 RCX: 00007fdd9a99e159 [ 1295.480468][T18488] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1295.490899][T18488] RBP: 00007fdd9aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1295.500133][T18488] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 1295.509307][T18488] R13: 00007fdd9ac26038 R14: 00007fdd9ac25fa0 R15: 00007ffdc0aa8208 [ 1295.520246][T18488] [ 1298.167818][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1298.275546][T18502] loop3: detected capacity change from 0 to 2048 [ 1298.405512][T18502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1298.570838][T18512] loop2: detected capacity change from 0 to 512 [ 1298.626560][T18512] EXT4-fs: Ignoring removed mblk_io_submit option [ 1298.636765][T18512] EXT4-fs: Ignoring removed orlov option [ 1298.646363][T18512] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 1299.361533][T18519] ip_tables: iptables: counters copy to user failed while replacing table [ 1299.721831][T18517] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1300.047153][ T26] audit: type=1800 audit(1299.998:466): pid=18529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3679" name="power" dev="configfs" ino=109595 res=0 errno=0 [ 1300.087591][T18529] loop3: detected capacity change from 0 to 4096 [ 1300.277501][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.292914][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.370602][T18514] gadgetfs: bound to dummy_udc driver [ 1300.381807][T18529] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1300.436819][T18537] loop1: detected capacity change from 0 to 2048 [ 1300.455392][T18529] NILFS (loop3): trying rollback from an earlier position [ 1300.498028][T18529] NILFS (loop3): recovery complete [ 1300.520424][T18539] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1300.579065][T18537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1300.717480][T12964] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1300.726691][ C1] gadgetfs: connected [ 1300.822285][T12964] gadgetfs: disconnected [ 1301.017749][ C1] gadgetfs: connected [ 1301.025910][T12964] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1301.237505][T12964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1301.262064][T12964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.289310][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1301.687211][ C1] gadgetfs: configuration #1 [ 1301.709443][T18517] gadgetfs: suspended from state 3 [ 1301.717780][T18517] gadgetfs: disconnected [ 1301.723449][T13075] usb 1-1: USB disconnect, device number 94 [ 1303.840497][T18570] loop2: detected capacity change from 0 to 512 [ 1303.883036][T18570] EXT4-fs: Ignoring removed mblk_io_submit option [ 1304.099971][T18570] EXT4-fs: Ignoring removed orlov option [ 1304.162826][T18570] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 1305.130784][T18586] loop4: detected capacity change from 0 to 2048 [ 1305.368020][T18586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1305.804699][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1305.894081][ T26] audit: type=1800 audit(1305.848:467): pid=18602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3696" name="power" dev="configfs" ino=109670 res=0 errno=0 [ 1306.049011][T18606] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1306.073971][T18606] gadgetfs: bound to dummy_udc driver [ 1306.166450][T18598] loop3: detected capacity change from 0 to 4096 [ 1306.677428][T12964] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1306.770765][ C1] gadgetfs: connected [ 1306.783495][T12964] gadgetfs: disconnected [ 1307.077758][ C1] gadgetfs: connected [ 1307.085084][T12964] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1307.126754][T18598] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1307.143741][T12964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1307.262990][T18598] NILFS (loop3): trying rollback from an earlier position [ 1307.303580][T12964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.529596][ C1] gadgetfs: configuration #1 [ 1308.146477][T18598] NILFS (loop3): recovery complete [ 1308.158882][T18615] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1309.547747][T18606] gadgetfs: suspended from state 3 [ 1309.580884][T12101] usb 1-1: USB disconnect, device number 95 [ 1309.588558][T18606] gadgetfs: disconnected [ 1309.743020][T18630] loop1: detected capacity change from 0 to 512 [ 1309.808892][T18630] EXT4-fs: Ignoring removed mblk_io_submit option [ 1309.839090][T18629] loop3: detected capacity change from 0 to 2048 [ 1309.921826][T18630] EXT4-fs: Ignoring removed orlov option [ 1310.030740][T18630] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1310.091831][T18629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1311.591122][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1312.781615][T18663] jffs2: notice: (18663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1312.801742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.250043][T18674] loop3: detected capacity change from 0 to 8192 [ 1314.618007][T18674] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1314.712342][T18674] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1314.731008][T18674] REISERFS (device loop3): using ordered data mode [ 1314.739119][T18674] reiserfs: using flush barriers [ 1314.755689][T18674] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1024). FSCK? [ 1314.780424][T18674] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1314.862419][T18689] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1315.222197][T18686] gadgetfs: bound to dummy_udc driver [ 1318.431227][ T4260] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1318.635925][ C1] gadgetfs: connected [ 1318.652928][ T4260] gadgetfs: disconnected [ 1318.957974][ C1] gadgetfs: connected [ 1318.965880][ T4260] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1319.134059][ T4260] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1319.419413][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.833876][ C1] gadgetfs: configuration #1 [ 1320.298640][T18686] gadgetfs: suspended from state 3 [ 1321.260723][T18699] tipc: Enabling of bearer rejected, failed to enable media [ 1322.757176][T12344] usb 1-1: USB disconnect, device number 96 [ 1322.764326][T18686] gadgetfs: disconnected [ 1322.857134][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 1322.869422][T18720] device bridge_slave_1 left promiscuous mode [ 1322.880266][T18720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.489989][T18720] device bridge_slave_0 left promiscuous mode [ 1323.497177][T18720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.797461][T12964] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1324.129439][T12964] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1324.151075][T12964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.908305][T12964] usb 5-1: config 0 descriptor?? [ 1325.183603][T18725] batman_adv: batadv0: Adding interface: macvtap1 [ 1325.276682][T18750] xt_hashlimit: size too large, truncated to 1048576 [ 1325.284360][T18750] xt_hashlimit: max too large, truncated to 1048576 [ 1325.302135][T18725] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.374501][T18725] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1325.394404][T18749] loop3: detected capacity change from 0 to 2048 [ 1326.530274][T18725] batman_adv: batadv0: Removing interface: macvtap1 [ 1326.581202][T18749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1327.309636][T18765] loop2: detected capacity change from 0 to 128 [ 1327.364697][T18765] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1327.393079][T18765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1328.526966][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1328.881578][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1329.193349][T18794] loop3: detected capacity change from 0 to 128 [ 1329.538046][T18792] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1329.595254][T18792] gadgetfs: bound to dummy_udc driver [ 1329.725923][ T4321] tipc: Left network mode [ 1329.877477][T12254] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1329.910035][ C0] gadgetfs: connected [ 1329.994203][T12254] gadgetfs: disconnected [ 1330.297915][ C0] gadgetfs: connected [ 1330.309095][T12254] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1330.348443][T12964] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1330.357292][T12964] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1330.441068][T12254] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1331.029137][T12254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.404309][ C0] gadgetfs: configuration #1 [ 1331.415508][T12964] [drm:udl_init] *ERROR* Selecting channel failed [ 1331.480180][T18794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1331.516921][T12964] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1331.527029][T12964] [drm] Initialized udl on minor 2 [ 1331.541568][T12964] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1331.560486][T18798] gadgetfs: suspended from state 3 [ 1331.562248][T12964] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1331.593647][ T26] audit: type=1800 audit(1331.548:468): pid=18807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3744" name="power" dev="configfs" ino=109521 res=0 errno=0 [ 1331.764875][T12964] usb 5-1: USB disconnect, device number 16 [ 1331.776994][T13075] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1331.795553][T13075] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1331.807870][T18798] gadgetfs: disconnected [ 1332.848123][T13075] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1332.999572][T13075] usb 1-1: USB disconnect, device number 97 [ 1333.056577][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1333.700304][T18827] xt_hashlimit: size too large, truncated to 1048576 [ 1333.707974][T18827] xt_hashlimit: max too large, truncated to 1048576 [ 1334.707219][T18837] loop3: detected capacity change from 0 to 128 [ 1334.724269][T18837] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1334.856925][T18837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1334.938466][T18839] loop1: detected capacity change from 0 to 2048 [ 1335.332584][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1335.342858][T18851] device bridge_slave_1 left promiscuous mode [ 1335.355082][T18851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.691502][T18851] device bridge_slave_0 left promiscuous mode [ 1335.699895][T18851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.816089][T18839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1335.954252][T18855] loop2: detected capacity change from 0 to 512 [ 1336.155940][T18855] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3754: couldn't read orphan inode 26 (err -116) [ 1336.224358][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1336.301427][T18855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1336.353793][T18868] loop4: detected capacity change from 0 to 128 [ 1336.380356][ T4321] device erspan0 left promiscuous mode [ 1336.404206][ T4321] bridge2: port 1(erspan0) entered disabled state [ 1336.525234][T18868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1336.582147][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1336.743667][T18874] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.3754: iget: bad i_size value: 360287970189639690 [ 1337.520022][T18877] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1337.552270][T18875] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.3754: iget: bad i_size value: 360287970189639690 [ 1337.623010][T18877] gadgetfs: bound to dummy_udc driver [ 1337.889364][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1338.027518][T12254] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1338.066676][ C0] gadgetfs: connected [ 1338.085183][T12254] gadgetfs: disconnected [ 1339.377675][ C0] gadgetfs: connected [ 1339.386323][T12254] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1339.721254][T12254] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1339.734203][T12254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.771427][ T4321] batman_adv: batadv0: Removing interface: gretap1 [ 1339.808546][ T26] audit: type=1800 audit(1339.768:469): pid=18890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3758" name="power" dev="configfs" ino=110649 res=0 errno=0 [ 1340.260500][ C0] gadgetfs: configuration #1 [ 1340.809090][ T4321] bond3: (slave gretap2): Releasing backup interface [ 1341.319127][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1341.572262][T18877] gadgetfs: suspended from state 3 [ 1341.586451][T18877] gadgetfs: disconnected [ 1341.594023][T12101] usb 1-1: USB disconnect, device number 98 [ 1341.636314][T18899] loop3: detected capacity change from 0 to 512 [ 1341.700051][T18904] loop2: detected capacity change from 0 to 7 [ 1341.739747][T18907] xt_hashlimit: size too large, truncated to 1048576 [ 1341.748241][T18907] xt_hashlimit: max too large, truncated to 1048576 [ 1341.839121][T18899] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3763: couldn't read orphan inode 26 (err -116) [ 1341.856739][T18899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1341.868261][T18904] Dev loop2: unable to read RDB block 7 [ 1342.172797][T18904] loop2: unable to read partition table [ 1342.587421][T18911] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 1343.469281][T18904] loop2: partition table beyond EOD, truncated [ 1343.477166][T18904] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1343.714362][T18920] loop2: detected capacity change from 0 to 2048 [ 1343.811942][T18924] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3763: iget: bad i_size value: 360287970189639690 [ 1343.843237][T18924] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3763: iget: bad i_size value: 360287970189639690 [ 1344.159214][T18920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1344.330299][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1344.568110][ T4321] bond0: (slave wlan1): Releasing backup interface [ 1344.614578][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1344.657638][T12254] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1344.731701][T18939] loop3: detected capacity change from 0 to 128 [ 1344.862138][T18939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1344.878910][T12254] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1344.908292][T12254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.939315][T12254] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 017 [ 1345.721568][T18928] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 1346.668170][T12254] (null): failure reading functionality [ 1346.690713][T12254] i2c i2c-1: failure reading functionality [ 1346.713257][T12254] i2c i2c-1: connected i2c-tiny-usb device [ 1346.739671][T12254] usb 5-1: USB disconnect, device number 17 [ 1346.955025][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1347.738857][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'. [ 1349.154466][T18978] xt_hashlimit: size too large, truncated to 1048576 [ 1349.163049][T18978] xt_hashlimit: max too large, truncated to 1048576 [ 1349.265436][ T4321] device hsr_slave_0 left promiscuous mode [ 1349.330303][ T4321] device hsr_slave_1 left promiscuous mode [ 1349.369435][T18982] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1349.396906][T18982] gadgetfs: bound to dummy_udc driver [ 1349.572635][T18985] loop3: detected capacity change from 0 to 2048 [ 1349.748583][T12254] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1349.781278][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.816458][T18985] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1349.851056][ C0] gadgetfs: connected [ 1349.864444][T12254] gadgetfs: disconnected [ 1349.962126][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.138467][ C0] gadgetfs: connected [ 1350.151196][T12254] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1350.163539][ T4321] device bridge_slave_1 left promiscuous mode [ 1350.256998][T12254] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1350.424371][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.513844][T12254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.637899][ T4321] device bridge_slave_0 left promiscuous mode [ 1350.649848][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.674395][ T4321] bond5 (unregistering): Released all slaves [ 1350.694308][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1350.702477][ C0] gadgetfs: configuration #1 [ 1350.712167][T18982] gadgetfs: suspended from state 3 [ 1350.715337][T12254] gadgetfs: suspended from state 3 [ 1350.730474][T18982] gadgetfs: disconnected [ 1350.797640][T12254] usb 1-1: USB disconnect, device number 99 [ 1351.082687][T19001] loop2: detected capacity change from 0 to 128 [ 1351.118243][T18998] loop3: detected capacity change from 0 to 16 [ 1351.150815][T18998] erofs: (device loop3): mounted with root inode @ nid 36. [ 1351.275708][T18998] overlayfs: failed to get redirect (-117) [ 1351.993421][T19001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1353.398356][T19022] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1353.426209][T19022] gadgetfs: bound to dummy_udc driver [ 1353.647513][T19031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.697521][T12344] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1353.737767][ C0] gadgetfs: connected [ 1353.743014][T12344] gadgetfs: disconnected [ 1353.750250][T19031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.894057][ T4321] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1353.918443][T19034] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 1353.938798][ T4321] bond4 (unregistering): Released all slaves [ 1353.967646][ C0] gadgetfs: connected [ 1353.974119][T12344] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1354.036870][T12344] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1354.210583][T12344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.306618][ C0] gadgetfs: configuration #1 [ 1355.278358][T19022] gadgetfs: suspended from state 3 [ 1355.288139][T12964] usb 1-1: USB disconnect, device number 100 [ 1355.295565][T19022] gadgetfs: disconnected [ 1356.585824][T19059] ip_tables: iptables: counters copy to user failed while replacing table [ 1356.912893][ T4321] bond3 (unregistering): Released all slaves [ 1357.160809][ T4321] team0 (unregistering): Port device macvlan2 removed [ 1357.464358][ T4321] bond2 (unregistering): Released all slaves [ 1357.541982][ T4321] bond1 (unregistering): Released all slaves [ 1360.999975][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 1361.123395][T19103] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1361.308821][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 1361.589881][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.596914][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.903384][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.975246][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.150299][T19106] ip_tables: iptables: counters copy to user failed while replacing table [ 1362.324307][T19108] loop1: detected capacity change from 0 to 2048 [ 1362.402366][T19108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1362.568311][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1364.733500][ T4321] bond0 (unregistering): Released all slaves [ 1364.997463][T12101] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1365.045689][T19053] device syzkaller0 entered promiscuous mode [ 1365.060293][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1365.069900][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3800'. [ 1365.230091][T12101] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1365.283831][T12101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.425064][T12101] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 013 [ 1365.486850][T19136] ip_tables: iptables: counters copy to user failed while replacing table [ 1365.669554][T19140] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1366.402361][T12101] (null): failure setting delay to 10us [ 1366.410758][T12101] i2c-tiny-usb: probe of 2-1:1.0 failed with error -5 [ 1366.499979][T19145] loop2: detected capacity change from 0 to 7 [ 1366.518232][T19145] Dev loop2: unable to read RDB block 7 [ 1366.525552][T19145] loop2: unable to read partition table [ 1366.537745][T19145] loop2: partition table beyond EOD, truncated [ 1366.545493][T19145] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1366.554170][T12101] usb 2-1: USB disconnect, device number 13 [ 1368.066622][ T26] audit: type=1800 audit(1368.018:470): pid=19165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3825" name="power" dev="configfs" ino=111015 res=0 errno=0 [ 1368.347226][T19171] ip_tables: iptables: counters copy to user failed while replacing table [ 1368.974826][T19165] loop2: detected capacity change from 0 to 4096 [ 1369.231239][T19165] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1369.295298][T19165] NILFS (loop2): trying rollback from an earlier position [ 1369.421476][T19165] NILFS (loop2): recovery complete [ 1369.473635][T19175] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1370.261809][T19178] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1370.979005][T19183] device syzkaller0 entered promiscuous mode [ 1371.034498][T19183] tipc: Started in network mode [ 1371.038881][T19186] loop3: detected capacity change from 0 to 512 [ 1371.106385][T19183] tipc: Node identity 62fa442ea3e, cluster identity 4711 [ 1371.131999][T19183] tipc: Enabled bearer , priority 0 [ 1371.179911][T19182] tipc: Resetting bearer [ 1371.194215][T19186] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3833: couldn't read orphan inode 26 (err -116) [ 1371.221697][T19186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1371.269306][T19182] tipc: Disabling bearer [ 1371.568519][T12096] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1372.162788][T19201] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3833: iget: bad i_size value: 360287970189639690 [ 1372.252658][T19202] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3833: iget: bad i_size value: 360287970189639690 [ 1372.728772][T12096] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1372.756044][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1372.757937][T12096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.777907][T12096] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 018 [ 1374.032847][T19218] ip_tables: iptables: counters copy to user failed while replacing table [ 1374.058843][T12096] (null): failure setting delay to 10us [ 1374.064923][T12096] i2c-tiny-usb: probe of 5-1:1.0 failed with error -5 [ 1374.771619][T12096] usb 5-1: USB disconnect, device number 18 [ 1374.787707][T19221] Set syz1 is full, maxelem 2 reached [ 1374.924208][ T26] audit: type=1800 audit(1374.878:471): pid=19223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3841" name="power" dev="configfs" ino=110569 res=0 errno=0 [ 1375.060683][T19226] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1375.814000][T19223] loop2: detected capacity change from 0 to 4096 [ 1375.885239][T19228] binder_alloc: 19227: binder_alloc_buf, no vma [ 1375.948064][T19234] device syzkaller0 entered promiscuous mode [ 1375.961584][T19234] tipc: Enabled bearer , priority 0 [ 1375.995600][T19223] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1376.027759][T19233] tipc: Resetting bearer [ 1376.067443][T19223] NILFS (loop2): trying rollback from an earlier position [ 1376.163220][T19233] tipc: Disabling bearer [ 1376.167097][T19223] NILFS (loop2): recovery complete [ 1376.276875][T19239] serio: Serial port ptm0 [ 1376.389921][T19241] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1377.502909][T19257] ip_tables: iptables: counters copy to user failed while replacing table [ 1377.580335][T19250] loop4: detected capacity change from 0 to 32768 [ 1377.592155][T19250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3850 (19250) [ 1377.616195][T19250] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1377.627563][T19250] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1377.636414][T19250] BTRFS info (device loop4): setting nodatasum [ 1377.642964][T19250] BTRFS info (device loop4): force zlib compression, level 3 [ 1377.651631][T19250] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1377.662350][T19250] BTRFS info (device loop4): use lzo compression, level 0 [ 1377.669831][T19250] BTRFS info (device loop4): turning on flush-on-commit [ 1377.677188][T19250] BTRFS info (device loop4): enabling auto defrag [ 1377.683923][T19250] BTRFS info (device loop4): max_inline at 4096 [ 1377.691179][T19250] BTRFS info (device loop4): using free space tree [ 1378.292482][T19250] BTRFS info (device loop4): enabling ssd optimizations [ 1378.517035][T19280] loop3: detected capacity change from 0 to 128 [ 1378.819042][T19280] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1378.995568][T19283] loop2: detected capacity change from 0 to 2048 [ 1379.013002][T15617] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1379.027673][T12964] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1379.027706][T19280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1379.072306][T19283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1379.371708][T16443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (16443) [ 1379.432591][T12964] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1379.453052][T12964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.500194][T12964] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 101 [ 1379.938161][T12964] (null): failure setting delay to 10us [ 1379.944131][T12964] i2c-tiny-usb: probe of 1-1:1.0 failed with error -5 [ 1379.964757][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1379.974204][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1379.974901][T12964] usb 1-1: USB disconnect, device number 101 [ 1380.284006][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1381.258930][T19315] device syzkaller0 entered promiscuous mode [ 1382.007113][T19315] tipc: Started in network mode [ 1382.024589][T19315] tipc: Node identity 2e788fa47217, cluster identity 4711 [ 1382.037275][T19315] tipc: Enabled bearer , priority 0 [ 1382.057474][T19313] tipc: Resetting bearer [ 1382.148183][T19313] tipc: Disabling bearer [ 1382.196054][ T26] audit: type=1800 audit(1382.148:472): pid=19329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3865" name="power" dev="configfs" ino=111717 res=0 errno=0 [ 1382.296685][T19331] ip_tables: iptables: counters copy to user failed while replacing table [ 1382.455356][T19333] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3867'. [ 1382.599923][T19337] loop2: detected capacity change from 0 to 7 [ 1382.650032][T19337] Dev loop2: unable to read RDB block 7 [ 1382.655750][T19337] loop2: AHDI p1 p2 p3 [ 1382.707060][T19342] loop4: detected capacity change from 0 to 512 [ 1382.718631][T19337] loop2: partition table partially beyond EOD, truncated [ 1382.746922][T19337] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1382.767818][T19337] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1382.790451][T19342] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3871: couldn't read orphan inode 26 (err -116) [ 1382.867887][T19342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1383.034988][T19339] md: pers->run() failed ... [ 1383.276351][T19351] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.3871: iget: bad i_size value: 360287970189639690 [ 1383.686194][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1384.079192][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1384.466869][T19364] device syzkaller0 entered promiscuous mode [ 1384.479953][T19364] tipc: Enabled bearer , priority 0 [ 1384.587999][T19364] tipc: Resetting bearer [ 1384.968751][T19363] tipc: Resetting bearer [ 1385.279010][T19370] ip_tables: iptables: counters copy to user failed while replacing table [ 1385.295870][T19363] tipc: Disabling bearer [ 1385.297592][ T6849] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1385.348191][ T26] audit: type=1800 audit(1385.308:473): pid=19372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3879" name="power" dev="configfs" ino=111215 res=0 errno=0 [ 1385.540209][ T6849] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1385.589513][ T6849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.651170][ T6849] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 030 [ 1385.780855][T19385] xt_hashlimit: size too large, truncated to 1048576 [ 1385.789087][T19385] xt_hashlimit: max too large, truncated to 1048576 [ 1387.630323][T19390] netlink: 'syz.4.3886': attribute type 1 has an invalid length. [ 1387.807994][ T6849] (null): failure setting delay to 10us [ 1387.814204][ T6849] i2c-tiny-usb: probe of 4-1:1.0 failed with error -5 [ 1387.829690][T19390] bond4: (slave gretap1): making interface the new active one [ 1388.022977][T19390] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1388.228907][ T6849] usb 4-1: USB disconnect, device number 30 [ 1388.383724][T19404] Set syz1 is full, maxelem 2 reached [ 1388.406272][T19402] loop3: detected capacity change from 0 to 128 [ 1388.429080][T19402] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1389.682089][T19402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1389.738038][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 1390.396883][T19420] device syzkaller0 entered promiscuous mode [ 1390.419369][T19420] tipc: Enabled bearer , priority 0 [ 1390.459299][T19420] tipc: Resetting bearer [ 1390.504152][T19419] tipc: Resetting bearer [ 1391.019058][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1391.027366][ T26] audit: type=1800 audit(1390.978:474): pid=19434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3894" name="power" dev="configfs" ino=111296 res=0 errno=0 [ 1391.088250][T19419] tipc: Disabling bearer [ 1391.224999][T19434] loop4: detected capacity change from 0 to 4096 [ 1391.275971][T19434] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1391.336506][T19434] NILFS (loop4): trying rollback from an earlier position [ 1391.389114][T19434] NILFS (loop4): recovery complete [ 1391.420644][T19442] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1391.511618][T19445] xt_hashlimit: size too large, truncated to 1048576 [ 1391.519230][T19445] xt_hashlimit: max too large, truncated to 1048576 [ 1392.009510][T19451] loop3: detected capacity change from 0 to 512 [ 1392.076561][T19451] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3899: couldn't read orphan inode 26 (err -116) [ 1392.101536][T19451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1392.432201][T19459] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3899: iget: bad i_size value: 360287970189639690 [ 1392.538200][T19460] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3899: iget: bad i_size value: 360287970189639690 [ 1392.979522][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1393.007692][ T6853] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1393.091744][T19465] netlink: 'syz.2.3901': attribute type 1 has an invalid length. [ 1393.144099][T19467] Set syz1 is full, maxelem 2 reached [ 1393.155723][ T4437] tipc: Left network mode [ 1393.230407][T19449] loop4: detected capacity change from 0 to 32768 [ 1393.257587][ T6853] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1393.297168][ T6853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.497571][T19449] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1393.517869][T19449] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1394.677244][ T6853] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 014 [ 1395.525563][T19449] BTRFS info (device loop4): setting nodatasum [ 1395.567691][ T9437] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1395.576438][ T9437] Bluetooth: hci5: Injecting HCI hardware error event [ 1395.587400][ T4281] Bluetooth: hci5: hardware error 0x00 [ 1395.620040][T19449] BTRFS info (device loop4): force zlib compression, level 3 [ 1395.627818][T19449] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1395.637412][T19449] BTRFS info (device loop4): use lzo compression, level 0 [ 1395.646789][T19449] BTRFS info (device loop4): turning on flush-on-commit [ 1395.654330][T19449] BTRFS info (device loop4): enabling auto defrag [ 1395.659949][ T6853] (null): failure setting delay to 10us [ 1395.661556][T19449] BTRFS info (device loop4): max_inline at 4096 [ 1395.661587][T19449] BTRFS info (device loop4): using free space tree [ 1395.796919][ T6853] i2c-tiny-usb: probe of 2-1:1.0 failed with error -5 [ 1395.828417][ T6853] usb 2-1: USB disconnect, device number 14 [ 1396.342334][T19449] BTRFS error (device loop4): open_ctree failed: -12 [ 1396.342690][T16440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (16440) [ 1396.394614][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3903'. [ 1396.666149][T19515] loop2: detected capacity change from 0 to 4096 [ 1396.708268][ T26] audit: type=1800 audit(1396.668:475): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3908" name="power" dev="configfs" ino=111930 res=0 errno=0 [ 1396.728978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1396.736698][T19515] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1396.789538][T19515] NILFS (loop2): trying rollback from an earlier position [ 1396.850104][T19513] loop3: detected capacity change from 0 to 4096 [ 1396.917874][T19515] NILFS (loop2): recovery complete [ 1396.924141][T19513] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1396.978055][T19513] NILFS (loop3): trying rollback from an earlier position [ 1396.991549][T19520] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1397.177555][T19513] NILFS (loop3): recovery complete [ 1397.218380][T19525] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1397.987845][ T4281] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1398.198247][T19534] netlink: 'syz.1.3915': attribute type 1 has an invalid length. [ 1398.276588][T19535] bond2: (slave gretap1): making interface the new active one [ 1398.285837][T19535] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1400.577524][ T4437] bond1: (slave gretap1): Releasing backup interface [ 1400.610313][ T4437] batman_adv: batadv0: Removing interface: gretap2 [ 1400.634378][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1400.643627][T19560] device bridge_slave_1 left promiscuous mode [ 1400.651701][T19560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.661623][T19560] device bridge_slave_0 left promiscuous mode [ 1400.668641][T19560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.993633][T19566] loop2: detected capacity change from 0 to 7 [ 1401.042474][T16443] Dev loop2: unable to read RDB block 7 [ 1401.051482][T16443] loop2: AHDI p1 p2 p3 [ 1401.065967][T16443] loop2: partition table partially beyond EOD, truncated [ 1401.091606][T16443] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1401.113596][T16443] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1401.202353][ T6849] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1401.204603][T19566] Dev loop2: unable to read RDB block 7 [ 1401.235482][T19566] loop2: AHDI p1 p2 p3 [ 1401.259295][T19566] loop2: partition table partially beyond EOD, truncated [ 1401.266775][T19566] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1401.987691][T19566] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1403.183227][ T6849] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1403.208003][ T6849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.270331][ T6849] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 031 [ 1403.399273][ T4437] device hsr_slave_0 left promiscuous mode [ 1403.408121][ T4437] device hsr_slave_1 left promiscuous mode [ 1403.446281][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.454132][ T26] audit: type=1800 audit(1403.398:476): pid=19576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3926" name="power" dev="configfs" ino=111984 res=0 errno=0 [ 1403.488540][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.516048][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.526223][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.538482][ T6849] (null): failure setting delay to 10us [ 1403.544199][ T6849] i2c-tiny-usb: probe of 4-1:1.0 failed with error -5 [ 1403.578235][ T4437] device bridge_slave_1 left promiscuous mode [ 1403.584567][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.594503][ T6849] usb 4-1: USB disconnect, device number 31 [ 1403.613014][T19576] loop4: detected capacity change from 0 to 4096 [ 1403.670226][T19576] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1403.693127][ T4437] device bridge_slave_0 left promiscuous mode [ 1403.700119][T19576] NILFS (loop4): trying rollback from an earlier position [ 1403.703035][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.740123][T19576] NILFS (loop4): recovery complete [ 1403.768406][T19583] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1403.842093][ T4437] device veth1_macvtap left promiscuous mode [ 1403.849475][ T4437] device veth0_macvtap left promiscuous mode [ 1403.877211][ T4437] device veth1_vlan left promiscuous mode [ 1403.900672][ T4437] device veth0_vlan left promiscuous mode [ 1404.525447][ T4437] bond5 (unregistering): Released all slaves [ 1404.555867][ T4437] bond4 (unregistering): Released all slaves [ 1406.463895][ T4437] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1406.609538][ T4437] bond3 (unregistering): Released all slaves [ 1406.708935][T19627] loop2: detected capacity change from 0 to 7 [ 1406.716087][T19627] Dev loop2: unable to read RDB block 7 [ 1406.724270][T19627] loop2: AHDI p1 p2 p3 [ 1406.733676][T19627] loop2: partition table partially beyond EOD, truncated [ 1406.743648][T19627] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1406.756372][T19627] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1406.924131][T19630] loop3: detected capacity change from 0 to 512 [ 1407.006105][ T4437] bond2 (unregistering): Released all slaves [ 1407.016881][T19630] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3937: couldn't read orphan inode 26 (err -116) [ 1407.033111][T19630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1407.045350][ T4437] bond1 (unregistering): Released all slaves [ 1407.370907][T19635] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.3937: iget: bad i_size value: 360287970189639690 [ 1407.396652][T19633] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 1407.871043][T16846] EXT4-fs (loop3): unmounting filesystem. [ 1408.126664][ T26] audit: type=1800 audit(1408.078:477): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3940" name="power" dev="configfs" ino=112057 res=0 errno=0 [ 1408.191677][T19642] loop3: detected capacity change from 0 to 4096 [ 1408.223905][T19642] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1408.269146][T19642] NILFS (loop3): trying rollback from an earlier position [ 1408.357694][T19642] NILFS (loop3): recovery complete [ 1408.381920][T19643] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1408.385343][T19638] loop1: detected capacity change from 0 to 32768 [ 1408.568614][T19638] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1408.617149][T19638] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1408.647478][T19638] BTRFS info (device loop1): setting nodatasum [ 1408.678453][T19638] BTRFS info (device loop1): force zlib compression, level 3 [ 1408.685954][T19638] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1408.731667][T19638] BTRFS info (device loop1): use lzo compression, level 0 [ 1408.746110][T19638] BTRFS info (device loop1): turning on flush-on-commit [ 1408.769364][T19638] BTRFS info (device loop1): enabling auto defrag [ 1408.775934][T19638] BTRFS info (device loop1): max_inline at 4096 [ 1408.782668][T19638] BTRFS info (device loop1): using free space tree [ 1408.926345][T19638] BTRFS info (device loop1): enabling ssd optimizations [ 1408.987649][T13075] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1409.183726][T13075] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1409.197419][T13075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.226193][T13075] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 032 [ 1409.237852][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 1409.343270][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 1409.407065][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.498121][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.566954][T13075] (null): failure setting delay to 10us [ 1409.575688][T13075] i2c-tiny-usb: probe of 4-1:1.0 failed with error -5 [ 1409.585494][T13075] usb 4-1: USB disconnect, device number 32 [ 1410.085676][T16715] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1411.467029][ T4437] bond0 (unregistering): Released all slaves [ 1411.931594][T19686] loop1: detected capacity change from 0 to 512 [ 1411.985800][T19591] tipc: Enabled bearer , priority 0 [ 1412.192507][T19587] device syzkaller0 entered promiscuous mode [ 1412.200254][T19622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 1412.355715][T19686] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1412.529434][T19691] loop2: detected capacity change from 0 to 512 [ 1412.596379][T19587] tipc: Resetting bearer [ 1412.808060][T19698] netlink: 'syz.1.3946': attribute type 1 has an invalid length. [ 1412.886879][T19587] tipc: Disabling bearer [ 1413.010014][T19691] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3949: couldn't read orphan inode 26 (err -116) [ 1413.068297][T12258] tipc: Node number set to 81393540 [ 1413.109818][T19691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1413.373799][ T26] audit: type=1800 audit(1413.328:478): pid=19703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3951" name="power" dev="configfs" ino=111586 res=0 errno=0 [ 1413.682299][T19709] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.3949: iget: bad i_size value: 360287970189639690 [ 1413.704095][T19709] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.3949: iget: bad i_size value: 360287970189639690 [ 1416.021764][T19697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 1416.209400][T16364] EXT4-fs (loop2): unmounting filesystem. [ 1416.248922][T12258] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1417.051647][T19726] jffs2: notice: (19726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1417.204594][T19732] loop2: detected capacity change from 0 to 7 [ 1417.227614][T12258] usb 4-1: device not accepting address 33, error -71 [ 1417.234917][T16443] Dev loop2: unable to read RDB block 7 [ 1417.253789][T16443] loop2: AHDI p1 p2 p3 [ 1417.272616][T16443] loop2: partition table partially beyond EOD, truncated [ 1417.300451][T16443] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1417.326033][T16443] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1417.382423][T19732] Dev loop2: unable to read RDB block 7 [ 1417.410783][T19732] loop2: AHDI p1 p2 p3 [ 1417.426255][T19738] device syzkaller0 entered promiscuous mode [ 1417.432843][T19732] loop2: partition table partially beyond EOD, truncated [ 1417.448701][T19732] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1417.470862][T19738] tipc: Enabled bearer , priority 0 [ 1417.500937][T19732] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1417.546459][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1417.600125][T19738] tipc: Resetting bearer [ 1417.876318][T19737] tipc: Resetting bearer [ 1418.310798][ T4281] Bluetooth: Frame is too long (len 16, expected len 4) [ 1418.365042][T19737] tipc: Disabling bearer [ 1418.442157][ T4437] tipc: Left network mode [ 1418.706070][T19756] loop1: detected capacity change from 0 to 512 [ 1418.782305][ T26] audit: type=1800 audit(1418.738:479): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3968" name="power" dev="configfs" ino=112156 res=0 errno=0 [ 1418.872720][T19756] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3967: couldn't read orphan inode 26 (err -116) [ 1418.891085][T19756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1419.306317][T19767] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.3967: iget: bad i_size value: 360287970189639690 [ 1419.340794][T19767] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.3967: iget: bad i_size value: 360287970189639690 [ 1419.818995][T12258] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1419.886540][T16715] EXT4-fs (loop1): unmounting filesystem. [ 1420.102356][T19776] jffs2: notice: (19776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1420.133644][T12258] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1420.174557][T19780] loop2: detected capacity change from 0 to 7 [ 1420.181956][T16440] Dev loop2: unable to read RDB block 7 [ 1420.192343][T12258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.201470][T16440] loop2: AHDI p1 p2 p3 [ 1420.205946][T16440] loop2: partition table partially beyond EOD, truncated [ 1420.383970][T16440] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1420.424992][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3973'. [ 1421.110123][T16440] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1421.125526][T12258] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 035 [ 1421.208157][T19788] netlink: 'syz.4.3976': attribute type 1 has an invalid length. [ 1422.610605][ T4437] batman_adv: batadv0: Removing interface: gretap1 [ 1422.679428][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3976'. [ 1422.704616][T12258] (null): failure setting delay to 10us [ 1422.713736][T12258] i2c-tiny-usb: probe of 4-1:1.0 failed with error -5 [ 1422.726659][T19788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3976'. [ 1422.785255][T12258] usb 4-1: USB disconnect, device number 35 [ 1422.815472][T19788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1423.033196][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.039647][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.199364][ T4281] Bluetooth: Frame is too long (len 16, expected len 4) [ 1423.330261][T19809] loop4: detected capacity change from 0 to 512 [ 1423.369650][ T26] audit: type=1800 audit(1423.328:480): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3981" name="power" dev="configfs" ino=112758 res=0 errno=0 [ 1423.541446][T19809] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3982: couldn't read orphan inode 26 (err -116) [ 1423.546691][T19812] loop3: detected capacity change from 0 to 4096 [ 1423.589081][T19809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1423.595292][T19812] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1423.595320][T19812] NILFS (loop3): trying rollback from an earlier position [ 1423.659791][T19812] NILFS (loop3): recovery complete [ 1423.700492][T19819] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1424.028809][T19822] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.3982: iget: bad i_size value: 360287970189639690 [ 1424.054309][T19822] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.3982: iget: bad i_size value: 360287970189639690 [ 1425.025411][T19829] loop2: detected capacity change from 0 to 7 [ 1425.051855][T15617] EXT4-fs (loop4): unmounting filesystem. [ 1425.093397][T19827] jffs2: notice: (19827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1425.117891][T19829] Dev loop2: unable to read RDB block 7 [ 1425.180985][T19829] loop2: AHDI p1 p2 p3 [ 1425.185253][T19829] loop2: partition table partially beyond EOD, truncated [ 1425.196272][ T4437] ------------[ cut here ]------------ [ 1425.202753][ T4437] WARNING: CPU: 0 PID: 4437 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b14/0x2020 [ 1425.212736][ T4437] Modules linked in: [ 1425.216691][ T4437] CPU: 0 PID: 4437 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1425.224500][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.234662][ T4437] Workqueue: netns cleanup_net [ 1425.239885][ T4437] RIP: 0010:ieee80211_do_stop+0x1b14/0x2020 [ 1425.245933][ T4437] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d2 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7c 3f d5 f7 <0f> 0b e9 11 e9 ff ff e8 70 3f d5 f7 48 c7 c7 00 fd a6 8b 89 de e8 [ 1425.265779][ T4437] RSP: 0018:ffffc900048af3e0 EFLAGS: 00010293 [ 1425.272690][ T4437] RAX: ffffffff89acf364 RBX: 0000000000000001 RCX: ffff888025488000 [ 1425.280799][ T4437] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1425.288836][ T4437] RBP: ffffc900048af5c8 R08: ffffc900048af287 R09: 1ffff92000915e50 [ 1425.296825][ T4437] R10: dffffc0000000000 R11: fffff52000915e51 R12: ffffc900048af530 [ 1425.304859][ T4437] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880797e2760 [ 1425.312928][ T4437] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1425.321945][ T4437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1425.328682][ T4437] CR2: 00007f1b86d5da08 CR3: 000000007c3d6000 CR4: 00000000003506f0 [ 1425.336671][ T4437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1425.344722][ T4437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1425.352919][ T4437] Call Trace: [ 1425.356221][ T4437] [ 1425.359277][ T4437] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1425.365375][ T4437] ? rcu_is_watching+0x11/0xa0 [ 1425.370272][ T4437] ? __mutex_lock+0x1ab/0xae0 [ 1425.374994][ T4437] ? ieee80211_sdata_stop+0x80/0x80 [ 1425.380291][ T4437] ? mutex_lock_nested+0x10/0x10 [ 1425.385249][ T4437] ? __local_bh_enable_ip+0x136/0x1c0 [ 1425.390687][ T4437] ? dev_deactivate_many+0xb49/0xcd0 [ 1425.395996][ T4437] ieee80211_stop+0x41f/0x490 [ 1425.400762][ T4437] ? dev_deactivate_many+0x242/0xcd0 [ 1425.406064][ T4437] ? ieee80211_open+0x200/0x200 [ 1425.410995][ T4437] __dev_close_many+0x1d1/0x2b0 [ 1425.415877][ T4437] ? dev_close_many+0x400/0x400 [ 1425.420828][ T4437] dev_close_many+0x21c/0x400 [ 1425.425521][ T4437] ? __dev_open+0x430/0x430 [ 1425.430099][ T4437] ? __mutex_trylock_common+0x15c/0x260 [ 1425.435809][ T4437] dev_close+0x154/0x210 [ 1425.440130][ T4437] ? __dev_close_many+0x2b0/0x2b0 [ 1425.445230][ T4437] ? trace_contention_end+0x5f/0x170 [ 1425.450602][ T4437] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 1425.456848][ T4437] ieee80211_remove_interfaces+0x192/0x700 [ 1425.462735][ T4437] ? ieee80211_unregister_hw+0x51/0x290 [ 1425.468709][ T4437] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1425.474659][ T4437] ? ieee80211_do_stop+0x2020/0x2020 [ 1425.480039][ T4437] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1425.486425][ T4437] ieee80211_unregister_hw+0x59/0x290 [ 1425.492072][ T4437] mac80211_hwsim_del_radio+0x285/0x480 [ 1425.497689][ T4437] ? rhashtable_remove_fast+0xc50/0xc50 [ 1425.503676][ T4437] hwsim_exit_net+0x589/0x650 [ 1425.508404][ T4437] ? hwsim_init_net+0x80/0x80 [ 1425.513080][ T4437] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1425.519008][ T4437] cleanup_net+0x703/0xba0 [ 1425.523426][ T4437] ? ops_free_list+0x3b0/0x3b0 [ 1425.528304][ T4437] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1425.534725][ T4437] ? _raw_spin_unlock+0x40/0x40 [ 1425.539611][ T4437] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1425.544808][ T4437] ? process_one_work+0x7b4/0x1160 [ 1425.549974][ T4437] process_one_work+0x8ab/0x1160 [ 1425.554919][ T4437] ? worker_detach_from_pool+0x240/0x240 [ 1425.560621][ T4437] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1425.565665][ T4437] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1425.571292][ T4437] ? wq_worker_running+0x97/0x190 [ 1425.576329][ T4437] worker_thread+0xaf5/0x12a0 [ 1425.581048][ T4437] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1425.586945][ T4437] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1425.593035][ T4437] kthread+0x29d/0x330 [ 1425.597117][ T4437] ? worker_clr_flags+0x1a0/0x1a0 [ 1425.602187][ T4437] ? kthread_blkcg+0xd0/0xd0 [ 1425.606777][ T4437] ret_from_fork+0x1f/0x30 [ 1425.611253][ T4437] [ 1425.614305][ T4437] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1425.621584][ T4437] CPU: 0 PID: 4437 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1425.629244][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.639310][ T4437] Workqueue: netns cleanup_net [ 1425.644110][ T4437] Call Trace: [ 1425.647423][ T4437] [ 1425.650354][ T4437] dump_stack_lvl+0x188/0x24e [ 1425.655048][ T4437] ? memcpy+0x3c/0x60 [ 1425.659028][ T4437] ? show_regs_print_info+0x12/0x12 [ 1425.664328][ T4437] ? load_image+0x410/0x410 [ 1425.668864][ T4437] panic+0x2d3/0x710 [ 1425.672779][ T4437] ? bpf_jit_dump+0xd0/0xd0 [ 1425.677321][ T4437] ? ret_from_fork+0x1f/0x30 [ 1425.682012][ T4437] __warn+0x2f8/0x4f0 [ 1425.686071][ T4437] ? ieee80211_do_stop+0x1b14/0x2020 [ 1425.691519][ T4437] ? ieee80211_do_stop+0x1b14/0x2020 [ 1425.696815][ T4437] report_bug+0x2ba/0x4f0 [ 1425.701581][ T4437] ? ieee80211_do_stop+0x1b14/0x2020 [ 1425.706881][ T4437] handle_bug+0x3a/0x70 [ 1425.711034][ T4437] exc_invalid_op+0x16/0x40 [ 1425.715535][ T4437] asm_exc_invalid_op+0x16/0x20 [ 1425.720376][ T4437] RIP: 0010:ieee80211_do_stop+0x1b14/0x2020 [ 1425.726847][ T4437] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d2 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7c 3f d5 f7 <0f> 0b e9 11 e9 ff ff e8 70 3f d5 f7 48 c7 c7 00 fd a6 8b 89 de e8 [ 1425.746903][ T4437] RSP: 0018:ffffc900048af3e0 EFLAGS: 00010293 [ 1425.752968][ T4437] RAX: ffffffff89acf364 RBX: 0000000000000001 RCX: ffff888025488000 [ 1425.760945][ T4437] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1425.768913][ T4437] RBP: ffffc900048af5c8 R08: ffffc900048af287 R09: 1ffff92000915e50 [ 1425.776908][ T4437] R10: dffffc0000000000 R11: fffff52000915e51 R12: ffffc900048af530 [ 1425.784883][ T4437] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880797e2760 [ 1425.792962][ T4437] ? ieee80211_do_stop+0x1b14/0x2020 [ 1425.798271][ T4437] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1425.804264][ T4437] ? rcu_is_watching+0x11/0xa0 [ 1425.809032][ T4437] ? __mutex_lock+0x1ab/0xae0 [ 1425.813697][ T4437] ? ieee80211_sdata_stop+0x80/0x80 [ 1425.818904][ T4437] ? mutex_lock_nested+0x10/0x10 [ 1425.823855][ T4437] ? __local_bh_enable_ip+0x136/0x1c0 [ 1425.829229][ T4437] ? dev_deactivate_many+0xb49/0xcd0 [ 1425.834511][ T4437] ieee80211_stop+0x41f/0x490 [ 1425.839181][ T4437] ? dev_deactivate_many+0x242/0xcd0 [ 1425.844460][ T4437] ? ieee80211_open+0x200/0x200 [ 1425.849306][ T4437] __dev_close_many+0x1d1/0x2b0 [ 1425.854155][ T4437] ? dev_close_many+0x400/0x400 [ 1425.859014][ T4437] dev_close_many+0x21c/0x400 [ 1425.863712][ T4437] ? __dev_open+0x430/0x430 [ 1425.868232][ T4437] ? __mutex_trylock_common+0x15c/0x260 [ 1425.873803][ T4437] dev_close+0x154/0x210 [ 1425.878053][ T4437] ? __dev_close_many+0x2b0/0x2b0 [ 1425.883155][ T4437] ? trace_contention_end+0x5f/0x170 [ 1425.888455][ T4437] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 1425.894748][ T4437] ieee80211_remove_interfaces+0x192/0x700 [ 1425.900598][ T4437] ? ieee80211_unregister_hw+0x51/0x290 [ 1425.906149][ T4437] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1425.912039][ T4437] ? ieee80211_do_stop+0x2020/0x2020 [ 1425.917422][ T4437] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1425.923788][ T4437] ieee80211_unregister_hw+0x59/0x290 [ 1425.929170][ T4437] mac80211_hwsim_del_radio+0x285/0x480 [ 1425.934719][ T4437] ? rhashtable_remove_fast+0xc50/0xc50 [ 1425.940282][ T4437] hwsim_exit_net+0x589/0x650 [ 1425.944977][ T4437] ? hwsim_init_net+0x80/0x80 [ 1425.949693][ T4437] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1425.955530][ T4437] cleanup_net+0x703/0xba0 [ 1425.959978][ T4437] ? ops_free_list+0x3b0/0x3b0 [ 1425.964771][ T4437] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1425.970876][ T4437] ? _raw_spin_unlock+0x40/0x40 [ 1425.975831][ T4437] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1425.981056][ T4437] ? process_one_work+0x7b4/0x1160 [ 1425.986271][ T4437] process_one_work+0x8ab/0x1160 [ 1425.991224][ T4437] ? worker_detach_from_pool+0x240/0x240 [ 1425.996863][ T4437] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1426.001900][ T4437] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1426.007531][ T4437] ? wq_worker_running+0x97/0x190 [ 1426.012544][ T4437] worker_thread+0xaf5/0x12a0 [ 1426.017228][ T4437] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1426.023134][ T4437] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1426.029050][ T4437] kthread+0x29d/0x330 [ 1426.033104][ T4437] ? worker_clr_flags+0x1a0/0x1a0 [ 1426.038118][ T4437] ? kthread_blkcg+0xd0/0xd0 [ 1426.042720][ T4437] ret_from_fork+0x1f/0x30 [ 1426.047690][ T4437] [ 1426.051029][ T4437] Kernel Offset: disabled [ 1426.055472][ T4437] Rebooting in 86400 seconds..