last executing test programs: 1m48.818596741s ago: executing program 2 (id=360): syz_usb_connect$midi(0x3, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="1201010200000010440620804000010203010902380001010000050904000001010330eb05240206010406240203e67f090503"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2000c12, &(0x7f00000000c0)=ANY=[@ANYBLOB=',overriderockperm,\x00', @ANYRESHEX=0x0, @ANYBLOB="686964652c646d6f64653d3078303030303030303030303030303030392c73657373696f6e3d3078303030303030303030303030303032332c757466382c6d61703d61636f726e2c636865636b3d7374726963762c6d6f64653d3078303030303030303030303030303063362c63727566742c6d61703d6f66662c636865636b3d7374726963742c7362736563746f723d3078666666666666666638303030303030b02c757466382c63727566742c6e6f636f6d70726573732c63727566742c73657373696f6e3d3078303030303030303030303030303036312c7569643dffe50c7d83f0db5bf0dac5aaf2d3b7904f6b3cd014bbf75912d9a489a9edd308aeecdddd00de002d8dad3dab7308418be5c78d691add5e13b1f8428058b59ea7424176ff052ec9fe2cf35c7500e5b7c8cc4116844827b02fb40a28e9341232d46c7bbc41aa8db4ccc2409f5a4f98ebda862080451ab1e52bf15d01a0b8ed2e04e27839bc272d076c2f6e3313191b59c9c248763d030a97d5912af885f9ba8212a291a5ac60e9e1c4edfc55bb08095dcd0e3f230c686e34147ca839a200b064aac72c3f1ca51fcb00"/432, @ANYRES64=0x0], 0x1, 0xa2f, &(0x7f0000000680)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x4, 0xda00, 0x6, 0xffe}}, 0xfffffffffffffffe, 0x1000) 1m46.720038084s ago: executing program 2 (id=375): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000240)={0x0, 0xc7ca, 0x42, 0xfffffffc, 0x7a}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 1m46.344287493s ago: executing program 2 (id=378): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400fb0c0000000002000500000000000a"], 0x98}, 0x1, 0x7}, 0x24000090) 1m46.280165405s ago: executing program 2 (id=380): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa10810, &(0x7f0000000100)=ANY=[], 0xf9, 0x6cc, &(0x7f0000000d00)="$eJzs3c1vHGcdB/DvbNZrb1qC2yZtQJVqNRIgIhI7VgrmQkAI5RChqhw4W4nTWHGSYrvIiRB1eL320D+gHHJBiAMS90iFAxe49YZ8rITEpRKqOS3a2Vl7vd4ku0n8kvL5ROvnmXle5je/2Zl9saMJ8H/r4unU76fIxdOX1trLG/dmlzbuzd7o1jOW8STrST1JLUnxWavV+ii5kBRb0xR95S4fLM699fGnG590lurVo+xfe9i4PlW/9b7V6911U0mOVOUT2DHf5Seer9iK/EKSU1UJB24sSWuHn/zt+a2WHs1Boyf2JUZgbxWd181dJpOj1Ynefh/QfeWt7W90wxsfsl//OwgAAAB41gzzGfiLm9nMWnFsH8IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz4X1zv3/W9V9A4vq/v7tsphK0b3/f6Nal6p+uLw2Wvf7exUHAAAAAAAAAOyj1zazmbUc6y63ivJ3/q+XC8fLn8/l3axkIcs5k7XMZzWrWc5MkslqUK0qV5dnhhh5rmdkW2NtfnV1+dwjAq3+KCHNp7PfAAAAAAAAAPA584tc3P79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAZFcqRTpLjbs3oytXqSiSSN9or1NP/RrT/L7h90AAAAALAPxpPNrOVYd7lV5HiSl8vvACbybm5mNYtZzVIWcqX8XqDzqb+2cW92aePe7I32Y/e83/33SGGUM6bz3cPgLZ8sezRzNYvlmjO5nFv5Y7m2Vs1ysoqnO2tPXBNJ7rZjKr5TGTKyK1XZ3vP3y/LI7k7vjbSzDzLilymT5b6PbWVkujo67Wy80D0yg45QMWpg/VuaSW0r2ON9W2okn7U62s3d75BOjpLzoz2B/mZ3wJdGjf/p6c/EuZ5n38uDct7sGfzVP//hx9NVfeRjcMC6T/ryoLb3qj8Tsz2ZeOVhz75Umbi2dPP6tasrpw9XJuqjD5kuM3Fia/lifpAf5XSm8maWs5ifZj6rWchUvl/W5quDX/Sc8g/I1IUdS28+KpJG9QztHKzRYnq9HHssi/lhbuVKFvJG+e9cZvLNnM/5zPUc4RMPP8Lllbb2gCtt6wsDgz/1tarSPmV+23fq9Bh/VBaevnZeX+jJa+81d7Js612znaUXh8jSiK9H9S9XlfY2flmVh0N/JmZ6MvFSfyYmdgz9XXlZWVm6eX352vw7w23uxferSvs8+nUydbAXkkZf/cWti8nOZ0e77aWBbTNl2/GtttquthNbbZ0zdf2BZ2qjeg+3e6ZzZdsrA9tmy7aTPW2d91tj1X7dytLW+yEADrGjXz/aaP6r+ffmh81fNa81L018b/xb4682MvaXsW/Xp498pfZq8ad8mJ9vf/4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe38rtO9fnl5YWljuVRpKy0mq13tvZNGqle0etxxw+ROU/N5JBTZn653PtLQ9o6t7ObE/i2V1prNy+86Xnk/3Y1uGu/LfValVrivaaid19fv/XJ01U9+gO1Tndp/qAPtWNDFt7mJZakr2ZefPpBH8glyNgH51dvfHO2ZXbd76xeGP+7YW3F27OnT8/Nz13/o3Zs1cXlxamOz8POkpgL2y/6B90JAAAAAAAAAAAAMCwev7ov/FY/yumKB7Z56D3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHi2XTyd+v0UmZk+M91e3rg3u9R+dOvbPetJakmKnyXFR0mz2zDZM13xoO18sDj31sefbnyyPVe927/2sHHDWa8emUpypFPefVrzXa7Khyp27kK9r7G7hxeSnKpKOHD/CwAA//9hrgK7") rename(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000540), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000100008b}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) removexattr(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240)=@random={'user.', 'hfsplus\x00'}) 1m45.745210008s ago: executing program 2 (id=387): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000000500), 0x1c) 1m45.151881853s ago: executing program 2 (id=393): mmap(&(0x7f00006df000/0x2000)=nil, 0x2000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0/file0\x00', 0x20001e, &(0x7f00000010c0)={[{@nobarrier}, {@errors_remount}, {@noinit_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}, {@acl}], [{@obj_user}, {@fsname={'fsname', 0x3d, '\xad\x85vW\xec\xea\xbe\xfe\x89e\x02\xb2\x02\x8b\x8bf_\xb3\x91p\xf4\x05P\xe2\x87\x9c\xb5\x172=\x82\xdc\xfdh\xe5\x9dp\x85\xae\xd6W\x03J\xdc\xc6\xf78\b\xfa?$$J,\xf5\x8b\x03\xedc\x16W\xacO\xa9\xf6\xd8\xf8\x9e3\xa3\xb5\xc7\xd7\xc3\xfe\x92\x99> z\xba\xf7\xb3=\x17\x9b\x035\x8c\xb6\x8f0\x95M\xc8'}}, {@fowner_eq}, {@dont_appraise}]}, 0x1, 0x78e, &(0x7f0000000800)="$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") r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x8000, 0x50) fchown(r2, 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, 0x0, 0x80) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m44.815918281s ago: executing program 32 (id=393): mmap(&(0x7f00006df000/0x2000)=nil, 0x2000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0/file0\x00', 0x20001e, &(0x7f00000010c0)={[{@nobarrier}, {@errors_remount}, {@noinit_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}, {@acl}], [{@obj_user}, {@fsname={'fsname', 0x3d, '\xad\x85vW\xec\xea\xbe\xfe\x89e\x02\xb2\x02\x8b\x8bf_\xb3\x91p\xf4\x05P\xe2\x87\x9c\xb5\x172=\x82\xdc\xfdh\xe5\x9dp\x85\xae\xd6W\x03J\xdc\xc6\xf78\b\xfa?$$J,\xf5\x8b\x03\xedc\x16W\xacO\xa9\xf6\xd8\xf8\x9e3\xa3\xb5\xc7\xd7\xc3\xfe\x92\x99> z\xba\xf7\xb3=\x17\x9b\x035\x8c\xb6\x8f0\x95M\xc8'}}, {@fowner_eq}, {@dont_appraise}]}, 0x1, 0x78e, &(0x7f0000000800)="$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") r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x8000, 0x50) fchown(r2, 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, 0x0, 0x80) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m13.435443799s ago: executing program 0 (id=649): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xffffffff) 1m13.184320195s ago: executing program 0 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x0, 0xdddd1000, 0x4, 0x9, 0x5, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x4, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xfd}, {0xeeef0000, 0xeeef0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x25000, 0xeeee0000, 0x10, 0x6, 0x4, 0x42, 0xb, 0x5e, 0x8, 0x3, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xed, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0x10, 0x7, 0xb1, 0x4, 0x6, 0x81, 0x9, 0xff, 0x1}, {0xdddd0000, 0x8000000, 0x4, 0x7, 0x2, 0x5, 0x7, 0x43, 0x5, 0x82, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x2f, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x5000, 0x800}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf8fffffffffd, 0x100000000, 0x80, 0xfff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1m12.686638067s ago: executing program 0 (id=659): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x0, [], [], 0x0, [0x0, 0x2]}, 0xffffffff, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0) 1m12.524299042s ago: executing program 0 (id=660): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000019c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) 1m12.387609734s ago: executing program 0 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000440)='./mnt\x00') mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 1m11.38214923s ago: executing program 0 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="2e1221b23bb601c494d3df173e75fe0100dd", 0x12}], 0x1) 55.151751207s ago: executing program 33 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="2e1221b23bb601c494d3df173e75fe0100dd", 0x12}], 0x1) 23.91482765s ago: executing program 5 (id=764): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@noinit_itable}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21.446166862s ago: executing program 5 (id=764): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@noinit_itable}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 18.816018278s ago: executing program 5 (id=764): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@noinit_itable}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.592559589s ago: executing program 5 (id=764): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@noinit_itable}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$eJzs3UtvG0UcAPD/rpOWvkgo5dEHECiIiEfSpAV64AAIpF6QkOBQjiFNq9K0QU2QaFXRgFA5on4C4IjEJ+AEFwScQFzhjpAq1AuFA1q09m7rPBzs2I5D/ftJ28zsjj3/2fHYszu2GkDfGsn/SSJ2RsQvETFUyy4tMFL7c+P6pem/rl+aTiLLXv8jqZb78/ql6bJo+bgdRWY0jUg/SmL/KvXOX7h4Zmp2duZ8kR9fOPvO+PyFi0+fPjt1aubUzLnJo0ePHJ547tnJZzrSzl15rPvenzuw99ibV1+dPn71re+/zOPdWRyvb0fNcNt1jsRIcU6ybPmxx9p+9s1lV106GehhILSkEhF5dw1Wx/9QVOJW5w3FKx/2NDigq7Isy7au2FspE4sZcBtLotcRAL1RftDn17/ltoHTj5679mLtAihv941iqx0ZiLQoM7js+raTRiLi+OLfn+ZbrHofAgCgs77O5z9PLZ3/DVaPpHFvXbk7i7Wh4Yi4KyJ2R8TdEbEnIu6JqJa9LyLub7H+kWX5lfOfn7atr2XNyed/zxdrW0vnf+XsL4YrRW5Xtf2DycnTszOHinMyGoNb8/zEGnV88/LPnzQ6Vj//y7e8/nIuWMTx+8CyG3Qnpham2mlzvWsfROwbWK39yc31vPzv3ojYt47nz8/Z6Se+ONDo+H+3fw0dWGfKPo94vNb/i7Gs/aVk7fXJ8TtidubQePmqWOmHH6+81qj+ttrfAXn/b6+u2a3s/8JwUr9eO996HVd+/bjhNc16X/9bkjeq6S3FvvemFhbOT0RsSRZX7p+89dgyX5bP2z96cPXxvzvin8+Kx+2PiPxF/EBEPBgRDxWxPxwRj0TEwTXa/91Lj769/vZ3V97+E6u+/zXq/9YTlTPfftWo/ub6/0g1NVrsaeb9r9kA2zl3AAAA8H+RVr8Dn6RjN9NpOjZW+w7/ntiezs7NLzx5cu7dcydq35UfjsG0vNM1VHc/dKK4N1zmJ5flD1fvG2dZlm2r5sem52a7taYONGdHg/Gf+63S6+iArmtpHS3pXhzAxvN7Tehfxj/0r2L8v9DrOICN5/Mf+tdq4/9yxI0ehAJsMJ//0L+Mf+hfxj/0L+Mf+lI7v+tfK7H7WLee+XZLVDZHGC0nIt0UYawvkW6OMIr/AmM4otnCl2OjAuv1OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBn/BsAAP//WL7pRA==") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.455219513s ago: executing program 1 (id=964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="ec", 0xfdef}], 0x1) 3.451898393s ago: executing program 4 (id=965): add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000700)="308201103081bea003020102020101300a06082a85030701010302300e310c300a06035504030c0373797a3020170d3232303531383232333234315a180f32313232303432343232333234315a300e310c300a06035504030c0373797a3066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300a06082a8503070101030203410041320973a4c138c150e3423a9b2b28122aa7c2753165778c3c9e0d56b2f9dc", 0xf3, 0xfffffffffffffffe) 3.314133907s ago: executing program 4 (id=967): r0 = socket(0x10, 0x3, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.290389327s ago: executing program 1 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x5f, &(0x7f00000001c0)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.076264862s ago: executing program 4 (id=970): openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/10, 0xa}], 0x1, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 3.061850283s ago: executing program 3 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000001480)='./tracing\x00', &(0x7f00000014c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000140)='-:s/p ./file0:0', 0xf) 2.882499137s ago: executing program 1 (id=972): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000003600)={0xe, {"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", 0x942}}, 0x1006) 2.855982618s ago: executing program 5 (id=764): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@noinit_itable}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.842211909s ago: executing program 3 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='10', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) 565.980966ms ago: executing program 1 (id=974): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x148) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000b40)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r2, &(0x7f0000000c00)='menu', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x7ffffffd}]}) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/vlan/vlan0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, 0x0, 0xffffff6a) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x9, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) tee(r4, r6, 0x4000000000001, 0x0) r9 = memfd_create(0x0, 0x0) splice(r4, 0x0, r9, 0x0, 0x200002, 0xb) 564.752076ms ago: executing program 4 (id=975): add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000700)="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", 0x104, 0xfffffffffffffffe) 564.449016ms ago: executing program 3 (id=976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="ec", 0xfdef}], 0x1) 402.38796ms ago: executing program 4 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x2, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 392.058ms ago: executing program 3 (id=978): r0 = socket(0x10, 0x3, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 347.787211ms ago: executing program 1 (id=979): openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 180.256536ms ago: executing program 3 (id=980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 144.458066ms ago: executing program 1 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x5f, &(0x7f00000001c0)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 61.189238ms ago: executing program 4 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) 207.549µs ago: executing program 3 (id=983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x8, 0x0, &(0x7f0000000700)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000800)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000880)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000980)={0xc, 0x0, &(0x7f00000009c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=764): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@noinit_itable}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000099aa00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.330193][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.344407][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.351579][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.377861][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.505529][ T5773] hsr_slave_0: entered promiscuous mode [ 87.514013][ T5773] hsr_slave_1: entered promiscuous mode [ 87.522953][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.530904][ T5773] Cannot create hsr debugfs directory [ 87.706113][ T5776] hsr_slave_0: entered promiscuous mode [ 87.713171][ T5776] hsr_slave_1: entered promiscuous mode [ 87.719412][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.727604][ T5776] Cannot create hsr debugfs directory [ 88.043872][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.065025][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.077485][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.088261][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.119539][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.256982][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.275036][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.285198][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.292969][ T5775] bridge_slave_0: entered allmulticast mode [ 88.300185][ T5775] bridge_slave_0: entered promiscuous mode [ 88.309316][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.320840][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.345712][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.355517][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.365677][ T5775] bridge_slave_1: entered allmulticast mode [ 88.373844][ T5775] bridge_slave_1: entered promiscuous mode [ 88.393117][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.433495][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.460829][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.523678][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.538731][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.549893][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.566529][ T5775] team0: Port device team_slave_0 added [ 88.575735][ T5775] team0: Port device team_slave_1 added [ 88.589943][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.631897][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.638911][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.665312][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.693920][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.700937][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.727941][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.820339][ T5775] hsr_slave_0: entered promiscuous mode [ 88.830092][ T5775] hsr_slave_1: entered promiscuous mode [ 88.838166][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.846991][ T5778] Bluetooth: hci1: command tx timeout [ 88.853320][ T5775] Cannot create hsr debugfs directory [ 88.922182][ T5778] Bluetooth: hci0: command tx timeout [ 89.002378][ T5778] Bluetooth: hci2: command tx timeout [ 89.002391][ T5782] Bluetooth: hci3: command tx timeout [ 89.028843][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.096720][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.120680][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.192226][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.209128][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.216571][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.237640][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.252134][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.267286][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.274487][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.287699][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.306534][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.316878][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.335633][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.342802][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.378209][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.385385][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.399997][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.418395][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.425622][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.470696][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.477940][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.763294][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.819700][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.868050][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.875722][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.935655][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.942909][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.027308][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.171348][ T5774] veth0_vlan: entered promiscuous mode [ 90.239836][ T5774] veth1_vlan: entered promiscuous mode [ 90.291608][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.317332][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.364694][ T5774] veth0_macvtap: entered promiscuous mode [ 90.398022][ T5774] veth1_macvtap: entered promiscuous mode [ 90.502789][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.511136][ T5776] veth0_vlan: entered promiscuous mode [ 90.522848][ T5773] veth0_vlan: entered promiscuous mode [ 90.540555][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.560287][ T5773] veth1_vlan: entered promiscuous mode [ 90.577337][ T5776] veth1_vlan: entered promiscuous mode [ 90.594741][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.605738][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.617306][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.631536][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664254][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.737327][ T5773] veth0_macvtap: entered promiscuous mode [ 90.776576][ T5776] veth0_macvtap: entered promiscuous mode [ 90.797324][ T5773] veth1_macvtap: entered promiscuous mode [ 90.814052][ T5776] veth1_macvtap: entered promiscuous mode [ 90.875839][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.890617][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.903422][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.922508][ T5782] Bluetooth: hci1: command tx timeout [ 90.949928][ T5775] veth0_vlan: entered promiscuous mode [ 90.959480][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.971652][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.981919][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.992709][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.003157][ T5782] Bluetooth: hci0: command tx timeout [ 91.011993][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.036973][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.048209][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.059971][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.069461][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.091571][ T5782] Bluetooth: hci3: command tx timeout [ 91.093330][ T5778] Bluetooth: hci2: command tx timeout [ 91.104152][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.118161][ T5775] veth1_vlan: entered promiscuous mode [ 91.134595][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.146205][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.156687][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.168887][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.180330][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.195134][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.207094][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.215938][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.225696][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.250610][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.262657][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.271743][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.280493][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.359906][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.370201][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.493543][ T5775] veth0_macvtap: entered promiscuous mode [ 91.526012][ T5775] veth1_macvtap: entered promiscuous mode [ 91.574245][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.592696][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.625568][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.638292][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.658366][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.670196][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.684984][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.696164][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.708100][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.720360][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.728358][ T5867] syz.3.4[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.733876][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.751807][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.762570][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.773293][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.784829][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.795635][ T5867] loop3: detected capacity change from 0 to 512 [ 91.799072][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.865611][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.879226][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.899051][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.908715][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.929530][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.943404][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.979835][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.989330][ T5867] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.021536][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.029562][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.089009][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.098052][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.126401][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.267816][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.301791][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.421436][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.429624][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.518487][ T5877] loop2: detected capacity change from 0 to 1756 [ 92.629590][ T5877] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 92.646968][ T5877] UDF-fs: Scanning with blocksize 512 failed [ 92.748350][ T5877] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 92.766334][ T5877] UDF-fs: Scanning with blocksize 1024 failed [ 92.816601][ T5877] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 92.849333][ T5877] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 92.880405][ T5882] loop0: detected capacity change from 0 to 2048 [ 92.887745][ T5877] UDF-fs: Scanning with blocksize 2048 failed [ 92.905776][ T5882] ======================================================= [ 92.905776][ T5882] WARNING: The mand mount option has been deprecated and [ 92.905776][ T5882] and is ignored by this kernel. Remove the mand [ 92.905776][ T5882] option from the mount to silence this warning. [ 92.905776][ T5882] ======================================================= [ 92.966352][ T5877] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 92.978032][ T5877] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 92.989878][ T5877] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 92.998908][ T5877] UDF-fs: Scanning with blocksize 4096 failed [ 93.006260][ T5778] Bluetooth: hci1: command tx timeout [ 93.012096][ T5877] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 93.023372][ T5882] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 93.042030][ T5882] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 93.078624][ T5882] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 93.091078][ T5778] Bluetooth: hci0: command tx timeout [ 93.134914][ T5882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.161614][ T5778] Bluetooth: hci2: command tx timeout [ 93.167303][ T5778] Bluetooth: hci3: command tx timeout [ 93.335896][ T5888] Bluetooth: MGMT ver 1.22 [ 93.434108][ T5891] loop2: detected capacity change from 0 to 128 [ 94.007601][ T5894] FAULT_INJECTION: forcing a failure. [ 94.007601][ T5894] name failslab, interval 1, probability 0, space 0, times 1 [ 94.087831][ T5894] CPU: 1 PID: 5894 Comm: syz.1.11 Not tainted syzkaller #0 [ 94.095155][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.105294][ T5894] Call Trace: [ 94.108919][ T5894] [ 94.111910][ T5894] dump_stack_lvl+0x18c/0x250 [ 94.116663][ T5894] ? verify_lock_unused+0x140/0x140 [ 94.121937][ T5894] ? show_regs_print_info+0x20/0x20 [ 94.127190][ T5894] ? load_image+0x420/0x420 [ 94.131949][ T5894] should_fail_ex+0x394/0x4c0 [ 94.136699][ T5894] should_failslab+0x9/0x20 [ 94.141256][ T5894] slab_pre_alloc_hook+0x59/0x300 [ 94.146334][ T5894] ? ___neigh_create+0x6f4/0x23d0 [ 94.151410][ T5894] ? ___neigh_create+0x6f4/0x23d0 [ 94.156488][ T5894] __kmem_cache_alloc_node+0x53/0x250 [ 94.161934][ T5894] ? ___neigh_create+0x6f4/0x23d0 [ 94.167011][ T5894] __kmalloc+0xa7/0x240 [ 94.171333][ T5894] ___neigh_create+0x6f4/0x23d0 [ 94.176238][ T5894] ? neigh_lookup+0xaf/0x3f0 [ 94.180873][ T5894] ? neigh_ifdown+0x30/0x30 [ 94.185435][ T5894] arp_req_set+0x4c4/0x760 [ 94.189946][ T5894] ? arp_req_delete+0x330/0x330 [ 94.194859][ T5894] ? __might_fault+0xaa/0x120 [ 94.199582][ T5894] ? __might_fault+0xaa/0x120 [ 94.204330][ T5894] arp_ioctl+0x3fc/0x540 [ 94.208687][ T5894] ? neigh_release+0x80/0x80 [ 94.213357][ T5894] ? do_vfs_ioctl+0x156c/0x1cc0 [ 94.218310][ T5894] inet_ioctl+0x3c5/0x560 [ 94.222698][ T5894] ? tomoyo_path_number_perm+0x217/0x5e0 [ 94.228395][ T5894] ? inet_shutdown+0x370/0x370 [ 94.233217][ T5894] ? slab_free_freelist_hook+0x130/0x1a0 [ 94.238922][ T5894] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 94.244718][ T5894] ? __kmem_cache_free+0xba/0x1f0 [ 94.249819][ T5894] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 94.255377][ T5894] sock_do_ioctl+0xfc/0x310 [ 94.259949][ T5894] ? sock_show_fdinfo+0xb0/0xb0 [ 94.264879][ T5894] sock_ioctl+0x5be/0x7e0 [ 94.269271][ T5894] ? sock_poll+0x3e0/0x3e0 [ 94.273753][ T5894] ? bpf_lsm_file_ioctl+0x9/0x10 [ 94.278737][ T5894] ? security_file_ioctl+0x80/0xa0 [ 94.283912][ T5894] ? sock_poll+0x3e0/0x3e0 [ 94.288385][ T5894] __se_sys_ioctl+0xfd/0x170 [ 94.293036][ T5894] do_syscall_64+0x55/0xb0 [ 94.297495][ T5894] ? clear_bhb_loop+0x40/0x90 [ 94.302222][ T5894] ? clear_bhb_loop+0x40/0x90 [ 94.306952][ T5894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.312931][ T5894] RIP: 0033:0x7ff03499e559 [ 94.317479][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.337171][ T5894] RSP: 002b:00007ff0358a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.345644][ T5894] RAX: ffffffffffffffda RBX: 00007ff034c25fa0 RCX: 00007ff03499e559 [ 94.353687][ T5894] RDX: 0000200000000140 RSI: 0000000000008955 RDI: 0000000000000003 [ 94.361710][ T5894] RBP: 00007ff034a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 94.369734][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.377753][ T5894] R13: 00007ff034c26038 R14: 00007ff034c25fa0 R15: 00007ffe25e84558 [ 94.385817][ T5894] [ 94.717783][ T5903] loop1: detected capacity change from 0 to 8 [ 94.761901][ T5763] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.866979][ T5906] loop2: detected capacity change from 0 to 256 [ 94.919823][ T5906] exFAT-fs (loop2): error, The cluster chain has a loop [ 94.958780][ T5906] exFAT-fs (loop2): Filesystem has been set read-only [ 94.979750][ T5906] exFAT-fs (loop2): failed to count the number of clusters in root [ 94.988102][ T5763] usb 4-1: not running at top speed; connect to a high speed hub [ 94.993078][ T5906] exFAT-fs (loop2): failed to recognize exfat type [ 95.014002][ T5909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.029891][ T5763] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.047116][ T5763] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.056396][ T5763] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 95.071138][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.267280][ T5917] loop0: detected capacity change from 0 to 256 [ 95.276455][ T5915] loop1: detected capacity change from 0 to 1024 [ 95.347688][ T5763] usb 4-1: USB disconnect, device number 2 [ 95.379825][ T27] audit: type=1800 audit(1792003251.799:2): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="O" dev="loop1" ino=0 res=0 errno=0 [ 95.650213][ T5920] loop2: detected capacity change from 0 to 1024 [ 95.676364][ T5921] loop0: detected capacity change from 0 to 128 [ 95.929429][ T5926] syz.2.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.953756][ T5763] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.155587][ T5926] hfsplus: creator requires a 4 character value [ 96.187302][ T5926] hfsplus: unable to parse mount options [ 96.372204][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.393616][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.503006][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.595614][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.650905][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.681846][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.720387][ T8] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 96.733718][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.737790][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.750842][ T8] usb 4-1: Product: syz [ 96.755862][ T8] usb 4-1: Manufacturer: syz [ 96.763589][ T8] usb 4-1: SerialNumber: syz [ 96.777416][ T8] usb 4-1: selecting invalid altsetting 1 [ 96.785952][ T8] usb 4-1: unit 6 not found! [ 97.246484][ T23] cfg80211: failed to load regulatory.db [ 97.388557][ T8] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 97.492882][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 97.520948][ T8] usb 4-1: USB disconnect, device number 3 [ 97.549379][ T5975] set_capacity_and_notify: 2 callbacks suppressed [ 97.549396][ T5975] loop0: detected capacity change from 0 to 2048 [ 97.609219][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.636176][ T5975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 97.686833][ T5975] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 97.704079][ T5965] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.718345][ T5975] UDF-fs: Scanning with blocksize 512 failed [ 97.774526][ T5975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.688451][ T5995] loop1: detected capacity change from 0 to 1024 [ 98.707607][ T5995] hfsplus: creator requires a 4 character value [ 98.733256][ T5995] hfsplus: unable to parse mount options [ 99.234745][ T6003] FAULT_INJECTION: forcing a failure. [ 99.234745][ T6003] name failslab, interval 1, probability 0, space 0, times 0 [ 99.250743][ T6003] CPU: 0 PID: 6003 Comm: syz.3.40 Not tainted syzkaller #0 [ 99.258021][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.268127][ T6003] Call Trace: [ 99.271446][ T6003] [ 99.274448][ T6003] dump_stack_lvl+0x18c/0x250 [ 99.279189][ T6003] ? show_regs_print_info+0x20/0x20 [ 99.284443][ T6003] ? load_image+0x420/0x420 [ 99.289007][ T6003] ? __might_sleep+0xe0/0xe0 [ 99.293654][ T6003] ? __lock_acquire+0x7eb0/0x7eb0 [ 99.298741][ T6003] should_fail_ex+0x394/0x4c0 [ 99.303485][ T6003] should_failslab+0x9/0x20 [ 99.308059][ T6003] slab_pre_alloc_hook+0x59/0x300 [ 99.313135][ T6003] ? bpf_init_fs_context+0x4f/0xe0 [ 99.318295][ T6003] __kmem_cache_alloc_node+0x53/0x250 [ 99.323709][ T6003] ? bpf_init_fs_context+0x4f/0xe0 [ 99.328851][ T6003] kmalloc_trace+0x2a/0xe0 [ 99.333311][ T6003] bpf_init_fs_context+0x4f/0xe0 [ 99.338280][ T6003] alloc_fs_context+0x618/0x7a0 [ 99.343201][ T6003] __se_sys_fsopen+0xa0/0x2c0 [ 99.347919][ T6003] do_syscall_64+0x55/0xb0 [ 99.352366][ T6003] ? clear_bhb_loop+0x40/0x90 [ 99.357074][ T6003] ? clear_bhb_loop+0x40/0x90 [ 99.361805][ T6003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.367739][ T6003] RIP: 0033:0x7f47abd9e559 [ 99.372182][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.391823][ T6003] RSP: 002b:00007f47acc56028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 99.400271][ T6003] RAX: ffffffffffffffda RBX: 00007f47ac025fa0 RCX: 00007f47abd9e559 [ 99.408279][ T6003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000740 [ 99.416286][ T6003] RBP: 00007f47abe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 99.424293][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.432293][ T6003] R13: 00007f47ac026038 R14: 00007f47ac025fa0 R15: 00007ffe6194d318 [ 99.440312][ T6003] [ 100.031534][ T6016] loop3: detected capacity change from 0 to 128 [ 100.100172][ T6021] Bluetooth: MGMT ver 1.22 [ 100.143051][ T6021] loop1: detected capacity change from 0 to 512 [ 100.282057][ T5792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.650465][ T5975] syz.0.36 (5975) used greatest stack depth: 20368 bytes left [ 100.658317][ T27] audit: type=1800 audit(1792003257.049:3): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 100.899071][ T27] audit: type=1800 audit(1792003257.249:4): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 101.157929][ T6027] loop2: detected capacity change from 0 to 512 [ 101.192530][ T6027] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.212840][ T6027] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 101.295764][ T6027] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.51: attempt to clear invalid blocks 2 len 1 [ 101.325587][ T6027] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 101.343728][ T6027] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.51: invalid indirect mapped block 1819239214 (level 0) [ 101.358704][ T6027] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.51: invalid indirect mapped block 1819239214 (level 1) [ 101.434339][ T6027] EXT4-fs (loop2): 1 truncate cleaned up [ 101.447906][ T6027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.492042][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.648820][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.674190][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.721839][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.742304][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.777891][ T23] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 101.791450][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.818660][ T23] usb 2-1: Product: syz [ 101.837548][ T23] usb 2-1: Manufacturer: syz [ 101.844715][ T23] usb 2-1: SerialNumber: syz [ 101.864608][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 101.884157][ T23] usb 2-1: selecting invalid altsetting 1 [ 101.912420][ T23] usb 2-1: unit 6 not found! [ 101.966970][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 102.076923][ T23] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 102.147415][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 102.161058][ T6034] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.182458][ T23] usb 2-1: USB disconnect, device number 2 [ 102.248441][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.361547][ T5782] Bluetooth: hci0: command tx timeout [ 104.579499][ T6056] loop1: detected capacity change from 0 to 256 [ 104.672979][ T6056] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 104.966563][ T6061] loop3: detected capacity change from 0 to 512 [ 104.980550][ T6058] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.996422][ T6061] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.116506][ T6061] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 105.208201][ T6061] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.63: attempt to clear invalid blocks 2 len 1 [ 105.267799][ T6061] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 105.331629][ T6061] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.63: invalid indirect mapped block 1819239214 (level 0) [ 105.365212][ T6061] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.63: invalid indirect mapped block 1819239214 (level 1) [ 105.398012][ T6061] EXT4-fs (loop3): 1 truncate cleaned up [ 105.414432][ T6061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.613989][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.891096][ T6070] loop3: detected capacity change from 0 to 512 [ 105.969067][ T6070] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.65: bg 0: block 5: invalid block bitmap [ 106.081407][ T6070] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 106.101779][ T6070] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.65: invalid indirect mapped block 3 (level 2) [ 106.127831][ T6070] EXT4-fs (loop3): 1 orphan inode deleted [ 106.141357][ T6070] EXT4-fs (loop3): 1 truncate cleaned up [ 106.152424][ T6070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.256333][ T27] audit: type=1800 audit(1792003262.669:5): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="bus" dev="loop3" ino=11 res=0 errno=0 [ 106.392440][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.535827][ T6088] loop3: detected capacity change from 0 to 1024 [ 106.575496][ T6089] loop2: detected capacity change from 0 to 2048 [ 106.588528][ T6089] EXT4-fs: Mount option(s) incompatible with ext2 [ 106.607749][ T6088] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 106.625397][ T6088] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 106.635262][ T6088] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.69: Failed to acquire dquot type 0 [ 106.686223][ T6088] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 106.737510][ T6088] EXT4-fs (loop3): 1 truncate cleaned up [ 106.761208][ T6088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.816007][ T6088] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 106.831684][ T6088] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 106.857682][ T6088] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.69: Failed to acquire dquot type 0 [ 106.924685][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.049619][ T6098] loop3: detected capacity change from 0 to 512 [ 107.059024][ T6098] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.120058][ T6098] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 107.138429][ T6098] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.73: attempt to clear invalid blocks 2 len 1 [ 107.169711][ T6098] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 107.208501][ T6098] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.73: invalid indirect mapped block 1819239214 (level 0) [ 107.228038][ T6098] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.73: invalid indirect mapped block 1819239214 (level 1) [ 107.246989][ T6098] EXT4-fs (loop3): 1 truncate cleaned up [ 107.255401][ T6098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.434666][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.681473][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.877281][ T6117] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.851471][ T5778] Bluetooth: hci3: command tx timeout [ 108.894758][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.919452][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 200: 93, using maximum allowed: 30 [ 108.941048][ T9] usb 3-1: config 1 interface 1 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 93 [ 108.968847][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 108.992657][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 109.005898][ T9] usb 3-1: string descriptor 0 read error: -22 [ 109.016004][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 109.025196][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.057039][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 109.065666][ T9] usb 3-1: selecting invalid altsetting 0 [ 109.083147][ T9] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 109.151492][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.382730][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 109.719071][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.728195][ T5838] usb 4-1: no configurations [ 109.740674][ T5838] usb 4-1: can't read configurations, error -22 [ 109.971520][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.096025][ T2135] usb 3-1: USB disconnect, device number 2 [ 110.181122][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 110.203124][ T23] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 110.225051][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.234710][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.257254][ T23] usb 1-1: Product: syz [ 110.267227][ T23] usb 1-1: Manufacturer: syz [ 110.288542][ T23] usb 1-1: SerialNumber: syz [ 110.477212][ T6136] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.525612][ T6128] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.678118][ T6142] netlink: 'syz.1.90': attribute type 4 has an invalid length. [ 110.782837][ T6144] loop2: detected capacity change from 0 to 2048 [ 110.817987][ T6144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.157599][ T6128] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 111.380279][ T23] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 111.414509][ T23] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 111.623668][ T23] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 111.691589][ T23] usb 1-1: USB disconnect, device number 2 [ 111.698849][ T23] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 112.148449][ T6175] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.720409][ T6180] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.936087][ T27] audit: type=1326 audit(1792003269.359:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.011414][ T27] audit: type=1326 audit(1792003269.389:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.092908][ T27] audit: type=1326 audit(1792003269.389:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.161705][ T27] audit: type=1326 audit(1792003269.399:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.221383][ T27] audit: type=1326 audit(1792003269.399:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.253034][ T27] audit: type=1326 audit(1792003522.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.277533][ T27] audit: type=1326 audit(1792003522.405:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.310185][ T27] audit: type=1326 audit(1792003522.405:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.335668][ T27] audit: type=1326 audit(1792003522.405:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 113.368722][ T2135] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.553141][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.591532][ T2135] usb 3-1: Using ep0 maxpacket: 32 [ 113.603640][ T2135] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.612136][ T2135] usb 3-1: config 0 has no interface number 0 [ 113.621061][ T2135] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.636688][ T2135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.646980][ T2135] usb 3-1: Product: syz [ 113.658868][ T2135] usb 3-1: Manufacturer: syz [ 113.664874][ T2135] usb 3-1: SerialNumber: syz [ 113.677271][ T2135] usb 3-1: config 0 descriptor?? [ 113.690642][ T2135] smsc95xx v2.0.0 [ 113.759118][ T23] usb 2-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 113.769860][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.786416][ T23] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 113.805886][ T23] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 113.817345][ T23] usb 2-1: Product: syz [ 113.821969][ T23] usb 2-1: Manufacturer: syz [ 113.852518][ T23] uvcvideo 2-1:1.0: Found multiple Units with ID 1 [ 114.062848][ T23] usb 2-1: Found UVC 71.01 device syz (225a:e1d4) [ 114.070366][ T23] usb 2-1: No streaming interface found for terminal 2. [ 114.130786][ T23] usb 2-1: USB disconnect, device number 3 [ 114.541061][ T2135] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 114.557827][ T2135] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 114.601524][ T2135] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 114.627335][ T2135] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 114.661613][ T2135] usb 3-1: USB disconnect, device number 3 [ 114.956416][ T27] audit: type=1326 audit(1792003524.375:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.0.125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 115.087532][ T6227] loop3: detected capacity change from 0 to 128 [ 115.131491][ T6227] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.141505][ T5763] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.268935][ T6227] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.285492][ T6232] loop2: detected capacity change from 0 to 512 [ 115.290477][ T6227] ext2 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.304049][ T6232] EXT4-fs: inline encryption not supported [ 115.538721][ T6232] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 115.721438][ T6232] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.127: corrupted inode contents [ 116.118740][ T6232] EXT4-fs (loop2): Remounting filesystem read-only [ 116.151458][ T5763] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 116.168471][ T6232] EXT4-fs (loop2): 1 orphan inode deleted [ 116.192437][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.220742][ T6232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.252405][ T5763] usb 2-1: config 0 descriptor?? [ 116.355570][ T6237] loop0: detected capacity change from 0 to 256 [ 116.376819][ T6237] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.388725][ T6237] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 116.410946][ T6237] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.427990][ T6237] exFAT-fs (loop0): failed to load alloc-bitmap [ 116.439488][ T6237] exFAT-fs (loop0): failed to recognize exfat type [ 116.538477][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.571454][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 116.700292][ T6241] loop0: detected capacity change from 0 to 512 [ 116.720909][ T6241] ext4: Unknown parameter 'euid>00000000000000000000' [ 116.773438][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.820073][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.845803][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.871643][ T9] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 116.894890][ T9] usb 3-1: Product: syz [ 116.912116][ T9] usb 3-1: config 0 descriptor?? [ 116.937995][ T9] hub 3-1:0.0: USB hub found [ 118.180541][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 118.191129][ T5763] usb 2-1: Cannot set autoneg [ 118.226927][ T5763] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 118.268699][ T5763] usb 2-1: USB disconnect, device number 4 [ 118.389571][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 118.398477][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 118.449392][ T9] usb 3-1: USB disconnect, device number 4 [ 118.638377][ T6260] loop1: detected capacity change from 0 to 1024 [ 118.835636][ T6260] hfsplus: b-tree write err: -5, ino 8 [ 118.859986][ T6267] hfsplus: b-tree write err: -5, ino 8 [ 119.034691][ T6275] loop0: detected capacity change from 0 to 128 [ 119.039942][ T2954] hfsplus: b-tree write err: -5, ino 8 [ 119.083198][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.035480][ T5763] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.244283][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 120.259047][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 120.291526][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.326914][ T5763] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 120.336396][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.350570][ T6291] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.361922][ T6291] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.382645][ T5763] pl2303 2-1:1.0: pl2303 converter detected [ 120.414266][ T5763] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 120.730969][ T6291] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 120.751118][ T6291] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 120.768947][ T6291] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 120.787303][ T6291] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 120.813322][ T6291] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 121.058826][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 121.158046][ T6291] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 121.189584][ T6291] pl2303 ttyUSB0: error sending break = -32 [ 121.231810][ T5838] usb 2-1: USB disconnect, device number 5 [ 121.261265][ T5838] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 121.285283][ T5838] pl2303 2-1:1.0: device disconnected [ 121.303729][ T6329] loop3: detected capacity change from 0 to 2048 [ 121.359384][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.646996][ T6329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.726602][ T6340] loop2: detected capacity change from 0 to 256 [ 122.830700][ T6340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 123.061870][ T6354] syz.3.175 uses obsolete (PF_INET,SOCK_PACKET) [ 124.490028][ T6386] loop1: detected capacity change from 0 to 512 [ 124.569609][ T6386] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.187: iget: bad i_size value: 38620345925642 [ 124.640248][ T6390] netlink: 56 bytes leftover after parsing attributes in process `syz.0.188'. [ 124.668465][ T6386] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.187: couldn't read orphan inode 15 (err -117) [ 124.692797][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.784872][ T6386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.735153][ T6386] loop1: detected capacity change from 0 to 512 [ 125.761089][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 125.761104][ T27] audit: type=1326 audit(125.690:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.190" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47abd9e559 code=0x0 [ 125.799818][ T6386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 125.815037][ T6386] System zones: 1-12 [ 125.820770][ T6386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.187: missing EA_INODE flag [ 125.839141][ T6386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.187: error while reading EA inode 12 err=-117 [ 125.852994][ T6386] EXT4-fs (loop1): 1 orphan inode deleted [ 125.860195][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.877784][ T6386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.930378][ T6386] loop1: detected capacity change from 0 to 2048 [ 125.970190][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.347795][ T6411] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 127.285048][ T6439] netlink: 52 bytes leftover after parsing attributes in process `syz.2.201'. [ 127.891508][ T6436] capability: warning: `syz.3.204' uses deprecated v2 capabilities in a way that may be insecure [ 128.193600][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.578041][ T6446] loop0: detected capacity change from 0 to 512 [ 128.585642][ T6446] EXT4-fs: Ignoring removed bh option [ 128.601460][ T6446] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 128.655219][ T6446] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.208: corrupted in-inode xattr: bad e_name length [ 128.690680][ T6446] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.208: couldn't read orphan inode 15 (err -117) [ 128.756931][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.992220][ T6456] loop1: detected capacity change from 0 to 1024 [ 128.999962][ T6456] EXT4-fs: Ignoring removed i_version option [ 129.042689][ T6456] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.192010][ T6388] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 304: padding at end of block bitmap is not set [ 131.013075][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 131.040311][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.315953][ T6474] loop1: detected capacity change from 0 to 8 [ 131.447160][ T6474] SQUASHFS error: Unable to read inode 0xa7 [ 132.006299][ T6493] loop1: detected capacity change from 0 to 2048 [ 132.043314][ T6493] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 132.074909][ T6493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.090368][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.109070][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.581410][ T5838] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.605838][ T6510] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 134.694691][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'. [ 134.791437][ T5838] usb 3-1: device descriptor read/64, error -71 [ 134.918461][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.061459][ T5838] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.221615][ T5838] usb 3-1: device descriptor read/64, error -71 [ 135.304771][ T6536] loop1: detected capacity change from 0 to 128 [ 135.341622][ T5838] usb usb3-port1: attempt power cycle [ 135.640162][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 135.751421][ T5838] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.792212][ T5838] usb 3-1: device descriptor read/8, error -71 [ 135.819635][ T27] audit: type=1326 audit(135.760:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 135.852773][ T27] audit: type=1326 audit(135.760:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 135.884994][ T27] audit: type=1326 audit(135.790:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 135.917549][ T27] audit: type=1326 audit(135.790:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 135.948225][ T27] audit: type=1326 audit(135.790:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 135.996834][ T27] audit: type=1326 audit(135.790:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 136.069731][ T27] audit: type=1326 audit(135.800:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 136.102556][ T5838] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.144738][ T27] audit: type=1326 audit(135.800:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 136.181130][ T6559] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 136.207053][ T27] audit: type=1326 audit(135.800:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 136.235693][ T27] audit: type=1326 audit(135.800:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 136.327635][ T6561] loop2: detected capacity change from 0 to 1024 [ 136.342080][ T5838] usb 3-1: device not accepting address 8, error -71 [ 136.360722][ T5838] usb usb3-port1: unable to enumerate USB device [ 136.400982][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.470996][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'. [ 136.540309][ T6561] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.252: lblock 0 mapped to illegal pblock 0 (length 1) [ 136.682692][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.848446][ T6584] loop2: detected capacity change from 0 to 136 [ 137.605727][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'. [ 138.690548][ T6612] netlink: 104 bytes leftover after parsing attributes in process `syz.2.272'. [ 138.735089][ T5782] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 138.861205][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 138.934214][ T6626] loop0: detected capacity change from 0 to 2048 [ 138.964574][ T6626] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 138.997542][ T6626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.388221][ T6645] loop2: detected capacity change from 0 to 512 [ 139.426772][ T6645] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.449911][ T6645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.493061][ T6645] EXT4-fs (loop2): 1 truncate cleaned up [ 139.517695][ T6645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.585674][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 139.718928][ T6654] loop1: detected capacity change from 0 to 1024 [ 139.730911][ T6654] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 140.473544][ T6655] loop1: detected capacity change from 0 to 128 [ 140.556783][ T5792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.747470][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.828028][ T6663] loop0: detected capacity change from 0 to 2048 [ 140.849800][ T6663] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 140.875340][ T6663] UDF-fs: Scanning with blocksize 512 failed [ 140.893076][ T6663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.902987][ T6663] UDF-fs: error (device loop0): udf_read_inode: (ino 832) failed !bh [ 140.913442][ T6663] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 140.989545][ T6668] Zero length message leads to an empty skb [ 141.047547][ T6665] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.175001][ T6673] input: syz0 as /devices/virtual/input/input6 [ 141.476153][ T6679] loop1: detected capacity change from 0 to 1024 [ 141.493362][ T6679] hfsplus: creator requires a 4 character value [ 141.500492][ T6679] hfsplus: unable to parse mount options [ 141.896309][ T6699] loop1: detected capacity change from 0 to 512 [ 141.912480][ T6699] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.923415][ T6699] EXT4-fs: Ignoring removed oldalloc option [ 141.937312][ T6699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.308: Parent and EA inode have the same ino 15 [ 141.954213][ T6699] EXT4-fs (loop1): 1 orphan inode deleted [ 141.962031][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.026711][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.364388][ T6714] loop1: detected capacity change from 0 to 736 [ 142.459162][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 142.459177][ T27] audit: type=1326 audit(142.400:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.497053][ T27] audit: type=1326 audit(142.410:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.578276][ T27] audit: type=1326 audit(142.410:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.651902][ T27] audit: type=1326 audit(142.410:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.683767][ T27] audit: type=1326 audit(142.430:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.708631][ T174] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 142.759646][ T27] audit: type=1326 audit(142.430:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.855991][ T27] audit: type=1326 audit(142.430:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.906405][ T27] audit: type=1326 audit(142.430:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 142.985842][ T27] audit: type=1326 audit(142.430:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 143.019685][ T6720] fido_id[6720]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.121987][ T27] audit: type=1326 audit(143.070:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03499e559 code=0x7ffc0000 [ 143.514925][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.594761][ T6735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.375055][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.412236][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.436082][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.461525][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 144.470693][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.496196][ T9] usb 3-1: config 0 descriptor?? [ 144.671343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 148.731404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 149.430748][ T6757] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 149.441412][ T6757] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(10) [ 149.561873][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 149.567970][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 149.651613][ T9] usb 3-1: USB disconnect, device number 9 [ 150.227001][ T6774] loop1: detected capacity change from 0 to 256 [ 151.148754][ T6774] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 151.298835][ T6778] loop2: detected capacity change from 0 to 2048 [ 151.352805][ T6778] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 151.476971][ T6778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.701772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 153.578165][ T6790] loop2: detected capacity change from 0 to 2048 [ 153.645288][ T6790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.211717][ T6793] netlink: 'syz.0.342': attribute type 4 has an invalid length. [ 154.671426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 156.191318][ C1] sched: RT throttling activated [ 156.412194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 156.821824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 158.051354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.101787][ T6822] veth1_to_bond: entered allmulticast mode [ 160.115961][ T6822] veth1_to_bond: entered promiscuous mode [ 160.139351][ T6821] veth1_to_bond: left promiscuous mode [ 160.147034][ T6821] veth1_to_bond: left allmulticast mode [ 160.247209][ T6827] loop0: detected capacity change from 0 to 512 [ 160.325113][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.550683][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.700473][ T6838] loop1: detected capacity change from 0 to 2048 [ 160.991377][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.023821][ T6855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.181582][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 161.191006][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.208786][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.225665][ T5839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.246173][ T5839] usb 3-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 161.256956][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.270508][ T5839] usb 3-1: Product: syz [ 161.276227][ T5839] usb 3-1: Manufacturer: syz [ 161.281100][ T5839] usb 3-1: SerialNumber: syz [ 161.421519][ T5763] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.479368][ T27] kauditd_printk_skb: 244 callbacks suppressed [ 161.479384][ T27] audit: type=1326 audit(161.420:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 161.541489][ T27] audit: type=1326 audit(161.420:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 161.580187][ T6843] loop2: detected capacity change from 0 to 1764 [ 161.615939][ T27] audit: type=1326 audit(161.430:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 161.677949][ T5839] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 161.713836][ T5839] usb 3-1: MIDIStreaming interface descriptor not found [ 161.768904][ T27] audit: type=1326 audit(161.430:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 161.942501][ T5763] usb 2-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 162.123963][ T6878] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 162.123963][ T6878] The task syz.0.371 (6878) triggered the difference, watch for misbehavior. [ 162.269684][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.401326][ T27] audit: type=1326 audit(161.430:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 162.505261][ T5763] usb-storage 2-1:1.0: USB Mass Storage device detected [ 162.557620][ T27] audit: type=1326 audit(161.430:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 162.681529][ T5839] usb 3-1: USB disconnect, device number 10 [ 162.718343][ T27] audit: type=1326 audit(161.430:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 162.743450][ T27] audit: type=1326 audit(161.430:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 162.767137][ T5763] scsi host1: usb-storage 2-1:1.0 [ 162.844952][ T27] audit: type=1326 audit(161.430:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 162.865210][ T6879] udevd[6879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.887986][ T27] audit: type=1326 audit(161.430:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.0.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9644b9e559 code=0x7ffc0000 [ 162.891822][ T5763] usb 2-1: USB disconnect, device number 6 [ 163.150821][ T6894] loop0: detected capacity change from 0 to 736 [ 163.309322][ T6900] loop2: detected capacity change from 0 to 1024 [ 163.548122][ T6908] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 163.560698][ T6908] hfsplus: xattr searching failed [ 163.590320][ T6908] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 163.599738][ T6908] hfsplus: xattr searching failed [ 163.616822][ T6900] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 163.708083][ T5776] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 163.715705][ T5776] hfsplus: xattr search failed [ 164.182661][ T6908] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 164.189300][ T6908] hfsplus: xattr search failed [ 164.199327][ T6925] process 'syz.3.391' launched '/dev/fd/4' with NULL argv: empty string added [ 164.404186][ T3485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.540831][ T3485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.628208][ T3485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.746285][ T3485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.364836][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.384748][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.397567][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.407791][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.418766][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.430567][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.608149][ T6944] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.106344][ T6965] futex_wake_op: syz.3.406 tries to shift op by 144; fix this program [ 166.180590][ T6940] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.557914][ T6977] loop0: detected capacity change from 0 to 512 [ 167.484181][ T5782] Bluetooth: hci0: command tx timeout [ 168.072087][ T6944] chnl_net:caif_netlink_parms(): no params data found [ 168.146308][ T3485] hsr_slave_0: left promiscuous mode [ 168.190922][ T3485] hsr_slave_1: left promiscuous mode [ 168.210675][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.231649][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.241391][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.248859][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.274262][ T3485] bridge_slave_1: left allmulticast mode [ 168.280151][ T3485] bridge_slave_1: left promiscuous mode [ 168.295363][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.342537][ T3485] bridge_slave_0: left allmulticast mode [ 168.348348][ T3485] bridge_slave_0: left promiscuous mode [ 168.371973][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.455587][ T3485] veth1_macvtap: left promiscuous mode [ 168.472196][ T3485] veth0_macvtap: left promiscuous mode [ 168.477928][ T3485] veth1_vlan: left promiscuous mode [ 168.497378][ T3485] veth0_vlan: left promiscuous mode [ 169.572479][ T5782] Bluetooth: hci0: command tx timeout [ 170.439018][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 170.501250][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 170.550767][ T7058] fuse: Bad value for 'fd' [ 170.575698][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.637668][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.088613][ T3485] bond0 (unregistering): Released all slaves [ 171.099107][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 171.462374][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.490031][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.511738][ T6944] bridge_slave_0: entered allmulticast mode [ 171.533244][ T6944] bridge_slave_0: entered promiscuous mode [ 171.553088][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.567927][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.580569][ T6944] bridge_slave_1: entered allmulticast mode [ 171.604612][ T6944] bridge_slave_1: entered promiscuous mode [ 171.646694][ T5782] Bluetooth: hci0: command tx timeout [ 171.698991][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.711973][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.802588][ T6944] team0: Port device team_slave_0 added [ 171.834418][ T6944] team0: Port device team_slave_1 added [ 171.849361][ T7083] fuse: Bad value for 'fd' [ 172.162336][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.188304][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.232117][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.263889][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.270924][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.336825][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.500108][ T6944] hsr_slave_0: entered promiscuous mode [ 172.518291][ T6944] hsr_slave_1: entered promiscuous mode [ 172.533858][ T6944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.549792][ T6944] Cannot create hsr debugfs directory [ 173.043498][ T6944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.082871][ T6944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.110900][ T6944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.138702][ T6944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.413282][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.482724][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.524708][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.531959][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.574357][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.581686][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.722110][ T5782] Bluetooth: hci0: command tx timeout [ 173.932052][ T5832] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.135478][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 174.147318][ T5832] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.176036][ T5832] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.228612][ T5832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.249172][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.269406][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.298209][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.333463][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.387174][ T5832] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.401140][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.437390][ T5832] usb 1-1: config 0 descriptor?? [ 174.682495][ T5832] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.726700][ T5832] usb 1-1: USB disconnect, device number 3 [ 174.756825][ T5832] usblp0: removed [ 175.078361][ T6944] veth0_vlan: entered promiscuous mode [ 175.096579][ T6944] veth1_vlan: entered promiscuous mode [ 175.157439][ T6944] veth0_macvtap: entered promiscuous mode [ 175.186161][ T6944] veth1_macvtap: entered promiscuous mode [ 175.229794][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.265926][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.275990][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.282136][ T5832] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.286475][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.286498][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.361466][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.383227][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.404550][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.431403][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.462228][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.483793][ T7177] overlayfs: failed to clone lowerpath [ 175.500093][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.510513][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.521749][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.531812][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 175.543784][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.585255][ T5832] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.598310][ T5832] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.617606][ T5832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.630363][ T6944] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.649508][ T6944] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.658585][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.679235][ T6944] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.688170][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.709558][ T6944] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.718473][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.744990][ T5832] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.775880][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.834129][ T5832] usb 1-1: config 0 descriptor?? [ 176.001890][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.009789][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.087606][ T5832] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.098589][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.098649][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.309522][ T2135] usb 1-1: USB disconnect, device number 4 [ 176.318858][ T2135] usblp0: removed [ 177.223631][ T7219] FAULT_INJECTION: forcing a failure. [ 177.223631][ T7219] name fail_futex, interval 1, probability 0, space 0, times 1 [ 177.237380][ T7216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'. [ 177.269852][ T7219] CPU: 0 PID: 7219 Comm: syz.0.475 Not tainted syzkaller #0 [ 177.277224][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.287353][ T7219] Call Trace: [ 177.290849][ T7219] [ 177.293822][ T7219] dump_stack_lvl+0x18c/0x250 [ 177.298566][ T7219] ? show_regs_print_info+0x20/0x20 [ 177.303905][ T7219] ? load_image+0x420/0x420 [ 177.308499][ T7219] ? __key_instantiate_and_link+0x411/0x4c0 [ 177.314460][ T7219] ? key_instantiate_and_link+0x490/0x490 [ 177.320243][ T7219] should_fail_ex+0x394/0x4c0 [ 177.324997][ T7219] get_futex_key+0x136/0x1030 [ 177.329745][ T7219] ? futex_setup_timer+0xc0/0xc0 [ 177.334748][ T7219] futex_wake+0x127/0x4f0 [ 177.339136][ T7219] ? futex_wake_mark+0x150/0x150 [ 177.344131][ T7219] ? __se_sys_keyctl+0xa6d/0xb50 [ 177.349123][ T7219] ? __se_sys_keyctl+0xa6d/0xb50 [ 177.354108][ T7219] ? __se_sys_keyctl+0xa6d/0xb50 [ 177.359100][ T7219] do_futex+0x35d/0x3e0 [ 177.363304][ T7219] ? __ia32_sys_get_robust_list+0x110/0x110 [ 177.369250][ T7219] __se_sys_futex+0x3a9/0x440 [ 177.373984][ T7219] ? __x64_sys_futex+0xf0/0xf0 [ 177.378789][ T7219] ? __x64_sys_futex+0x21/0xf0 [ 177.383680][ T7219] do_syscall_64+0x55/0xb0 [ 177.388151][ T7219] ? clear_bhb_loop+0x40/0x90 [ 177.392882][ T7219] ? clear_bhb_loop+0x40/0x90 [ 177.397601][ T7219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.403551][ T7219] RIP: 0033:0x7f9644b9e559 [ 177.408004][ T7219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.427815][ T7219] RSP: 002b:00007f9645b0a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 177.436363][ T7219] RAX: ffffffffffffffda RBX: 00007f9644e25fa8 RCX: 00007f9644b9e559 [ 177.444366][ T7219] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9644e25fac [ 177.452365][ T7219] RBP: 00007f9644e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 177.460371][ T7219] R10: 000000001f30d128 R11: 0000000000000246 R12: 0000000000000000 [ 177.468367][ T7219] R13: 00007f9644e26038 R14: 00007ffcd131df40 R15: 00007ffcd131e028 [ 177.476398][ T7219] [ 178.187918][ T7246] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 178.637144][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.487'. [ 178.861685][ T7271] FAULT_INJECTION: forcing a failure. [ 178.861685][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 178.906303][ T7271] CPU: 1 PID: 7271 Comm: syz.0.490 Not tainted syzkaller #0 [ 178.913696][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.924066][ T7271] Call Trace: [ 178.927402][ T7271] [ 178.930387][ T7271] dump_stack_lvl+0x18c/0x250 [ 178.935132][ T7271] ? show_regs_print_info+0x20/0x20 [ 178.940410][ T7271] ? load_image+0x420/0x420 [ 178.944986][ T7271] ? __might_sleep+0xe0/0xe0 [ 178.949652][ T7271] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.954753][ T7271] should_fail_ex+0x394/0x4c0 [ 178.959508][ T7271] should_failslab+0x9/0x20 [ 178.964075][ T7271] slab_pre_alloc_hook+0x59/0x300 [ 178.969169][ T7271] kmem_cache_alloc+0x5a/0x2c0 [ 178.974013][ T7271] ? security_file_alloc+0x34/0x120 [ 178.979302][ T7271] security_file_alloc+0x34/0x120 [ 178.984396][ T7271] init_file+0x94/0x1f0 [ 178.988611][ T7271] alloc_empty_file+0xb7/0x1d0 [ 178.993435][ T7271] alloc_file+0x5b/0x600 [ 178.997741][ T7271] alloc_file_pseudo+0x184/0x210 [ 179.002771][ T7271] ? fput+0x1a0/0x1a0 [ 179.006820][ T7271] ? _raw_spin_unlock+0x28/0x40 [ 179.011728][ T7271] anon_inode_getfd+0xca/0x1c0 [ 179.016523][ T7271] __se_sys_timerfd_create+0x214/0x270 [ 179.022034][ T7271] do_syscall_64+0x55/0xb0 [ 179.026483][ T7271] ? clear_bhb_loop+0x40/0x90 [ 179.031206][ T7271] ? clear_bhb_loop+0x40/0x90 [ 179.035929][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.041981][ T7271] RIP: 0033:0x7f9644b9e559 [ 179.046615][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.066272][ T7271] RSP: 002b:00007f9645b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 179.074814][ T7271] RAX: ffffffffffffffda RBX: 00007f9644e25fa0 RCX: 00007f9644b9e559 [ 179.082816][ T7271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 179.090809][ T7271] RBP: 00007f9644c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 179.098810][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.106807][ T7271] R13: 00007f9644e26038 R14: 00007f9644e25fa0 R15: 00007ffcd131e028 [ 179.114841][ T7271] [ 179.664768][ T7297] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 179.678358][ T7297] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.538429][ T7332] netlink: 44 bytes leftover after parsing attributes in process `syz.0.510'. [ 180.555705][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 180.579890][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.510'. [ 181.011401][ T5839] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.202499][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 181.211494][ T5839] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.234110][ T5839] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.263635][ T5839] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.274095][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.283043][ T5839] usb 2-1: Product: syz [ 181.287348][ T5839] usb 2-1: Manufacturer: syz [ 181.292533][ T5839] usb 2-1: SerialNumber: syz [ 181.464786][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.523'. [ 181.475952][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 181.501108][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'. [ 181.526124][ T5839] usb 2-1: 0:2 : does not exist [ 181.537453][ T5839] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 181.596843][ T5839] usb 2-1: USB disconnect, device number 7 [ 181.630445][ T7373] EXT4-fs warning (device sda1): __ext4_ioctl:1266: Setting inode version is not supported with metadata_csum enabled. [ 181.689862][ T6845] udevd[6845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.745970][ T7375] binder: 7374:7375 unknown command 1074553619 [ 181.755083][ T7375] binder: 7374:7375 ioctl c0306201 200000000540 returned -22 [ 181.764647][ T7375] binder: 7374:7375 unknown command 1074291477 [ 181.770967][ T7375] binder: 7374:7375 ioctl c0306201 2000000006c0 returned -22 [ 182.293527][ T7381] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.369755][ T7392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.532'. [ 182.383950][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 182.412295][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.532'. [ 183.979627][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 183.999057][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 184.019138][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 184.029952][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 184.819866][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 184.833926][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 184.853421][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 185.099461][ T7488] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.601127][ T7507] mmap: syz.3.562 (7507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.758264][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 185.758280][ T27] audit: type=1800 audit(185.700:400): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.570" name="syzkaller1" dev="sda1" ino=2048 res=0 errno=0 [ 185.862425][ T174] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.962944][ T7518] FAULT_INJECTION: forcing a failure. [ 185.962944][ T7518] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.977060][ T7518] CPU: 0 PID: 7518 Comm: syz.0.571 Not tainted syzkaller #0 [ 185.984414][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.994521][ T7518] Call Trace: [ 185.997855][ T7518] [ 186.000828][ T7518] dump_stack_lvl+0x18c/0x250 [ 186.005585][ T7518] ? show_regs_print_info+0x20/0x20 [ 186.010853][ T7518] ? load_image+0x420/0x420 [ 186.015420][ T7518] ? __might_fault+0xaa/0x120 [ 186.020135][ T7518] ? __lock_acquire+0x7eb0/0x7eb0 [ 186.025235][ T7518] should_fail_ex+0x394/0x4c0 [ 186.029993][ T7518] _copy_to_user+0x2f/0xa0 [ 186.034476][ T7518] msr_read+0x169/0x240 [ 186.038695][ T7518] ? msr_device_destroy+0x30/0x30 [ 186.043774][ T7518] ? fsnotify_perm+0x3ed/0x5e0 [ 186.048578][ T7518] ? msr_device_destroy+0x30/0x30 [ 186.053640][ T7518] vfs_read+0x298/0x990 [ 186.057840][ T7518] ? kernel_read+0x1e0/0x1e0 [ 186.062466][ T7518] ? __fget_files+0x28/0x460 [ 186.067096][ T7518] ? __fget_files+0x3fc/0x460 [ 186.071816][ T7518] ? __fdget_pos+0x1d8/0x330 [ 186.076443][ T7518] ? ksys_read+0x74/0x260 [ 186.080808][ T7518] ksys_read+0x151/0x260 [ 186.085093][ T7518] ? vfs_write+0x9a0/0x9a0 [ 186.089571][ T7518] ? lockdep_hardirqs_on+0x98/0x150 [ 186.094809][ T7518] do_syscall_64+0x55/0xb0 [ 186.099250][ T7518] ? clear_bhb_loop+0x40/0x90 [ 186.103951][ T7518] ? clear_bhb_loop+0x40/0x90 [ 186.108659][ T7518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.114590][ T7518] RIP: 0033:0x7f9644b9e559 [ 186.119058][ T7518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.138694][ T7518] RSP: 002b:00007f9645b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.147174][ T7518] RAX: ffffffffffffffda RBX: 00007f9644e25fa0 RCX: 00007f9644b9e559 [ 186.155171][ T7518] RDX: 0000000000018ff8 RSI: 00002000000011c0 RDI: 0000000000000004 [ 186.163165][ T7518] RBP: 00007f9644c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 186.171158][ T7518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.179157][ T7518] R13: 00007f9644e26038 R14: 00007f9644e25fa0 R15: 00007ffcd131e028 [ 186.187346][ T7518] [ 186.221465][ T174] usb 2-1: Using ep0 maxpacket: 16 [ 186.237301][ T174] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 186.249087][ T174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.275692][ T174] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 186.291455][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.299935][ T174] usb 2-1: SerialNumber: syz [ 186.332862][ T174] usb 2-1: 0:2 : does not exist [ 186.426530][ T7458] Bluetooth: hci4: Frame reassembly failed (-84) [ 186.737172][ T174] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 186.769683][ T174] usb 2-1: 5:0: failed to get current value for ch 2 (-22) [ 186.789180][ T174] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 186.805991][ T174] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 186.820691][ T174] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 186.836135][ T174] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 186.858056][ T174] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.873188][ T174] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.885192][ T174] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 186.897663][ T174] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 186.910315][ T174] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 186.922957][ T174] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 186.936787][ T174] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 186.950718][ T174] usb 2-1: 5:0: failed to get current value for ch 2 (-22) [ 186.965900][ T174] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 186.987143][ T174] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 187.002879][ T174] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 187.015824][ T174] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 187.037520][ T174] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 187.049103][ T174] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 187.062078][ T174] usb 2-1: USB disconnect, device number 8 [ 187.094026][ T6845] udevd[6845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.641502][ T174] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 187.843744][ T174] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 187.856747][ T174] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 187.872796][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.902425][ T7542] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 187.913059][ T174] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 188.441658][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 188.449099][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 188.570968][ T7567] loop0: detected capacity change from 0 to 512 [ 188.579579][ T7567] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.606068][ T7567] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 188.618329][ T7567] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.587: attempt to clear invalid blocks 2 len 1 [ 188.638427][ T7567] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 188.660992][ T7567] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.587: invalid indirect mapped block 1819239214 (level 0) [ 188.685150][ T7567] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.587: invalid indirect mapped block 1819239214 (level 1) [ 188.707087][ T7567] EXT4-fs (loop0): 1 truncate cleaned up [ 188.714271][ T7567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.808047][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.461493][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 189.649978][ T7589] fuse: Bad value for 'fd' [ 189.662845][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 189.676037][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.689739][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.710259][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 189.719477][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.728186][ T9] usb 1-1: SerialNumber: syz [ 189.748407][ T9] usb 1-1: 0:2 : does not exist [ 189.834444][ T7593] __nla_validate_parse: 8 callbacks suppressed [ 189.834458][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 189.853013][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.596'. [ 190.351960][ T8] usb 2-1: USB disconnect, device number 9 [ 190.570765][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 190.614362][ T9] usb 1-1: USB disconnect, device number 5 [ 190.663092][ T6845] udevd[6845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.791511][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 191.832268][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 191.979877][ T7674] loop1: detected capacity change from 0 to 512 [ 192.012966][ T7674] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.059299][ T7674] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 192.081402][ T7674] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.625: attempt to clear invalid blocks 2 len 1 [ 192.188173][ T7674] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 192.240221][ T7674] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.625: invalid indirect mapped block 1819239214 (level 0) [ 192.312730][ T7674] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.625: invalid indirect mapped block 1819239214 (level 1) [ 192.338260][ T7674] EXT4-fs (loop1): 1 truncate cleaned up [ 192.352807][ T7674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.549583][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.942534][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 193.690366][ T7724] loop0: detected capacity change from 0 to 512 [ 193.736552][ T7724] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.803908][ T7724] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 193.903637][ T7729] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.918648][ T7724] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.638: attempt to clear invalid blocks 2 len 1 [ 193.997886][ T7724] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 194.047223][ T7724] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.638: invalid indirect mapped block 1819239214 (level 0) [ 194.104128][ T7724] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.638: invalid indirect mapped block 1819239214 (level 1) [ 194.190932][ T7724] EXT4-fs (loop0): 1 truncate cleaned up [ 194.211405][ T7724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.518948][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.541864][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548325][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.850556][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.644'. [ 195.721444][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 195.721494][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 195.845452][ T7722] can0: slcan on ptm0. [ 196.052500][ T7721] can0 (unregistered): slcan off ptm0. [ 196.312452][ T7787] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 197.227571][ T7801] syz.4.655 (7801) used greatest stack depth: 16072 bytes left [ 197.668627][ T7836] binder: 7834:7836 unknown command 1074553619 [ 197.702460][ T7836] binder: 7834:7836 ioctl c0306201 200000000480 returned -22 [ 198.181157][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.669'. [ 198.430119][ T7852] process '/newroot/213/file0' started with executable stack [ 200.063503][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.261341][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 200.268946][ T8] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.292438][ T8] usb 2-1: config 0 has no interface number 0 [ 200.308910][ T8] usb 2-1: config 0 interface 184 has no altsetting 0 [ 200.331977][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 200.351311][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.359571][ T8] usb 2-1: Product: syz [ 200.376175][ T8] usb 2-1: Manufacturer: syz [ 200.382755][ T8] usb 2-1: SerialNumber: syz [ 200.390179][ T8] usb 2-1: config 0 descriptor?? [ 200.403335][ T8] smsc75xx v1.0.0 [ 200.549984][ T7903] netlink: 220 bytes leftover after parsing attributes in process `syz.4.689'. [ 200.945159][ T27] audit: type=1804 audit(200.880:401): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/187/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 201.020473][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 201.041315][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 201.083223][ T7919] tmpfs: Unknown parameter 'casefold' [ 201.353952][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.367712][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.378496][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.391693][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.591668][ T7931] netlink: 'syz.3.703': attribute type 21 has an invalid length. [ 201.599546][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 201.620118][ T7931] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.630213][ T7931] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.639107][ T7931] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.647994][ T7931] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.663725][ T7931] netlink: 'syz.3.703': attribute type 21 has an invalid length. [ 201.683159][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 201.879809][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 201.897684][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.902546][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 201.925012][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.932046][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 201.956917][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.961954][ T8] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 201.983140][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 201.991811][ T8] usb 2-1: USB disconnect, device number 10 [ 204.375633][ T7956] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.816638][ T7963] syz_tun: entered allmulticast mode [ 204.827350][ T7962] syz_tun: left allmulticast mode [ 204.899644][ T7965] loop4: detected capacity change from 0 to 512 [ 204.910239][ T7965] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.956860][ T7965] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 204.974625][ T7965] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.718: attempt to clear invalid blocks 2 len 1 [ 205.004573][ T7965] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 205.034040][ T7965] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.718: invalid indirect mapped block 1819239214 (level 0) [ 205.070325][ T7965] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.718: invalid indirect mapped block 1819239214 (level 1) [ 205.119576][ T7965] EXT4-fs (loop4): 1 truncate cleaned up [ 205.141167][ T7965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.318079][ T6944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.403734][ T5778] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 205.415239][ T5778] Bluetooth: hci0: Injecting HCI hardware error event [ 205.426005][ T5789] Bluetooth: hci0: hardware error 0x00 [ 205.534112][ T7971] Falling back ldisc for ttyS3. [ 205.547080][ T7971] trusted_key: encrypted_key: keylen parameter is missing [ 206.385143][ T7988] loop4: detected capacity change from 0 to 512 [ 206.404076][ T7988] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.487486][ T7988] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 206.500746][ T7988] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.727: attempt to clear invalid blocks 2 len 1 [ 206.523456][ T7988] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 206.536356][ T7994] overlayfs: failed to clone upperpath [ 206.588526][ T7988] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.727: invalid indirect mapped block 1819239214 (level 0) [ 206.654217][ T7988] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.727: invalid indirect mapped block 1819239214 (level 1) [ 206.680560][ T7997] Falling back ldisc for ttyS3. [ 206.698862][ T7997] trusted_key: encrypted_key: keylen parameter is missing [ 206.730064][ T7988] EXT4-fs (loop4): 1 truncate cleaned up [ 206.746528][ T7988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.841358][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 206.934473][ T6944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.481544][ T5789] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 208.137582][ T8035] netlink: 88 bytes leftover after parsing attributes in process `syz.1.745'. [ 208.142839][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.157734][ T27] audit: type=1326 audit(209.100:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.192983][ T27] audit: type=1326 audit(209.100:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.217996][ T27] audit: type=1326 audit(209.160:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.359857][ T27] audit: type=1326 audit(209.160:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.466319][ T27] audit: type=1326 audit(209.160:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.511845][ T27] audit: type=1326 audit(209.190:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.535854][ T27] audit: type=1326 audit(209.190:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.562855][ T27] audit: type=1326 audit(209.190:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 209.598956][ T27] audit: type=1326 audit(209.190:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 210.411388][ T27] audit: type=1326 audit(209.190:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abd9e559 code=0x7ffc0000 [ 210.701795][ T8073] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 210.801965][ T8073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.872073][ T8081] fuse: Bad value for 'fd' [ 213.232542][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 213.238652][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 214.316711][ T8073] bond1: (slave geneve2): making interface the new active one [ 214.366610][ T8073] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 214.411498][ T8081] netlink: 'syz.3.763': attribute type 4 has an invalid length. [ 215.471875][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 215.480743][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'. [ 216.129562][ T8107] loop4: detected capacity change from 0 to 256 [ 216.190098][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.218356][ T8107] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 216.352058][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.387025][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.400168][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.417057][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.432142][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.441614][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.525587][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.653975][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.889828][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.064943][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.078422][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.092040][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.103046][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.110836][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.120464][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.969355][ T8182] gadgetfs: bound to dummy_udc driver [ 219.565124][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.576350][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.586105][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.601060][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.608423][ T49] hsr_slave_0: left promiscuous mode [ 219.615413][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.626165][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.701055][ T49] hsr_slave_1: left promiscuous mode [ 219.728023][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.739738][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.765443][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.798801][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.845849][ T49] bridge_slave_1: left allmulticast mode [ 219.862203][ T49] bridge_slave_1: left promiscuous mode [ 219.868073][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.903167][ T49] bridge_slave_0: left allmulticast mode [ 219.909867][ T49] bridge_slave_0: left promiscuous mode [ 219.916176][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.941860][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 219.978826][ T49] veth1_macvtap: left promiscuous mode [ 219.986835][ T49] veth0_macvtap: left promiscuous mode [ 219.992769][ T49] veth1_vlan: left promiscuous mode [ 220.003433][ T49] veth0_vlan: left promiscuous mode [ 220.959776][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.972496][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.981615][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.992481][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.000188][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.007950][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.597181][ T49] team0 (unregistering): Port device team_slave_1 removed [ 221.646790][ T49] team0 (unregistering): Port device team_slave_0 removed [ 221.700799][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.753082][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.277732][ T49] bond0 (unregistering): Released all slaves [ 222.354148][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.365767][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.377602][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.386051][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.396477][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.407689][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.467354][ T8218] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 222.482038][ T8218] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 222.644765][ T8234] vlan2: entered promiscuous mode [ 222.691693][ T8234] vlan2: entered allmulticast mode [ 222.696930][ T8234] hsr_slave_1: entered allmulticast mode [ 222.803328][ T8238] veth1_to_bond: entered allmulticast mode [ 222.809807][ T8238] veth1_to_bond: entered promiscuous mode [ 222.893842][ T8237] veth1_to_bond: left promiscuous mode [ 222.899575][ T8237] veth1_to_bond: left allmulticast mode [ 223.662590][ T8242] trusted_key: encrypted_key: keylen parameter is missing [ 223.773717][ T8246] rxe_eth0 speed is unknown, defaulting to 1000 [ 224.032902][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 224.278993][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.812'. [ 224.296482][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 224.311794][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.329231][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.338790][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.347120][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.355558][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.363461][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.581151][ T8272] veth1_to_bond: entered allmulticast mode [ 224.621532][ T8272] veth1_to_bond: entered promiscuous mode [ 224.648511][ T8271] veth1_to_bond: left promiscuous mode [ 224.671491][ T8271] veth1_to_bond: left allmulticast mode [ 225.998726][ T8300] rxe_eth0 speed is unknown, defaulting to 1000 [ 226.037615][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.047725][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.056806][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.065213][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.073394][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.082117][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.320964][ T8301] lo speed is unknown, defaulting to 1000 [ 226.335568][ T8301] lo speed is unknown, defaulting to 1000 [ 226.361891][ T8301] lo speed is unknown, defaulting to 1000 [ 226.398587][ T8301] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 226.469853][ T8301] lo speed is unknown, defaulting to 1000 [ 226.486902][ T8301] lo speed is unknown, defaulting to 1000 [ 226.508185][ T8301] lo speed is unknown, defaulting to 1000 [ 226.533469][ T8301] lo speed is unknown, defaulting to 1000 [ 227.298702][ T8315] veth1_to_bond: entered allmulticast mode [ 227.304914][ T8315] veth1_to_bond: entered promiscuous mode [ 227.327383][ T8314] veth1_to_bond: left promiscuous mode [ 227.343945][ T8314] veth1_to_bond: left allmulticast mode [ 227.785490][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.795966][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.804916][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.826393][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.834753][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.846220][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.954980][ T8337] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.041438][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 228.172909][ T8337] lo speed is unknown, defaulting to 1000 [ 229.218244][ T8344] netlink: 'syz.1.837': attribute type 11 has an invalid length. [ 229.322470][ T8344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.365970][ T8348] trusted_key: encrypted_key: insufficient parameters specified [ 229.847938][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.858956][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.868841][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.885492][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.904539][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.920451][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.393148][ T8393] veth1_to_bond: entered allmulticast mode [ 231.411541][ T8393] veth1_to_bond: entered promiscuous mode [ 231.445103][ T8392] veth1_to_bond: left promiscuous mode [ 231.461541][ T8392] veth1_to_bond: left allmulticast mode [ 231.798609][ T174] logitech-hidpp-device 0003:046D:C082.0002: item fetching failed at offset 0/2 [ 231.814408][ T174] logitech-hidpp-device 0003:046D:C082.0002: hidpp_probe:parse failed [ 231.823964][ T174] logitech-hidpp-device: probe of 0003:046D:C082.0002 failed with error -22 [ 231.826601][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.845287][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.853881][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.863587][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.871644][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.879678][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.322314][ T8422] fuse: Bad value for 'fd' [ 233.785865][ T8441] netlink: 'syz.4.874': attribute type 11 has an invalid length. [ 233.843079][ T8441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.872081][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.901658][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.911213][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.927320][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.935981][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.943725][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.696331][ T8464] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 235.785453][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 235.901939][ T8470] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 5 (only 8 groups) [ 235.940165][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.960380][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.976552][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.986298][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.996043][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 236.004805][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.297746][ T8482] netlink: 120 bytes leftover after parsing attributes in process `syz.3.891'. [ 236.591404][ T5763] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 236.773656][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 236.788669][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.799700][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 236.816223][ T5763] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 236.828928][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.855305][ T8481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.881007][ T5763] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 236.913159][ T5763] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 237.093846][ T5832] usb 2-1: USB disconnect, device number 11 [ 237.120400][ T5832] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 237.135603][ T5832] cyberjack 2-1:1.0: device disconnected [ 237.850007][ T8488] overlayfs: failed to clone upperpath [ 237.977549][ T8493] netlink: 'syz.3.896': attribute type 2 has an invalid length. [ 238.218264][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.232845][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.246435][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.256914][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.269475][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 238.277001][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.033698][ T8514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.183627][ T8517] printk: console [ttyS0] disabled can't run '/sbin/getty': No such file or directory can't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbin/getty': No such file or directory can't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbin/getty': No succan't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbin/getty': No such file or directory SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=764 state=3 status=67 (errno 9: Bad file descriptor) can't run '/sbican't run '/sbican't run '/sbin/getty': No such file or directcan't run '/sbin/getty': No such file or directory